last executing test programs:

15m13.290137337s ago: executing program 0 (id=1792):
r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xa, 0x1, 0x2, 0x0, 0x0, 0x63, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20000000, 0x0, @perf_config_ext={0x40, 0x401}, 0x0, 0x2, 0x4, 0x2, 0xad, 0x1, 0x400, 0x0, 0x6000000, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1)
r1 = syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="0000000036000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r5}, 0xc)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffb}], &(0x7f0000000700)='GPL\x00', 0x1, 0x8c, &(0x7f0000000940)=""/140, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x3, 0x4, 0x400}, 0x10, 0x1e95d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a80)=[{0x2, 0x1, 0xd, 0xd}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=r2, 0x35, 0x1, 0x400, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0x70, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000e40), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={r1, r2, 0x0, 0x2, &(0x7f0000001080)='&\x00', <r9=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)={@ifindex=r8, r5, 0x31, 0x24, r6, @void, @void, @void, @value=r9, r7}, 0x20)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x100)
r10 = socket$kcm(0x10, 0x2, 0x4)
close(r10)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x10, &(0x7f0000000040), 0x4)
r12 = socket$kcm(0x10, 0x100000000002, 0x4)
socketpair(0x26, 0x1, 0x9, &(0x7f00000000c0)={<r13=>0xffffffffffffffff})
recvmsg$kcm(r13, &(0x7f0000000880)={&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f0000000780)=""/131, 0x83}], 0x4}, 0x40000000)
sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r14, 0x0, 0xfffffffffffffffd}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50)

15m13.115214421s ago: executing program 0 (id=1793):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x5, 0x4, 0xc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000f7ffffff0100000084000000", @ANYRES32, @ANYBLOB="00000000000000000000000400000000000000000475729df0d34151474f54bdccdabeb4e2aac897ea53ca27b3cddad810e8b256864ebc4a98642561321f66c8536247ab2c73e88d6f9ece215d589bdc2456ee71db86b4fe3494d361c82c4a2b9e4f08d03ac95530cc9e0d1704d1e79b94c9b68ca5b58c0105d0426596b12eef50b598964402324b34a433f51553ef36fbdffe40809d438cb06123d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, 0x0, &(0x7f0000001540)=""/155}, 0x20)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000010003c3bfa300000000000007030000f0ffffff7a0af0fff8ffffff71a4f0ff00000000650a0200000000ff2d400500000000004400000001ede4ff6b03000000000000cc440000000000007a0a00fe00ffffffdb03000001000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e"], 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf2600010000000028000000000000000000000007000000014414"], 0x48}, 0x200040c4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2b}, 0x28)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x40086602, 0x110e22fff2)

15m10.393143923s ago: executing program 0 (id=1799):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}, 0x100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

15m10.168016379s ago: executing program 0 (id=1804):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f00000006c0)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15m10.067573461s ago: executing program 0 (id=1805):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}, 0x100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

15m9.578225592s ago: executing program 0 (id=1808):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xd5, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
close(0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x3, 0x86001, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000084)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8940, &(0x7f0000000080))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x40005, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000670000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbddaf686c4f64d26b42e7d613e42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a25"], &(0x7f0000000340)='GPL\x00'}, 0x94)
r8 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100232580000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000100"/28], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_devices(r12, 0x0, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r14, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001700)="d7b8bf979da7f23bcf0ce0271658", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0xa, 0x5, 0xf8, 0x9, 0x0, 0x6, 0xc0111, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x53, 0x1, @perf_config_ext={0x8000000000000001, 0x2d2}, 0xe200, 0xd088, 0x9, 0x0, 0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x9, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

14m54.472977117s ago: executing program 32 (id=1808):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xd5, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
close(0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x3, 0x86001, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000084)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8940, &(0x7f0000000080))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x40005, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94)
r8 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100232580000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000100"/28], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_devices(r12, 0x0, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r14, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001700)="d7b8bf979da7f23bcf0ce0271658", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0xa, 0x5, 0xf8, 0x9, 0x0, 0x6, 0xc0111, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x53, 0x1, @perf_config_ext={0x8000000000000001, 0x2d2}, 0xe200, 0xd088, 0x9, 0x0, 0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x9, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')

4.735541193s ago: executing program 3 (id=11651):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000565668374615"], 0x48)

4.555496758s ago: executing program 3 (id=11655):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x2, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.269259774s ago: executing program 3 (id=11666):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x101)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

4.219203205s ago: executing program 3 (id=11668):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

4.145414447s ago: executing program 3 (id=11671):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x101, [{0x0, 0x2, 0x3}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)

3.853201293s ago: executing program 3 (id=11682):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.573067532s ago: executing program 4 (id=11699):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

2.490874124s ago: executing program 4 (id=11702):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006d00000000f1ff00000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080))

1.943819407s ago: executing program 5 (id=11708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

1.939518647s ago: executing program 1 (id=11709):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_config_ext={0x1eb, 0x10001}, 0x2018, 0x0, 0x0, 0x2, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128"], 0xffdd)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x400, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')

1.849074309s ago: executing program 4 (id=11710):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1000, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1.80371934s ago: executing program 5 (id=11711):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/188, 0x0, 0xbc, 0x1, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.601563794s ago: executing program 5 (id=11713):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602400, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180))

1.596762964s ago: executing program 2 (id=11714):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100804, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x75, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38)

1.536134256s ago: executing program 4 (id=11715):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000400000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000029500000000000000b702000a000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000b4d276b884971051335a164e54583b3f5c5b80dc506a73db759dfda55fa90a5ed79be52fcd832ce2c863a17f32566c732e9077ae9e4d4b06fc41449244fd9ed36ab288af8dd062e7bf66f8533b", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0x10)

1.437638898s ago: executing program 1 (id=11716):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907"], 0xfdef)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000050000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc)

1.413720778s ago: executing program 5 (id=11717):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)
socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x9})
ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040))
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000080000000000000f050001"], 0x0, 0x2f, 0x0, 0x6}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

1.405397689s ago: executing program 4 (id=11718):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.287468371s ago: executing program 4 (id=11719):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10)

1.287365811s ago: executing program 1 (id=11720):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8)

1.005426658s ago: executing program 1 (id=11721):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.000173178s ago: executing program 1 (id=11722):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000)

770.316973ms ago: executing program 1 (id=11723):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000205, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500), 0x5d)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r2}, 0xc)

627.056956ms ago: executing program 2 (id=11724):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

520.117138ms ago: executing program 2 (id=11725):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x200408cc}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0xf0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b)

436.30361ms ago: executing program 5 (id=11726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

293.628114ms ago: executing program 2 (id=11727):
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000080))

187.439636ms ago: executing program 2 (id=11728):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002840)=@generic={0x0, 0x0, 0x18}, 0x18)

79.247798ms ago: executing program 5 (id=11729):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

0s ago: executing program 2 (id=11730):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x97, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

]  should_failslab+0x5/0x20
[  963.616677][ T2690]  slab_pre_alloc_hook+0x51/0xc0
[  963.621622][ T2690]  kmem_cache_alloc_trace+0x47/0x290
[  963.626910][ T2690]  ? apparmor_sk_alloc_security+0x74/0x100
[  963.632724][ T2690]  apparmor_sk_alloc_security+0x74/0x100
[  963.638367][ T2690]  security_sk_alloc+0x6a/0xa0
[  963.643135][ T2690]  sk_prot_alloc+0x101/0x210
[  963.647728][ T2690]  ? sk_alloc+0x1d/0x310
[  963.651983][ T2690]  sk_alloc+0x2f/0x310
[  963.656061][ T2690]  bpf_prog_test_run_skb+0x23c/0x1190
[  963.661444][ T2690]  ? __fget_files+0x402/0x470
[  963.666131][ T2690]  ? cpu_online+0x60/0x60
[  963.670460][ T2690]  bpf_prog_test_run+0x31c/0x390
[  963.675400][ T2690]  __sys_bpf+0x5a5/0x6f0
[  963.679641][ T2690]  ? bpf_link_show_fdinfo+0x380/0x380
[  963.685028][ T2690]  __x64_sys_bpf+0x78/0x90
[  963.689447][ T2690]  do_syscall_64+0x4c/0xa0
[  963.693859][ T2690]  ? clear_bhb_loop+0x30/0x80
[  963.698534][ T2690]  ? clear_bhb_loop+0x30/0x80
[  963.703208][ T2690]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  963.709097][ T2690] RIP: 0033:0x7fd1c9d24e59
[  963.713510][ T2690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  963.733112][ T2690] RSP: 002b:00007fd1c7f7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  963.741530][ T2690] RAX: ffffffffffffffda RBX: 00007fd1c9facfa0 RCX: 00007fd1c9d24e59
[  963.749505][ T2690] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a
[  963.757480][ T2690] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[  963.765450][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  963.773423][ T2690] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[  963.781418][ T2690]  </TASK>
[  963.829255][ T2699] openvswitch: netlink: IP tunnel dst address not specified
[  964.122751][ T4290] Bluetooth: hci0: command 0x0406 tx timeout
[  964.160248][ T2712] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  964.607127][ T2738] validate_nla: 4 callbacks suppressed
[  964.607143][ T2738] netlink: 'syz.5.10065': attribute type 10 has an invalid length.
[  965.092825][ T2776] netlink: 'syz.1.10073': attribute type 3 has an invalid length.
[  965.106606][ T2776] netlink: 'syz.1.10073': attribute type 1 has an invalid length.
[  965.479046][ T2793] netlink: 'syz.5.10077': attribute type 21 has an invalid length.
[  966.214153][ T2804] __nla_validate_parse: 7 callbacks suppressed
[  966.214165][ T2804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10079'.
[  966.289402][ T2815] netlink: 'syz.4.10082': attribute type 29 has an invalid length.
[  966.309419][ T2815] netlink: 'syz.4.10082': attribute type 29 has an invalid length.
[  966.364242][ T2824] netlink: 'syz.4.10082': attribute type 29 has an invalid length.
[  966.369349][ T2816] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  966.377742][ T2815] netlink: 'syz.4.10082': attribute type 29 has an invalid length.
[  966.419153][ T2815] netlink: 'syz.4.10082': attribute type 29 has an invalid length.
[  967.007449][ T2832] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10088'.
[  967.278268][ T2843] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10091'.
[  967.341353][ T2848] netlink: 'syz.2.10093': attribute type 4 has an invalid length.
[  967.349951][ T2848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10093'.
[  967.391900][ T2850] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10094'.
[  967.437114][ T2848] FAULT_INJECTION: forcing a failure.
[  967.437114][ T2848] name failslab, interval 1, probability 0, space 0, times 0
[  967.478026][ T2848] CPU: 1 PID: 2848 Comm: syz.2.10093 Not tainted syzkaller #0
[  967.485529][ T2848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  967.495597][ T2848] Call Trace:
[  967.498883][ T2848]  <TASK>
[  967.501826][ T2848]  dump_stack_lvl+0x188/0x250
[  967.506523][ T2848]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  967.512699][ T2848]  ? show_regs_print_info+0x20/0x20
[  967.517913][ T2848]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  967.524121][ T2848]  should_fail+0x383/0x4b0
[  967.528573][ T2848]  should_failslab+0x5/0x20
[  967.533093][ T2848]  slab_pre_alloc_hook+0x51/0xc0
[  967.538052][ T2848]  kmem_cache_alloc_node+0x47/0x2c0
[  967.543267][ T2848]  ? __alloc_skb+0xf4/0x750
[  967.547803][ T2848]  __alloc_skb+0xf4/0x750
[  967.552164][ T2848]  alloc_skb_with_frags+0xa7/0x720
[  967.557321][ T2848]  sock_alloc_send_pskb+0x87f/0x9a0
[  967.562560][ T2848]  ? lock_chain_count+0x20/0x20
[  967.567457][ T2848]  ? sock_kzfree_s+0x50/0x50
[  967.572064][ T2848]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  967.578247][ T2848]  ? rawv6_send_hdrinc+0xf5/0x1650
[  967.583395][ T2848]  rawv6_send_hdrinc+0x2f4/0x1650
[  967.588480][ T2848]  ? rawv6_probe_proto_opt+0x300/0x300
[  967.593965][ T2848]  ? txopt_get+0x303/0x3c0
[  967.598406][ T2848]  ? fl6_sock_lookup+0xc0/0xc0
[  967.603188][ T2848]  ? aa_label_sk_perm+0x3e6/0x540
[  967.608251][ T2848]  rawv6_sendmsg+0x11a6/0x1710
[  967.613072][ T2848]  ? compat_rawv6_ioctl+0x60/0x60
[  967.618165][ T2848]  ? aa_af_perm+0x340/0x340
[  967.622679][ T2848]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  967.629123][ T2848]  ? sock_rps_record_flow+0x17/0x3b0
[  967.634423][ T2848]  ? inet_sendmsg+0x7a/0x2a0
[  967.639024][ T2848]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  967.644321][ T2848]  ? inet_send_prepare+0x250/0x250
[  967.649423][ T2848]  ____sys_sendmsg+0x5be/0x8f0
[  967.654207][ T2848]  ? __sys_sendmsg_sock+0x30/0x30
[  967.659274][ T2848]  ? import_iovec+0x6f/0xa0
[  967.663803][ T2848]  ___sys_sendmsg+0x236/0x2e0
[  967.668522][ T2848]  ? __sys_sendmsg+0x290/0x290
[  967.673337][ T2848]  ? trace_event_raw_event_lock+0x250/0x250
[  967.679296][ T2848]  __se_sys_sendmsg+0x1b7/0x2a0
[  967.684169][ T2848]  ? __x64_sys_sendmsg+0x80/0x80
[  967.689107][ T2848]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  967.695114][ T2848]  ? lockdep_hardirqs_on+0x94/0x140
[  967.700336][ T2848]  do_syscall_64+0x4c/0xa0
[  967.704760][ T2848]  ? clear_bhb_loop+0x30/0x80
[  967.709450][ T2848]  ? clear_bhb_loop+0x30/0x80
[  967.714149][ T2848]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  967.720052][ T2848] RIP: 0033:0x7f0dfbd25e59
[  967.724480][ T2848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.744093][ T2848] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.752526][ T2848] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[  967.760501][ T2848] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  967.768480][ T2848] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[  967.776461][ T2848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.784445][ T2848] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[  967.792476][ T2848]  </TASK>
[  967.956950][ T2862] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10097'.
[  968.019140][ T2860] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  968.175362][ T2868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10100'.
[  968.194261][ T2870] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.10099'.
[  968.214201][ T2869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10101'.
[  968.387043][ T2878] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10104'.
[  969.244764][ T4290] Bluetooth: hci1: command 0x0406 tx timeout
[  970.531355][ T2962] validate_nla: 9 callbacks suppressed
[  970.531374][ T2962] netlink: 'syz.3.10130': attribute type 1 has an invalid length.
[  970.648950][ T2968] netlink: 'syz.4.10134': attribute type 3 has an invalid length.
[  970.711972][ T2968] netlink: 'syz.4.10134': attribute type 1 has an invalid length.
[  971.240336][ T3000] netlink: 'syz.1.10146': attribute type 1 has an invalid length.
[  971.248561][ T3000] __nla_validate_parse: 13 callbacks suppressed
[  971.248579][ T3000] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.10146'.
[  972.235839][ T3023] FAULT_INJECTION: forcing a failure.
[  972.235839][ T3023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  972.249065][ T3023] CPU: 0 PID: 3023 Comm: syz.3.10154 Not tainted syzkaller #0
[  972.256515][ T3023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  972.266551][ T3023] Call Trace:
[  972.269814][ T3023]  <TASK>
[  972.272725][ T3023]  dump_stack_lvl+0x188/0x250
[  972.277388][ T3023]  ? show_regs_print_info+0x20/0x20
[  972.282572][ T3023]  ? load_image+0x410/0x410
[  972.287058][ T3023]  ? _raw_spin_lock_irq+0xb7/0xf0
[  972.292093][ T3023]  ? _raw_spin_unlock_irq+0x1f/0x40
[  972.297291][ T3023]  should_fail+0x383/0x4b0
[  972.301706][ T3023]  copy_page_from_iter_atomic+0x42e/0x14d0
[  972.307539][ T3023]  ? pipe_zero+0x380/0x380
[  972.311987][ T3023]  ? shmem_write_begin+0xcd/0x1a0
[  972.317037][ T3023]  generic_perform_write+0x30b/0x550
[  972.322327][ T3023]  ? atime_needs_update+0x770/0x770
[  972.327536][ T3023]  ? grab_cache_page_write_begin+0xa0/0xa0
[  972.333328][ T3023]  ? file_remove_privs+0x5d0/0x5d0
[  972.338433][ T3023]  ? rwsem_write_trylock+0x135/0x1c0
[  972.343716][ T3023]  ? clear_nonspinnable+0x60/0x60
[  972.348722][ T3023]  __generic_file_write_iter+0x261/0x4e0
[  972.354340][ T3023]  ? generic_write_checks+0x3be/0x460
[  972.359724][ T3023]  generic_file_write_iter+0xa6/0x1b0
[  972.365104][ T3023]  vfs_write+0x748/0xd70
[  972.369371][ T3023]  ? file_end_write+0x250/0x250
[  972.374242][ T3023]  ? mutex_lock_nested+0x17/0x20
[  972.379182][ T3023]  ? __fdget_pos+0x2bf/0x370
[  972.383773][ T3023]  ? ksys_write+0x70/0x260
[  972.388198][ T3023]  ksys_write+0x153/0x260
[  972.392534][ T3023]  ? __ia32_sys_read+0x80/0x80
[  972.397313][ T3023]  ? lockdep_hardirqs_on+0x94/0x140
[  972.402525][ T3023]  do_syscall_64+0x4c/0xa0
[  972.406946][ T3023]  ? clear_bhb_loop+0x30/0x80
[  972.407941][ T3029] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  972.411624][ T3023]  ? clear_bhb_loop+0x30/0x80
[  972.411649][ T3023]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  972.411666][ T3023] RIP: 0033:0x7f5cf676ce59
[  972.411685][ T3023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.411700][ T3023] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  972.411720][ T3023] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[  972.411733][ T3023] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003
[  972.411746][ T3023] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[  972.411758][ T3023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  972.411769][ T3023] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[  972.411800][ T3023]  </TASK>
[  972.506425][ T3029] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  972.573955][ T3038] netlink: 'syz.2.10158': attribute type 1 has an invalid length.
[  972.582293][ T3038] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.10158'.
[  972.789743][ T3051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10164'.
[  972.805192][ T3051] netlink: 'syz.3.10164': attribute type 1 has an invalid length.
[  972.813891][ T3051] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10164'.
[  973.097811][ T3064] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  973.288378][ T3075] FAULT_INJECTION: forcing a failure.
[  973.288378][ T3075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  973.312974][ T3075] CPU: 0 PID: 3075 Comm: syz.5.10175 Not tainted syzkaller #0
[  973.320474][ T3075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  973.330551][ T3075] Call Trace:
[  973.333846][ T3075]  <TASK>
[  973.336794][ T3075]  dump_stack_lvl+0x188/0x250
[  973.341504][ T3075]  ? show_regs_print_info+0x20/0x20
[  973.346731][ T3075]  ? load_image+0x410/0x410
[  973.351275][ T3075]  ? __lock_acquire+0x7b50/0x7b50
[  973.356316][ T3075]  ? __alloc_skb+0x473/0x750
[  973.360940][ T3075]  should_fail+0x383/0x4b0
[  973.365385][ T3075]  _copy_from_iter+0x415/0x1160
[  973.370279][ T3075]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  973.375677][ T3075]  ? __virt_addr_valid+0x3c6/0x470
[  973.380806][ T3075]  ? __check_object_size+0x30c/0x410
[  973.386116][ T3075]  skb_copy_datagram_from_iter+0xf1/0x6c0
[  973.391860][ T3075]  ? skb_put+0x10e/0x200
[  973.396123][ T3075]  packet_sendmsg+0x3707/0x50b0
[  973.401046][ T3075]  ? __might_sleep+0xf0/0xf0
[  973.405681][ T3075]  ? aa_sk_perm+0x7dc/0x910
[  973.410198][ T3075]  ? packet_getsockopt+0x9a0/0x9a0
[  973.415340][ T3075]  ? aa_sock_msg_perm+0x94/0x150
[  973.420293][ T3075]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  973.425587][ T3075]  ? security_socket_sendmsg+0x7c/0xa0
[  973.431053][ T3075]  ? packet_getsockopt+0x9a0/0x9a0
[  973.436163][ T3075]  ____sys_sendmsg+0x5be/0x8f0
[  973.440962][ T3075]  ? __sys_sendmsg_sock+0x30/0x30
[  973.446024][ T3075]  ? import_iovec+0x6f/0xa0
[  973.450552][ T3075]  ___sys_sendmsg+0x236/0x2e0
[  973.455264][ T3075]  ? __sys_sendmsg+0x290/0x290
[  973.460136][ T3075]  __se_sys_sendmsg+0x1b7/0x2a0
[  973.465002][ T3075]  ? __x64_sys_sendmsg+0x80/0x80
[  973.469942][ T3075]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  973.475964][ T3075]  ? lockdep_hardirqs_on+0x94/0x140
[  973.481186][ T3075]  do_syscall_64+0x4c/0xa0
[  973.485608][ T3075]  ? clear_bhb_loop+0x30/0x80
[  973.490294][ T3075]  ? clear_bhb_loop+0x30/0x80
[  973.494983][ T3075]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  973.500884][ T3075] RIP: 0033:0x7efe540ebe59
[  973.505311][ T3075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  973.524924][ T3075] RSP: 002b:00007efe52344028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  973.533354][ T3075] RAX: ffffffffffffffda RBX: 00007efe54373fa0 RCX: 00007efe540ebe59
[  973.541331][ T3075] RDX: 0000000000040080 RSI: 0000200000000200 RDI: 0000000000000009
[  973.549314][ T3075] RBP: 00007efe52344090 R08: 0000000000000000 R09: 0000000000000000
[  973.557301][ T3075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  973.565283][ T3075] R13: 00007efe54374038 R14: 00007efe54373fa0 R15: 00007ffe17934208
[  973.573305][ T3075]  </TASK>
[  974.066812][ T3097] device bridge_slave_1 left promiscuous mode
[  974.084318][ T3097] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.121655][ T3097] device bridge_slave_0 left promiscuous mode
[  974.151372][ T3097] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.309346][ T3101] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10181'.
[  974.332594][ T3101] netlink: 'syz.5.10181': attribute type 1 has an invalid length.
[  974.353838][ T3101] netlink: 6 bytes leftover after parsing attributes in process `syz.5.10181'.
[  974.375232][ T3108] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10183'.
[  974.527168][ T3118] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10186'.
[  975.661118][ T3147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10194'.
[  975.694844][ T3147] netlink: 'syz.4.10194': attribute type 1 has an invalid length.
[  975.728555][ T3147] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10194'.
[  976.134687][ T3169] netlink: 'syz.3.10197': attribute type 21 has an invalid length.
[  976.331009][ T3167] __nla_validate_parse: 3 callbacks suppressed
[  976.331048][ T3167] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.10199'.
[  976.415283][ T3188] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10206'.
[  976.983840][ T3197] FAULT_INJECTION: forcing a failure.
[  976.983840][ T3197] name failslab, interval 1, probability 0, space 0, times 0
[  976.997392][ T3197] CPU: 0 PID: 3197 Comm: syz.3.10210 Not tainted syzkaller #0
[  977.004873][ T3197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  977.014931][ T3197] Call Trace:
[  977.018215][ T3197]  <TASK>
[  977.021150][ T3197]  dump_stack_lvl+0x188/0x250
[  977.025840][ T3197]  ? show_regs_print_info+0x20/0x20
[  977.031046][ T3197]  ? load_image+0x410/0x410
[  977.035564][ T3197]  ? lock_acquire+0x208/0x400
[  977.040253][ T3197]  should_fail+0x383/0x4b0
[  977.044678][ T3197]  should_failslab+0x5/0x20
[  977.049179][ T3197]  slab_pre_alloc_hook+0x51/0xc0
[  977.054126][ T3197]  ? skb_clone+0x1bd/0x350
[  977.058554][ T3197]  kmem_cache_alloc+0x3d/0x280
[  977.063332][ T3197]  skb_clone+0x1bd/0x350
[  977.067581][ T3197]  ? dev_queue_xmit_nit+0x1f2/0xae0
[  977.072790][ T3197]  dev_queue_xmit_nit+0x2db/0xae0
[  977.077842][ T3197]  dev_hard_start_xmit+0x140/0x7d0
[  977.082981][ T3197]  __dev_queue_xmit+0x195d/0x2e50
[  977.088038][ T3197]  ? dev_queue_xmit+0x20/0x20
[  977.092719][ T3197]  ? __copy_skb_header+0x3ba/0x4f0
[  977.097840][ T3197]  ? memcpy+0x3c/0x60
[  977.101833][ T3197]  ? __copy_skb_header+0x3ba/0x4f0
[  977.106953][ T3197]  ? __skb_clone+0x446/0x6c0
[  977.111555][ T3197]  ? skb_clone+0x1f1/0x350
[  977.115985][ T3197]  __netlink_deliver_tap+0x522/0x7c0
[  977.121295][ T3197]  netlink_deliver_tap+0x16c/0x180
[  977.126413][ T3197]  __netlink_sendskb+0x4b/0x90
[  977.131186][ T3197]  netlink_dump+0x91d/0xcd0
[  977.135705][ T3197]  ? netlink_lookup+0x1d0/0x1d0
[  977.140584][ T3197]  __netlink_dump_start+0x518/0x700
[  977.145825][ T3197]  packet_diag_handler_dump+0x1d0/0x290
[  977.151379][ T3197]  ? mutex_lock_io_nested+0x60/0x60
[  977.156583][ T3197]  ? packet_sendmsg_spkt+0x1220/0x1220
[  977.162052][ T3197]  ? packet_diag_handler_dump+0x290/0x290
[  977.167785][ T3197]  ? __mutex_lock_common+0x435/0x2400
[  977.173171][ T3197]  ? packet_sendmsg_spkt+0x1220/0x1220
[  977.178638][ T3197]  sock_diag_rcv_msg+0x15c/0x3e0
[  977.183590][ T3197]  netlink_rcv_skb+0x1e9/0x430
[  977.188362][ T3197]  ? sock_diag_bind+0xa0/0xa0
[  977.193050][ T3197]  ? netlink_ack+0xb10/0xb10
[  977.197661][ T3197]  sock_diag_rcv+0x26/0x40
[  977.202080][ T3197]  netlink_unicast+0x78f/0x940
[  977.206861][ T3197]  netlink_sendmsg+0x8ba/0xbe0
[  977.211643][ T3197]  ? netlink_getsockopt+0x570/0x570
[  977.216852][ T3197]  ? aa_sock_msg_perm+0x94/0x150
[  977.221797][ T3197]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  977.227087][ T3197]  ? security_socket_sendmsg+0x7c/0xa0
[  977.232547][ T3197]  ? netlink_getsockopt+0x570/0x570
[  977.237754][ T3197]  ____sys_sendmsg+0x5be/0x8f0
[  977.242563][ T3197]  ? __sys_sendmsg_sock+0x30/0x30
[  977.247605][ T3197]  ? import_iovec+0x6f/0xa0
[  977.252121][ T3197]  ___sys_sendmsg+0x236/0x2e0
[  977.256815][ T3197]  ? __sys_sendmsg+0x290/0x290
[  977.261628][ T3197]  __se_sys_sendmsg+0x1b7/0x2a0
[  977.266487][ T3197]  ? __x64_sys_sendmsg+0x80/0x80
[  977.271424][ T3197]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  977.277425][ T3197]  ? lockdep_hardirqs_on+0x94/0x140
[  977.282637][ T3197]  do_syscall_64+0x4c/0xa0
[  977.287051][ T3197]  ? clear_bhb_loop+0x30/0x80
[  977.291731][ T3197]  ? clear_bhb_loop+0x30/0x80
[  977.296418][ T3197]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  977.302317][ T3197] RIP: 0033:0x7f5cf676ce59
[  977.306736][ T3197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.326443][ T3197] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  977.334865][ T3197] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[  977.342840][ T3197] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  977.350813][ T3197] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[  977.358794][ T3197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  977.366765][ T3197] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[  977.374761][ T3197]  </TASK>
[  979.073490][ T3204] FAULT_INJECTION: forcing a failure.
[  979.073490][ T3204] name failslab, interval 1, probability 0, space 0, times 0
[  979.124347][ T3204] CPU: 0 PID: 3204 Comm: syz.5.10213 Not tainted syzkaller #0
[  979.131847][ T3204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  979.141904][ T3204] Call Trace:
[  979.145183][ T3204]  <TASK>
[  979.148108][ T3204]  dump_stack_lvl+0x188/0x250
[  979.152802][ T3204]  ? show_regs_print_info+0x20/0x20
[  979.158003][ T3204]  ? load_image+0x410/0x410
[  979.162522][ T3204]  ? rcu_lock_release+0x5/0x20
[  979.167293][ T3204]  should_fail+0x383/0x4b0
[  979.171722][ T3204]  should_failslab+0x5/0x20
[  979.176236][ T3204]  slab_pre_alloc_hook+0x51/0xc0
[  979.181180][ T3204]  kmem_cache_alloc_trace+0x47/0x290
[  979.186468][ T3204]  ? proc_thread_self_get_link+0xf8/0x190
[  979.192200][ T3204]  proc_thread_self_get_link+0xf8/0x190
[  979.197748][ T3204]  ? proc_setup_thread_self+0x2d0/0x2d0
[  979.203296][ T3204]  pick_link+0x701/0xdc0
[  979.207559][ T3204]  step_into+0xac6/0xcd0
[  979.211822][ T3204]  ? set_root+0x3a0/0x3a0
[  979.216161][ T3204]  ? walk_component+0x1b6/0x460
[  979.221020][ T3204]  link_path_walk+0x688/0xde0
[  979.225712][ T3204]  ? handle_lookup_down+0x130/0x130
[  979.230927][ T3204]  path_openat+0x28e/0x2fb0
[  979.235462][ T3204]  ? trace_event_raw_event_lock+0x250/0x250
[  979.241362][ T3204]  ? do_filp_open+0x400/0x400
[  979.246051][ T3204]  ? perf_trace_lock+0xe4/0x390
[  979.250917][ T3204]  ? trace_event_raw_event_lock+0x250/0x250
[  979.256822][ T3204]  do_filp_open+0x1df/0x400
[  979.261334][ T3204]  ? vfs_tmpfile+0x300/0x300
[  979.265952][ T3204]  ? _raw_spin_unlock+0x24/0x40
[  979.270808][ T3204]  ? alloc_fd+0x59e/0x650
[  979.275144][ T3204]  do_sys_openat2+0x14b/0x500
[  979.279823][ T3204]  ? __lock_acquire+0x7b50/0x7b50
[  979.284849][ T3204]  ? do_sys_open+0xe0/0xe0
[  979.289270][ T3204]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  979.295259][ T3204]  ? lock_chain_count+0x20/0x20
[  979.300119][ T3204]  __x64_sys_openat+0x135/0x160
[  979.304974][ T3204]  do_syscall_64+0x4c/0xa0
[  979.309390][ T3204]  ? clear_bhb_loop+0x30/0x80
[  979.314065][ T3204]  ? clear_bhb_loop+0x30/0x80
[  979.318749][ T3204]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  979.324650][ T3204] RIP: 0033:0x7efe540ac68e
[  979.329070][ T3204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  979.348675][ T3204] RSP: 002b:00007efe52343ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  979.357095][ T3204] RAX: ffffffffffffffda RBX: 00007efe523446c0 RCX: 00007efe540ac68e
[  979.365069][ T3204] RDX: 0000000000000000 RSI: 00007efe52343f90 RDI: ffffffffffffff9c
[  979.373042][ T3204] RBP: 00007efe52344090 R08: 0000000000000000 R09: 0000000000000000
[  979.381013][ T3204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  979.388982][ T3204] R13: 00007efe54374038 R14: 00007efe54373fa0 R15: 00007ffe17934208
[  979.396971][ T3204]  </TASK>
[  979.685266][ T3225] netlink: 'syz.2.10218': attribute type 3 has an invalid length.
[  979.705634][ T3224] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.10217'.
[  979.726347][ T3225] netlink: 'syz.2.10218': attribute type 1 has an invalid length.
[  979.741072][ T3225] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.10218'.
[  980.148225][ T3241] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.10223'.
[  980.211722][ T3241] netlink: 'syz.5.10223': attribute type 29 has an invalid length.
[  980.228391][ T3241] netlink: 'syz.5.10223': attribute type 29 has an invalid length.
[  980.249567][ T3241] netlink: 'syz.5.10223': attribute type 29 has an invalid length.
[  980.313142][ T3242] netlink: 'syz.5.10223': attribute type 29 has an invalid length.
[  980.346640][ T3241] netlink: 'syz.5.10223': attribute type 29 has an invalid length.
[  980.616198][ T3261] netlink: 'syz.3.10227': attribute type 7 has an invalid length.
[  980.640965][ T3260] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10229'.
[  980.755388][ T3268] netlink: 'syz.5.10232': attribute type 3 has an invalid length.
[  980.820072][ T3268] netlink: 'syz.5.10232': attribute type 1 has an invalid length.
[  980.827945][ T3268] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.10232'.
[  981.274290][ T3284] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.10234'.
[  981.607934][ T3307] FAULT_INJECTION: forcing a failure.
[  981.607934][ T3307] name failslab, interval 1, probability 0, space 0, times 0
[  981.620660][ T3307] CPU: 0 PID: 3307 Comm: syz.1.10240 Not tainted syzkaller #0
[  981.628127][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  981.638191][ T3307] Call Trace:
[  981.641471][ T3307]  <TASK>
[  981.644407][ T3307]  dump_stack_lvl+0x188/0x250
[  981.649094][ T3307]  ? show_regs_print_info+0x20/0x20
[  981.654289][ T3307]  ? load_image+0x410/0x410
[  981.658789][ T3307]  should_fail+0x383/0x4b0
[  981.663196][ T3307]  should_failslab+0x5/0x20
[  981.667681][ T3307]  slab_pre_alloc_hook+0x51/0xc0
[  981.672601][ T3307]  __kmalloc_node_track_caller+0x68/0x3a0
[  981.678302][ T3307]  ? tipc_msg_create+0x46/0x4b0
[  981.683138][ T3307]  ? __alloc_skb+0xf4/0x750
[  981.687626][ T3307]  ? tipc_msg_create+0x46/0x4b0
[  981.692470][ T3307]  __alloc_skb+0x22c/0x750
[  981.696872][ T3307]  tipc_msg_create+0x46/0x4b0
[  981.701567][ T3307]  tipc_group_create_event+0x11f/0x960
[  981.707021][ T3307]  tipc_sk_proto_rcv+0x6c7/0x1720
[  981.712041][ T3307]  ? is_dynamic_key+0x1f0/0x1f0
[  981.716881][ T3307]  ? trace_tipc_sk_dump+0x200/0x200
[  981.722062][ T3307]  ? mark_lock+0x94/0x320
[  981.726376][ T3307]  ? __lock_acquire+0x13dc/0x7b50
[  981.731389][ T3307]  ? tipc_sk_filtering+0x138/0x510
[  981.736491][ T3307]  tipc_sk_filter_rcv+0x2e8c/0x30b0
[  981.741686][ T3307]  ? trace_event_raw_event_lock+0x250/0x250
[  981.747569][ T3307]  ? verify_lock_unused+0x140/0x140
[  981.752752][ T3307]  ? perf_trace_lock+0xe4/0x390
[  981.757593][ T3307]  ? mark_lock+0x94/0x320
[  981.761928][ T3307]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  981.767903][ T3307]  ? lock_chain_count+0x20/0x20
[  981.772742][ T3307]  ? tipc_sk_publish+0x420/0x420
[  981.777664][ T3307]  ? __local_bh_enable_ip+0xd7/0x1c0
[  981.784343][ T3307]  ? __local_bh_enable_ip+0x136/0x1c0
[  981.789752][ T3307]  tipc_sk_rcv+0x846/0x2a10
[  981.794382][ T3307]  ? is_bpf_text_address+0x254/0x270
[  981.799681][ T3307]  ? __skb_queue_purge+0x160/0x160
[  981.804789][ T3307]  ? memset+0x1e/0x40
[  981.808770][ T3307]  ? lockdep_init_map_type+0x98/0x900
[  981.814146][ T3307]  ? kfree+0xef/0x2a0
[  981.818124][ T3307]  ? __raw_spin_lock_init+0x41/0x100
[  981.823404][ T3307]  tipc_node_xmit+0x203/0xf70
[  981.828073][ T3307]  ? kasan_set_track+0x62/0x70
[  981.832825][ T3307]  ? kasan_set_free_info+0x1f/0x40
[  981.837927][ T3307]  ? ____kasan_slab_free+0xd5/0x110
[  981.843117][ T3307]  ? kfree+0xef/0x2a0
[  981.847083][ T3307]  ? tipc_group_delete+0x3b0/0x4b0
[  981.852193][ T3307]  ? tipc_sk_leave+0x150/0x4d0
[  981.856960][ T3307]  ? sock_close+0xbf/0x210
[  981.861372][ T3307]  ? __fput+0x212/0x8c0
[  981.865524][ T3307]  ? tipc_node_get_linkname+0x190/0x190
[  981.871058][ T3307]  ? syscall_exit_to_user_mode+0x16/0x40
[  981.876680][ T3307]  ? do_syscall_64+0x58/0xa0
[  981.881258][ T3307]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  981.887587][ T3307]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  981.893559][ T3307]  tipc_node_distr_xmit+0x2c7/0x3f0
[  981.898752][ T3307]  ? tipc_node_xmit_skb+0x190/0x190
[  981.903941][ T3307]  ? tipc_group_delete+0x3b0/0x4b0
[  981.909037][ T3307]  ? kfree+0xef/0x2a0
[  981.913007][ T3307]  tipc_group_delete+0x3e8/0x4b0
[  981.917945][ T3307]  ? slab_free_freelist_hook+0xec/0x170
[  981.923499][ T3307]  ? kmem_cache_free+0x14c/0x210
[  981.928430][ T3307]  ? tipc_group_update_member+0x350/0x350
[  981.934151][ T3307]  ? tipc_group_self+0x22/0x1c0
[  981.938995][ T3307]  tipc_sk_leave+0x150/0x4d0
[  981.943578][ T3307]  ? __tipc_shutdown+0x1580/0x1580
[  981.948675][ T3307]  ? _local_bh_enable+0xa0/0xa0
[  981.953521][ T3307]  tipc_release+0x318/0x1f70
[  981.958103][ T3307]  ? tipc_sock_destruct+0x170/0x170
[  981.963291][ T3307]  sock_close+0xbf/0x210
[  981.967525][ T3307]  ? sock_mmap+0x90/0x90
[  981.971751][ T3307]  __fput+0x212/0x8c0
[  981.975724][ T3307]  task_work_run+0x125/0x1a0
[  981.980304][ T3307]  exit_to_user_mode_loop+0x10f/0x130
[  981.985660][ T3307]  exit_to_user_mode_prepare+0xee/0x180
[  981.991191][ T3307]  syscall_exit_to_user_mode+0x16/0x40
[  981.996633][ T3307]  do_syscall_64+0x58/0xa0
[  982.001032][ T3307]  ? clear_bhb_loop+0x30/0x80
[  982.005690][ T3307]  ? clear_bhb_loop+0x30/0x80
[  982.010347][ T3307]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  982.016224][ T3307] RIP: 0033:0x7fd1c9d24e59
[  982.020626][ T3307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.040215][ T3307] RSP: 002b:00007fd1c7f7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  982.048731][ T3307] RAX: 0000000000000000 RBX: 00007fd1c9facfa0 RCX: 00007fd1c9d24e59
[  982.056695][ T3307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  982.064650][ T3307] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[  982.072607][ T3307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  982.080563][ T3307] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[  982.088542][ T3307]  </TASK>
[  982.184578][ T3311] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.10241'.
[  982.238954][ T3313] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10242'.
[  982.396021][ T3319] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10246'.
[  982.761742][ T3335] netlink: 'syz.4.10252': attribute type 7 has an invalid length.
[  982.884333][ T3343] netlink: 'syz.3.10255': attribute type 3 has an invalid length.
[  982.900178][ T3343] netlink: 'syz.3.10255': attribute type 1 has an invalid length.
[  982.908207][ T3343] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10255'.
[  982.974935][ T3341] FAULT_INJECTION: forcing a failure.
[  982.974935][ T3341] name failslab, interval 1, probability 0, space 0, times 0
[  982.988247][ T3341] CPU: 0 PID: 3341 Comm: syz.2.10254 Not tainted syzkaller #0
[  982.995712][ T3341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  983.005753][ T3341] Call Trace:
[  983.009016][ T3341]  <TASK>
[  983.011931][ T3341]  dump_stack_lvl+0x188/0x250
[  983.016598][ T3341]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  983.022736][ T3341]  ? show_regs_print_info+0x20/0x20
[  983.027918][ T3341]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  983.034057][ T3341]  ? dump_stack+0x5/0x20
[  983.038292][ T3341]  should_fail+0x383/0x4b0
[  983.042711][ T3341]  should_failslab+0x5/0x20
[  983.047195][ T3341]  slab_pre_alloc_hook+0x51/0xc0
[  983.052116][ T3341]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  983.057818][ T3341]  ? __get_vm_area_node+0x119/0x2d0
[  983.063003][ T3341]  __get_vm_area_node+0x119/0x2d0
[  983.068157][ T3341]  __vmalloc_node_range+0xef/0x8b0
[  983.073272][ T3341]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.078814][ T3341]  ? end_current_label_crit_section+0x170/0x170
[  983.085046][ T3341]  ? __lock_acquire+0x7b50/0x7b50
[  983.090063][ T3341]  ? perf_tp_event+0xa7e/0xbe0
[  983.094823][ T3341]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.100441][ T3341]  __vmalloc+0x76/0x80
[  983.104501][ T3341]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.110034][ T3341]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.115392][ T3341]  bpf_prog_alloc+0x1a/0x1e0
[  983.119970][ T3341]  bpf_prog_load+0x7d1/0x14e0
[  983.124643][ T3341]  ? map_freeze+0x360/0x360
[  983.129132][ T3341]  ? __might_fault+0xb7/0x110
[  983.133801][ T3341]  ? __might_fault+0xb3/0x110
[  983.138468][ T3341]  ? bpf_lsm_bpf+0x5/0x10
[  983.142784][ T3341]  ? security_bpf+0x7a/0xa0
[  983.147276][ T3341]  __sys_bpf+0x532/0x6f0
[  983.151499][ T3341]  ? perf_trace_preemptirq_template+0x2aa/0x360
[  983.157720][ T3341]  ? bpf_link_show_fdinfo+0x380/0x380
[  983.163071][ T3341]  ? rcu_nmi_exit+0x6f/0xf0
[  983.167567][ T3341]  __x64_sys_bpf+0x78/0x90
[  983.171966][ T3341]  do_syscall_64+0x4c/0xa0
[  983.176362][ T3341]  ? clear_bhb_loop+0x30/0x80
[  983.181019][ T3341]  ? clear_bhb_loop+0x30/0x80
[  983.185677][ T3341]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  983.191547][ T3341] RIP: 0033:0x7f0dfbd25e59
[  983.196112][ T3341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.215710][ T3341] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  983.224116][ T3341] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[  983.232075][ T3341] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  983.240028][ T3341] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[  983.247985][ T3341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  983.255937][ T3341] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[  983.263902][ T3341]  </TASK>
[  983.289184][ T3341] syz.2.10254: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  983.425086][ T3352] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.10258'.
[  983.435598][ T3341] CPU: 1 PID: 3341 Comm: syz.2.10254 Not tainted syzkaller #0
[  983.443078][ T3341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  983.453134][ T3341] Call Trace:
[  983.456413][ T3341]  <TASK>
[  983.459347][ T3341]  dump_stack_lvl+0x188/0x250
[  983.464032][ T3341]  ? rcu_lock_release+0x5/0x20
[  983.468798][ T3341]  ? show_regs_print_info+0x20/0x20
[  983.473997][ T3341]  ? load_image+0x410/0x410
[  983.478511][ T3341]  warn_alloc+0x245/0x320
[  983.482847][ T3341]  ? zone_watermark_ok_safe+0x250/0x250
[  983.488409][ T3341]  ? __get_vm_area_node+0x2b5/0x2d0
[  983.493614][ T3341]  __vmalloc_node_range+0x2b1/0x8b0
[  983.498817][ T3341]  ? end_current_label_crit_section+0x170/0x170
[  983.505066][ T3341]  ? __lock_acquire+0x7b50/0x7b50
[  983.510100][ T3341]  ? perf_tp_event+0xa7e/0xbe0
[  983.514872][ T3341]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.520433][ T3341]  __vmalloc+0x76/0x80
[  983.524507][ T3341]  ? bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.530056][ T3341]  bpf_prog_alloc_no_stats+0x36/0x2c0
[  983.535433][ T3341]  bpf_prog_alloc+0x1a/0x1e0
[  983.540028][ T3341]  bpf_prog_load+0x7d1/0x14e0
[  983.544719][ T3341]  ? map_freeze+0x360/0x360
[  983.549225][ T3341]  ? __might_fault+0xb7/0x110
[  983.553918][ T3341]  ? __might_fault+0xb3/0x110
[  983.558603][ T3341]  ? bpf_lsm_bpf+0x5/0x10
[  983.562940][ T3341]  ? security_bpf+0x7a/0xa0
[  983.567452][ T3341]  __sys_bpf+0x532/0x6f0
[  983.571697][ T3341]  ? perf_trace_preemptirq_template+0x2aa/0x360
[  983.577929][ T3341]  ? bpf_link_show_fdinfo+0x380/0x380
[  983.583284][ T3341]  ? rcu_nmi_exit+0x6f/0xf0
[  983.587794][ T3341]  __x64_sys_bpf+0x78/0x90
[  983.592196][ T3341]  do_syscall_64+0x4c/0xa0
[  983.596596][ T3341]  ? clear_bhb_loop+0x30/0x80
[  983.601254][ T3341]  ? clear_bhb_loop+0x30/0x80
[  983.605914][ T3341]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  983.611788][ T3341] RIP: 0033:0x7f0dfbd25e59
[  983.616190][ T3341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  983.635776][ T3341] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  983.644175][ T3341] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[  983.652130][ T3341] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  983.660083][ T3341] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[  983.668036][ T3341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  983.675989][ T3341] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[  983.683964][ T3341]  </TASK>
[  983.727941][ T3341] Mem-Info:
[  983.746217][ T3341] active_anon:288 inactive_anon:6515 isolated_anon:0
[  983.746217][ T3341]  active_file:26282 inactive_file:35992 isolated_file:0
[  983.746217][ T3341]  unevictable:768 dirty:286 writeback:0
[  983.746217][ T3341]  slab_reclaimable:20960 slab_unreclaimable:97805
[  983.746217][ T3341]  mapped:30327 shmem:1643 pagetables:698 bounce:0
[  983.746217][ T3341]  kernel_misc_reclaimable:0
[  983.746217][ T3341]  free:1363379 free_pcp:10752 free_cma:0
[  983.869168][ T3341] Node 0 active_anon:1120kB inactive_anon:27848kB active_file:104928kB inactive_file:143968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122308kB dirty:1444kB writeback:0kB shmem:6792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10184kB pagetables:2792kB all_unreclaimable? no
[  983.909431][ T3341] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  983.968148][ T3341] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  984.044170][ T3365] FAULT_INJECTION: forcing a failure.
[  984.044170][ T3365] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  984.051386][ T3341] lowmem_reserve[]: 0 2539 2540 2540 2540
[  984.075168][ T3341] Node 0 DMA32 free:1518756kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1120kB inactive_anon:30848kB active_file:104928kB inactive_file:143968kB unevictable:1536kB writepending:1488kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:34496kB local_pcp:17988kB free_cma:0kB
[  984.088761][ T3365] CPU: 0 PID: 3365 Comm: syz.3.10262 Not tainted syzkaller #0
[  984.113267][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  984.123325][ T3365] Call Trace:
[  984.126608][ T3365]  <TASK>
[  984.129540][ T3365]  dump_stack_lvl+0x188/0x250
[  984.134229][ T3365]  ? show_regs_print_info+0x20/0x20
[  984.139448][ T3365]  ? load_image+0x410/0x410
[  984.143962][ T3365]  ? kernfs_fop_write_iter+0x14f/0x500
[  984.146584][ T3341] lowmem_reserve[]:
[  984.149424][ T3365]  ? __lock_acquire+0x7b50/0x7b50
[  984.149455][ T3365]  should_fail+0x383/0x4b0
[  984.149479][ T3365]  _copy_from_iter+0x234/0x1160
[  984.149500][ T3365]  ? __lock_acquire+0x7b50/0x7b50
[  984.149525][ T3365]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  984.149547][ T3365]  ? __virt_addr_valid+0x3c6/0x470
[  984.149568][ T3365]  ? __check_object_size+0x30c/0x410
[  984.149591][ T3365]  kernfs_fop_write_iter+0x195/0x500
[  984.149611][ T3365]  ? iov_iter_init+0xb4/0x170
[  984.149631][ T3365]  vfs_write+0x748/0xd70
[  984.149657][ T3365]  ? file_end_write+0x250/0x250
[  984.171307][ T3341]  0
[  984.172697][ T3365]  ? mutex_lock_nested+0x17/0x20
[  984.172723][ T3365]  ? __fdget_pos+0x2bf/0x370
[  984.172739][ T3365]  ? ksys_write+0x70/0x260
[  984.172760][ T3365]  ksys_write+0x153/0x260
[  984.172777][ T3365]  ? __ia32_sys_read+0x80/0x80
[  984.172797][ T3365]  ? lockdep_hardirqs_on+0x94/0x140
[  984.172820][ T3365]  do_syscall_64+0x4c/0xa0
[  984.172835][ T3365]  ? clear_bhb_loop+0x30/0x80
[  984.172852][ T3365]  ? clear_bhb_loop+0x30/0x80
[  984.172870][ T3365]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  984.172888][ T3365] RIP: 0033:0x7f5cf676ce59
[  984.172906][ T3365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.172921][ T3365] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  984.172941][ T3365] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[  984.172955][ T3365] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004
[  984.172967][ T3365] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[  984.172979][ T3365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  984.172990][ T3365] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[  984.173019][ T3365]  </TASK>
[  984.345382][ T3341]  0 0 0 0
[  984.348885][ T3341] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[  984.390269][ T3341] lowmem_reserve[]: 0 0 0 0 0
[  984.398605][ T3341] Node 1 Normal free:3921576kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  984.500189][ T3341] lowmem_reserve[]: 0 0 0 0 0
[  984.507877][ T3341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  984.597782][ T3341] Node 0 DMA32: 5063*4kB (UME) 2971*8kB (UME) 1133*16kB (UME) 1539*32kB (UME) 996*64kB (UME) 1205*128kB (UME) 266*256kB (UM) 452*512kB (UM) 311*1024kB (UME) 
[  984.598443][T13029] Bluetooth: hci2: command 0x0406 tx timeout
[  984.598450][ T3341] 57*2048kB (UM) 111*4096kB (UM) = 1518756kB
[  984.794512][ T3341] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  984.846361][ T3341] Node 1 Normal: 246*4kB (UME) 48*8kB (UME) 25*16kB (UME) 206*32kB (UME) 84*64kB (UME) 24*128kB (UE) 9*256kB (UME) 8*512kB (U) 1*1024kB (E) 3*2048kB (UME) 950*4096kB (M) = 3921576kB
[  984.914974][ T3341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  984.960038][ T3341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  984.993130][ T3341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  985.002924][ T3387] netlink: 'syz.1.10268': attribute type 7 has an invalid length.
[  985.087673][ T3341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  985.134771][ T3341] 68822 total pagecache pages
[  985.139501][ T3341] 0 pages in swap cache
[  985.153956][ T3341] Swap cache stats: add 61, delete 61, find 0/1
[  985.174682][ T3341] Free swap  = 124728kB
[  985.179179][ T3341] Total swap = 124996kB
[  985.200089][ T3341] 2097051 pages RAM
[  985.208413][ T3341] 0 pages HighMem/MovableOnly
[  985.234751][ T3341] 411497 pages reserved
[  985.238917][ T3341] 0 pages cma reserved
[  985.290238][ T3390] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10270'.
[  985.489426][ T3402] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.10273'.
[  985.615279][ T3410] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10277'.
[  985.973427][ T3419] netlink: 'syz.4.10281': attribute type 3 has an invalid length.
[  985.977054][ T3421] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10282'.
[  986.020027][ T3419] netlink: 'syz.4.10281': attribute type 1 has an invalid length.
[  986.074457][ T3419] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10281'.
[  986.086127][ T3425] FAULT_INJECTION: forcing a failure.
[  986.086127][ T3425] name failslab, interval 1, probability 0, space 0, times 0
[  986.128433][ T3425] CPU: 1 PID: 3425 Comm: syz.2.10283 Not tainted syzkaller #0
[  986.135919][ T3425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  986.145977][ T3425] Call Trace:
[  986.149255][ T3425]  <TASK>
[  986.152191][ T3425]  dump_stack_lvl+0x188/0x250
[  986.156883][ T3425]  ? show_regs_print_info+0x20/0x20
[  986.162089][ T3425]  ? load_image+0x410/0x410
[  986.166587][ T3425]  ? __might_sleep+0xf0/0xf0
[  986.171171][ T3425]  ? __lock_acquire+0x7b50/0x7b50
[  986.176194][ T3425]  should_fail+0x383/0x4b0
[  986.180606][ T3425]  should_failslab+0x5/0x20
[  986.185095][ T3425]  slab_pre_alloc_hook+0x51/0xc0
[  986.190019][ T3425]  __kmalloc_node+0x6d/0x3a0
[  986.194601][ T3425]  ? kvmalloc_node+0x84/0x130
[  986.199262][ T3425]  kvmalloc_node+0x84/0x130
[  986.203747][ T3425]  map_get_next_key+0x289/0x5f0
[  986.208587][ T3425]  __sys_bpf+0x3e5/0x6f0
[  986.212819][ T3425]  ? bpf_link_show_fdinfo+0x380/0x380
[  986.218186][ T3425]  __x64_sys_bpf+0x78/0x90
[  986.222585][ T3425]  do_syscall_64+0x4c/0xa0
[  986.226984][ T3425]  ? clear_bhb_loop+0x30/0x80
[  986.231641][ T3425]  ? clear_bhb_loop+0x30/0x80
[  986.236299][ T3425]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  986.242172][ T3425] RIP: 0033:0x7f0dfbd25e59
[  986.246573][ T3425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.266169][ T3425] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  986.274577][ T3425] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[  986.282542][ T3425] RDX: 0000000000000020 RSI: 0000200000000b40 RDI: 0000000000000004
[  986.290500][ T3425] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[  986.298456][ T3425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.306414][ T3425] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[  986.314383][ T3425]  </TASK>
[  986.512149][ T3437] FAULT_INJECTION: forcing a failure.
[  986.512149][ T3437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.542156][ T3437] CPU: 1 PID: 3437 Comm: syz.3.10288 Not tainted syzkaller #0
[  986.549642][ T3437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  986.559698][ T3437] Call Trace:
[  986.562982][ T3437]  <TASK>
[  986.565918][ T3437]  dump_stack_lvl+0x188/0x250
[  986.570614][ T3437]  ? show_regs_print_info+0x20/0x20
[  986.575819][ T3437]  ? load_image+0x410/0x410
[  986.580342][ T3437]  ? __lock_acquire+0x7b50/0x7b50
[  986.585380][ T3437]  should_fail+0x383/0x4b0
[  986.589804][ T3437]  _copy_from_iter+0x234/0x1160
[  986.594655][ T3437]  ? __lock_acquire+0x7b50/0x7b50
[  986.599688][ T3437]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  986.605063][ T3437]  ? __virt_addr_valid+0x3c6/0x470
[  986.610180][ T3437]  ? __phys_addr_symbol+0x2b/0x70
[  986.615210][ T3437]  ? __check_object_size+0x30c/0x410
[  986.620507][ T3437]  netlink_sendmsg+0x758/0xbe0
[  986.625290][ T3437]  ? netlink_getsockopt+0x570/0x570
[  986.630498][ T3437]  ? aa_sock_msg_perm+0x94/0x150
[  986.635441][ T3437]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  986.640727][ T3437]  ? security_socket_sendmsg+0x7c/0xa0
[  986.646185][ T3437]  ? netlink_getsockopt+0x570/0x570
[  986.651372][ T3437]  ____sys_sendmsg+0x5be/0x8f0
[  986.656137][ T3437]  ? __sys_sendmsg_sock+0x30/0x30
[  986.661156][ T3437]  ? import_iovec+0x6f/0xa0
[  986.665666][ T3437]  ___sys_sendmsg+0x236/0x2e0
[  986.670354][ T3437]  ? __sys_sendmsg+0x290/0x290
[  986.675135][ T3437]  ? trace_event_raw_event_lock+0x250/0x250
[  986.681401][ T3437]  __se_sys_sendmsg+0x1b7/0x2a0
[  986.686271][ T3437]  ? __x64_sys_sendmsg+0x80/0x80
[  986.691209][ T3437]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  986.697209][ T3437]  ? lockdep_hardirqs_on+0x94/0x140
[  986.702415][ T3437]  do_syscall_64+0x4c/0xa0
[  986.706834][ T3437]  ? clear_bhb_loop+0x30/0x80
[  986.711514][ T3437]  ? clear_bhb_loop+0x30/0x80
[  986.716195][ T3437]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  986.722094][ T3437] RIP: 0033:0x7f5cf676ce59
[  986.726499][ T3437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.746092][ T3437] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  986.754491][ T3437] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[  986.762451][ T3437] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  986.770419][ T3437] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[  986.778376][ T3437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.786331][ T3437] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[  986.794294][ T3437]  </TASK>
[  987.350823][ T3471] IPv6: Can't replace route, no match found
[  988.177319][ T3499] __nla_validate_parse: 3 callbacks suppressed
[  988.177340][ T3499] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.10307'.
[  988.596779][ T3515] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10312'.
[  988.901173][ T3528] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10315'.
[  988.986085][ T3510] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  988.992888][ T3510] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  989.226929][ T3542] FAULT_INJECTION: forcing a failure.
[  989.226929][ T3542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  989.276733][ T3542] CPU: 1 PID: 3542 Comm: syz.1.10320 Not tainted syzkaller #0
[  989.284233][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  989.294296][ T3542] Call Trace:
[  989.297578][ T3542]  <TASK>
[  989.300511][ T3542]  dump_stack_lvl+0x188/0x250
[  989.305208][ T3542]  ? show_regs_print_info+0x20/0x20
[  989.310414][ T3542]  ? load_image+0x410/0x410
[  989.314933][ T3542]  ? __lock_acquire+0x7b50/0x7b50
[  989.319980][ T3542]  should_fail+0x383/0x4b0
[  989.324494][ T3542]  _copy_to_user+0x2e/0x130
[  989.329014][ T3542]  simple_read_from_buffer+0xe3/0x150
[  989.334400][ T3542]  proc_fail_nth_read+0x1a6/0x220
[  989.339438][ T3542]  ? proc_fault_inject_write+0x310/0x310
[  989.345084][ T3542]  ? fsnotify_perm+0x254/0x560
[  989.349855][ T3542]  ? proc_fault_inject_write+0x310/0x310
[  989.355508][ T3542]  vfs_read+0x2ff/0xd50
[  989.359673][ T3542]  ? __lock_acquire+0x7b50/0x7b50
[  989.364710][ T3542]  ? kernel_read+0x1e0/0x1e0
[  989.369320][ T3542]  ? mutex_lock_nested+0x17/0x20
[  989.374265][ T3542]  ? __fdget_pos+0x2bf/0x370
[  989.378856][ T3542]  ? ksys_read+0x70/0x260
[  989.383198][ T3542]  ksys_read+0x153/0x260
[  989.387443][ T3542]  ? vfs_write+0xd70/0xd70
[  989.391873][ T3542]  ? lockdep_hardirqs_on+0x94/0x140
[  989.397076][ T3542]  do_syscall_64+0x4c/0xa0
[  989.401484][ T3542]  ? clear_bhb_loop+0x30/0x80
[  989.406149][ T3542]  ? clear_bhb_loop+0x30/0x80
[  989.410815][ T3542]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  989.416695][ T3542] RIP: 0033:0x7fd1c9ce568e
[  989.421095][ T3542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  989.440687][ T3542] RSP: 002b:00007fd1c7f7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  989.449085][ T3542] RAX: ffffffffffffffda RBX: 00007fd1c7f7d6c0 RCX: 00007fd1c9ce568e
[  989.457040][ T3542] RDX: 000000000000000f RSI: 00007fd1c7f7d0a0 RDI: 0000000000000007
[  989.464995][ T3542] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[  989.472950][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  989.480902][ T3542] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[  989.488873][ T3542]  </TASK>
[  989.507351][ T3549] netlink: 199800 bytes leftover after parsing attributes in process `syz.5.10321'.
[  989.710314][T14682] Bluetooth: hci3: command 0x0406 tx timeout
[  990.174011][ T3562] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10326'.
[  990.221103][ T3562] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  991.043335][ T3598] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10336'.
[  992.011337][ T3639] device syzkaller0 entered promiscuous mode
[  992.070643][ T3643] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10354'.
[  992.476257][ T3663] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10363'.
[  992.520315][ T3662] netlink: 'syz.5.10361': attribute type 39 has an invalid length.
[  992.626605][ T3662] device hsr_slave_1 left promiscuous mode
[  992.752588][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  992.758980][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  992.825590][ T3669] netlink: 'syz.4.10364': attribute type 39 has an invalid length.
[  992.924861][ T3669] device hsr_slave_1 left promiscuous mode
[  992.957425][ T3671] IPv6: Can't replace route, no match found
[  993.116327][ T3677] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10367'.
[  993.162173][ T3679] IPv6: Can't replace route, no match found
[  993.444475][ T3691] netlink: 'syz.2.10370': attribute type 10 has an invalid length.
[  993.459217][ T3691] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.10370'.
[  993.702519][ T3705] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10380'.
[  993.925675][ T3710] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10383'.
[  994.162643][ T3725] FAULT_INJECTION: forcing a failure.
[  994.162643][ T3725] name failslab, interval 1, probability 0, space 0, times 0
[  994.205281][ T3725] CPU: 0 PID: 3725 Comm: syz.1.10389 Not tainted syzkaller #0
[  994.212847][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  994.222968][ T3725] Call Trace:
[  994.226295][ T3725]  <TASK>
[  994.229266][ T3725]  dump_stack_lvl+0x188/0x250
[  994.234009][ T3725]  ? show_regs_print_info+0x20/0x20
[  994.239257][ T3725]  ? load_image+0x410/0x410
[  994.243828][ T3725]  ? __might_sleep+0xf0/0xf0
[  994.248463][ T3725]  ? __lock_acquire+0x7b50/0x7b50
[  994.253518][ T3725]  ? perf_trace_buf_update+0xa8/0x230
[  994.258958][ T3725]  should_fail+0x383/0x4b0
[  994.263456][ T3725]  should_failslab+0x5/0x20
[  994.267986][ T3725]  slab_pre_alloc_hook+0x51/0xc0
[  994.272981][ T3725]  kmem_cache_alloc_node+0x47/0x2c0
[  994.278208][ T3725]  ? __alloc_skb+0xf4/0x750
[  994.282790][ T3725]  __alloc_skb+0xf4/0x750
[  994.287198][ T3725]  alloc_skb_with_frags+0xa7/0x720
[  994.292436][ T3725]  sock_alloc_send_pskb+0x87f/0x9a0
[  994.297820][ T3725]  ? sock_kzfree_s+0x50/0x50
[  994.302580][ T3725]  tun_get_user+0x8f7/0x3b40
[  994.307225][ T3725]  ? perf_trace_lock+0x301/0x390
[  994.312262][ T3725]  ? trace_event_raw_event_lock+0x250/0x250
[  994.318247][ T3725]  ? tun_ring_recv+0xc90/0xc90
[  994.323128][ T3725]  ? rcu_lock_release+0x5/0x20
[  994.327956][ T3725]  ? __lock_acquire+0x7b50/0x7b50
[  994.333032][ T3725]  ? trace_event_raw_event_lock+0x250/0x250
[  994.339077][ T3725]  tun_chr_write_iter+0x112/0x1e0
[  994.344161][ T3725]  vfs_write+0x748/0xd70
[  994.348509][ T3725]  ? file_end_write+0x250/0x250
[  994.353459][ T3725]  ? __fget_files+0x402/0x470
[  994.358246][ T3725]  ? __fdget_pos+0x1e2/0x370
[  994.362860][ T3725]  ? ksys_write+0x70/0x260
[  994.367333][ T3725]  ksys_write+0x153/0x260
[  994.371720][ T3725]  ? __ia32_sys_read+0x80/0x80
[  994.376555][ T3725]  ? lockdep_hardirqs_on+0x94/0x140
[  994.381819][ T3725]  do_syscall_64+0x4c/0xa0
[  994.386261][ T3725]  ? clear_bhb_loop+0x30/0x80
[  994.390960][ T3725]  ? clear_bhb_loop+0x30/0x80
[  994.395697][ T3725]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  994.401615][ T3725] RIP: 0033:0x7fd1c9d24e59
[  994.406076][ T3725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  994.425707][ T3725] RSP: 002b:00007fd1c7f7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  994.434162][ T3725] RAX: ffffffffffffffda RBX: 00007fd1c9facfa0 RCX: 00007fd1c9d24e59
[  994.442176][ T3725] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  994.450192][ T3725] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[  994.458214][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  994.466229][ T3725] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[  994.474358][ T3725]  </TASK>
[  994.649472][ T3733] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10392'.
[  995.579345][ T3768] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10403'.
[  995.803572][ T3775] sctp: [Deprecated]: syz.1.10407 (pid 3775) Use of int in max_burst socket option deprecated.
[  995.803572][ T3775] Use struct sctp_assoc_value instead
[  996.404849][ T3804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10414'.
[  996.432716][ T3804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10414'.
[  996.738811][ T3818] netlink: 15730 bytes leftover after parsing attributes in process `syz.2.10417'.
[  998.025092][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10429'.
[  998.045530][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10429'.
[  999.574910][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10445'.
[  999.639603][ T3917] IPv6: Can't replace route, no match found
[  999.647976][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10445'.
[  999.748448][ T3923] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10453'.
[  999.903194][ T3934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10457'.
[ 1000.012233][ T3940] netlink: 15730 bytes leftover after parsing attributes in process `syz.4.10459'.
[ 1000.022483][ T3938] netlink: 'syz.3.10457': attribute type 14 has an invalid length.
[ 1000.040063][ T3938] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10457'.
[ 1000.082949][ T3942] netlink: 'syz.3.10457': attribute type 3 has an invalid length.
[ 1000.170645][ T3942] netlink: 189132 bytes leftover after parsing attributes in process `syz.3.10457'.
[ 1000.436130][ T3954] IPv6: Can't replace route, no match found
[ 1000.746078][ T3958] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10466'.
[ 1000.912268][ T3966] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10471'.
[ 1001.407259][ T4004] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10484'.
[ 1003.919507][ T4096] device syzkaller0 entered promiscuous mode
[ 1004.450721][ T4126] IPv6: Can't replace route, no match found
[ 1005.193907][ T4169] IPv6: Can't replace route, no match found
[ 1007.244235][ T4305] __nla_validate_parse: 3 callbacks suppressed
[ 1007.244256][ T4305] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.10584'.
[ 1007.285225][ T4309] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.10586'.
[ 1007.556734][ T4324] netlink: 7862 bytes leftover after parsing attributes in process `syz.3.10590'.
[ 1007.660784][ T4327] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10592'.
[ 1007.870700][ T4340] FAULT_INJECTION: forcing a failure.
[ 1007.870700][ T4340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1007.884237][ T4340] CPU: 0 PID: 4340 Comm: syz.1.10598 Not tainted syzkaller #0
[ 1007.891705][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1007.901749][ T4340] Call Trace:
[ 1007.905016][ T4340]  <TASK>
[ 1007.907932][ T4340]  dump_stack_lvl+0x188/0x250
[ 1007.912601][ T4340]  ? show_regs_print_info+0x20/0x20
[ 1007.917784][ T4340]  ? load_image+0x410/0x410
[ 1007.922271][ T4340]  ? __lock_acquire+0x7b50/0x7b50
[ 1007.927281][ T4340]  ? __lock_acquire+0x7b50/0x7b50
[ 1007.932293][ T4340]  should_fail+0x383/0x4b0
[ 1007.936697][ T4340]  _copy_from_user+0x2e/0x170
[ 1007.941364][ T4340]  ____sys_sendmsg+0x313/0x8f0
[ 1007.946118][ T4340]  ? __sys_sendmsg_sock+0x30/0x30
[ 1007.951129][ T4340]  ? import_iovec+0x6f/0xa0
[ 1007.955616][ T4340]  ___sys_sendmsg+0x236/0x2e0
[ 1007.960279][ T4340]  ? __sys_sendmsg+0x290/0x290
[ 1007.965051][ T4340]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1007.969889][ T4340]  ? __x64_sys_sendmsg+0x80/0x80
[ 1007.974805][ T4340]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1007.980776][ T4340]  ? lockdep_hardirqs_on+0x94/0x140
[ 1007.985958][ T4340]  do_syscall_64+0x4c/0xa0
[ 1007.990353][ T4340]  ? clear_bhb_loop+0x30/0x80
[ 1007.995013][ T4340]  ? clear_bhb_loop+0x30/0x80
[ 1007.999674][ T4340]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1008.005548][ T4340] RIP: 0033:0x7fd1c9d24e59
[ 1008.009947][ T4340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1008.029549][ T4340] RSP: 002b:00007fd1c7f7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1008.037963][ T4340] RAX: ffffffffffffffda RBX: 00007fd1c9facfa0 RCX: 00007fd1c9d24e59
[ 1008.045933][ T4340] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1008.053894][ T4340] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[ 1008.061853][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1008.069807][ T4340] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[ 1008.077775][ T4340]  </TASK>
[ 1008.094041][ T4341] FAULT_INJECTION: forcing a failure.
[ 1008.094041][ T4341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1008.166439][ T4334] IPv6: Can't replace route, no match found
[ 1008.166888][ T4341] CPU: 1 PID: 4341 Comm: syz.2.10596 Not tainted syzkaller #0
[ 1008.179808][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1008.189865][ T4341] Call Trace:
[ 1008.193135][ T4341]  <TASK>
[ 1008.196055][ T4341]  dump_stack_lvl+0x188/0x250
[ 1008.200729][ T4341]  ? show_regs_print_info+0x20/0x20
[ 1008.205920][ T4341]  ? load_image+0x410/0x410
[ 1008.210413][ T4341]  ? __lock_acquire+0x7b50/0x7b50
[ 1008.215421][ T4341]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1008.221642][ T4341]  ? ktime_get_real_ts64+0x440/0x440
[ 1008.226911][ T4341]  should_fail+0x383/0x4b0
[ 1008.231312][ T4341]  _copy_from_user+0x2e/0x170
[ 1008.236008][ T4341]  __sys_bpf+0x26d/0x6f0
[ 1008.240238][ T4341]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1008.245605][ T4341]  __x64_sys_bpf+0x78/0x90
[ 1008.250004][ T4341]  do_syscall_64+0x4c/0xa0
[ 1008.254403][ T4341]  ? clear_bhb_loop+0x30/0x80
[ 1008.259058][ T4341]  ? clear_bhb_loop+0x30/0x80
[ 1008.263716][ T4341]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1008.269590][ T4341] RIP: 0033:0x7f0dfbd25e59
[ 1008.273988][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1008.293576][ T4341] RSP: 002b:00007f0df9f5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1008.301975][ T4341] RAX: ffffffffffffffda RBX: 00007f0dfbfae090 RCX: 00007f0dfbd25e59
[ 1008.309930][ T4341] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[ 1008.317885][ T4341] RBP: 00007f0df9f5d090 R08: 0000000000000000 R09: 0000000000000000
[ 1008.325836][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1008.333788][ T4341] R13: 00007f0dfbfae128 R14: 00007f0dfbfae090 R15: 00007ffc4d5f6368
[ 1008.341750][ T4341]  </TASK>
[ 1008.385692][ T4348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10601'.
[ 1008.447085][ T4346] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.10600'.
[ 1008.474355][ T4350] netlink: 7862 bytes leftover after parsing attributes in process `syz.4.10603'.
[ 1009.109276][ T4385] netlink: 'syz.4.10613': attribute type 46 has an invalid length.
[ 1009.147616][ T4385] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10613'.
[ 1009.204940][ T4388] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.10615'.
[ 1009.218368][ T4390] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.10616'.
[ 1009.629443][ T4416] FAULT_INJECTION: forcing a failure.
[ 1009.629443][ T4416] name failslab, interval 1, probability 0, space 0, times 0
[ 1009.660123][ T4416] CPU: 1 PID: 4416 Comm: syz.3.10626 Not tainted syzkaller #0
[ 1009.667615][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1009.677675][ T4416] Call Trace:
[ 1009.680956][ T4416]  <TASK>
[ 1009.683890][ T4416]  dump_stack_lvl+0x188/0x250
[ 1009.688587][ T4416]  ? show_regs_print_info+0x20/0x20
[ 1009.693796][ T4416]  ? load_image+0x410/0x410
[ 1009.698314][ T4416]  ? __might_sleep+0xf0/0xf0
[ 1009.702916][ T4416]  ? __lock_acquire+0x7b50/0x7b50
[ 1009.707946][ T4416]  ? netlink_insert+0xe90/0x11f0
[ 1009.712909][ T4416]  should_fail+0x383/0x4b0
[ 1009.717339][ T4416]  should_failslab+0x5/0x20
[ 1009.721848][ T4416]  slab_pre_alloc_hook+0x51/0xc0
[ 1009.726796][ T4416]  kmem_cache_alloc_node+0x47/0x2c0
[ 1009.731998][ T4416]  ? __alloc_skb+0xf4/0x750
[ 1009.736513][ T4416]  __alloc_skb+0xf4/0x750
[ 1009.740854][ T4416]  netlink_sendmsg+0x654/0xbe0
[ 1009.745640][ T4416]  ? netlink_getsockopt+0x570/0x570
[ 1009.750851][ T4416]  ? aa_sock_msg_perm+0x94/0x150
[ 1009.755800][ T4416]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1009.761090][ T4416]  ? security_socket_sendmsg+0x7c/0xa0
[ 1009.766554][ T4416]  ? netlink_getsockopt+0x570/0x570
[ 1009.771762][ T4416]  ____sys_sendmsg+0x5be/0x8f0
[ 1009.776539][ T4416]  ? __sys_sendmsg_sock+0x30/0x30
[ 1009.781577][ T4416]  ? import_iovec+0x6f/0xa0
[ 1009.786090][ T4416]  ___sys_sendmsg+0x236/0x2e0
[ 1009.790780][ T4416]  ? __sys_sendmsg+0x290/0x290
[ 1009.795561][ T4416]  ? trace_event_raw_event_lock+0x250/0x250
[ 1009.801483][ T4416]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1009.806343][ T4416]  ? __x64_sys_sendmsg+0x80/0x80
[ 1009.811283][ T4416]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1009.817285][ T4416]  ? lockdep_hardirqs_on+0x94/0x140
[ 1009.822494][ T4416]  do_syscall_64+0x4c/0xa0
[ 1009.826920][ T4416]  ? clear_bhb_loop+0x30/0x80
[ 1009.831599][ T4416]  ? clear_bhb_loop+0x30/0x80
[ 1009.836282][ T4416]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1009.842176][ T4416] RIP: 0033:0x7f5cf676ce59
[ 1009.846598][ T4416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1009.866199][ T4416] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1009.874607][ T4416] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[ 1009.882563][ T4416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1009.890519][ T4416] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1009.898476][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1009.906429][ T4416] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[ 1009.914405][ T4416]  </TASK>
[ 1011.225366][ T4467] IPv6: Can't replace route, no match found
[ 1011.785172][ T4499] IPv6: Can't replace route, no match found
[ 1011.912377][ T4514] IPv6: Can't replace route, no match found
[ 1012.451642][ T4547] __nla_validate_parse: 7 callbacks suppressed
[ 1012.451659][ T4547] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.10669'.
[ 1012.482964][ T4548] IPv6: Can't replace route, no match found
[ 1012.496870][ T4550] IPv6: Can't replace route, no match found
[ 1012.596285][ T4554] netlink: 'syz.2.10674': attribute type 2 has an invalid length.
[ 1012.630071][ T4554] netlink: 'syz.2.10674': attribute type 1 has an invalid length.
[ 1012.656070][ T4554] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10674'.
[ 1012.778375][ T4563] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10677'.
[ 1013.289730][ T4596] IPv6: Can't replace route, no match found
[ 1013.367008][ T4601] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10688'.
[ 1014.018603][ T4640] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.10698'.
[ 1014.063378][ T4642] FAULT_INJECTION: forcing a failure.
[ 1014.063378][ T4642] name failslab, interval 1, probability 0, space 0, times 0
[ 1014.112197][ T4642] CPU: 1 PID: 4642 Comm: syz.3.10699 Not tainted syzkaller #0
[ 1014.119692][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1014.129746][ T4642] Call Trace:
[ 1014.133027][ T4642]  <TASK>
[ 1014.135959][ T4642]  dump_stack_lvl+0x188/0x250
[ 1014.140649][ T4642]  ? show_regs_print_info+0x20/0x20
[ 1014.145853][ T4642]  ? load_image+0x410/0x410
[ 1014.150365][ T4642]  ? perf_trace_lock+0xe4/0x390
[ 1014.155221][ T4642]  ? perf_trace_lock+0xe4/0x390
[ 1014.160084][ T4642]  should_fail+0x383/0x4b0
[ 1014.164513][ T4642]  should_failslab+0x5/0x20
[ 1014.169015][ T4642]  slab_pre_alloc_hook+0x51/0xc0
[ 1014.173954][ T4642]  ? skb_clone+0x1bd/0x350
[ 1014.178377][ T4642]  kmem_cache_alloc+0x3d/0x280
[ 1014.183153][ T4642]  skb_clone+0x1bd/0x350
[ 1014.187411][ T4642]  __netlink_deliver_tap+0x3cb/0x7c0
[ 1014.192721][ T4642]  netlink_deliver_tap+0x16c/0x180
[ 1014.197840][ T4642]  netlink_unicast+0x759/0x940
[ 1014.202621][ T4642]  netlink_sendmsg+0x8ba/0xbe0
[ 1014.207394][ T4642]  ? netlink_getsockopt+0x570/0x570
[ 1014.212591][ T4642]  ? aa_sock_msg_perm+0x94/0x150
[ 1014.217530][ T4642]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1014.222856][ T4642]  ? security_socket_sendmsg+0x7c/0xa0
[ 1014.228317][ T4642]  ? netlink_getsockopt+0x570/0x570
[ 1014.233514][ T4642]  ____sys_sendmsg+0x5be/0x8f0
[ 1014.238287][ T4642]  ? __sys_sendmsg_sock+0x30/0x30
[ 1014.243322][ T4642]  ? import_iovec+0x6f/0xa0
[ 1014.247838][ T4642]  ___sys_sendmsg+0x236/0x2e0
[ 1014.252516][ T4642]  ? __sys_sendmsg+0x290/0x290
[ 1014.257282][ T4642]  ? trace_event_raw_event_lock+0x250/0x250
[ 1014.263200][ T4642]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1014.268048][ T4642]  ? __x64_sys_sendmsg+0x80/0x80
[ 1014.272991][ T4642]  ? syscall_enter_from_user_mode+0x2a/0x70
[ 1014.278886][ T4642]  do_syscall_64+0x4c/0xa0
[ 1014.283301][ T4642]  ? clear_bhb_loop+0x30/0x80
[ 1014.287975][ T4642]  ? clear_bhb_loop+0x30/0x80
[ 1014.292648][ T4642]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1014.298536][ T4642] RIP: 0033:0x7f5cf676ce59
[ 1014.302951][ T4642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.322550][ T4642] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1014.330958][ T4642] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[ 1014.338923][ T4642] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000008
[ 1014.346886][ T4642] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1014.354849][ T4642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1014.362812][ T4642] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[ 1014.370795][ T4642]  </TASK>
[ 1014.381979][ T4642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10699'.
[ 1014.848545][ T4656] IPv6: Can't replace route, no match found
[ 1014.944340][ T4663] sctp: [Deprecated]: syz.2.10705 (pid 4663) Use of int in max_burst socket option deprecated.
[ 1014.944340][ T4663] Use struct sctp_assoc_value instead
[ 1015.249929][ T4682] IPv6: Can't replace route, no match found
[ 1015.467040][ T4690] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10712'.
[ 1015.706470][ T4697] FAULT_INJECTION: forcing a failure.
[ 1015.706470][ T4697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1015.709098][ T4701] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.10716'.
[ 1015.771664][ T4700] netlink: 'syz.3.10717': attribute type 33 has an invalid length.
[ 1015.795432][ T4700] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10717'.
[ 1015.809453][ T4697] CPU: 0 PID: 4697 Comm: syz.2.10715 Not tainted syzkaller #0
[ 1015.816942][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1015.827015][ T4697] Call Trace:
[ 1015.830306][ T4697]  <TASK>
[ 1015.833250][ T4697]  dump_stack_lvl+0x188/0x250
[ 1015.837962][ T4697]  ? show_regs_print_info+0x20/0x20
[ 1015.843188][ T4697]  ? load_image+0x410/0x410
[ 1015.847723][ T4697]  ? __lock_acquire+0x7b50/0x7b50
[ 1015.852772][ T4697]  ? unix_ioctl+0x255/0x6a0
[ 1015.857306][ T4697]  should_fail+0x383/0x4b0
[ 1015.861759][ T4697]  _copy_from_user+0x2e/0x170
[ 1015.866468][ T4697]  sock_do_ioctl+0x18c/0x320
[ 1015.871083][ T4697]  ? sock_show_fdinfo+0xb0/0xb0
[ 1015.876022][ T4697]  sock_ioctl+0x48a/0x700
[ 1015.880378][ T4697]  ? sock_poll+0x420/0x420
[ 1015.884840][ T4697]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1015.889787][ T4697]  ? security_file_ioctl+0x7c/0xa0
[ 1015.894917][ T4697]  ? sock_poll+0x420/0x420
[ 1015.899358][ T4697]  __se_sys_ioctl+0xfa/0x170
[ 1015.903987][ T4697]  do_syscall_64+0x4c/0xa0
[ 1015.908423][ T4697]  ? clear_bhb_loop+0x30/0x80
[ 1015.913115][ T4697]  ? clear_bhb_loop+0x30/0x80
[ 1015.917816][ T4697]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1015.923719][ T4697] RIP: 0033:0x7f0dfbd25e59
[ 1015.928132][ T4697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1015.947733][ T4697] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1015.956146][ T4697] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[ 1015.964216][ T4697] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000018
[ 1015.972198][ T4697] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1015.980176][ T4697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1015.988142][ T4697] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[ 1015.996145][ T4697]  </TASK>
[ 1016.416592][ T4718] sctp: [Deprecated]: syz.1.10724 (pid 4718) Use of int in max_burst socket option deprecated.
[ 1016.416592][ T4718] Use struct sctp_assoc_value instead
[ 1016.448142][ T4719] IPv6: Can't replace route, no match found
[ 1016.718211][ T4733] IPv6: Can't replace route, no match found
[ 1017.174477][ T4751] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10734'.
[ 1017.299726][ T4760] netlink: 'syz.2.10739': attribute type 3 has an invalid length.
[ 1017.529209][ T4771] IPv6: Can't replace route, no match found
[ 1017.582498][ T4775] netlink: 'syz.3.10743': attribute type 29 has an invalid length.
[ 1017.602228][ T4775] netlink: 'syz.3.10743': attribute type 29 has an invalid length.
[ 1017.619482][ T4768] netlink: set zone limit has 8 unknown bytes
[ 1017.681468][ T4778] netlink: 'syz.3.10743': attribute type 29 has an invalid length.
[ 1017.699533][ T4775] netlink: 'syz.3.10743': attribute type 29 has an invalid length.
[ 1017.722468][ T4775] netlink: 'syz.3.10743': attribute type 29 has an invalid length.
[ 1017.847195][ T4787] sctp: [Deprecated]: syz.3.10746 (pid 4787) Use of int in max_burst socket option deprecated.
[ 1017.847195][ T4787] Use struct sctp_assoc_value instead
[ 1017.867863][ T4789] netlink: 'syz.2.10745': attribute type 10 has an invalid length.
[ 1017.879548][ T4789] __nla_validate_parse: 3 callbacks suppressed
[ 1017.879561][ T4789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10745'.
[ 1017.918876][ T4789] device team0 entered promiscuous mode
[ 1017.932409][ T4789] device team_slave_0 entered promiscuous mode
[ 1017.948300][ T4789] device team_slave_1 entered promiscuous mode
[ 1017.958226][ T4789] bridge0: port 3(team0) entered blocking state
[ 1017.969833][ T4789] bridge0: port 3(team0) entered disabled state
[ 1017.979338][ T4789] bridge0: port 3(team0) entered blocking state
[ 1017.985696][ T4789] bridge0: port 3(team0) entered forwarding state
[ 1017.994666][ T4792] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10748'.
[ 1018.011513][ T4787] FAULT_INJECTION: forcing a failure.
[ 1018.011513][ T4787] name failslab, interval 1, probability 0, space 0, times 0
[ 1018.045357][ T4787] CPU: 1 PID: 4787 Comm: syz.3.10746 Not tainted syzkaller #0
[ 1018.052839][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1018.062896][ T4787] Call Trace:
[ 1018.066178][ T4787]  <TASK>
[ 1018.069116][ T4787]  dump_stack_lvl+0x188/0x250
[ 1018.073807][ T4787]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1018.079964][ T4787]  ? show_regs_print_info+0x20/0x20
[ 1018.085160][ T4787]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1018.091331][ T4787]  should_fail+0x383/0x4b0
[ 1018.095760][ T4787]  should_failslab+0x5/0x20
[ 1018.100311][ T4787]  slab_pre_alloc_hook+0x51/0xc0
[ 1018.105253][ T4787]  ? __nf_conntrack_alloc+0x93/0x370
[ 1018.110545][ T4787]  kmem_cache_alloc+0x3d/0x280
[ 1018.115317][ T4787]  __nf_conntrack_alloc+0x93/0x370
[ 1018.120434][ T4787]  init_conntrack+0x2fd/0x1530
[ 1018.125202][ T4787]  ? get_l4proto+0x670/0x670
[ 1018.129802][ T4787]  ? early_drop+0x800/0x800
[ 1018.134312][ T4787]  ? nf_conntrack_find_get+0x640/0x640
[ 1018.139775][ T4787]  ? __siphash_unaligned+0x286/0x3d0
[ 1018.145073][ T4787]  nf_conntrack_in+0xd76/0x17b0
[ 1018.149949][ T4787]  ? nf_ct_pernet+0x240/0x240
[ 1018.154645][ T4787]  ? ip6t_alloc_initial_table+0x640/0x640
[ 1018.160370][ T4787]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1018.166529][ T4787]  ? lockdep_hardirqs_on+0x94/0x140
[ 1018.171732][ T4787]  ? ipv6_defrag+0x2d2/0x3a0
[ 1018.176332][ T4787]  ? ipv6_conntrack_in+0x20/0x20
[ 1018.181268][ T4787]  nf_hook_slow+0xb9/0x200
[ 1018.185724][ T4787]  rawv6_send_hdrinc+0x1509/0x1650
[ 1018.190850][ T4787]  ? rawv6_probe_proto_opt+0x300/0x300
[ 1018.196314][ T4787]  ? rcu_lock_release+0x20/0x20
[ 1018.201173][ T4787]  ? rawv6_sendmsg+0x1160/0x1710
[ 1018.206114][ T4787]  rawv6_sendmsg+0x11a6/0x1710
[ 1018.210897][ T4787]  ? compat_rawv6_ioctl+0x60/0x60
[ 1018.215945][ T4787]  ? aa_af_perm+0x340/0x340
[ 1018.220446][ T4787]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[ 1018.226869][ T4787]  ? sock_rps_record_flow+0x17/0x3b0
[ 1018.232158][ T4787]  ? inet_sendmsg+0x7a/0x2a0
[ 1018.236748][ T4787]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1018.242040][ T4787]  ? inet_send_prepare+0x250/0x250
[ 1018.247156][ T4787]  ____sys_sendmsg+0x5be/0x8f0
[ 1018.251929][ T4787]  ? __sys_sendmsg_sock+0x30/0x30
[ 1018.256961][ T4787]  ? import_iovec+0x6f/0xa0
[ 1018.261470][ T4787]  ___sys_sendmsg+0x236/0x2e0
[ 1018.266156][ T4787]  ? __sys_sendmsg+0x290/0x290
[ 1018.270935][ T4787]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1018.277202][ T4787]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1018.282062][ T4787]  ? __x64_sys_sendmsg+0x80/0x80
[ 1018.286996][ T4787]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1018.293000][ T4787]  ? lockdep_hardirqs_on+0x94/0x140
[ 1018.298208][ T4787]  do_syscall_64+0x4c/0xa0
[ 1018.302625][ T4787]  ? clear_bhb_loop+0x30/0x80
[ 1018.307301][ T4787]  ? clear_bhb_loop+0x30/0x80
[ 1018.311976][ T4787]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1018.317866][ T4787] RIP: 0033:0x7f5cf676ce59
[ 1018.322279][ T4787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1018.341882][ T4787] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1018.350297][ T4787] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[ 1018.358267][ T4787] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1018.366246][ T4787] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1018.374211][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1018.382180][ T4787] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[ 1018.390166][ T4787]  </TASK>
[ 1018.524813][ T4805] netlink: 15730 bytes leftover after parsing attributes in process `syz.5.10751'.
[ 1018.547922][ T4809] netlink: 'syz.1.10754': attribute type 29 has an invalid length.
[ 1018.556224][ T4809] netlink: 'syz.1.10754': attribute type 29 has an invalid length.
[ 1018.706202][ T4815] IPv6: Can't replace route, no match found
[ 1019.068167][ T4833] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.10764'.
[ 1019.204936][ T4838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10765'.
[ 1019.226325][ T4842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1019.287794][ T4845] netlink: 15750 bytes leftover after parsing attributes in process `syz.2.10768'.
[ 1019.648889][ T4863] IPv6: Can't replace route, no match found
[ 1019.814641][ T4872] FAULT_INJECTION: forcing a failure.
[ 1019.814641][ T4872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1019.834232][ T4872] CPU: 0 PID: 4872 Comm: syz.4.10777 Not tainted syzkaller #0
[ 1019.841714][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1019.851770][ T4872] Call Trace:
[ 1019.855055][ T4872]  <TASK>
[ 1019.857988][ T4872]  dump_stack_lvl+0x188/0x250
[ 1019.862672][ T4872]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1019.868836][ T4872]  ? show_regs_print_info+0x20/0x20
[ 1019.874045][ T4872]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1019.880219][ T4872]  should_fail+0x383/0x4b0
[ 1019.884651][ T4872]  _copy_to_user+0x2e/0x130
[ 1019.889171][ T4872]  bpf_test_finish+0x215/0x2f0
[ 1019.893944][ T4872]  ? convert_skb_to___skb+0x360/0x360
[ 1019.899328][ T4872]  ? xdp_convert_buff_to_md+0x154/0x1e0
[ 1019.904882][ T4872]  bpf_prog_test_run_xdp+0x61b/0x900
[ 1019.910182][ T4872]  ? dev_put+0x70/0x70
[ 1019.914274][ T4872]  ? dev_put+0x70/0x70
[ 1019.918353][ T4872]  bpf_prog_test_run+0x31c/0x390
[ 1019.923304][ T4872]  __sys_bpf+0x5a5/0x6f0
[ 1019.927555][ T4872]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1019.932958][ T4872]  __x64_sys_bpf+0x78/0x90
[ 1019.937388][ T4872]  do_syscall_64+0x4c/0xa0
[ 1019.941810][ T4872]  ? clear_bhb_loop+0x30/0x80
[ 1019.946492][ T4872]  ? clear_bhb_loop+0x30/0x80
[ 1019.950312][ T4880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10780'.
[ 1019.951173][ T4872]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1019.966069][ T4872] RIP: 0033:0x7efd9d82de59
[ 1019.970490][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1019.990101][ T4872] RSP: 002b:00007efd9ba86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1019.998527][ T4872] RAX: ffffffffffffffda RBX: 00007efd9dab5fa0 RCX: 00007efd9d82de59
[ 1020.006504][ T4872] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[ 1020.014479][ T4872] RBP: 00007efd9ba86090 R08: 0000000000000000 R09: 0000000000000000
[ 1020.022456][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1020.030433][ T4872] R13: 00007efd9dab6038 R14: 00007efd9dab5fa0 R15: 00007ffd980a89c8
[ 1020.038419][ T4872]  </TASK>
[ 1020.149133][ T4884] netlink: 15750 bytes leftover after parsing attributes in process `syz.4.10781'.
[ 1020.478412][ T4908] IPv6: Can't replace route, no match found
[ 1023.654852][ T4930] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10795'.
[ 1023.962766][ T4944] netlink: 15730 bytes leftover after parsing attributes in process `syz.3.10800'.
[ 1024.815247][ T4954] FAULT_INJECTION: forcing a failure.
[ 1024.815247][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1024.833694][ T4954] CPU: 1 PID: 4954 Comm: syz.2.10803 Not tainted syzkaller #0
[ 1024.841188][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1024.851246][ T4954] Call Trace:
[ 1024.854525][ T4954]  <TASK>
[ 1024.857458][ T4954]  dump_stack_lvl+0x188/0x250
[ 1024.862154][ T4954]  ? show_regs_print_info+0x20/0x20
[ 1024.867358][ T4954]  ? load_image+0x410/0x410
[ 1024.871870][ T4954]  ? __lock_acquire+0x7b50/0x7b50
[ 1024.876907][ T4954]  should_fail+0x383/0x4b0
[ 1024.881340][ T4954]  _copy_from_user+0x2e/0x170
[ 1024.886025][ T4954]  kstrtouint_from_user+0xd3/0x220
[ 1024.891143][ T4954]  ? kstrtol_from_user+0x2a0/0x2a0
[ 1024.896276][ T4954]  proc_fail_nth_write+0x8b/0x200
[ 1024.901307][ T4954]  ? proc_fail_nth_read+0x220/0x220
[ 1024.906509][ T4954]  ? common_file_perm+0x171/0x1c0
[ 1024.911544][ T4954]  ? proc_fail_nth_read+0x220/0x220
[ 1024.916749][ T4954]  vfs_write+0x304/0xd70
[ 1024.921008][ T4954]  ? file_end_write+0x250/0x250
[ 1024.925881][ T4954]  ? mutex_lock_nested+0x17/0x20
[ 1024.930821][ T4954]  ? __fdget_pos+0x2bf/0x370
[ 1024.935420][ T4954]  ? ksys_write+0x70/0x260
[ 1024.939846][ T4954]  ksys_write+0x153/0x260
[ 1024.944187][ T4954]  ? __ia32_sys_read+0x80/0x80
[ 1024.948957][ T4954]  ? lockdep_hardirqs_on+0x94/0x140
[ 1024.954163][ T4954]  do_syscall_64+0x4c/0xa0
[ 1024.958579][ T4954]  ? clear_bhb_loop+0x30/0x80
[ 1024.963255][ T4954]  ? clear_bhb_loop+0x30/0x80
[ 1024.967935][ T4954]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1024.973833][ T4954] RIP: 0033:0x7f0dfbce668e
[ 1024.978253][ T4954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1024.997862][ T4954] RSP: 002b:00007f0df9f3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1025.006286][ T4954] RAX: ffffffffffffffda RBX: 00007f0df9f3c6c0 RCX: 00007f0dfbce668e
[ 1025.014260][ T4954] RDX: 0000000000000001 RSI: 00007f0df9f3c0a0 RDI: 000000000000000f
[ 1025.022231][ T4954] RBP: 00007f0df9f3c090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.030203][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.038176][ T4954] R13: 00007f0dfbfae218 R14: 00007f0dfbfae180 R15: 00007ffc4d5f6368
[ 1025.046169][ T4954]  </TASK>
[ 1026.904303][ T4961] IPv6: Can't replace route, no match found
[ 1027.017846][ T4968] validate_nla: 9 callbacks suppressed
[ 1027.017878][ T4968] netlink: 'syz.2.10810': attribute type 2 has an invalid length.
[ 1027.057797][ T4968] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10810'.
[ 1027.074769][ T4968] netlink: 'syz.2.10810': attribute type 10 has an invalid length.
[ 1027.107570][ T4968] device hsr0 entered promiscuous mode
[ 1027.648040][ T5015] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.10824'.
[ 1027.793231][ T5019] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10826'.
[ 1027.941764][ T5027] IPv6: Can't replace route, no match found
[ 1028.179320][ T5041] netlink: 15730 bytes leftover after parsing attributes in process `syz.4.10837'.
[ 1028.207187][ T5039] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.10836'.
[ 1028.519060][ T5052] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10840'.
[ 1028.655333][ T5067] IPv6: Can't replace route, no match found
[ 1029.010264][ T5088] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.10852'.
[ 1029.043798][ T5092] netlink: 15750 bytes leftover after parsing attributes in process `syz.3.10853'.
[ 1029.152410][ T5099] IPv6: Can't replace route, no match found
[ 1029.709115][ T5127] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.10865'.
[ 1029.793725][ T5132] netlink: 15794 bytes leftover after parsing attributes in process `syz.3.10867'.
[ 1029.923421][ T5140] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10870'.
[ 1030.078006][ T5151] IPv6: Can't replace route, no match found
[ 1030.193732][ T5161] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.10877'.
[ 1030.398230][ T5177] netlink: 15794 bytes leftover after parsing attributes in process `syz.4.10883'.
[ 1030.905997][ T5201] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.10890'.
[ 1031.114866][ T5215] netlink: 15794 bytes leftover after parsing attributes in process `syz.3.10895'.
[ 1031.266328][ T5222] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10898'.
[ 1031.578509][ T5237] IPv6: Can't replace route, no match found
[ 1032.887760][ T5310] IPv6: Can't replace route, no match found
[ 1034.081431][ T5381] __nla_validate_parse: 8 callbacks suppressed
[ 1034.081450][ T5381] netlink: 199800 bytes leftover after parsing attributes in process `syz.5.10960'.
[ 1034.241594][ T5394] IPv6: Can't replace route, no match found
[ 1034.276900][ T5397] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.10966'.
[ 1034.569167][ T5423] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.10975'.
[ 1034.915716][ T5434] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.10979'.
[ 1035.129900][ T5444] IPv6: Can't replace route, no match found
[ 1035.322471][ T5458] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.10987'.
[ 1035.596656][ T5486] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.10997'.
[ 1035.619438][ T5482] IPv6: Can't replace route, no match found
[ 1035.875227][ T5498] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11002'.
[ 1036.104261][ T5517] IPv6: Can't replace route, no match found
[ 1036.540032][ T5535] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.11012'.
[ 1036.742955][ T5541] netlink: 'syz.5.11015': attribute type 21 has an invalid length.
[ 1036.756417][ T5541] netlink: 'syz.5.11015': attribute type 6 has an invalid length.
[ 1036.764733][ T5541] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11015'.
[ 1036.792085][ T5546] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11017'.
[ 1037.560193][ T5540] delete_channel: no stack
[ 1037.644784][ T5594] IPv6: Can't replace route, no match found
[ 1039.380429][ T5687] IPv6: Can't replace route, no match found
[ 1039.827412][ T5706] __nla_validate_parse: 4 callbacks suppressed
[ 1039.827423][ T5706] netlink: 16046 bytes leftover after parsing attributes in process `syz.5.11068'.
[ 1039.871914][ T5709] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11069'.
[ 1040.945365][ T5746] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11081'.
[ 1041.204444][ T5761] IPv6: Can't replace route, no match found
[ 1041.431236][ T5776] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.11090'.
[ 1042.202985][ T5804] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11099'.
[ 1042.662833][ T5829] IPv6: Can't replace route, no match found
[ 1043.008388][ T5845] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.11111'.
[ 1043.097876][ T5849] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11113'.
[ 1043.233737][ T5854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11115'.
[ 1043.729021][ T5877] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.11120'.
[ 1043.747577][ T5877] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.11120'.
[ 1044.282504][ T5904] IPv6: Can't replace route, no match found
[ 1045.376269][ T5956] __nla_validate_parse: 3 callbacks suppressed
[ 1045.376282][ T5956] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.11148'.
[ 1045.557913][ T5970] IPv6: Can't replace route, no match found
[ 1046.248266][ T5999] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11162'.
[ 1046.346263][ T6011] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.11165'.
[ 1046.965957][ T6053] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11180'.
[ 1047.009329][ T6056] IPv6: Can't replace route, no match found
[ 1047.041696][ T6059] FAULT_INJECTION: forcing a failure.
[ 1047.041696][ T6059] name failslab, interval 1, probability 0, space 0, times 0
[ 1047.055060][ T6059] CPU: 1 PID: 6059 Comm: syz.2.11183 Not tainted syzkaller #0
[ 1047.062540][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1047.072605][ T6059] Call Trace:
[ 1047.075887][ T6059]  <TASK>
[ 1047.078823][ T6059]  dump_stack_lvl+0x188/0x250
[ 1047.083521][ T6059]  ? show_regs_print_info+0x20/0x20
[ 1047.088734][ T6059]  ? load_image+0x410/0x410
[ 1047.093257][ T6059]  ? __might_sleep+0xf0/0xf0
[ 1047.097866][ T6059]  ? __lock_acquire+0x7b50/0x7b50
[ 1047.102915][ T6059]  should_fail+0x383/0x4b0
[ 1047.107357][ T6059]  should_failslab+0x5/0x20
[ 1047.111868][ T6059]  slab_pre_alloc_hook+0x51/0xc0
[ 1047.116821][ T6059]  __kmalloc+0x6b/0x340
[ 1047.120987][ T6059]  ? tomoyo_realpath_from_path+0xed/0x5e0
[ 1047.126737][ T6059]  tomoyo_realpath_from_path+0xed/0x5e0
[ 1047.132325][ T6059]  tomoyo_path_number_perm+0x251/0x6b0
[ 1047.137801][ T6059]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1047.143271][ T6059]  ? perf_trace_lock+0x301/0x390
[ 1047.148318][ T6059]  security_file_ioctl+0x6c/0xa0
[ 1047.153275][ T6059]  __se_sys_ioctl+0x48/0x170
[ 1047.157878][ T6059]  do_syscall_64+0x4c/0xa0
[ 1047.162298][ T6059]  ? clear_bhb_loop+0x30/0x80
[ 1047.166986][ T6059]  ? clear_bhb_loop+0x30/0x80
[ 1047.171681][ T6059]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1047.177585][ T6059] RIP: 0033:0x7f0dfbd25e59
[ 1047.182014][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.201723][ T6059] RSP: 002b:00007f0df9f7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1047.210133][ T6059] RAX: ffffffffffffffda RBX: 00007f0dfbfadfa0 RCX: 00007f0dfbd25e59
[ 1047.218093][ T6059] RDX: 0000000000000000 RSI: 00000000800454e1 RDI: 0000000000000004
[ 1047.226054][ T6059] RBP: 00007f0df9f7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1047.234017][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1047.241976][ T6059] R13: 00007f0dfbfae038 R14: 00007f0dfbfadfa0 R15: 00007ffc4d5f6368
[ 1047.249962][ T6059]  </TASK>
[ 1047.269184][ T6066] netlink: 'syz.5.11185': attribute type 10 has an invalid length.
[ 1047.286040][ T6059] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1047.298973][ T6066] team0: Device wlan1 is of different type
[ 1047.351254][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1047.925405][ T6104] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11195'.
[ 1047.955341][ T6109] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11197'.
[ 1048.532619][ T6131] IPv6: Can't replace route, no match found
[ 1048.756720][ T6144] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11209'.
[ 1048.818497][ T6149] netlink: 'syz.1.11211': attribute type 41 has an invalid length.
[ 1049.319743][ T6181] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.11221'.
[ 1049.435971][ T6183] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11223'.
[ 1050.255808][ T6215] IPv6: Can't replace route, no match found
[ 1050.481560][ T6228] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.11237'.
[ 1050.937698][ T6248] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11244'.
[ 1051.728519][ T6277] netlink: 199556 bytes leftover after parsing attributes in process `syz.5.11252'.
[ 1051.941300][ T6288] device syzkaller0 entered promiscuous mode
[ 1052.141931][ T6296] IPv6: Can't replace route, no match found
[ 1052.289609][ T6311] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.11264'.
[ 1052.426881][ T6317] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.11266'.
[ 1053.467804][ T6341] chnl_net:caif_netlink_parms(): no params data found
[ 1053.563255][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.574835][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.583537][ T6341] device bridge_slave_0 entered promiscuous mode
[ 1053.593349][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.602265][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.610782][ T6341] device bridge_slave_1 entered promiscuous mode
[ 1053.647839][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.667117][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.718870][ T6341] team0: Port device team_slave_0 added
[ 1053.732380][ T6341] team0: Port device team_slave_1 added
[ 1053.753477][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1053.760683][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1053.790299][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1053.827331][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1053.843801][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1053.877507][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.917047][ T6341] device hsr_slave_0 entered promiscuous mode
[ 1053.924946][ T6341] device hsr_slave_1 entered promiscuous mode
[ 1053.942674][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1053.976587][ T6341] Cannot create hsr debugfs directory
[ 1054.013791][ T6377] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11281'.
[ 1054.184167][ T6341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.198095][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.204468][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.289691][ T6341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.392892][ T6341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.423526][ T6383] IPv6: Can't replace route, no match found
[ 1054.447471][ T6388] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11285'.
[ 1054.474619][ T6341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.585825][ T6341] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1054.595651][ T6341] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1054.605611][ T6341] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1054.615687][ T6341] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1054.751773][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1054.785426][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1054.795090][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1054.825658][ T6341] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.855550][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1054.867858][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1054.883119][T15194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.890270][T15194] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1054.910241][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1054.926896][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1054.940794][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1054.953953][T15194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.961064][T15194] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1054.969777][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1054.979717][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1054.996449][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1055.019733][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1055.030242][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1055.041258][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1055.050992][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1055.054199][ T6408] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11291'.
[ 1055.067278][ T6341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1055.079129][ T6341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1055.107427][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1055.118157][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1055.130062][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1055.139335][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1055.155413][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1055.311185][T14683] Bluetooth: hci4: command 0x0409 tx timeout
[ 1055.468114][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1055.488480][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1055.507688][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1055.719806][T12671] device hsr_slave_0 left promiscuous mode
[ 1055.734222][T12671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1055.747511][T12671] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1055.757775][T12671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1055.767070][T12671] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1055.778198][T12671] device veth1_vlan left promiscuous mode
[ 1055.784381][T12671] device veth0_vlan left promiscuous mode
[ 1055.886096][T12671] team0 (unregistering): Port device virt_wifi0 removed
[ 1055.919599][T12671] team0 (unregistering): Port device team_slave_1 removed
[ 1055.933283][T12671] team0 (unregistering): Port device team_slave_0 removed
[ 1056.087398][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1056.096423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1056.144338][ T6341] device veth0_vlan entered promiscuous mode
[ 1056.167568][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1056.183365][ T6451] netlink: 199800 bytes leftover after parsing attributes in process `syz.1.11302'.
[ 1056.193712][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1056.207614][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1056.230731][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1056.245030][ T6341] device veth1_vlan entered promiscuous mode
[ 1056.309713][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1056.324148][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1056.344131][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1056.362005][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1056.398964][ T6341] device veth0_macvtap entered promiscuous mode
[ 1056.428178][ T6341] device veth1_macvtap entered promiscuous mode
[ 1056.454663][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1056.472279][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1056.496088][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1056.508080][ T6463] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11305'.
[ 1056.512019][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.535038][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1056.557965][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.568205][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1056.585683][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.611119][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1056.628891][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1056.638231][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1056.656832][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1056.676982][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.697072][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1056.707995][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.727228][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1056.738003][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.754554][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1056.767336][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1056.777876][T15194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1056.790312][ T6341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.799446][ T6341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.808661][ T6341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.817859][ T6341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.983990][T15194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1057.009742][T15194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1057.031053][T15201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1057.044312][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1057.047548][T15201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1057.070299][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1057.086588][ T6480] FAULT_INJECTION: forcing a failure.
[ 1057.086588][ T6480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.130875][ T6480] CPU: 0 PID: 6480 Comm: syz.1.11309 Not tainted syzkaller #0
[ 1057.138365][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1057.148420][ T6480] Call Trace:
[ 1057.151704][ T6480]  <TASK>
[ 1057.154633][ T6480]  dump_stack_lvl+0x188/0x250
[ 1057.159322][ T6480]  ? show_regs_print_info+0x20/0x20
[ 1057.164525][ T6480]  ? load_image+0x410/0x410
[ 1057.169037][ T6480]  ? __lock_acquire+0x7b50/0x7b50
[ 1057.174080][ T6480]  should_fail+0x383/0x4b0
[ 1057.178507][ T6480]  _copy_from_user+0x2e/0x170
[ 1057.183194][ T6480]  __copy_msghdr_from_user+0xc9/0x630
[ 1057.188574][ T6480]  ? verify_lock_unused+0x140/0x140
[ 1057.193786][ T6480]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[ 1057.199074][ T6480]  ? perf_tp_event+0xa7e/0xbe0
[ 1057.203845][ T6480]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1057.209657][ T6480]  ___sys_sendmsg+0x19a/0x2e0
[ 1057.214350][ T6480]  ? __sys_sendmsg+0x290/0x290
[ 1057.219144][ T6480]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1057.223994][ T6480]  ? __x64_sys_sendmsg+0x80/0x80
[ 1057.228927][ T6480]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1057.234920][ T6480]  ? lockdep_hardirqs_on+0x94/0x140
[ 1057.240122][ T6480]  do_syscall_64+0x4c/0xa0
[ 1057.244535][ T6480]  ? clear_bhb_loop+0x30/0x80
[ 1057.249205][ T6480]  ? clear_bhb_loop+0x30/0x80
[ 1057.253875][ T6480]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1057.259764][ T6480] RIP: 0033:0x7fd1c9d24e59
[ 1057.264172][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1057.283771][ T6480] RSP: 002b:00007fd1c7f7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1057.292183][ T6480] RAX: ffffffffffffffda RBX: 00007fd1c9facfa0 RCX: 00007fd1c9d24e59
[ 1057.300155][ T6480] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[ 1057.308125][ T6480] RBP: 00007fd1c7f7d090 R08: 0000000000000000 R09: 0000000000000000
[ 1057.316089][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1057.324053][ T6480] R13: 00007fd1c9fad038 R14: 00007fd1c9facfa0 R15: 00007ffe75e991e8
[ 1057.332031][ T6480]  </TASK>
[ 1057.390960][T13031] Bluetooth: hci4: command 0x041b tx timeout
[ 1057.569860][ T6495] netlink: 199800 bytes leftover after parsing attributes in process `syz.5.11314'.
[ 1057.629695][ T6501] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.11316'.
[ 1058.628290][ T6543] netlink: 199800 bytes leftover after parsing attributes in process `syz.5.11328'.
[ 1058.696970][ T6546] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.11329'.
[ 1059.109069][ T6560] FAULT_INJECTION: forcing a failure.
[ 1059.109069][ T6560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1059.119554][ T6563] netlink: 'syz.2.11334': attribute type 10 has an invalid length.
[ 1059.178409][ T6560] CPU: 1 PID: 6560 Comm: syz.5.11333 Not tainted syzkaller #0
[ 1059.182974][ T6563] team0: Device veth1_vlan failed to register rx_handler
[ 1059.185915][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1059.185932][ T6560] Call Trace:
[ 1059.185940][ T6560]  <TASK>
[ 1059.185951][ T6560]  dump_stack_lvl+0x188/0x250
[ 1059.213882][ T6560]  ? show_regs_print_info+0x20/0x20
[ 1059.219100][ T6560]  ? load_image+0x410/0x410
[ 1059.223627][ T6560]  ? __lock_acquire+0x7b50/0x7b50
[ 1059.228670][ T6560]  should_fail+0x383/0x4b0
[ 1059.233107][ T6560]  _copy_to_user+0x2e/0x130
[ 1059.237627][ T6560]  simple_read_from_buffer+0xe3/0x150
[ 1059.243016][ T6560]  proc_fail_nth_read+0x1a6/0x220
[ 1059.248052][ T6560]  ? proc_fault_inject_write+0x310/0x310
[ 1059.253704][ T6560]  ? fsnotify_perm+0x254/0x560
[ 1059.258478][ T6560]  ? proc_fault_inject_write+0x310/0x310
[ 1059.264114][ T6560]  vfs_read+0x2ff/0xd50
[ 1059.268278][ T6560]  ? __lock_acquire+0x7b50/0x7b50
[ 1059.273314][ T6560]  ? kernel_read+0x1e0/0x1e0
[ 1059.277935][ T6560]  ? mutex_lock_nested+0x17/0x20
[ 1059.282871][ T6560]  ? __fdget_pos+0x2bf/0x370
[ 1059.287460][ T6560]  ? ksys_read+0x70/0x260
[ 1059.291799][ T6560]  ksys_read+0x153/0x260
[ 1059.296049][ T6560]  ? vfs_write+0xd70/0xd70
[ 1059.300472][ T6560]  ? lockdep_hardirqs_on+0x94/0x140
[ 1059.305676][ T6560]  do_syscall_64+0x4c/0xa0
[ 1059.310089][ T6560]  ? clear_bhb_loop+0x30/0x80
[ 1059.314762][ T6560]  ? clear_bhb_loop+0x30/0x80
[ 1059.319451][ T6560]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1059.325339][ T6560] RIP: 0033:0x7fcfdc60868e
[ 1059.329756][ T6560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1059.349366][ T6560] RSP: 002b:00007fcfda89ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1059.357787][ T6560] RAX: ffffffffffffffda RBX: 00007fcfda8a06c0 RCX: 00007fcfdc60868e
[ 1059.365758][ T6560] RDX: 000000000000000f RSI: 00007fcfda8a00a0 RDI: 0000000000000007
[ 1059.373730][ T6560] RBP: 00007fcfda8a0090 R08: 0000000000000000 R09: 0000000000000000
[ 1059.381704][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1059.389672][ T6560] R13: 00007fcfdc8d0038 R14: 00007fcfdc8cffa0 R15: 00007ffdcf3cec28
[ 1059.397668][ T6560]  </TASK>
[ 1059.469994][T14683] Bluetooth: hci4: command 0x040f tx timeout
[ 1059.708099][ T6581] netlink: 199800 bytes leftover after parsing attributes in process `syz.5.11340'.
[ 1059.765776][ T6584] netlink: 'syz.2.11341': attribute type 19 has an invalid length.
[ 1059.777675][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11341'.
[ 1059.929158][ T6594] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11342'.
[ 1060.301610][ T6609] FAULT_INJECTION: forcing a failure.
[ 1060.301610][ T6609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1060.315384][ T6609] CPU: 0 PID: 6609 Comm: syz.3.11349 Not tainted syzkaller #0
[ 1060.322871][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1060.332942][ T6609] Call Trace:
[ 1060.336241][ T6609]  <TASK>
[ 1060.339187][ T6609]  dump_stack_lvl+0x188/0x250
[ 1060.343906][ T6609]  ? show_regs_print_info+0x20/0x20
[ 1060.349127][ T6609]  ? load_image+0x410/0x410
[ 1060.353665][ T6609]  ? __lock_acquire+0x7b50/0x7b50
[ 1060.358727][ T6609]  should_fail+0x383/0x4b0
[ 1060.363182][ T6609]  _copy_from_user+0x2e/0x170
[ 1060.367896][ T6609]  __sys_bpf+0x26d/0x6f0
[ 1060.372160][ T6609]  ? perf_trace_preemptirq_template+0x2aa/0x360
[ 1060.378427][ T6609]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1060.383813][ T6609]  ? rcu_nmi_exit+0x6f/0xf0
[ 1060.388395][ T6609]  __x64_sys_bpf+0x78/0x90
[ 1060.392837][ T6609]  do_syscall_64+0x4c/0xa0
[ 1060.397267][ T6609]  ? clear_bhb_loop+0x30/0x80
[ 1060.401956][ T6609]  ? clear_bhb_loop+0x30/0x80
[ 1060.406657][ T6609]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1060.412562][ T6609] RIP: 0033:0x7f5cf676ce59
[ 1060.417001][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1060.436621][ T6609] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1060.445061][ T6609] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[ 1060.453050][ T6609] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[ 1060.461035][ T6609] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1060.469022][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1060.477007][ T6609] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[ 1060.485040][ T6609]  </TASK>
[ 1060.768871][ T6620] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11354'.
[ 1061.550271][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[ 1061.736911][ T6667] __nla_validate_parse: 1 callbacks suppressed
[ 1061.736928][ T6667] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.11365'.
[ 1061.831451][ T6669] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11367'.
[ 1062.719138][ T6703] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11378'.
[ 1062.983349][ T6715] FAULT_INJECTION: forcing a failure.
[ 1062.983349][ T6715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.050141][ T6715] CPU: 1 PID: 6715 Comm: syz.4.11382 Not tainted syzkaller #0
[ 1063.057644][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1063.067813][ T6715] Call Trace:
[ 1063.071094][ T6715]  <TASK>
[ 1063.074029][ T6715]  dump_stack_lvl+0x188/0x250
[ 1063.078720][ T6715]  ? show_regs_print_info+0x20/0x20
[ 1063.083928][ T6715]  ? load_image+0x410/0x410
[ 1063.088441][ T6715]  ? __lock_acquire+0x7b50/0x7b50
[ 1063.093475][ T6715]  ? aa_sk_perm+0x910/0x910
[ 1063.097990][ T6715]  should_fail+0x383/0x4b0
[ 1063.102425][ T6715]  _copy_from_user+0x2e/0x170
[ 1063.107114][ T6715]  sock_setsockopt+0x2e5/0x2480
[ 1063.111981][ T6715]  ? __sock_set_mark+0x150/0x150
[ 1063.116930][ T6715]  ? __lock_acquire+0x7b50/0x7b50
[ 1063.121968][ T6715]  ? aa_sk_perm+0x7dc/0x910
[ 1063.126487][ T6715]  ? aa_af_perm+0x340/0x340
[ 1063.131004][ T6715]  ? __fget_files+0x402/0x470
[ 1063.135693][ T6715]  ? aa_sock_opt_perm+0x74/0x100
[ 1063.140635][ T6715]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 1063.146188][ T6715]  ? security_socket_setsockopt+0x7a/0xa0
[ 1063.151916][ T6715]  __sys_setsockopt+0x2f6/0x3d0
[ 1063.156775][ T6715]  __x64_sys_setsockopt+0xb1/0xc0
[ 1063.161804][ T6715]  do_syscall_64+0x4c/0xa0
[ 1063.166219][ T6715]  ? clear_bhb_loop+0x30/0x80
[ 1063.170887][ T6715]  ? clear_bhb_loop+0x30/0x80
[ 1063.175554][ T6715]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1063.181440][ T6715] RIP: 0033:0x7efd9d82de59
[ 1063.185842][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.205436][ T6715] RSP: 002b:00007efd9ba86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1063.213839][ T6715] RAX: ffffffffffffffda RBX: 00007efd9dab5fa0 RCX: 00007efd9d82de59
[ 1063.221797][ T6715] RDX: 0000000000000031 RSI: 0000000000000001 RDI: 0000000000000004
[ 1063.229750][ T6715] RBP: 00007efd9ba86090 R08: 0000000000000004 R09: 0000000000000000
[ 1063.237706][ T6715] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001
[ 1063.245662][ T6715] R13: 00007efd9dab6038 R14: 00007efd9dab5fa0 R15: 00007ffd980a89c8
[ 1063.253630][ T6715]  </TASK>
[ 1063.507813][ T6732] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11386'.
[ 1063.804032][ T6736] netlink: 'syz.5.11389': attribute type 29 has an invalid length.
[ 1063.842967][ T6746] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11392'.
[ 1063.890186][ T6736] netlink: 'syz.5.11389': attribute type 29 has an invalid length.
[ 1064.090851][ T6748] Q�6�`Ҙ: renamed from lo
[ 1064.877837][ T6773] netlink: 'syz.5.11400': attribute type 7 has an invalid length.
[ 1064.930074][ T6773] netlink: 'syz.5.11400': attribute type 1 has an invalid length.
[ 1064.953891][ T6773] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.11400'.
[ 1065.035804][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.043546][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.166853][ T6781] device bridge_slave_1 left promiscuous mode
[ 1065.200679][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.255647][ T6787] netlink: 199800 bytes leftover after parsing attributes in process `syz.3.11404'.
[ 1065.268101][ T6781] device bridge_slave_0 left promiscuous mode
[ 1065.281075][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.365258][ T6785] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11403'.
[ 1065.410653][ T6784] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11403'.
[ 1065.570352][ T6798] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11407'.
[ 1066.528275][ T6837] FAULT_INJECTION: forcing a failure.
[ 1066.528275][ T6837] name failslab, interval 1, probability 0, space 0, times 0
[ 1066.556452][ T6837] CPU: 0 PID: 6837 Comm: syz.3.11418 Not tainted syzkaller #0
[ 1066.563937][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1066.574514][ T6837] Call Trace:
[ 1066.577795][ T6837]  <TASK>
[ 1066.580727][ T6837]  dump_stack_lvl+0x188/0x250
[ 1066.585415][ T6837]  ? show_regs_print_info+0x20/0x20
[ 1066.590621][ T6837]  ? load_image+0x410/0x410
[ 1066.595132][ T6837]  ? __might_sleep+0xf0/0xf0
[ 1066.599722][ T6837]  ? __lock_acquire+0x7b50/0x7b50
[ 1066.604747][ T6837]  ? perf_trace_lock+0xe4/0x390
[ 1066.609606][ T6837]  should_fail+0x383/0x4b0
[ 1066.614029][ T6837]  should_failslab+0x5/0x20
[ 1066.618619][ T6837]  slab_pre_alloc_hook+0x51/0xc0
[ 1066.623558][ T6837]  kmem_cache_alloc_node+0x47/0x2c0
[ 1066.628751][ T6837]  ? __alloc_skb+0xf4/0x750
[ 1066.633257][ T6837]  __alloc_skb+0xf4/0x750
[ 1066.637591][ T6837]  alloc_skb_with_frags+0xa7/0x720
[ 1066.642702][ T6837]  ? mark_lock+0x94/0x320
[ 1066.647035][ T6837]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1066.652261][ T6837]  ? sock_kzfree_s+0x50/0x50
[ 1066.656866][ T6837]  tun_get_user+0x8f7/0x3b40
[ 1066.661463][ T6837]  ? trace_event_raw_event_lock+0x250/0x250
[ 1066.667362][ T6837]  ? tun_ring_recv+0xc90/0xc90
[ 1066.672314][ T6837]  ? rcu_lock_release+0x5/0x20
[ 1066.677079][ T6837]  ? __lock_acquire+0x7b50/0x7b50
[ 1066.682106][ T6837]  ? trace_event_raw_event_lock+0x250/0x250
[ 1066.688011][ T6837]  tun_chr_write_iter+0x112/0x1e0
[ 1066.693036][ T6837]  vfs_write+0x748/0xd70
[ 1066.697283][ T6837]  ? file_end_write+0x250/0x250
[ 1066.702136][ T6837]  ? __fget_files+0x402/0x470
[ 1066.706815][ T6837]  ? __fdget_pos+0x1e2/0x370
[ 1066.711399][ T6837]  ? ksys_write+0x70/0x260
[ 1066.715821][ T6837]  ksys_write+0x153/0x260
[ 1066.720151][ T6837]  ? __ia32_sys_read+0x80/0x80
[ 1066.724915][ T6837]  ? lockdep_hardirqs_on+0x94/0x140
[ 1066.730115][ T6837]  do_syscall_64+0x4c/0xa0
[ 1066.734525][ T6837]  ? clear_bhb_loop+0x30/0x80
[ 1066.739196][ T6837]  ? clear_bhb_loop+0x30/0x80
[ 1066.743873][ T6837]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1066.749765][ T6837] RIP: 0033:0x7f5cf676ce59
[ 1066.754175][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1066.773781][ T6837] RSP: 002b:00007f5cf49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1066.782198][ T6837] RAX: ffffffffffffffda RBX: 00007f5cf69f4fa0 RCX: 00007f5cf676ce59
[ 1066.790169][ T6837] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 1066.798136][ T6837] RBP: 00007f5cf49c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1066.806103][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1066.814071][ T6837] R13: 00007f5cf69f5038 R14: 00007f5cf69f4fa0 R15: 00007ffd9552c928
[ 1066.822058][ T6837]  </TASK>
[ 1067.422301][ T6867] __nla_validate_parse: 1 callbacks suppressed
[ 1067.422322][ T6867] netlink: 199800 bytes leftover after parsing attributes in process `syz.2.11429'.
[ 1067.495084][ T6871] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.11428'.
[ 1070.608898][ T6896] IPv6: Can't replace route, no match found
[ 1070.869239][ T6891] device syzkaller0 entered promiscuous mode
[ 1070.876718][ T6911] netlink: 199800 bytes leftover after parsing attributes in process `syz.4.11442'.
[ 1071.378906][ T6929] device syzkaller0 entered promiscuous mode
[ 1072.058082][ T6949] device syzkaller0 entered promiscuous mode
[ 1073.362208][ T7044] syz.5.11498[7044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1073.362331][ T7044] syz.5.11498[7044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1073.388395][ T7036] device syzkaller0 entered promiscuous mode
[ 1074.247501][ T7078] device syzkaller0 entered promiscuous mode
[ 1074.664505][ T7083] device syzkaller0 entered promiscuous mode
[ 1075.338311][ T7106] device syzkaller0 entered promiscuous mode
[ 1077.070823][ T7158] bridge0: port 3(team0) entered disabled state
[ 1077.077283][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.084615][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1077.276309][ T7158] bridge0: port 3(team0) entered disabled state
[ 1077.345945][ T7158] device bridge_slave_1 left promiscuous mode
[ 1077.404101][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.431740][ T7158] device bridge_slave_0 left promiscuous mode
[ 1077.438391][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.400092][ T7209] ������: renamed from vlan0
[ 1079.719769][ T7212] device syzkaller0 entered promiscuous mode
[ 1081.234215][ T7241] device syzkaller0 entered promiscuous mode
[ 1081.740250][ T7257] syzkaller0: create flow: hash 3057384514 index 0
[ 1081.808981][ T7256] device syzkaller0 entered promiscuous mode
[ 1082.190608][ T7257] syzkaller0 (unregistered): delete flow: hash 3057384514 index 0
[ 1084.171439][ T7290] device syzkaller0 entered promiscuous mode
[ 1089.075765][ T7383] device syzkaller0 entered promiscuous mode
[ 1089.298400][ T7400] device syzkaller0 entered promiscuous mode
[ 1089.565209][ T7415] device syzkaller0 entered promiscuous mode
[ 1091.475847][ T7517] device syzkaller0 entered promiscuous mode
[ 1092.113682][ T7518] chnl_net:caif_netlink_parms(): no params data found
[ 1092.435781][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.493789][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.577314][ T7518] device bridge_slave_0 entered promiscuous mode
[ 1092.617306][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.669741][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.730453][ T7518] device bridge_slave_1 entered promiscuous mode
[ 1092.967573][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1093.000990][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1093.133789][ T7518] team0: Port device team_slave_0 added
[ 1093.148057][ T7518] team0: Port device team_slave_1 added
[ 1093.188917][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1093.212813][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1093.320884][ T7602] netlink: 16046 bytes leftover after parsing attributes in process `syz.5.11717'.
[ 1093.470093][ T7190] Bluetooth: hci5: command 0x0409 tx timeout
[ 1093.613320][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1093.837869][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1093.854393][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1093.962065][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1094.143967][ T7518] device hsr_slave_0 entered promiscuous mode
[ 1094.170750][ T7518] device hsr_slave_1 entered promiscuous mode
[ 1094.528190][ T7623] 
[ 1094.540113][ T7623] =============================
[ 1094.544977][ T7623] WARNING: suspicious RCU usage
[ 1094.549826][ T7623] syzkaller #0 Not tainted
[ 1094.593779][ T7518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.642986][ T7623] -----------------------------
[ 1094.659717][ T7623] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1094.681308][ T7518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.720828][ T7623] 
[ 1094.720828][ T7623] other info that might help us debug this:
[ 1094.720828][ T7623] 
[ 1094.765847][ T7623] 
[ 1094.765847][ T7623] rcu_scheduler_active = 2, debug_locks = 1
[ 1094.780357][ T7518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.827631][ T7623] 1 lock held by syz.5.11729/7623:
[ 1094.854337][ T7623]  #0: ffffffff8c31f0a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[ 1094.886042][ T7518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.904739][ T7623] 
[ 1094.904739][ T7623] stack backtrace:
[ 1094.913022][ T7623] CPU: 1 PID: 7623 Comm: syz.5.11729 Not tainted syzkaller #0
[ 1094.920494][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1094.930559][ T7623] Call Trace:
[ 1094.933839][ T7623]  <TASK>
[ 1094.936772][ T7623]  dump_stack_lvl+0x188/0x250
[ 1094.941460][ T7623]  ? load_image+0x410/0x410
[ 1094.945972][ T7623]  ? show_regs_print_info+0x20/0x20
[ 1094.951182][ T7623]  ? print_tainted+0x148/0x170
[ 1094.955966][ T7623]  ? lockdep_rcu_suspicious+0x110/0x180
[ 1094.961526][ T7623]  get_callchain_entry+0x2a5/0x3b0
[ 1094.966650][ T7623]  get_perf_callchain+0xab/0x460
[ 1094.971596][ T7623]  ? put_callchain_entry+0xb0/0xb0
[ 1094.976719][ T7623]  ? mark_lock+0x94/0x320
[ 1094.981053][ T7623]  __bpf_get_stack+0x2db/0x530
[ 1094.985833][ T7623]  ? stack_map_get_build_id_offset+0x860/0x860
[ 1094.991999][ T7623]  ? __cant_sleep+0x220/0x220
[ 1094.996686][ T7623]  ? bpf_prog_14d9fb3786f83342+0x3d/0x9b0
[ 1095.002419][ T7623]  bpf_get_stack_raw_tp+0x189/0x1c0
[ 1095.007631][ T7623]  bpf_prog_14d9fb3786f83342+0x3d/0x9b0
[ 1095.013186][ T7623]  bpf_prog_run_pin_on_cpu+0x63/0x140
[ 1095.018572][ T7623]  bpf_prog_test_run_syscall+0x361/0x500
[ 1095.024222][ T7623]  ? sock_gen_cookie+0x60/0x60
[ 1095.028998][ T7623]  ? sock_gen_cookie+0x60/0x60
[ 1095.033766][ T7623]  bpf_prog_test_run+0x31c/0x390
[ 1095.038715][ T7623]  __sys_bpf+0x5a5/0x6f0
[ 1095.042968][ T7623]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1095.048365][ T7623]  __x64_sys_bpf+0x78/0x90
[ 1095.052790][ T7623]  do_syscall_64+0x4c/0xa0
[ 1095.057210][ T7623]  ? clear_bhb_loop+0x30/0x80
[ 1095.061892][ T7623]  ? clear_bhb_loop+0x30/0x80
[ 1095.066576][ T7623]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1095.072476][ T7623] RIP: 0033:0x7fcfdc647e59
[ 1095.076899][ T7623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1095.096510][ T7623] RSP: 002b:00007fcfda8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1095.104930][ T7623] RAX: ffffffffffffffda RBX: 00007fcfdc8cffa0 RCX: 00007fcfdc647e59
[ 1095.112906][ T7623] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[ 1095.120885][ T7623] RBP: 00007fcfdc6dde6f R08: 0000000000000000 R09: 0000000000000000
[ 1095.128857][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1095.136827][ T7623] R13: 00007fcfdc8d0038 R14: 00007fcfdc8cffa0 R15: 00007ffdcf3cec28
[ 1095.144823][ T7623]  </TASK>
[ 1095.297381][ T7518] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1095.329340][ T7518] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1095.378673][ T7518] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1095.410242][ T7623] 
[ 1095.412596][ T7623] =============================
[ 1095.413854][ T7518] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1095.417455][ T7623] WARNING: suspicious RCU usage
[ 1095.440162][ T7623] syzkaller #0 Not tainted
[ 1095.444591][ T7623] -----------------------------
[ 1095.449430][ T7623] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage!
[ 1095.469952][ T7623] 
[ 1095.469952][ T7623] other info that might help us debug this:
[ 1095.469952][ T7623] 
[ 1095.494738][ T7623] 
[ 1095.494738][ T7623] rcu_scheduler_active = 2, debug_locks = 1
[ 1095.504550][ T7623] 1 lock held by syz.5.11729/7623:
[ 1095.528148][ T7623]  #0: ffffffff8c31f0a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[ 1095.550230][T12564] Bluetooth: hci5: command 0x041b tx timeout
[ 1095.566898][ T7623] 
[ 1095.566898][ T7623] stack backtrace:
[ 1095.583976][ T7623] CPU: 1 PID: 7623 Comm: syz.5.11729 Not tainted syzkaller #0
[ 1095.591462][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1095.601521][ T7623] Call Trace:
[ 1095.604799][ T7623]  <TASK>
[ 1095.607730][ T7623]  dump_stack_lvl+0x188/0x250
[ 1095.612416][ T7623]  ? load_image+0x410/0x410
[ 1095.616927][ T7623]  ? show_regs_print_info+0x20/0x20
[ 1095.622143][ T7623]  ? lockdep_rcu_suspicious+0x110/0x180
[ 1095.627699][ T7623]  perf_callchain_kernel+0x625/0x760
[ 1095.633070][ T7623]  ? load_image+0x410/0x410
[ 1095.637579][ T7623]  ? show_regs_print_info+0x20/0x20
[ 1095.642782][ T7623]  ? print_tainted+0x148/0x170
[ 1095.647553][ T7623]  ? arch_perf_update_userpage+0x3c0/0x3c0
[ 1095.653377][ T7623]  ? get_callchain_entry+0x181/0x3b0
[ 1095.658668][ T7623]  get_perf_callchain+0x356/0x460
[ 1095.663695][ T7623]  ? put_callchain_entry+0xb0/0xb0
[ 1095.668815][ T7623]  ? mark_lock+0x94/0x320
[ 1095.673150][ T7623]  __bpf_get_stack+0x2db/0x530
[ 1095.677927][ T7623]  ? stack_map_get_build_id_offset+0x860/0x860
[ 1095.684094][ T7623]  ? __cant_sleep+0x220/0x220
[ 1095.688783][ T7623]  ? bpf_prog_14d9fb3786f83342+0x3d/0x9b0
[ 1095.694505][ T7623]  bpf_get_stack_raw_tp+0x189/0x1c0
[ 1095.699717][ T7623]  bpf_prog_14d9fb3786f83342+0x3d/0x9b0
[ 1095.705264][ T7623]  bpf_prog_run_pin_on_cpu+0x63/0x140
[ 1095.710645][ T7623]  bpf_prog_test_run_syscall+0x361/0x500
[ 1095.716291][ T7623]  ? sock_gen_cookie+0x60/0x60
[ 1095.721065][ T7623]  ? sock_gen_cookie+0x60/0x60
[ 1095.725832][ T7623]  bpf_prog_test_run+0x31c/0x390
[ 1095.730780][ T7623]  __sys_bpf+0x5a5/0x6f0
[ 1095.735034][ T7623]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1095.740430][ T7623]  __x64_sys_bpf+0x78/0x90
[ 1095.744854][ T7623]  do_syscall_64+0x4c/0xa0
[ 1095.749273][ T7623]  ? clear_bhb_loop+0x30/0x80
[ 1095.753954][ T7623]  ? clear_bhb_loop+0x30/0x80
[ 1095.758632][ T7623]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1095.764523][ T7623] RIP: 0033:0x7fcfdc647e59
[ 1095.768941][ T7623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1095.788549][ T7623] RSP: 002b:00007fcfda8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1095.796967][ T7623] RAX: ffffffffffffffda RBX: 00007fcfdc8cffa0 RCX: 00007fcfdc647e59
[ 1095.804945][ T7623] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[ 1095.812919][ T7623] RBP: 00007fcfdc6dde6f R08: 0000000000000000 R09: 0000000000000000
[ 1095.820896][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1095.828872][ T7623] R13: 00007fcfdc8d0038 R14: 00007fcfdc8cffa0 R15: 00007ffdcf3cec28
[ 1095.836971][ T7623]  </TASK>
[ 1095.885551][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1095.899873][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1095.908809][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1095.923193][ T7518] 8021q: adding VLAN 0 to HW filter on device team0
[ 1095.947709][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1095.987187][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1096.015547][T15192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.022686][T15192] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1096.045275][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1096.054070][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1096.068234][T15192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1096.075326][T15192] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1096.114474][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1096.130550][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1096.150636][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1096.166487][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1096.182097][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1096.215765][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1096.229094][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1096.288054][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1096.297598][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1096.316447][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1096.329732][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1096.341277][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1096.365025][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1096.501329][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1096.509613][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1096.522543][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1096.556180][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1096.569545][T15192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1096.587782][ T7518] device veth0_vlan entered promiscuous mode
[ 1096.598086][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1096.606697][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1096.616988][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1096.625018][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1096.637967][ T7518] device veth1_vlan entered promiscuous mode
[ 1096.667213][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1096.686996][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1096.700202][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1096.708694][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1096.721424][ T7518] device veth0_macvtap entered promiscuous mode
[ 1096.730545][ T7518] device veth1_macvtap entered promiscuous mode
[ 1096.745003][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.755599][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.766912][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.777382][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.787625][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.798346][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.808186][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.819004][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.830405][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1096.849781][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1096.857827][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1096.865775][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1096.875744][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1096.886357][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.897162][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.907289][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.918416][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.928255][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.938735][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.948675][ T7518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.959349][ T7518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.970446][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1096.982886][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1096.994005][T15196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1097.005975][ T7518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.018844][ T7518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.027633][ T7518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.036447][ T7518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.103239][T15196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.114132][T15196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.123576][T15201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1097.148051][T12737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.160816][T12737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.168286][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1097.614678][  T144] device hsr_slave_0 left promiscuous mode
[ 1097.620954][  T144] device hsr_slave_1 left promiscuous mode
[ 1097.627128][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1097.635588][T14682] Bluetooth: hci5: command 0x040f tx timeout
[ 1097.641758][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1097.649355][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1097.657166][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1097.666342][  T144] device veth1_macvtap left promiscuous mode
[ 1097.672466][  T144] device veth0_macvtap left promiscuous mode
[ 1097.678605][  T144] device veth1_vlan left promiscuous mode
[ 1097.791745][  T144] team0 (unregistering): Port device team_slave_1 removed
[ 1097.805863][  T144] team0 (unregistering): Port device team_slave_0 removed
[ 1099.720192][ T4308] Bluetooth: hci5: command 0x0419 tx timeout