last executing test programs:

1m53.618614757s ago: executing program 1 (id=8580):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x28, 0xd1d7d0c60b12557f, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x20, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000120000000000000000009503b629526c0abf52c3716d34ac9965c1aa8d7aa0f9afec9590ab8b129cf611cfa83d7ceb655b1f15a0e33f18ee35a970c6ca380df8138399b7cd002354937ecf001cf577c7656b9779e2a40f0d3cf9a95ee25d5cbd52a957dbc0b0e85c0d106f7942d1e6952c0ac960a067db7a45d2de604016aab37db5b245501d91aba7f060621bef90511c7d7b3f35f75460636edfb24ab2ef0b293b0ef955da2501850b0c46f3a3dde8f093a508a0c33104b985722909d64cee45075132a4b7ef40c76d7d9e16", @ANYRES32], 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40001)
socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {0x0}, {&(0x7f0000000540)="6fe4dd9eeb85271d", 0x8}], 0x4}, 0x200400c4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x15, 0x2, 0x1000000, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1414, 0x64b}, 0x4230, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x7, 0x3}, 0x10d45c, 0xc, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x400000, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080))
socketpair(0x6, 0x2, 0x1, &(0x7f00000008c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))

1m52.990212784s ago: executing program 1 (id=8583):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (fail_nth: 3)

1m50.482408532s ago: executing program 1 (id=8600):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004080)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x8000})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m49.541635233s ago: executing program 1 (id=8605):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2, 0x3, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))

1m48.895674281s ago: executing program 1 (id=8611):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb06a, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xfffffffffffffe56}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1m47.588901687s ago: executing program 1 (id=8617):
unlink(0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000300), 0x12)

1m32.473864919s ago: executing program 32 (id=8617):
unlink(0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000300), 0x12)

21.064946571s ago: executing program 4 (id=9167):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x213f, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0xb, 0x800, 0xb, &(0x7f0000000080))

20.567177703s ago: executing program 4 (id=9173):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x12, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

20.074171314s ago: executing program 4 (id=9179):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700", 0x2c}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000001000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

19.567211716s ago: executing program 4 (id=9182):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000099348bd1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x3, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8014)

18.920800933s ago: executing program 4 (id=9189):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000099348bd1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x3, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x8)

18.617010466s ago: executing program 4 (id=9191):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)}, 0x10002)

5.241272824s ago: executing program 5 (id=9252):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x213f, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair(0xb, 0x800, 0xb, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r4})

4.88162015s ago: executing program 5 (id=9256):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c700000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
r1 = socket$kcm(0xa, 0x3, 0x3a)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf4, 0x8, 0x8}}, 0x10)
recvmsg(r1, &(0x7f0000000b40)={&(0x7f00000003c0)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000900)=""/247, 0xf7}], 0x6, &(0x7f0000000a80)=""/141, 0x8d}, 0x40002120)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000008000850000001b000000b700000000000000850000002a00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@fallback=r1, 0x20, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@map=r7, r5, 0x25, 0x18, r0, @void, @value=r0, @void, @void, r6}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@ll={0x11, 0x11, r2, 0x1, 0xcd, 0x6, @link_local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cb", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0)

4.696972777s ago: executing program 2 (id=9257):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4, 0x7ff}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.508108716s ago: executing program 5 (id=9259):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4, 0x7ff}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff20", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.197886199s ago: executing program 3 (id=9260):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000050000000300000009000000010000f6", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000040000000f00"/28], 0x50)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socket$kcm(0x21, 0x2, 0x2)
r4 = socket$kcm(0x22, 0x3, 0x0)
socketpair(0x1d, 0xa, 0x2, &(0x7f0000000a80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x922fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044944, 0x0)
r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00ef0018010000646c6c240000000000000de1dae1f8ff00000000bfa100000000000007012300f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x17, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x3, 0x0, 0x0, 0x61880, 0x10, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, &(0x7f0000000bc0), 0x10, 0x1000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r11, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000e00), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00bdb204bb4571708700"/26, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r12, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90424fc60100c0340", 0x18}], 0x1}, 0x0)
r13 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="8292e60b04000500000800"/20, @ANYBLOB="9fd3e264e326ec07cd128de32db278f05defc8b1d63ca1", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES64=r5, @ANYRESHEX=r8], 0x48)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r14 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r14}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.446937541s ago: executing program 2 (id=9261):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000000b40)=""/4124, 0x101c}, {0x0}], 0x3}, 0x10002)

3.109810176s ago: executing program 0 (id=9263):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000099348bd1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x3, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x8)

3.091321177s ago: executing program 2 (id=9264):
r0 = socket$kcm(0xa, 0x2, 0x88) (async)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x29, &(0x7f0000000000), 0x4) (async)
r2 = syz_clone(0x4800, &(0x7f0000000180)="772fff94e778bcb40e58f2d9d4bc25d112d6b1c2764f96cd991dc280daf4952dcf71910ef8696036456d1e69005531080722655cfbe5afee00ac7c46c8d52bc12fe4545df2c71a910b99f5d81af0007a311b24f87c674462e10926693dc628343505fa9b1a73", 0x66, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000400)="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")
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x7, 0x5, 0x1, 0x0, 0x9d6, 0x40000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0xdb2}, 0x4080, 0xffffffff80000001, 0xd, 0x4, 0x2, 0x2, 0x40, 0x0, 0x6, 0x0, 0x7}, r2, 0xffffffffffffffff, r3, 0x1)
sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000002c0), 0x4) (async)
sendmsg$sock(r0, &(0x7f0000000b80)={&(0x7f0000000380)=@in6={0xa, 0x4e02, 0x2, @loopback, 0x7f}, 0x80, 0x0}, 0x40001)

3.042628699s ago: executing program 5 (id=9265):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x213f, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair(0xb, 0x800, 0xb, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r4})

2.954073893s ago: executing program 3 (id=9266):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xf}, 0x50)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0, 0x12}, 0x4040000)

2.892053245s ago: executing program 2 (id=9267):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) (fail_nth: 3)

2.753094491s ago: executing program 3 (id=9268):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x4000}], 0x1}, 0x40012100) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0d0000000400000004040000ffffffff00000000", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000300"/28], 0x50)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x108c08, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000070000000000000000003c8074b6d2c717c9d8414700009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)={@ifindex, r5, 0x11, 0x10, 0x0, @void, @value=0x0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@map=r1, 0x1d, 0x1, 0x8, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], <r6=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r4, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@ifindex=r7, r4, 0x25, 0x2014, 0x0, @value=r5, @void, @void, @void, r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000b00)='FROZEN\x00', 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000400000072e9358929b5019a8f2bf20000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
socket$kcm(0x1e, 0x4, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x3, 0x1000}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x1500, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.693562464s ago: executing program 0 (id=9269):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2.30883263s ago: executing program 5 (id=9270):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
close(0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

1.465960827s ago: executing program 0 (id=9271):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="a2cf1be51b72742bd11042c6f289f7af60a9ac2818c3ba31e88b8a5fc00b058460e6743204e1be6b07048e62c818ac38f35d79e194d7b83f1f1e4dd5590790e240b1d16d8d9800e47286ea68c9fb83d842b2bc46c039fc21e7b60837039cca89ec216104ffa2dae2971112c3571d999a6034c39cdc087ec8565f4c43f4aedc7bce62150a"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, 0x0}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240)="2b6ac3159d6bab8fe7b5bc8fd1f2876241206860d312caeea0cd1aedfc6f0940812b81928538ade69ccc6cf4c8", &(0x7f0000000280)=""/9}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0)
socket$kcm(0xa, 0x3, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000600000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
ioctl$TUNGETFEATURES(r2, 0x800454cf, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000000)="b88a000000f00000000000df8100", 0xe}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x114, 0x7, 0x0, 0xa0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x84)

927.46397ms ago: executing program 3 (id=9272):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)

780.843576ms ago: executing program 2 (id=9273):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000000b40)=""/4124, 0x101c}, {0x0}], 0x3}, 0x10002)

778.499296ms ago: executing program 5 (id=9274):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
socket$kcm(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4, 0x7ff}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff20", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

693.62782ms ago: executing program 0 (id=9275):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x28, 0xd1d7d0c60b12557f, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x20, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}, 0x40000)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000120000000000000000009503b629526c0abf52c3716d34ac9965c1aa8d7aa0f9afec9590ab8b129cf611cfa83d7ceb655b1f15a0e33f18ee35a970c6ca380df8138399b7cd002354937ecf001cf577c7656b9779e2a40f0d3cf9a95ee25d5cbd52a957dbc0b0e85c0d106f7942d1e6952c0ac960a067db7a45d2de604016aab37db5b245501d91aba7f060621bef90511c7d7b3f35f75460636edfb24ab2ef0b293b0ef955da2501850b0c46f3a3dde8f093a508a0c33104b985722909d64cee45075132a4b7ef40c76d7d9e16", @ANYRES32], 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40001)
socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {0x0}, {&(0x7f0000000540)="6fe4dd9eeb85271d", 0x8}], 0x4}, 0x200400c4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x15, 0x2, 0x1000000, &(0x7f0000000000))
r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1414, 0x64b}, 0x4230, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x7, 0x3}, 0x10d45c, 0xc, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x400000, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080))
socketpair(0x6, 0x2, 0x1, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080))

558.466686ms ago: executing program 3 (id=9276):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x1100, &(0x7f0000000740)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x40}, 0x840)

352.547715ms ago: executing program 2 (id=9277):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002842afcffff564500004e23e3f58e76110165f4080000000000000000028d459e37000febffffffffbe9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000)
r3 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x1, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$kcm(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)='c', 0x1}], 0x1}, 0xc094)
sendmsg$sock(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)='e', 0x1}], 0x1}, 0x8005)

277.342718ms ago: executing program 0 (id=9278):
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000099348bd1000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x3, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x8)

227.96367ms ago: executing program 3 (id=9279):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x213f, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_msg}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$kcm(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, r2, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0xb, 0x800, 0xb, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r4})

0s ago: executing program 0 (id=9280):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0500000000000000000000003f3769", @ANYRES32], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

kernel console output (not intermixed with test programs):

PID: 32378 Comm: syz.3.8676 Not tainted syzkaller #0
[ 1750.715102][T32378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1750.725207][T32378] Call Trace:
[ 1750.728526][T32378]  <TASK>
[ 1750.731500][T32378]  dump_stack_lvl+0x188/0x24e
[ 1750.736248][T32378]  ? show_regs_print_info+0x12/0x12
[ 1750.741512][T32378]  ? load_image+0x400/0x400
[ 1750.746072][T32378]  ? __lock_acquire+0x7d10/0x7d10
[ 1750.751158][T32378]  ? slab_post_alloc_hook+0x4b/0x480
[ 1750.756516][T32378]  should_fail_ex+0x399/0x4d0
[ 1750.761251][T32378]  prepare_alloc_pages+0x1e2/0x5f0
[ 1750.766431][T32378]  __alloc_pages+0x130/0x4f0
[ 1750.771167][T32378]  ? kasan_populate_vmalloc_pte+0xa4/0xf0
[ 1750.776941][T32378]  ? zone_statistics+0x170/0x170
[ 1750.782046][T32378]  ? __rwlock_init+0x140/0x140
[ 1750.786860][T32378]  ? do_raw_spin_unlock+0x11d/0x230
[ 1750.792123][T32378]  __get_free_pages+0x8/0x30
[ 1750.796777][T32378]  kasan_populate_vmalloc_pte+0x31/0xf0
[ 1750.802464][T32378]  ? __apply_to_page_range+0x977/0xd10
[ 1750.807971][T32378]  __apply_to_page_range+0x989/0xd10
[ 1750.813311][T32378]  ? kasan_populate_vmalloc+0x70/0x70
[ 1750.818743][T32378]  alloc_vmap_area+0x178f/0x18c0
[ 1750.823735][T32378]  ? vm_map_ram+0xab0/0xab0
[ 1750.828396][T32378]  ? rcu_is_watching+0x11/0xa0
[ 1750.833234][T32378]  __get_vm_area_node+0x158/0x330
[ 1750.838319][T32378]  __vmalloc_node_range+0x357/0x13b0
[ 1750.843674][T32378]  ? array_map_alloc+0x27c/0x6f0
[ 1750.848694][T32378]  ? free_vm_area+0x50/0x50
[ 1750.853251][T32378]  ? apparmor_capable+0x12c/0x190
[ 1750.858348][T32378]  ? bpf_lsm_capable+0x5/0x10
[ 1750.863083][T32378]  ? security_capable+0x85/0xb0
[ 1750.867982][T32378]  bpf_map_area_alloc+0xd4/0xe0
[ 1750.872974][T32378]  ? array_map_alloc+0x27c/0x6f0
[ 1750.877963][T32378]  array_map_alloc+0x27c/0x6f0
[ 1750.882882][T32378]  map_create+0x534/0x1000
[ 1750.887362][T32378]  ? bpf_lsm_bpf+0x5/0x10
[ 1750.891753][T32378]  __sys_bpf+0x38b/0x780
[ 1750.896234][T32378]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1750.901775][T32378]  ? lock_chain_count+0x20/0x20
[ 1750.906694][T32378]  __x64_sys_bpf+0x78/0x90
[ 1750.911169][T32378]  do_syscall_64+0x4c/0xa0
[ 1750.915640][T32378]  ? clear_bhb_loop+0x60/0xb0
[ 1750.920374][T32378]  ? clear_bhb_loop+0x60/0xb0
[ 1750.925139][T32378]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1750.931090][T32378] RIP: 0033:0x7ff50019ce59
[ 1750.935547][T32378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1750.955202][T32378] RSP: 002b:00007ff4fe3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1750.963672][T32378] RAX: ffffffffffffffda RBX: 00007ff500415fa0 RCX: 00007ff50019ce59
[ 1750.971694][T32378] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0b00000000000000
[ 1750.979723][T32378] RBP: 00007ff4fe3f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1750.987744][T32378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1750.995773][T32378] R13: 00007ff500416038 R14: 00007ff500415fa0 R15: 00007ffd4c67cf88
[ 1751.004009][T32378]  </TASK>
[ 1751.214009][T32386] netlink: 'syz.3.8681': attribute type 10 has an invalid length.
[ 1751.253357][T32386] 8021q: adding VLAN 0 to HW filter on device team0
[ 1751.287457][T32386] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1751.503032][T32400] netlink: 'syz.3.8684': attribute type 22 has an invalid length.
[ 1751.510966][T32400] __nla_validate_parse: 6 callbacks suppressed
[ 1751.510984][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1751.591700][T32398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8680'.
[ 1752.232616][T32407] FAULT_INJECTION: forcing a failure.
[ 1752.232616][T32407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1752.261807][T32407] CPU: 1 PID: 32407 Comm: syz.2.8688 Not tainted syzkaller #0
[ 1752.269348][T32407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1752.279436][T32407] Call Trace:
[ 1752.282747][T32407]  <TASK>
[ 1752.285706][T32407]  dump_stack_lvl+0x188/0x24e
[ 1752.290429][T32407]  ? show_regs_print_info+0x12/0x12
[ 1752.295662][T32407]  ? load_image+0x400/0x400
[ 1752.300197][T32407]  ? __lock_acquire+0x7d10/0x7d10
[ 1752.305261][T32407]  should_fail_ex+0x399/0x4d0
[ 1752.309974][T32407]  _copy_from_user+0x2c/0x170
[ 1752.314701][T32407]  kstrtouint_from_user+0xda/0x170
[ 1752.319938][T32407]  ? kstrtol_from_user+0x190/0x190
[ 1752.325100][T32407]  proc_fail_nth_write+0x8b/0x200
[ 1752.330158][T32407]  ? proc_fail_nth_read+0x220/0x220
[ 1752.335384][T32407]  ? common_file_perm+0x171/0x1c0
[ 1752.340440][T32407]  ? proc_fail_nth_read+0x220/0x220
[ 1752.345662][T32407]  vfs_write+0x2e6/0xa30
[ 1752.349945][T32407]  ? file_end_write+0x250/0x250
[ 1752.354834][T32407]  ? __fget_files+0x28/0x4b0
[ 1752.359461][T32407]  ? __fget_files+0x28/0x4b0
[ 1752.364084][T32407]  ? __fget_files+0x43d/0x4b0
[ 1752.368801][T32407]  ? __fdget_pos+0x2ae/0x360
[ 1752.373444][T32407]  ? ksys_write+0x71/0x250
[ 1752.377899][T32407]  ksys_write+0x14c/0x250
[ 1752.382263][T32407]  ? __ia32_sys_read+0x80/0x80
[ 1752.387068][T32407]  ? lockdep_hardirqs_on+0x94/0x140
[ 1752.392302][T32407]  do_syscall_64+0x4c/0xa0
[ 1752.396754][T32407]  ? clear_bhb_loop+0x60/0xb0
[ 1752.401478][T32407]  ? clear_bhb_loop+0x60/0xb0
[ 1752.406191][T32407]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1752.412116][T32407] RIP: 0033:0x7fc1b5f5d68e
[ 1752.416567][T32407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1752.436282][T32407] RSP: 002b:00007fc1b6de6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1752.444748][T32407] RAX: ffffffffffffffda RBX: 00007fc1b6de76c0 RCX: 00007fc1b5f5d68e
[ 1752.452746][T32407] RDX: 0000000000000001 RSI: 00007fc1b6de70a0 RDI: 0000000000000004
[ 1752.460777][T32407] RBP: 00007fc1b6de7090 R08: 0000000000000000 R09: 0000000000000000
[ 1752.468774][T32407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1752.476767][T32407] R13: 00007fc1b6216038 R14: 00007fc1b6215fa0 R15: 00007ffcb5262ee8
[ 1752.484794][T32407]  </TASK>
[ 1753.314715][T32431] netlink: 'syz.4.8697': attribute type 22 has an invalid length.
[ 1753.337676][T32431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8697'.
[ 1753.354994][T32434] netlink: 'syz.0.8699': attribute type 10 has an invalid length.
[ 1753.369120][T32434] FAULT_INJECTION: forcing a failure.
[ 1753.369120][T32434] name failslab, interval 1, probability 0, space 0, times 0
[ 1753.387917][T32434] CPU: 1 PID: 32434 Comm: syz.0.8699 Not tainted syzkaller #0
[ 1753.395460][T32434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1753.405556][T32434] Call Trace:
[ 1753.408847][T32434]  <TASK>
[ 1753.411792][T32434]  dump_stack_lvl+0x188/0x24e
[ 1753.416510][T32434]  ? show_regs_print_info+0x12/0x12
[ 1753.421784][T32434]  ? load_image+0x400/0x400
[ 1753.426309][T32434]  ? __might_sleep+0xd0/0xd0
[ 1753.430931][T32434]  ? __lock_acquire+0x7d10/0x7d10
[ 1753.436024][T32434]  should_fail_ex+0x399/0x4d0
[ 1753.440758][T32434]  should_failslab+0x5/0x20
[ 1753.445290][T32434]  slab_pre_alloc_hook+0x59/0x310
[ 1753.450342][T32434]  ? rcu_is_watching+0x11/0xa0
[ 1753.455146][T32434]  ? nf_nat_masq_schedule+0x240/0x560
[ 1753.460650][T32434]  __kmem_cache_alloc_node+0x4f/0x260
[ 1753.466048][T32434]  ? __mutex_lock+0x1ab/0xaf0
[ 1753.470770][T32434]  ? nf_nat_masq_schedule+0x240/0x560
[ 1753.476185][T32434]  kmalloc_trace+0x26/0xe0
[ 1753.480633][T32434]  nf_nat_masq_schedule+0x240/0x560
[ 1753.485871][T32434]  ? nf_nat_masq_schedule+0x560/0x560
[ 1753.491275][T32434]  ? masq_device_event+0xd0/0xd0
[ 1753.496254][T32434]  ? nfqnl_rcv_dev_event+0x737/0x770
[ 1753.501586][T32434]  ? nfqnl_rcv_dev_event+0xad/0x770
[ 1753.506859][T32434]  ? nf_tables_flowtable_event+0x341/0x360
[ 1753.512723][T32434]  masq_device_event+0x9e/0xd0
[ 1753.517535][T32434]  raw_notifier_call_chain+0xcb/0x160
[ 1753.522949][T32434]  __dev_notify_flags+0x16a/0x310
[ 1753.528017][T32434]  ? __dev_change_flags+0x6a0/0x6a0
[ 1753.533244][T32434]  ? __dev_change_flags+0x4d0/0x6a0
[ 1753.538482][T32434]  ? dev_get_flags+0x1c0/0x1c0
[ 1753.543280][T32434]  ? vprintk_emit+0x59f/0x6a0
[ 1753.547996][T32434]  dev_change_flags+0xe4/0x1a0
[ 1753.552824][T32434]  do_setlink+0xba1/0x3e60
[ 1753.557311][T32434]  ? _printk+0xda/0x130
[ 1753.561540][T32434]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1753.567734][T32434]  ? load_image+0x400/0x400
[ 1753.572288][T32434]  ? __nla_validate_parse+0x2072/0x2ac0
[ 1753.577860][T32434]  ? netlink_rcv_skb+0x1fb/0x450
[ 1753.582851][T32434]  ? netlink_unicast+0x74d/0x8d0
[ 1753.587856][T32434]  ? netlink_sendmsg+0x8ad/0xbd0
[ 1753.592859][T32434]  ? __nla_validate+0x50/0x50
[ 1753.597590][T32434]  ? validate_linkmsg+0x3db/0x4c0
[ 1753.602678][T32434]  rtnl_newlink+0x17d9/0x20a0
[ 1753.607402][T32434]  ? rtnl_newlink+0x5c1/0x20a0
[ 1753.612213][T32434]  ? rtnl_setlink+0x510/0x510
[ 1753.616925][T32434]  ? __rwlock_init+0x140/0x140
[ 1753.621720][T32434]  ? do_raw_spin_unlock+0x11d/0x230
[ 1753.626967][T32434]  ? __mutex_lock+0x810/0xaf0
[ 1753.631687][T32434]  ? __mutex_lock+0x3b2/0xaf0
[ 1753.636418][T32434]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1753.641564][T32434]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1753.646728][T32434]  ? rtnl_setlink+0x510/0x510
[ 1753.651448][T32434]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1753.656428][T32434]  ? rtnetlink_bind+0x80/0x80
[ 1753.661142][T32434]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1753.666558][T32434]  ? lockdep_hardirqs_on+0x94/0x140
[ 1753.671793][T32434]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1753.677199][T32434]  ? _local_bh_enable+0xa0/0xa0
[ 1753.682089][T32434]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1753.687254][T32434]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1753.692414][T32434]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1753.697663][T32434]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1753.702812][T32434]  ? ref_tracker_free+0x68c/0x840
[ 1753.707873][T32434]  ? __copy_skb_header+0x3ba/0x4f0
[ 1753.713025][T32434]  ? refcount_inc+0x70/0x70
[ 1753.717565][T32434]  ? memcpy+0x3c/0x60
[ 1753.721574][T32434]  ? __copy_skb_header+0x3ba/0x4f0
[ 1753.726726][T32434]  ? __skb_clone+0x480/0x790
[ 1753.731361][T32434]  netlink_rcv_skb+0x1fb/0x450
[ 1753.736159][T32434]  ? rtnetlink_bind+0x80/0x80
[ 1753.740873][T32434]  ? netlink_ack+0x1170/0x1170
[ 1753.745681][T32434]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1753.750911][T32434]  netlink_unicast+0x74d/0x8d0
[ 1753.755715][T32434]  netlink_sendmsg+0x8ad/0xbd0
[ 1753.760537][T32434]  ? netlink_getsockopt+0x550/0x550
[ 1753.765865][T32434]  ? aa_sock_msg_perm+0x94/0x150
[ 1753.770835][T32434]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1753.776144][T32434]  ? security_socket_sendmsg+0x7c/0xa0
[ 1753.781722][T32434]  ? netlink_getsockopt+0x550/0x550
[ 1753.786957][T32434]  ____sys_sendmsg+0x5be/0x970
[ 1753.791780][T32434]  ? __sys_sendmsg_sock+0x30/0x30
[ 1753.796848][T32434]  ? __import_iovec+0x315/0x500
[ 1753.801747][T32434]  ? import_iovec+0x6f/0xa0
[ 1753.806290][T32434]  ___sys_sendmsg+0x2a2/0x360
[ 1753.811031][T32434]  ? __sys_sendmsg+0x290/0x290
[ 1753.815874][T32434]  ? __lock_acquire+0x7d10/0x7d10
[ 1753.820998][T32434]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1753.825916][T32434]  ? ct_nmi_exit+0x145/0x1c0
[ 1753.830582][T32434]  ? __x64_sys_sendmsg+0x80/0x80
[ 1753.835583][T32434]  ? lockdep_hardirqs_on+0x94/0x140
[ 1753.840828][T32434]  do_syscall_64+0x4c/0xa0
[ 1753.845285][T32434]  ? clear_bhb_loop+0x60/0xb0
[ 1753.850021][T32434]  ? clear_bhb_loop+0x60/0xb0
[ 1753.854755][T32434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1753.860855][T32434] RIP: 0033:0x7f495c59ce59
[ 1753.865309][T32434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1753.884981][T32434] RSP: 002b:00007f495d3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1753.893492][T32434] RAX: ffffffffffffffda RBX: 00007f495c815fa0 RCX: 00007f495c59ce59
[ 1753.901517][T32434] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[ 1753.909526][T32434] RBP: 00007f495d3fb090 R08: 0000000000000000 R09: 0000000000000000
[ 1753.917616][T32434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1753.925618][T32434] R13: 00007f495c816038 R14: 00007f495c815fa0 R15: 00007ffc20ee7698
[ 1753.933635][T32434]  </TASK>
[ 1753.947711][T32434] 8021q: adding VLAN 0 to HW filter on device team0
[ 1753.977110][T32434] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1754.308248][T32448] netlink: 'syz.0.8701': attribute type 2 has an invalid length.
[ 1754.321759][T32448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8701'.
[ 1754.557800][T32454] netlink: 'syz.4.8705': attribute type 10 has an invalid length.
[ 1755.212483][T32473] netlink: 'syz.0.8712': attribute type 10 has an invalid length.
[ 1755.220787][T32473] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8712'.
[ 1755.443901][T32478] netlink: 'syz.0.8713': attribute type 22 has an invalid length.
[ 1755.452252][T32478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8713'.
[ 1755.981832][T21850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1755.991419][T21850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1755.999966][T21850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1756.009813][T21850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1756.017748][T21850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1756.025093][T21850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1756.275858][T32509] netlink: 'syz.2.8724': attribute type 10 has an invalid length.
[ 1756.400095][T32513] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.8725'.
[ 1756.468794][T32515] netlink: 'syz.2.8727': attribute type 22 has an invalid length.
[ 1756.478079][T32515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8727'.
[ 1756.579344][T32500] chnl_net:caif_netlink_parms(): no params data found
[ 1756.795380][T32500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1756.809832][T32500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1756.818415][T32500] device bridge_slave_0 entered promiscuous mode
[ 1756.839238][T32500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1756.854112][T32500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1756.862546][T32500] device bridge_slave_1 entered promiscuous mode
[ 1756.911527][T32500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1756.928921][T32500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1757.027970][T32500] team0: Port device team_slave_0 added
[ 1757.043963][T32500] team0: Port device team_slave_1 added
[ 1757.098730][T32500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1757.113129][T32500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1757.165875][T32500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1757.214077][T32500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1757.237573][T32500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1757.278438][T32500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1757.420044][T32500] device hsr_slave_0 entered promiscuous mode
[ 1757.436616][T32500] device hsr_slave_1 entered promiscuous mode
[ 1757.525912][T32546] netlink: 'syz.3.8737': attribute type 22 has an invalid length.
[ 1757.537108][T32546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8737'.
[ 1757.694618][T32552] netlink: 'syz.0.8738': attribute type 10 has an invalid length.
[ 1757.861098][T32500] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1757.885645][T32500] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1757.921751][T32500] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1757.953766][T32500] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1758.063344][T13192] Bluetooth: hci0: command 0x0409 tx timeout
[ 1758.203496][T32500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1758.252056][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1758.265116][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1758.293602][T32500] 8021q: adding VLAN 0 to HW filter on device team0
[ 1758.327908][T32567] netlink: 'syz.2.8745': attribute type 11 has an invalid length.
[ 1758.343111][T32567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8745'.
[ 1758.355227][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1758.378169][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1758.394180][T24867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1758.401392][T24867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1758.424935][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1758.454389][T32567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1758.492081][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1758.516193][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1758.532207][T24867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1758.539521][T24867] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1758.587071][T32573] netlink: 'syz.3.8749': attribute type 22 has an invalid length.
[ 1758.602412][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8749'.
[ 1758.629950][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1758.651654][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1758.690772][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1758.708052][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1758.733147][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1758.754864][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1758.781305][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1758.823143][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1758.859429][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1758.890736][T32500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1758.915362][T32500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1758.950935][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1758.973767][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1759.018170][T32585] netlink: 'syz.2.8752': attribute type 46 has an invalid length.
[ 1759.040917][T32585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8752'.
[ 1759.546193][T32597] delete_channel: no stack
[ 1759.918747][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1759.940387][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1759.983943][T32500] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1760.102082][T32612] netlink: 'syz.2.8760': attribute type 22 has an invalid length.
[ 1760.111563][T32612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8760'.
[ 1760.144198][T13192] Bluetooth: hci0: command 0x041b tx timeout
[ 1760.488230][T32621] netlink: 'syz.4.8761': attribute type 10 has an invalid length.
[ 1760.789137][T32628] delete_channel: no stack
[ 1761.166154][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1761.203887][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1761.253603][T32500] device veth0_vlan entered promiscuous mode
[ 1761.268179][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1761.293884][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1761.318451][T32500] device veth1_vlan entered promiscuous mode
[ 1761.362131][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1761.386796][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1761.402097][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1761.411233][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1761.436202][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1761.471312][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1761.502090][T32500] device veth0_macvtap entered promiscuous mode
[ 1761.530164][T32646] netlink: 'syz.2.8772': attribute type 22 has an invalid length.
[ 1761.552182][T32646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8772'.
[ 1761.584186][T32500] device veth1_macvtap entered promiscuous mode
[ 1761.605121][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1761.627989][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1761.696273][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1761.767586][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1761.785265][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1761.796736][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1761.807262][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1761.818715][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1761.831672][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1761.842798][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1761.870983][T32500] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1761.909220][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1761.933547][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1761.978638][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1762.012972][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1762.050986][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1762.073795][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1762.106358][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1762.151191][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1762.197599][T32500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1762.226516][T13192] Bluetooth: hci0: command 0x040f tx timeout
[ 1762.266655][T32500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1762.294795][T32500] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1762.313096][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1762.334803][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1762.366915][T32500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1762.406911][T32500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1762.426210][T32500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1762.458443][T32500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1762.510837][T32661] delete_channel: no stack
[ 1762.692094][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1762.720147][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1762.743589][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1762.807522][T31745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1762.825921][T31745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1762.846510][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1763.389597][T32687] netlink: 'syz.4.8785': attribute type 22 has an invalid length.
[ 1763.409149][T32687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8785'.
[ 1763.421635][T32689] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8786'.
[ 1763.687207][T32690] delete_channel: no stack
[ 1764.231080][T32708] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8793'.
[ 1764.291985][T32708] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1764.310775][T21850] Bluetooth: hci0: command 0x0419 tx timeout
[ 1764.797426][T32728] netlink: 'syz.5.8801': attribute type 22 has an invalid length.
[ 1764.833062][T32728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8801'.
[ 1765.071733][T32730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8803'.
[ 1765.096131][T32735] delete_channel: no stack
[ 1765.345589][T32743] FAULT_INJECTION: forcing a failure.
[ 1765.345589][T32743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1765.373537][T32743] CPU: 0 PID: 32743 Comm: syz.5.8808 Not tainted syzkaller #0
[ 1765.381077][T32743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1765.391178][T32743] Call Trace:
[ 1765.394504][T32743]  <TASK>
[ 1765.397478][T32743]  dump_stack_lvl+0x188/0x24e
[ 1765.402210][T32743]  ? show_regs_print_info+0x12/0x12
[ 1765.407469][T32743]  ? load_image+0x400/0x400
[ 1765.412025][T32743]  ? __lock_acquire+0x7d10/0x7d10
[ 1765.417197][T32743]  should_fail_ex+0x399/0x4d0
[ 1765.421937][T32743]  strncpy_from_user+0x32/0x350
[ 1765.426875][T32743]  bpf_prog_load+0x1f3/0x1560
[ 1765.431696][T32743]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1765.437743][T32743]  ? lock_chain_count+0x20/0x20
[ 1765.442733][T32743]  ? map_freeze+0x390/0x390
[ 1765.447286][T32743]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1765.453494][T32743]  ? lockdep_hardirqs_on+0x94/0x140
[ 1765.458735][T32743]  ? copy_user_enhanced_fast_string+0xa/0x40
[ 1765.464766][T32743]  ? bpf_lsm_bpf+0x5/0x10
[ 1765.469134][T32743]  ? security_bpf+0x7a/0xa0
[ 1765.473673][T32743]  __sys_bpf+0x5b8/0x780
[ 1765.477952][T32743]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1765.483372][T32743]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1765.489599][T32743]  __x64_sys_bpf+0x78/0x90
[ 1765.494055][T32743]  do_syscall_64+0x4c/0xa0
[ 1765.498500][T32743]  ? clear_bhb_loop+0x60/0xb0
[ 1765.503207][T32743]  ? clear_bhb_loop+0x60/0xb0
[ 1765.507916][T32743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1765.513837][T32743] RIP: 0033:0x7f7aea39ce59
[ 1765.518293][T32743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1765.537938][T32743] RSP: 002b:00007f7aeb348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1765.546394][T32743] RAX: ffffffffffffffda RBX: 00007f7aea615fa0 RCX: 00007f7aea39ce59
[ 1765.554420][T32743] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 1765.562421][T32743] RBP: 00007f7aeb348090 R08: 0000000000000000 R09: 0000000000000000
[ 1765.570441][T32743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1765.578444][T32743] R13: 00007f7aea616038 R14: 00007f7aea615fa0 R15: 00007ffcf89d4318
[ 1765.586455][T32743]  </TASK>
[ 1766.240207][T13192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1766.258898][T13192] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1766.277959][T13192] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1766.287185][T13192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1766.294974][T13192] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1766.302312][T13192] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1766.554677][ T4329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.646171][T32755] netlink: 'syz.3.8813': attribute type 10 has an invalid length.
[ 1766.661144][T32755] team0: Device hsr_slave_0 failed to register rx_handler
[ 1766.808655][ T4329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.930249][ T4329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.996878][  T305] netlink: 'syz.4.8818': attribute type 22 has an invalid length.
[ 1767.020466][  T305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8818'.
[ 1767.136692][ T4329] team0: Port device netdevsim0 removed
[ 1767.146192][ T4329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.350079][T32749] chnl_net:caif_netlink_parms(): no params data found
[ 1767.615299][T32749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1767.623126][T32749] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.631871][T32749] device bridge_slave_0 entered promiscuous mode
[ 1767.642519][T32749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1767.685902][T32749] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.714693][T32749] device bridge_slave_1 entered promiscuous mode
[ 1767.866195][T32749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1767.936569][T32749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1768.092380][T32749] team0: Port device team_slave_0 added
[ 1768.159900][T32749] team0: Port device team_slave_1 added
[ 1768.310843][T32749] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1768.328212][T32749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1768.383363][T13192] Bluetooth: hci6: command 0x0409 tx timeout
[ 1768.402346][T32749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1768.491257][T32749] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1768.519782][T32749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1768.597144][T32749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1768.639118][  T344] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8830'.
[ 1768.666849][  T352] netlink: 'syz.3.8830': attribute type 9 has an invalid length.
[ 1768.716600][  T352] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.8830'.
[ 1768.845644][T32749] device hsr_slave_0 entered promiscuous mode
[ 1768.862292][T32749] device hsr_slave_1 entered promiscuous mode
[ 1768.891430][T32749] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1768.910902][T32749] Cannot create hsr debugfs directory
[ 1769.657976][  T373] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.8836'.
[ 1769.884123][  T373] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1770.160027][T13192] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[ 1770.463258][T13192] Bluetooth: hci6: command 0x041b tx timeout
[ 1770.893351][  T401] netlink: 'syz.5.8845': attribute type 39 has an invalid length.
[ 1771.106176][  T401] device hsr_slave_1 left promiscuous mode
[ 1771.688940][T32749] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1771.888145][T32749] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1771.919139][  T423] FAULT_INJECTION: forcing a failure.
[ 1771.919139][  T423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1772.007280][  T423] CPU: 1 PID: 423 Comm: syz.3.8851 Not tainted syzkaller #0
[ 1772.014663][  T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1772.024785][  T423] Call Trace:
[ 1772.028118][  T423]  <TASK>
[ 1772.031100][  T423]  dump_stack_lvl+0x188/0x24e
[ 1772.035851][  T423]  ? show_regs_print_info+0x12/0x12
[ 1772.041121][  T423]  ? load_image+0x400/0x400
[ 1772.045694][  T423]  ? __lock_acquire+0x7d10/0x7d10
[ 1772.050792][  T423]  ? snprintf+0xe5/0x140
[ 1772.055192][  T423]  should_fail_ex+0x399/0x4d0
[ 1772.059931][  T423]  _copy_to_user+0x2c/0x130
[ 1772.064591][  T423]  simple_read_from_buffer+0xe3/0x150
[ 1772.070024][  T423]  proc_fail_nth_read+0x1a6/0x220
[ 1772.078229][  T423]  ? proc_fault_inject_write+0x310/0x310
[ 1772.083916][  T423]  ? fsnotify_perm+0x248/0x550
[ 1772.088718][  T423]  ? proc_fault_inject_write+0x310/0x310
[ 1772.094396][  T423]  vfs_read+0x2de/0xa00
[ 1772.098630][  T423]  ? kernel_read+0x1e0/0x1e0
[ 1772.103270][  T423]  ? __fget_files+0x28/0x4b0
[ 1772.107905][  T423]  ? __fget_files+0x28/0x4b0
[ 1772.112536][  T423]  ? __fget_files+0x43d/0x4b0
[ 1772.117256][  T423]  ? __fdget_pos+0x2ae/0x360
[ 1772.121885][  T423]  ? ksys_read+0x71/0x250
[ 1772.126283][  T423]  ksys_read+0x14c/0x250
[ 1772.130582][  T423]  ? vfs_write+0xa30/0xa30
[ 1772.135060][  T423]  ? lockdep_hardirqs_on+0x94/0x140
[ 1772.140498][  T423]  do_syscall_64+0x4c/0xa0
[ 1772.144959][  T423]  ? clear_bhb_loop+0x60/0xb0
[ 1772.149673][  T423]  ? clear_bhb_loop+0x60/0xb0
[ 1772.154396][  T423]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1772.160418][  T423] RIP: 0033:0x7ff50015d68e
[ 1772.164872][  T423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1772.184602][  T423] RSP: 002b:00007ff4fe3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1772.193052][  T423] RAX: ffffffffffffffda RBX: 00007ff4fe3f66c0 RCX: 00007ff50015d68e
[ 1772.201057][  T423] RDX: 000000000000000f RSI: 00007ff4fe3f60a0 RDI: 0000000000000004
[ 1772.209060][  T423] RBP: 00007ff4fe3f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1772.217063][  T423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1772.225078][  T423] R13: 00007ff500416038 R14: 00007ff500415fa0 R15: 00007ffd4c67cf88
[ 1772.233121][  T423]  </TASK>
[ 1772.542997][T13192] Bluetooth: hci6: command 0x040f tx timeout
[ 1772.580542][T32749] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1772.611892][  T434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'.
[ 1772.874981][  T440] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8854'.
[ 1773.018692][  T434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'.
[ 1773.063672][T32749] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1773.103289][  T440] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8854'.
[ 1773.168755][  T432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8853'.
[ 1773.214385][  T439] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8854'.
[ 1773.233344][  T445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8854'.
[ 1773.387578][  T448] netlink: 'syz.4.8855': attribute type 10 has an invalid length.
[ 1773.493023][  T448] team0: Device hsr_slave_0 is already a lower device of the team interface
[ 1773.588100][ T4329] device hsr_slave_0 left promiscuous mode
[ 1773.607011][ T4329] device hsr_slave_1 left promiscuous mode
[ 1773.699628][ T4329] device veth1_macvtap left promiscuous mode
[ 1773.721539][ T4329] device veth0_macvtap left promiscuous mode
[ 1773.741531][ T4329] device veth1_vlan left promiscuous mode
[ 1773.761867][ T4329] device veth0_vlan left promiscuous mode
[ 1774.341958][ T4329] team0 (unregistering): Port device geneve1 removed
[ 1774.625649][T13192] Bluetooth: hci6: command 0x0419 tx timeout
[ 1774.685382][ T4329] team0 (unregistering): Port device hsr0 removed
[ 1774.866022][ T4329] team0 (unregistering): Port device team_slave_1 removed
[ 1774.915237][ T4329] team0 (unregistering): Port device team_slave_0 removed
[ 1774.969621][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1775.019062][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1775.299809][ T4329] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1775.332992][ T4329] bond0 (unregistering): Released all slaves
[ 1775.376310][  T462] netlink: 'syz.4.8858': attribute type 22 has an invalid length.
[ 1775.387623][  T462] __nla_validate_parse: 1 callbacks suppressed
[ 1775.387636][  T462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8858'.
[ 1775.404144][  T475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8862'.
[ 1775.438284][  T477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8863'.
[ 1775.448577][  T478] netlink: 'syz.0.8863': attribute type 9 has an invalid length.
[ 1775.462978][  T478] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.8863'.
[ 1775.583735][T32749] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1775.642116][T32749] 8021q: adding VLAN 0 to HW filter on device team0
[ 1775.678357][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1775.688812][  T481] netlink: 'syz.4.8864': attribute type 29 has an invalid length.
[ 1775.697650][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1775.742953][  T481] netlink: 'syz.4.8864': attribute type 29 has an invalid length.
[ 1775.765608][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1775.777964][  T486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8867'.
[ 1775.792300][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1775.813676][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1775.820936][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1775.831705][  T482] netlink: 'syz.4.8864': attribute type 29 has an invalid length.
[ 1775.890284][  T486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8867'.
[ 1775.945614][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1775.962260][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1775.986062][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1776.007093][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1776.014342][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1776.053544][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1776.085743][  T488] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8866'.
[ 1776.197746][  T488] device hsr_slave_0 left promiscuous mode
[ 1776.349115][  T489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8867'.
[ 1776.371575][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1776.381220][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1776.392986][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1776.405420][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1776.414942][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1776.426731][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1776.438878][  T490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8867'.
[ 1776.457112][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1776.469607][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1776.500636][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1776.509962][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1776.545274][T32749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1776.749229][  T499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8870'.
[ 1776.831123][  T500] netlink: 'syz.5.8869': attribute type 10 has an invalid length.
[ 1777.352369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1777.368774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1777.394884][T32749] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1777.479677][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1777.494123][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1777.567483][T32749] device veth0_vlan entered promiscuous mode
[ 1777.629853][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1777.640398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1777.657027][T32749] device veth1_vlan entered promiscuous mode
[ 1777.691292][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1777.702348][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1777.716809][  T511] device bond_slave_1 entered promiscuous mode
[ 1777.810033][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1777.823725][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1777.872378][T32749] device veth0_macvtap entered promiscuous mode
[ 1777.912478][T32749] device veth1_macvtap entered promiscuous mode
[ 1777.974063][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1778.041337][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.101912][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1778.176438][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.231225][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1778.264002][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.274881][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1778.286157][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.312782][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1778.358410][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.380736][T32749] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1778.417712][  T517] device bridge_slave_1 left promiscuous mode
[ 1778.450713][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1778.539866][  T517] device bridge_slave_0 left promiscuous mode
[ 1778.560098][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1778.757957][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1778.780146][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1778.793463][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1778.804420][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1778.829353][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1778.848814][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.859048][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1778.877045][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.889703][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1778.901733][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.911982][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1778.923871][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.934156][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1778.945565][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1778.983518][T32749] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1778.991098][  T523] netlink: 'syz.3.8876': attribute type 22 has an invalid length.
[ 1779.032103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1779.080768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1779.106989][T32749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1779.117457][T32749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1779.132427][T32749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1779.149120][T32749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1779.162093][  T529] netlink: 'syz.0.8879': attribute type 10 has an invalid length.
[ 1779.172837][  T529] device netdevsim0 entered promiscuous mode
[ 1779.315501][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1779.338527][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1779.412895][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1779.441766][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1779.475078][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1779.503566][T12421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1780.130030][  T547] netlink: 'syz.3.8887': attribute type 2 has an invalid length.
[ 1780.169503][  T547] netlink: 'syz.3.8887': attribute type 8 has an invalid length.
[ 1781.591603][  T563] netlink: 'syz.2.8892': attribute type 22 has an invalid length.
[ 1781.619376][  T563] __nla_validate_parse: 9 callbacks suppressed
[ 1781.619421][  T563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8892'.
[ 1781.899774][  T570] FAULT_INJECTION: forcing a failure.
[ 1781.899774][  T570] name failslab, interval 1, probability 0, space 0, times 0
[ 1781.921953][  T570] CPU: 0 PID: 570 Comm: syz.4.8893 Not tainted syzkaller #0
[ 1781.929310][  T570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1781.939426][  T570] Call Trace:
[ 1781.942743][  T570]  <TASK>
[ 1781.945709][  T570]  dump_stack_lvl+0x188/0x24e
[ 1781.950452][  T570]  ? show_regs_print_info+0x12/0x12
[ 1781.955709][  T570]  ? load_image+0x400/0x400
[ 1781.960264][  T570]  ? __might_sleep+0xd0/0xd0
[ 1781.964899][  T570]  ? __lock_acquire+0x7d10/0x7d10
[ 1781.969982][  T570]  should_fail_ex+0x399/0x4d0
[ 1781.974720][  T570]  should_failslab+0x5/0x20
[ 1781.979279][  T570]  slab_pre_alloc_hook+0x59/0x310
[ 1781.984368][  T570]  kmem_cache_alloc+0x56/0x2f0
[ 1781.989177][  T570]  ? getname_flags+0xb7/0x500
[ 1781.993907][  T570]  getname_flags+0xb7/0x500
[ 1781.998454][  T570]  do_sys_openat2+0xdd/0x4b0
[ 1782.003114][  T570]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1782.009410][  T570]  ? do_sys_open+0xe0/0xe0
[ 1782.013902][  T570]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1782.019948][  T570]  ? lock_chain_count+0x20/0x20
[ 1782.024850][  T570]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1782.030892][  T570]  __x64_sys_openat+0x135/0x160
[ 1782.035801][  T570]  do_syscall_64+0x4c/0xa0
[ 1782.040273][  T570]  ? clear_bhb_loop+0x60/0xb0
[ 1782.044999][  T570]  ? clear_bhb_loop+0x60/0xb0
[ 1782.049731][  T570]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1782.055774][  T570] RIP: 0033:0x7f635795d68e
[ 1782.060253][  T570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1782.080183][  T570] RSP: 002b:00007f6358897ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1782.088657][  T570] RAX: ffffffffffffffda RBX: 00007f63588986c0 RCX: 00007f635795d68e
[ 1782.096766][  T570] RDX: 0000000000000002 RSI: 00007f6358897f90 RDI: ffffffffffffff9c
[ 1782.104801][  T570] RBP: 00007f6358898090 R08: 0000000000000000 R09: 0000000000000000
[ 1782.112818][  T570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1782.120952][  T570] R13: 00007f6357c16038 R14: 00007f6357c15fa0 R15: 00007ffcf0904838
[ 1782.129002][  T570]  </TASK>
[ 1782.345233][T13192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1782.355053][T13192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1782.392662][T13192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1782.418191][T13192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1782.433783][T13192] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1782.444421][T13192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1782.933759][  T575] chnl_net:caif_netlink_parms(): no params data found
[ 1783.052506][  T595] FAULT_INJECTION: forcing a failure.
[ 1783.052506][  T595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1783.100036][  T595] CPU: 1 PID: 595 Comm: syz.2.8900 Not tainted syzkaller #0
[ 1783.107425][  T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1783.117610][  T595] Call Trace:
[ 1783.121021][  T595]  <TASK>
[ 1783.123997][  T595]  dump_stack_lvl+0x188/0x24e
[ 1783.128744][  T595]  ? show_regs_print_info+0x12/0x12
[ 1783.134012][  T595]  ? load_image+0x400/0x400
[ 1783.138567][  T595]  ? __lock_acquire+0x7d10/0x7d10
[ 1783.143642][  T595]  should_fail_ex+0x399/0x4d0
[ 1783.148379][  T595]  _copy_from_user+0x2c/0x170
[ 1783.153205][  T595]  ___sys_sendmsg+0x1c3/0x360
[ 1783.157956][  T595]  ? __sys_sendmsg+0x290/0x290
[ 1783.162807][  T595]  ? __lock_acquire+0x7d10/0x7d10
[ 1783.168018][  T595]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1783.172977][  T595]  ? __x64_sys_sendmsg+0x80/0x80
[ 1783.177994][  T595]  ? lockdep_hardirqs_on+0x94/0x140
[ 1783.183246][  T595]  do_syscall_64+0x4c/0xa0
[ 1783.187722][  T595]  ? clear_bhb_loop+0x60/0xb0
[ 1783.192465][  T595]  ? clear_bhb_loop+0x60/0xb0
[ 1783.197203][  T595]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1783.203155][  T595] RIP: 0033:0x7fe90e59ce59
[ 1783.207890][  T595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1783.227562][  T595] RSP: 002b:00007fe90f487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1783.236028][  T595] RAX: ffffffffffffffda RBX: 00007fe90e815fa0 RCX: 00007fe90e59ce59
[ 1783.244123][  T595] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[ 1783.252127][  T595] RBP: 00007fe90f487090 R08: 0000000000000000 R09: 0000000000000000
[ 1783.260147][  T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1783.268154][  T595] R13: 00007fe90e816038 R14: 00007fe90e815fa0 R15: 00007ffee3f62cf8
[ 1783.276266][  T595]  </TASK>
[ 1783.512449][  T575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1783.543703][  T575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1783.589050][  T575] device bridge_slave_0 entered promiscuous mode
[ 1783.627125][  T575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1783.689092][  T575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1783.747804][  T575] device bridge_slave_1 entered promiscuous mode
[ 1783.769298][  T601] delete_channel: no stack
[ 1783.806208][  T575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1783.827069][  T575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1783.936044][  T575] team0: Port device team_slave_0 added
[ 1784.478005][T21850] Bluetooth: hci2: command 0x0409 tx timeout
[ 1784.882436][  T575] team0: Port device team_slave_1 added
[ 1785.012957][  T575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1785.019986][  T575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1785.146641][  T575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1785.185579][  T575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1785.198681][  T622] netlink: 'syz.0.8908': attribute type 3 has an invalid length.
[ 1785.206937][  T575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1785.243110][  T622] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8908'.
[ 1785.268390][  T624] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.8907'.
[ 1785.283530][  T575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1785.340016][  T624] netlink: 6955 bytes leftover after parsing attributes in process `syz.5.8907'.
[ 1785.379078][  T575] device hsr_slave_0 entered promiscuous mode
[ 1785.481984][  T575] device hsr_slave_1 entered promiscuous mode
[ 1785.549058][  T629] device bridge_slave_1 left promiscuous mode
[ 1785.555689][  T629] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.579465][  T630] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8909'.
[ 1785.591797][  T629] device bridge_slave_0 left promiscuous mode
[ 1785.598720][  T629] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.797351][  T630] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.8909'.
[ 1785.829326][  T638] netlink: 'syz.0.8912': attribute type 2 has an invalid length.
[ 1785.857272][  T638] netlink: 'syz.0.8912': attribute type 8 has an invalid length.
[ 1785.872738][  T638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8912'.
[ 1786.288571][  T641] delete_channel: no stack
[ 1786.538795][  T575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.551310][T21850] Bluetooth: hci2: command 0x041b tx timeout
[ 1787.159515][  T575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1787.619367][  T575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.623445][T21850] Bluetooth: hci2: command 0x040f tx timeout
[ 1788.633223][  T575] team0: Port device netdevsim0 removed
[ 1788.686816][  T575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.791780][  T706] netlink: 'syz.4.8923': attribute type 2 has an invalid length.
[ 1788.810237][  T706] netlink: 'syz.4.8923': attribute type 8 has an invalid length.
[ 1788.826360][  T706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8923'.
[ 1789.051287][  T707] delete_channel: no stack
[ 1789.064387][  T575] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1789.078776][  T575] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1789.104808][  T575] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1789.143854][  T575] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1789.334037][  T575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1789.366384][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1789.376900][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1789.385872][  T714] FAULT_INJECTION: forcing a failure.
[ 1789.385872][  T714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1789.403536][  T575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1789.417917][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1789.427773][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1789.436082][  T714] CPU: 1 PID: 714 Comm: syz.2.8929 Not tainted syzkaller #0
[ 1789.443439][  T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1789.453545][  T714] Call Trace:
[ 1789.456857][  T714]  <TASK>
[ 1789.459841][  T714]  dump_stack_lvl+0x188/0x24e
[ 1789.464608][  T714]  ? show_regs_print_info+0x12/0x12
[ 1789.469878][  T714]  ? load_image+0x400/0x400
[ 1789.474483][  T714]  ? __lock_acquire+0x7d10/0x7d10
[ 1789.479576][  T714]  should_fail_ex+0x399/0x4d0
[ 1789.484314][  T714]  _copy_to_user+0x2c/0x130
[ 1789.488871][  T714]  bpf_test_finish+0x266/0x600
[ 1789.493691][  T714]  ? convert___skb_to_skb+0x580/0x580
[ 1789.499128][  T714]  ? convert_skb_to___skb+0x420/0x420
[ 1789.504539][  T714]  ? __build_skb+0x257/0x3c0
[ 1789.509172][  T714]  bpf_prog_test_run_skb+0xc99/0x12a0
[ 1789.514588][  T714]  ? cpu_online+0xa0/0xa0
[ 1789.518949][  T714]  bpf_prog_test_run+0x31e/0x390
[ 1789.523935][  T714]  __sys_bpf+0x62b/0x780
[ 1789.528216][  T714]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1789.533668][  T714]  ? lock_chain_count+0x20/0x20
[ 1789.538560][  T714]  __x64_sys_bpf+0x78/0x90
[ 1789.543021][  T714]  do_syscall_64+0x4c/0xa0
[ 1789.547473][  T714]  ? clear_bhb_loop+0x60/0xb0
[ 1789.552199][  T714]  ? clear_bhb_loop+0x60/0xb0
[ 1789.556919][  T714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1789.562864][  T714] RIP: 0033:0x7fe90e59ce59
[ 1789.567311][  T714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1789.586936][  T714] RSP: 002b:00007fe90f487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1789.595373][  T714] RAX: ffffffffffffffda RBX: 00007fe90e815fa0 RCX: 00007fe90e59ce59
[ 1789.603381][  T714] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a
[ 1789.611375][  T714] RBP: 00007fe90f487090 R08: 0000000000000000 R09: 0000000000000000
[ 1789.619401][  T714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1789.627400][  T714] R13: 00007fe90e816038 R14: 00007fe90e815fa0 R15: 00007ffee3f62cf8
[ 1789.635409][  T714]  </TASK>
[ 1789.677496][  T679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1789.684723][  T679] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1789.694322][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1789.732984][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1789.743927][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1789.784876][  T679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1789.792082][  T679] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1789.821014][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1789.834793][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1789.854212][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1789.882823][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1789.906422][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1789.921501][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1789.941880][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1789.969167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1789.998909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1790.034199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1790.079635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1790.120620][  T575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1790.381083][  T729] netlink: 'syz.5.8935': attribute type 11 has an invalid length.
[ 1790.587048][  T739] delete_channel: no stack
[ 1790.712726][T13192] Bluetooth: hci2: command 0x0419 tx timeout
[ 1790.789331][  T732] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8936'.
[ 1790.839057][  T732] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.8936'.
[ 1791.147323][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1791.156313][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1791.171415][  T575] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1791.235567][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1791.248240][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1791.309512][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1791.322109][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1791.341450][  T575] device veth0_vlan entered promiscuous mode
[ 1791.355847][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1791.369469][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1791.417630][  T575] device veth1_vlan entered promiscuous mode
[ 1791.539350][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1791.562591][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1791.586963][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.593526][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.625529][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1791.654719][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1791.709982][  T575] device veth0_macvtap entered promiscuous mode
[ 1791.738582][  T575] device veth1_macvtap entered promiscuous mode
[ 1791.791962][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.804198][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1791.815257][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.834506][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1791.845314][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.856593][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1791.867436][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.880258][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1791.891126][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.923805][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1791.947916][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1791.971835][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.003108][  T575] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1792.023256][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1792.045475][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1792.088750][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1792.149344][T31745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1792.224471][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.261901][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.272082][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.283503][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.290786][  T772] FAULT_INJECTION: forcing a failure.
[ 1792.290786][  T772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1792.295588][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.331479][  T772] CPU: 0 PID: 772 Comm: syz.0.8948 Not tainted syzkaller #0
[ 1792.338953][  T772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1792.349062][  T772] Call Trace:
[ 1792.352390][  T772]  <TASK>
[ 1792.355367][  T772]  dump_stack_lvl+0x188/0x24e
[ 1792.355521][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.360095][  T772]  ? show_regs_print_info+0x12/0x12
[ 1792.360132][  T772]  ? load_image+0x400/0x400
[ 1792.379781][  T772]  ? __might_fault+0xa6/0x120
[ 1792.384536][  T772]  should_fail_ex+0x399/0x4d0
[ 1792.389277][  T772]  copyin+0x1b/0x120
[ 1792.393228][  T772]  _copy_from_iter+0x447/0x1130
[ 1792.398143][  T772]  ? copyout_mc+0x110/0x110
[ 1792.402711][  T772]  ? __virt_addr_valid+0x188/0x540
[ 1792.403735][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.407870][  T772]  ? __virt_addr_valid+0x188/0x540
[ 1792.407908][  T772]  ? __virt_addr_valid+0x465/0x540
[ 1792.428644][  T772]  ? __check_object_size+0x500/0xa40
[ 1792.433988][  T772]  pfkey_sendmsg+0x1ff/0x1090
[ 1792.438724][  T772]  ? __might_sleep+0xd0/0xd0
[ 1792.443378][  T772]  ? pfkey_release+0x310/0x310
[ 1792.445829][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.448188][  T772]  ? aa_sk_perm+0x81f/0x950
[ 1792.448228][  T772]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1792.468790][  T772]  ? aa_af_perm+0x340/0x340
[ 1792.473387][  T772]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1792.479876][  T772]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1792.481424][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.486162][  T772]  ? aa_sock_msg_perm+0x94/0x150
[ 1792.486206][  T772]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1792.486230][  T772]  ? security_socket_sendmsg+0x7c/0xa0
[ 1792.486266][  T772]  ? pfkey_release+0x310/0x310
[ 1792.486293][  T772]  ____sys_sendmsg+0x5be/0x970
[ 1792.486343][  T772]  ? __sanitizer_cov_trace_pc+0x4/0x60
[ 1792.486376][  T772]  ? __sys_sendmsg_sock+0x30/0x30
[ 1792.486408][  T772]  ? __import_iovec+0x315/0x500
[ 1792.486443][  T772]  ? import_iovec+0x6f/0xa0
[ 1792.486472][  T772]  ___sys_sendmsg+0x2a2/0x360
[ 1792.486505][  T772]  ? ct_nmi_exit+0x145/0x1c0
[ 1792.486537][  T772]  ? __sys_sendmsg+0x290/0x290
[ 1792.486570][  T772]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1792.486661][  T772]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1792.486700][  T772]  ? __x64_sys_sendmsg+0x80/0x80
[ 1792.541987][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.542998][  T772]  ? lockdep_hardirqs_on+0x94/0x140
[ 1792.543037][  T772]  do_syscall_64+0x4c/0xa0
[ 1792.543068][  T772]  ? clear_bhb_loop+0x60/0xb0
[ 1792.543097][  T772]  ? clear_bhb_loop+0x60/0xb0
[ 1792.564450][  T575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1792.568035][  T772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1792.600364][  T575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1792.601850][  T772] RIP: 0033:0x7f495c59ce59
[ 1792.601878][  T772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1792.652280][  T772] RSP: 002b:00007f495d3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1792.660757][  T772] RAX: ffffffffffffffda RBX: 00007f495c815fa0 RCX: 00007f495c59ce59
[ 1792.668141][  T575] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1792.668772][  T772] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006
[ 1792.684115][  T772] RBP: 00007f495d3fb090 R08: 0000000000000000 R09: 0000000000000000
[ 1792.692152][  T772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1792.700181][  T772] R13: 00007f495c816038 R14: 00007f495c815fa0 R15: 00007ffc20ee7698
[ 1792.708243][  T772]  </TASK>
[ 1792.724611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1792.763788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1792.793433][  T575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1792.810393][  T575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1792.858178][  T575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1792.912918][  T575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1793.059046][  T774] delete_channel: no stack
[ 1793.193391][T31745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1793.201287][T31745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1793.254796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1793.336156][T12421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1793.355440][T12421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1793.381829][  T679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1793.542584][  T785] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.8953'.
[ 1793.633914][  T785] netlink: 6955 bytes leftover after parsing attributes in process `syz.5.8953'.
[ 1793.841431][  T796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8958'.
[ 1793.860387][  T796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8958'.
[ 1793.875336][  T796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8958'.
[ 1793.889951][  T796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8958'.
[ 1794.882600][  T809] delete_channel: no stack
[ 1795.484547][  T839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8973'.
[ 1795.505024][  T839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8973'.
[ 1795.530351][  T839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8973'.
[ 1795.563169][  T839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8973'.
[ 1795.598902][  T840] delete_channel: no stack
[ 1796.669407][  T862] FAULT_INJECTION: forcing a failure.
[ 1796.669407][  T862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1796.685069][  T862] CPU: 0 PID: 862 Comm: syz.0.8982 Not tainted syzkaller #0
[ 1796.692423][  T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1796.702613][  T862] Call Trace:
[ 1796.705934][  T862]  <TASK>
[ 1796.708909][  T862]  dump_stack_lvl+0x188/0x24e
[ 1796.713642][  T862]  ? show_regs_print_info+0x12/0x12
[ 1796.718890][  T862]  ? load_image+0x400/0x400
[ 1796.723444][  T862]  ? __lock_acquire+0x7d10/0x7d10
[ 1796.728533][  T862]  ? snprintf+0xe5/0x140
[ 1796.732810][  T862]  should_fail_ex+0x399/0x4d0
[ 1796.737530][  T862]  _copy_to_user+0x2c/0x130
[ 1796.742088][  T862]  simple_read_from_buffer+0xe3/0x150
[ 1796.747485][  T862]  proc_fail_nth_read+0x1a6/0x220
[ 1796.752554][  T862]  ? proc_fault_inject_write+0x310/0x310
[ 1796.758315][  T862]  ? fsnotify_perm+0x248/0x550
[ 1796.763106][  T862]  ? proc_fault_inject_write+0x310/0x310
[ 1796.768759][  T862]  vfs_read+0x2de/0xa00
[ 1796.772952][  T862]  ? kernel_read+0x1e0/0x1e0
[ 1796.777589][  T862]  ? __fget_files+0x28/0x4b0
[ 1796.782230][  T862]  ? __fget_files+0x28/0x4b0
[ 1796.786866][  T862]  ? __fget_files+0x43d/0x4b0
[ 1796.791606][  T862]  ? __fdget_pos+0x2ae/0x360
[ 1796.796237][  T862]  ? ksys_read+0x71/0x250
[ 1796.800778][  T862]  ksys_read+0x14c/0x250
[ 1796.805084][  T862]  ? vfs_write+0xa30/0xa30
[ 1796.809545][  T862]  ? lockdep_hardirqs_on+0x94/0x140
[ 1796.814792][  T862]  do_syscall_64+0x4c/0xa0
[ 1796.819273][  T862]  ? clear_bhb_loop+0x60/0xb0
[ 1796.823997][  T862]  ? clear_bhb_loop+0x60/0xb0
[ 1796.828740][  T862]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1796.834667][  T862] RIP: 0033:0x7f495c55d68e
[ 1796.839102][  T862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1796.858735][  T862] RSP: 002b:00007f495d3fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1796.867177][  T862] RAX: ffffffffffffffda RBX: 00007f495d3fb6c0 RCX: 00007f495c55d68e
[ 1796.875178][  T862] RDX: 000000000000000f RSI: 00007f495d3fb0a0 RDI: 0000000000000004
[ 1796.883176][  T862] RBP: 00007f495d3fb090 R08: 0000000000000000 R09: 0000000000000000
[ 1796.891192][  T862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1796.899194][  T862] R13: 00007f495c816038 R14: 00007f495c815fa0 R15: 00007ffc20ee7698
[ 1796.907211][  T862]  </TASK>
[ 1797.334158][  T875] delete_channel: no stack
[ 1797.640046][  T884] mac80211_hwsim hwsim315 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1797.692114][  T888] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8989'.
[ 1797.761664][  T894] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8992'.
[ 1798.774306][  T912] FAULT_INJECTION: forcing a failure.
[ 1798.774306][  T912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1798.815184][  T912] CPU: 0 PID: 912 Comm: syz.2.8997 Not tainted syzkaller #0
[ 1798.822568][  T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1798.832667][  T912] Call Trace:
[ 1798.835985][  T912]  <TASK>
[ 1798.838952][  T912]  dump_stack_lvl+0x188/0x24e
[ 1798.843702][  T912]  ? show_regs_print_info+0x12/0x12
[ 1798.848969][  T912]  ? load_image+0x400/0x400
[ 1798.853531][  T912]  ? __lock_acquire+0x7d10/0x7d10
[ 1798.858619][  T912]  should_fail_ex+0x399/0x4d0
[ 1798.863352][  T912]  _copy_from_user+0x2c/0x170
[ 1798.868073][  T912]  ___sys_recvmsg+0x172/0x590
[ 1798.872803][  T912]  ? __sys_recvmsg+0x290/0x290
[ 1798.877619][  T912]  ? common_file_perm+0x171/0x1c0
[ 1798.882687][  T912]  ? __fget_files+0x43d/0x4b0
[ 1798.887434][  T912]  __x64_sys_recvmsg+0x205/0x2e0
[ 1798.892433][  T912]  ? ___sys_recvmsg+0x590/0x590
[ 1798.897353][  T912]  ? lockdep_hardirqs_on+0x94/0x140
[ 1798.902588][  T912]  do_syscall_64+0x4c/0xa0
[ 1798.907041][  T912]  ? clear_bhb_loop+0x60/0xb0
[ 1798.911749][  T912]  ? clear_bhb_loop+0x60/0xb0
[ 1798.916461][  T912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1798.922405][  T912] RIP: 0033:0x7fe90e59ce59
[ 1798.926882][  T912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1798.946553][  T912] RSP: 002b:00007fe90f487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1798.955027][  T912] RAX: ffffffffffffffda RBX: 00007fe90e815fa0 RCX: 00007fe90e59ce59
[ 1798.963023][  T912] RDX: 0000000000000020 RSI: 0000200000001280 RDI: 0000000000000003
[ 1798.971018][  T912] RBP: 00007fe90f487090 R08: 0000000000000000 R09: 0000000000000000
[ 1798.979019][  T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1798.987012][  T912] R13: 00007fe90e816038 R14: 00007fe90e815fa0 R15: 00007ffee3f62cf8
[ 1798.995018][  T912]  </TASK>
[ 1799.074424][  T920] netlink: 'syz.3.8998': attribute type 3 has an invalid length.
[ 1799.100100][  T920] __nla_validate_parse: 3 callbacks suppressed
[ 1799.100119][  T920] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8998'.
[ 1799.167074][  T923] delete_channel: no stack
[ 1799.746002][T24867] wlan1: Trigger new scan to find an IBSS to join
[ 1800.083399][  T948] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 1800.140229][  T948] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 1800.164165][  T950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 1800.189314][  T947] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 1801.164215][  T961] delete_channel: no stack
[ 1802.307239][  T987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9023'.
[ 1802.335852][  T987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9023'.
[ 1802.359988][  T988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9023'.
[ 1802.386656][  T987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9023'.
[ 1802.743931][ T4329] wlan1: Trigger new scan to find an IBSS to join
[ 1803.631309][  T998] delete_channel: no stack
[ 1803.931552][ T1015] netlink: 'syz.0.9033': attribute type 22 has an invalid length.
[ 1803.974396][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9033'.
[ 1804.069138][ T1032] netlink: 'syz.5.9034': attribute type 3 has an invalid length.
[ 1804.116602][ T1032] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9034'.
[ 1804.190481][ T1035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9036'.
[ 1804.219563][ T1035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9036'.
[ 1804.267709][ T1037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9036'.
[ 1804.293136][ T1035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9036'.
[ 1804.635578][ T1047] netlink: 'syz.0.9038': attribute type 3 has an invalid length.
[ 1804.699345][ T1047] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9038'.
[ 1805.232065][ T1053] delete_channel: no stack
[ 1805.434969][ T1064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9045'.
[ 1805.460628][ T1064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9045'.
[ 1805.497271][ T1065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9045'.
[ 1805.529180][ T1064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9045'.
[ 1805.566080][ T1064] FAULT_INJECTION: forcing a failure.
[ 1805.566080][ T1064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1805.609477][ T1064] CPU: 0 PID: 1064 Comm: syz.4.9045 Not tainted syzkaller #0
[ 1805.616967][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1805.627101][ T1064] Call Trace:
[ 1805.630454][ T1064]  <TASK>
[ 1805.633457][ T1064]  dump_stack_lvl+0x188/0x24e
[ 1805.638249][ T1064]  ? show_regs_print_info+0x12/0x12
[ 1805.643553][ T1064]  ? load_image+0x400/0x400
[ 1805.648152][ T1064]  ? __lock_acquire+0x7d10/0x7d10
[ 1805.653280][ T1064]  ? snprintf+0xe5/0x140
[ 1805.657620][ T1064]  should_fail_ex+0x399/0x4d0
[ 1805.662414][ T1064]  _copy_to_user+0x2c/0x130
[ 1805.667026][ T1064]  simple_read_from_buffer+0xe3/0x150
[ 1805.672599][ T1064]  proc_fail_nth_read+0x1a6/0x220
[ 1805.677727][ T1064]  ? proc_fault_inject_write+0x310/0x310
[ 1805.683464][ T1064]  ? fsnotify_perm+0x248/0x550
[ 1805.688345][ T1064]  ? proc_fault_inject_write+0x310/0x310
[ 1805.694086][ T1064]  vfs_read+0x2de/0xa00
[ 1805.698348][ T1064]  ? kernel_read+0x1e0/0x1e0
[ 1805.703045][ T1064]  ? __fget_files+0x28/0x4b0
[ 1805.707721][ T1064]  ? __fget_files+0x28/0x4b0
[ 1805.712407][ T1064]  ? __fget_files+0x43d/0x4b0
[ 1805.717210][ T1064]  ? __fdget_pos+0x2ae/0x360
[ 1805.721890][ T1064]  ? ksys_read+0x71/0x250
[ 1805.726417][ T1064]  ksys_read+0x14c/0x250
[ 1805.730759][ T1064]  ? vfs_write+0xa30/0xa30
[ 1805.735285][ T1064]  ? lockdep_hardirqs_on+0x94/0x140
[ 1805.740592][ T1064]  do_syscall_64+0x4c/0xa0
[ 1805.745100][ T1064]  ? clear_bhb_loop+0x60/0xb0
[ 1805.749859][ T1064]  ? clear_bhb_loop+0x60/0xb0
[ 1805.754634][ T1064]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1805.760645][ T1064] RIP: 0033:0x7f635795d68e
[ 1805.765140][ T1064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1805.784822][ T1064] RSP: 002b:00007f6358897fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1805.793321][ T1064] RAX: ffffffffffffffda RBX: 00007f63588986c0 RCX: 00007f635795d68e
[ 1805.801373][ T1064] RDX: 000000000000000f RSI: 00007f63588980a0 RDI: 0000000000000004
[ 1805.809415][ T1064] RBP: 00007f6358898090 R08: 0000000000000000 R09: 0000000000000000
[ 1805.817457][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1805.825500][ T1064] R13: 00007f6357c16038 R14: 00007f6357c15fa0 R15: 00007ffcf0904838
[ 1805.833629][ T1064]  </TASK>
[ 1805.842467][    T9] wlan1: Trigger new scan to find an IBSS to join
[ 1805.873902][ T1067] device bridge_slave_1 left promiscuous mode
[ 1805.898719][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1805.927877][ T1067] device bridge_slave_0 left promiscuous mode
[ 1805.957815][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1806.783857][ T4329] wlan1: Creating new IBSS network, BSSID 2e:9f:75:05:e0:be
[ 1806.802528][ T1095] mac80211_hwsim hwsim301 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1809.619243][ T1141] mac80211_hwsim hwsim301 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1810.368494][ T1155] __nla_validate_parse: 4 callbacks suppressed
[ 1810.368533][ T1155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9071'.
[ 1810.422056][ T1155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9071'.
[ 1810.439471][ T1157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9071'.
[ 1810.468251][ T1155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9071'.
[ 1810.505335][ T1163] FAULT_INJECTION: forcing a failure.
[ 1810.505335][ T1163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1810.549714][ T1163] CPU: 1 PID: 1163 Comm: syz.5.9074 Not tainted syzkaller #0
[ 1810.557284][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1810.567385][ T1163] Call Trace:
[ 1810.570720][ T1163]  <TASK>
[ 1810.573696][ T1163]  dump_stack_lvl+0x188/0x24e
[ 1810.578459][ T1163]  ? show_regs_print_info+0x12/0x12
[ 1810.583726][ T1163]  ? load_image+0x400/0x400
[ 1810.588305][ T1163]  ? __lock_acquire+0x7d10/0x7d10
[ 1810.593406][ T1163]  should_fail_ex+0x399/0x4d0
[ 1810.598142][ T1163]  _copy_to_user+0x2c/0x130
[ 1810.602711][ T1163]  bpf_verifier_vlog+0x172/0x390
[ 1810.607711][ T1163]  __btf_verifier_log+0xdf/0x130
[ 1810.612720][ T1163]  ? btf_check_sec_info+0x350/0x350
[ 1810.617984][ T1163]  ? __virt_addr_valid+0x188/0x540
[ 1810.623154][ T1163]  ? btf_parse_hdr+0x1e0/0x7e0
[ 1810.627971][ T1163]  btf_parse_hdr+0x431/0x7e0
[ 1810.632620][ T1163]  btf_new_fd+0x3c6/0x780
[ 1810.637010][ T1163]  __sys_bpf+0x612/0x780
[ 1810.641302][ T1163]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1810.646741][ T1163]  ? lock_chain_count+0x20/0x20
[ 1810.651654][ T1163]  __x64_sys_bpf+0x78/0x90
[ 1810.656141][ T1163]  do_syscall_64+0x4c/0xa0
[ 1810.660612][ T1163]  ? clear_bhb_loop+0x60/0xb0
[ 1810.665348][ T1163]  ? clear_bhb_loop+0x60/0xb0
[ 1810.670103][ T1163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1810.676054][ T1163] RIP: 0033:0x7f7aea39ce59
[ 1810.680541][ T1163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1810.700208][ T1163] RSP: 002b:00007f7aeb348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1810.708668][ T1163] RAX: ffffffffffffffda RBX: 00007f7aea615fa0 RCX: 00007f7aea39ce59
[ 1810.716713][ T1163] RDX: 0000000000000028 RSI: 0000200000004680 RDI: 0000000000000012
[ 1810.724724][ T1163] RBP: 00007f7aeb348090 R08: 0000000000000000 R09: 0000000000000000
[ 1810.732742][ T1163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1810.740763][ T1163] R13: 00007f7aea616038 R14: 00007f7aea615fa0 R15: 00007ffcf89d4318
[ 1810.748799][ T1163]  </TASK>
[ 1811.076048][ T1174] netlink: 'syz.4.9079': attribute type 4 has an invalid length.
[ 1811.089568][ T1174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9079'.
[ 1811.161024][ T1174] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1811.367264][ T1186] mac80211_hwsim hwsim310 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1811.417992][ T1187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9082'.
[ 1812.557610][ T1215] netlink: 'syz.5.9092': attribute type 4 has an invalid length.
[ 1812.578802][ T1215] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9092'.
[ 1812.643260][ T1215] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1812.896615][ T1221] netlink: 'syz.3.9095': attribute type 4 has an invalid length.
[ 1812.924059][ T1221] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9095'.
[ 1813.014298][ T1221] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1814.479188][ T1266] FAULT_INJECTION: forcing a failure.
[ 1814.479188][ T1266] name failslab, interval 1, probability 0, space 0, times 0
[ 1814.512961][ T1266] CPU: 1 PID: 1266 Comm: syz.2.9106 Not tainted syzkaller #0
[ 1814.520468][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1814.530609][ T1266] Call Trace:
[ 1814.533958][ T1266]  <TASK>
[ 1814.537048][ T1266]  dump_stack_lvl+0x188/0x24e
[ 1814.541831][ T1266]  ? show_regs_print_info+0x12/0x12
[ 1814.547131][ T1266]  ? load_image+0x400/0x400
[ 1814.551735][ T1266]  ? __schedule+0x11d9/0x40e0
[ 1814.556530][ T1266]  should_fail_ex+0x399/0x4d0
[ 1814.561310][ T1266]  should_failslab+0x5/0x20
[ 1814.565884][ T1266]  slab_pre_alloc_hook+0x59/0x310
[ 1814.570425][ T1264] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9103'.
[ 1814.570982][ T1266]  kmem_cache_alloc_node+0x5a/0x320
[ 1814.571021][ T1266]  ? __alloc_skb+0xfc/0x7e0
[ 1814.571088][ T1266]  __alloc_skb+0xfc/0x7e0
[ 1814.571156][ T1266]  wireless_send_event+0x2d2/0xbf0
[ 1814.571218][ T1266]  ? __cfg80211_wext_siwmode+0x158/0x290
[ 1814.571285][ T1266]  ? wireless_nlevent_flush+0x100/0x100
[ 1814.571346][ T1266]  ? full_name_hash+0x8e/0xe0
[ 1814.571404][ T1266]  ioctl_standard_call+0x15a/0x2b0
[ 1814.571452][ T1266]  ? __cfg80211_wext_giwfreq+0x8b0/0x8b0
[ 1814.571498][ T1266]  wext_ioctl_dispatch+0x3da/0x470
[ 1814.571535][ T1266]  ? wext_ioctl_dispatch+0x470/0x470
[ 1814.571582][ T1266]  ? iw_handler_get_private+0x1e0/0x1e0
[ 1814.571640][ T1266]  wext_handle_ioctl+0x113/0x1d0
[ 1814.571697][ T1266]  ? call_commit_handler+0xf0/0xf0
[ 1814.571811][ T1266]  sock_ioctl+0x143/0x710
[ 1814.571858][ T1266]  ? sock_poll+0x410/0x410
[ 1814.571938][ T1266]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1814.571978][ T1266]  ? security_file_ioctl+0x7c/0xa0
[ 1814.672632][ T1266]  ? sock_poll+0x410/0x410
[ 1814.677131][ T1266]  __se_sys_ioctl+0xfa/0x170
[ 1814.681824][ T1266]  do_syscall_64+0x4c/0xa0
[ 1814.686317][ T1266]  ? clear_bhb_loop+0x60/0xb0
[ 1814.691069][ T1266]  ? clear_bhb_loop+0x60/0xb0
[ 1814.695830][ T1266]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1814.701789][ T1266] RIP: 0033:0x7fe90e59ce59
[ 1814.706274][ T1266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1814.725957][ T1266] RSP: 002b:00007fe90f466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1814.734456][ T1266] RAX: ffffffffffffffda RBX: 00007fe90e816090 RCX: 00007fe90e59ce59
[ 1814.742506][ T1266] RDX: 0000200000000140 RSI: 0000000000008b06 RDI: 0000000000000009
[ 1814.750557][ T1266] RBP: 00007fe90f466090 R08: 0000000000000000 R09: 0000000000000000
[ 1814.758599][ T1266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1814.766629][ T1266] R13: 00007fe90e816128 R14: 00007fe90e816090 R15: 00007ffee3f62cf8
[ 1814.774740][ T1266]  </TASK>
[ 1815.044796][ T1264] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1815.061317][ T1264] CPU: 0 PID: 1264 Comm: syz.4.9103 Not tainted syzkaller #0
[ 1815.068790][ T1264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1815.078921][ T1264] Call Trace:
[ 1815.082245][ T1264]  <TASK>
[ 1815.085223][ T1264]  dump_stack_lvl+0x188/0x24e
[ 1815.090052][ T1264]  ? show_regs_print_info+0x12/0x12
[ 1815.095324][ T1264]  ? load_image+0x400/0x400
[ 1815.099993][ T1264]  sysfs_warn_dup+0x8a/0xa0
[ 1815.104666][ T1264]  sysfs_do_create_link_sd+0xc0/0x110
[ 1815.110109][ T1264]  device_add+0x7ed/0xfb0
[ 1815.114516][ T1264]  wiphy_register+0x1d9f/0x2ac0
[ 1815.119492][ T1264]  ? cfg80211_event_work+0x40/0x40
[ 1815.124683][ T1264]  ? minstrel_ht_alloc+0x894/0xa20
[ 1815.129871][ T1264]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1815.136000][ T1264]  ieee80211_register_hw+0x2d00/0x39f0
[ 1815.141551][ T1264]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1815.147165][ T1264]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1815.152794][ T1264]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1815.158691][ T1264]  ? memset+0x1e/0x40
[ 1815.162732][ T1264]  ? __hrtimer_init+0x186/0x270
[ 1815.167645][ T1264]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1815.173448][ T1264]  hwsim_new_radio_nl+0xafa/0xce0
[ 1815.178558][ T1264]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1815.184161][ T1264]  ? end_current_label_crit_section+0x170/0x170
[ 1815.190464][ T1264]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1815.196424][ T1264]  ? bpf_lsm_capable+0x5/0x10
[ 1815.201163][ T1264]  ? security_capable+0x85/0xb0
[ 1815.206086][ T1264]  genl_rcv_msg+0x604/0x790
[ 1815.210703][ T1264]  ? genl_bind+0x360/0x360
[ 1815.215178][ T1264]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1815.221609][ T1264]  netlink_rcv_skb+0x1fb/0x450
[ 1815.226439][ T1264]  ? genl_bind+0x360/0x360
[ 1815.231064][ T1264]  ? netlink_ack+0x1170/0x1170
[ 1815.235924][ T1264]  ? down_read+0x1a8/0x2d0
[ 1815.240427][ T1264]  genl_rcv+0x24/0x40
[ 1815.244475][ T1264]  netlink_unicast+0x74d/0x8d0
[ 1815.249314][ T1264]  netlink_sendmsg+0x8ad/0xbd0
[ 1815.254163][ T1264]  ? netlink_getsockopt+0x550/0x550
[ 1815.259435][ T1264]  ? aa_sock_msg_perm+0x94/0x150
[ 1815.264433][ T1264]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1815.269778][ T1264]  ? security_socket_sendmsg+0x7c/0xa0
[ 1815.275304][ T1264]  ? netlink_getsockopt+0x550/0x550
[ 1815.280572][ T1264]  ____sys_sendmsg+0x5be/0x970
[ 1815.285408][ T1264]  ? __sys_sendmsg_sock+0x30/0x30
[ 1815.290508][ T1264]  ? __import_iovec+0x315/0x500
[ 1815.295450][ T1264]  ? import_iovec+0x6f/0xa0
[ 1815.300005][ T1264]  ___sys_sendmsg+0x2a2/0x360
[ 1815.304746][ T1264]  ? __sys_sendmsg+0x290/0x290
[ 1815.309635][ T1264]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1815.314553][ T1264]  ? __x64_sys_sendmsg+0x80/0x80
[ 1815.319568][ T1264]  ? lockdep_hardirqs_on+0x94/0x140
[ 1815.324825][ T1264]  do_syscall_64+0x4c/0xa0
[ 1815.329337][ T1264]  ? clear_bhb_loop+0x60/0xb0
[ 1815.334081][ T1264]  ? clear_bhb_loop+0x60/0xb0
[ 1815.338821][ T1264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1815.344946][ T1264] RIP: 0033:0x7f635799ce59
[ 1815.349408][ T1264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1815.369074][ T1264] RSP: 002b:00007f6358856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1815.377554][ T1264] RAX: ffffffffffffffda RBX: 00007f6357c16180 RCX: 00007f635799ce59
[ 1815.385590][ T1264] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[ 1815.393619][ T1264] RBP: 00007f6357a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1815.401825][ T1264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1815.409852][ T1264] R13: 00007f6357c16218 R14: 00007f6357c16180 R15: 00007ffcf0904838
[ 1815.417901][ T1264]  </TASK>
[ 1817.082246][ T1313] netlink: 'syz.0.9118': attribute type 13 has an invalid length.
[ 1817.092827][ T1313] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9118'.
[ 1817.144418][ T1313] erspan0: refused to change device tx_queue_len
[ 1817.186164][ T1315] netlink: 'syz.0.9118': attribute type 13 has an invalid length.
[ 1817.223982][ T1315] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9118'.
[ 1817.273027][ T1315] erspan0: refused to change device tx_queue_len
[ 1817.301191][ T1327] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9120'.
[ 1817.342376][ T1327] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9120'.
[ 1818.189537][ T1337] FAULT_INJECTION: forcing a failure.
[ 1818.189537][ T1337] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1818.266253][ T1337] CPU: 1 PID: 1337 Comm: syz.2.9122 Not tainted syzkaller #0
[ 1818.273742][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1818.283876][ T1337] Call Trace:
[ 1818.287214][ T1337]  <TASK>
[ 1818.290208][ T1337]  dump_stack_lvl+0x188/0x24e
[ 1818.294978][ T1337]  ? show_regs_print_info+0x12/0x12
[ 1818.300265][ T1337]  ? load_image+0x400/0x400
[ 1818.304880][ T1337]  ? __might_fault+0xa6/0x120
[ 1818.309657][ T1337]  should_fail_ex+0x399/0x4d0
[ 1818.314421][ T1337]  copyin+0x1b/0x120
[ 1818.318394][ T1337]  _copy_from_iter+0x447/0x1130
[ 1818.323351][ T1337]  ? copyout_mc+0x110/0x110
[ 1818.327963][ T1337]  ? copyout_mc+0x110/0x110
[ 1818.332548][ T1337]  ? __virt_addr_valid+0x188/0x540
[ 1818.337764][ T1337]  ? page_copy_sane+0x194/0x390
[ 1818.342761][ T1337]  copy_page_from_iter+0x77/0x100
[ 1818.348029][ T1337]  skb_copy_datagram_from_iter+0x2b3/0x690
[ 1818.353948][ T1337]  unix_stream_sendmsg+0x4d5/0xa70
[ 1818.359203][ T1337]  ? unix_show_fdinfo+0x2c0/0x2c0
[ 1818.364302][ T1337]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1818.370824][ T1337]  ? aa_sock_msg_perm+0x94/0x150
[ 1818.375935][ T1337]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1818.381287][ T1337]  ? security_socket_sendmsg+0x7c/0xa0
[ 1818.386844][ T1337]  ? unix_show_fdinfo+0x2c0/0x2c0
[ 1818.391957][ T1337]  ____sys_sendmsg+0x5be/0x970
[ 1818.396862][ T1337]  ? __sys_sendmsg_sock+0x30/0x30
[ 1818.401979][ T1337]  ? __import_iovec+0x315/0x500
[ 1818.407036][ T1337]  ? import_iovec+0x6f/0xa0
[ 1818.411644][ T1337]  ___sys_sendmsg+0x2a2/0x360
[ 1818.416442][ T1337]  ? __sys_sendmsg+0x290/0x290
[ 1818.421376][ T1337]  ? __lock_acquire+0x7d10/0x7d10
[ 1818.426605][ T1337]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1818.431578][ T1337]  ? __x64_sys_sendmsg+0x80/0x80
[ 1818.436604][ T1337]  ? lockdep_hardirqs_on+0x94/0x140
[ 1818.441846][ T1337]  do_syscall_64+0x4c/0xa0
[ 1818.446298][ T1337]  ? clear_bhb_loop+0x60/0xb0
[ 1818.451104][ T1337]  ? clear_bhb_loop+0x60/0xb0
[ 1818.455823][ T1337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1818.461752][ T1337] RIP: 0033:0x7fe90e59ce59
[ 1818.466215][ T1337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.485875][ T1337] RSP: 002b:00007fe90f445028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1818.494375][ T1337] RAX: ffffffffffffffda RBX: 00007fe90e816180 RCX: 00007fe90e59ce59
[ 1818.502411][ T1337] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003
[ 1818.510421][ T1337] RBP: 00007fe90f445090 R08: 0000000000000000 R09: 0000000000000000
[ 1818.518425][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1818.526451][ T1337] R13: 00007fe90e816218 R14: 00007fe90e816180 R15: 00007ffee3f62cf8
[ 1818.534529][ T1337]  </TASK>
[ 1819.722784][ T1353] FAULT_INJECTION: forcing a failure.
[ 1819.722784][ T1353] name failslab, interval 1, probability 0, space 0, times 0
[ 1819.777553][ T1353] CPU: 0 PID: 1353 Comm: syz.2.9129 Not tainted syzkaller #0
[ 1819.785023][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1819.795129][ T1353] Call Trace:
[ 1819.798471][ T1353]  <TASK>
[ 1819.801445][ T1353]  dump_stack_lvl+0x188/0x24e
[ 1819.806189][ T1353]  ? show_regs_print_info+0x12/0x12
[ 1819.811451][ T1353]  ? load_image+0x400/0x400
[ 1819.816016][ T1353]  ? __might_sleep+0xd0/0xd0
[ 1819.820656][ T1353]  ? __lock_acquire+0x7d10/0x7d10
[ 1819.825740][ T1353]  should_fail_ex+0x399/0x4d0
[ 1819.830467][ T1353]  should_failslab+0x5/0x20
[ 1819.835012][ T1353]  slab_pre_alloc_hook+0x59/0x310
[ 1819.840082][ T1353]  ? __schedule+0x119d/0x40e0
[ 1819.844815][ T1353]  ? rtnl_newlink+0x10c/0x20a0
[ 1819.849636][ T1353]  __kmem_cache_alloc_node+0x4f/0x260
[ 1819.855061][ T1353]  ? rtnl_newlink+0x10c/0x20a0
[ 1819.859881][ T1353]  kmalloc_trace+0x26/0xe0
[ 1819.864363][ T1353]  ? rtnl_setlink+0x510/0x510
[ 1819.869098][ T1353]  rtnl_newlink+0x10c/0x20a0
[ 1819.873749][ T1353]  ? __schedule+0x11d9/0x40e0
[ 1819.878498][ T1353]  ? __mutex_lock+0x806/0xaf0
[ 1819.883236][ T1353]  ? __lock_acquire+0x7d10/0x7d10
[ 1819.888317][ T1353]  ? do_raw_spin_lock+0x128/0x2f0
[ 1819.893407][ T1353]  ? rtnl_setlink+0x510/0x510
[ 1819.898147][ T1353]  ? __rwlock_init+0x140/0x140
[ 1819.902975][ T1353]  ? do_raw_spin_unlock+0x11d/0x230
[ 1819.908229][ T1353]  ? __mutex_lock+0x810/0xaf0
[ 1819.912972][ T1353]  ? __mutex_lock+0x3b2/0xaf0
[ 1819.917715][ T1353]  ? rtnetlink_rcv_msg+0x824/0xfc0
[ 1819.922886][ T1353]  ? mutex_lock_nested+0x10/0x10
[ 1819.927896][ T1353]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1819.933102][ T1353]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1819.938275][ T1353]  ? rtnl_setlink+0x510/0x510
[ 1819.943021][ T1353]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1819.948031][ T1353]  ? rtnetlink_bind+0x80/0x80
[ 1819.952867][ T1353]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1819.958285][ T1353]  ? lockdep_hardirqs_on+0x94/0x140
[ 1819.963539][ T1353]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1819.968956][ T1353]  ? _local_bh_enable+0xa0/0xa0
[ 1819.973865][ T1353]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1819.979028][ T1353]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1819.984198][ T1353]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1819.989463][ T1353]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1819.994646][ T1353]  ? ref_tracker_free+0x68c/0x840
[ 1819.999740][ T1353]  ? __copy_skb_header+0x3ba/0x4f0
[ 1820.004932][ T1353]  ? refcount_inc+0x70/0x70
[ 1820.009492][ T1353]  ? memcpy+0x3c/0x60
[ 1820.013527][ T1353]  ? __copy_skb_header+0x3ba/0x4f0
[ 1820.018698][ T1353]  ? __skb_clone+0x480/0x790
[ 1820.023352][ T1353]  netlink_rcv_skb+0x1fb/0x450
[ 1820.028158][ T1353]  ? rtnetlink_bind+0x80/0x80
[ 1820.032888][ T1353]  ? netlink_ack+0x1170/0x1170
[ 1820.037699][ T1353]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1820.042945][ T1353]  netlink_unicast+0x74d/0x8d0
[ 1820.047756][ T1353]  netlink_sendmsg+0x8ad/0xbd0
[ 1820.052561][ T1353]  ? netlink_getsockopt+0x550/0x550
[ 1820.057802][ T1353]  ? aa_sock_msg_perm+0x94/0x150
[ 1820.062774][ T1353]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1820.068186][ T1353]  ? security_socket_sendmsg+0x7c/0xa0
[ 1820.073724][ T1353]  ? netlink_getsockopt+0x550/0x550
[ 1820.078974][ T1353]  ____sys_sendmsg+0x5be/0x970
[ 1820.083788][ T1353]  ? __sys_sendmsg_sock+0x30/0x30
[ 1820.088875][ T1353]  ? __import_iovec+0x315/0x500
[ 1820.093769][ T1353]  ? import_iovec+0x6f/0xa0
[ 1820.098309][ T1353]  ___sys_sendmsg+0x2a2/0x360
[ 1820.103040][ T1353]  ? __sys_sendmsg+0x290/0x290
[ 1820.107860][ T1353]  ? __lock_acquire+0x7d10/0x7d10
[ 1820.112939][ T1353]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1820.117830][ T1353]  ? __x64_sys_sendmsg+0x80/0x80
[ 1820.122813][ T1353]  ? lockdep_hardirqs_on+0x94/0x140
[ 1820.128046][ T1353]  do_syscall_64+0x4c/0xa0
[ 1820.132495][ T1353]  ? clear_bhb_loop+0x60/0xb0
[ 1820.137206][ T1353]  ? clear_bhb_loop+0x60/0xb0
[ 1820.141915][ T1353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1820.147836][ T1353] RIP: 0033:0x7fe90e59ce59
[ 1820.152278][ T1353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1820.171934][ T1353] RSP: 002b:00007fe90f487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1820.180379][ T1353] RAX: ffffffffffffffda RBX: 00007fe90e815fa0 RCX: 00007fe90e59ce59
[ 1820.188375][ T1353] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[ 1820.196372][ T1353] RBP: 00007fe90f487090 R08: 0000000000000000 R09: 0000000000000000
[ 1820.204381][ T1353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1820.212387][ T1353] R13: 00007fe90e816038 R14: 00007fe90e815fa0 R15: 00007ffee3f62cf8
[ 1820.220487][ T1353]  </TASK>
[ 1820.429386][ T1370] netlink: 'syz.3.9133': attribute type 10 has an invalid length.
[ 1820.863506][ T1370] 8021q: adding VLAN 0 to HW filter on device team0
[ 1820.985736][ T1370] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1821.837046][ T1394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9141'.
[ 1822.123565][ T1394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9141'.
[ 1822.848296][ T1400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9141'.
[ 1823.167299][ T1421] device syzkaller0 entered promiscuous mode
[ 1823.600194][ T1447] netlink: 'syz.2.9154': attribute type 2 has an invalid length.
[ 1823.617472][ T1447] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9154'.
[ 1825.722689][ T1444] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9154'.
[ 1825.737346][ T1444] bond0: (slave bond_slave_0): Releasing backup interface
[ 1825.758009][ T1444] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1825.771043][ T1420] delete_channel: no stack
[ 1826.199986][ T1463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9160'.
[ 1826.218208][ T1463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9160'.
[ 1826.245421][ T1463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9160'.
[ 1826.303412][ T1463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9160'.
[ 1826.815184][ T1484] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9166'.
[ 1826.887572][ T1486] mac80211_hwsim hwsim301 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1827.023194][ T1487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9167'.
[ 1827.699269][ T1503] netlink: 'syz.0.9174': attribute type 13 has an invalid length.
[ 1827.712834][ T1503] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.9174'.
[ 1828.019408][    T9] device ip6gretap0 left promiscuous mode
[ 1828.025658][    T9] : port 1(ip6gretap0) entered disabled state
[ 1828.052898][ T1520] netlink: 'syz.5.9181': attribute type 21 has an invalid length.
[ 1828.061082][ T1520] netlink: 'syz.5.9181': attribute type 20 has an invalid length.
[ 1828.079176][ T1517] FAULT_INJECTION: forcing a failure.
[ 1828.079176][ T1517] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1828.109463][ T1517] CPU: 1 PID: 1517 Comm: syz.3.9180 Not tainted syzkaller #0
[ 1828.116927][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1828.127031][ T1517] Call Trace:
[ 1828.130348][ T1517]  <TASK>
[ 1828.133328][ T1517]  dump_stack_lvl+0x188/0x24e
[ 1828.138072][ T1517]  ? show_regs_print_info+0x12/0x12
[ 1828.143328][ T1517]  ? load_image+0x400/0x400
[ 1828.147890][ T1517]  ? __lock_acquire+0x7d10/0x7d10
[ 1828.152965][ T1517]  ? unix_ioctl+0x25d/0x660
[ 1828.157529][ T1517]  should_fail_ex+0x399/0x4d0
[ 1828.162268][ T1517]  _copy_from_user+0x2c/0x170
[ 1828.167013][ T1517]  sock_do_ioctl+0x18c/0x320
[ 1828.171654][ T1517]  ? sock_show_fdinfo+0xb0/0xb0
[ 1828.176571][ T1517]  sock_ioctl+0x4d2/0x710
[ 1828.180962][ T1517]  ? sock_poll+0x410/0x410
[ 1828.185450][ T1517]  ? __se_sys_ioctl+0x31/0x170
[ 1828.190273][ T1517]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1828.195258][ T1517]  ? security_file_ioctl+0x7c/0xa0
[ 1828.200415][ T1517]  ? sock_poll+0x410/0x410
[ 1828.204876][ T1517]  __se_sys_ioctl+0xfa/0x170
[ 1828.209519][ T1517]  do_syscall_64+0x4c/0xa0
[ 1828.214000][ T1517]  ? clear_bhb_loop+0x60/0xb0
[ 1828.218729][ T1517]  ? clear_bhb_loop+0x60/0xb0
[ 1828.223459][ T1517]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1828.229422][ T1517] RIP: 0033:0x7f7dfb39ce59
[ 1828.233883][ T1517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1828.253551][ T1517] RSP: 002b:00007f7dfc2e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1828.262016][ T1517] RAX: ffffffffffffffda RBX: 00007f7dfb615fa0 RCX: 00007f7dfb39ce59
[ 1828.270035][ T1517] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 000000000000000e
[ 1828.278052][ T1517] RBP: 00007f7dfc2e2090 R08: 0000000000000000 R09: 0000000000000000
[ 1828.286063][ T1517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1828.294089][ T1517] R13: 00007f7dfb616038 R14: 00007f7dfb615fa0 R15: 00007ffd296fcb48
[ 1828.302137][ T1517]  </TASK>
[ 1828.775994][ T1535] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9186'.
[ 1828.790850][ T1534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9184'.
[ 1828.923133][ T1534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9184'.
[ 1829.044894][ T1540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9184'.
[ 1829.058407][ T1541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9184'.
[ 1829.068971][ T1546] mac80211_hwsim hwsim310 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1829.176349][ T1546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9188'.
[ 1829.364611][ T1556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'.
[ 1829.388434][ T1552] device wg2 entered promiscuous mode
[ 1829.403229][ T1556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'.
[ 1829.450009][ T1557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9193'.
[ 1830.039234][ T1562] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1830.055122][ T1562] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1830.118240][ T1562] device veth0_to_team entered promiscuous mode
[ 1830.525191][ T1581] netlink: 'syz.2.9201': attribute type 10 has an invalid length.
[ 1830.620773][T13192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1830.632020][T13192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1830.640848][T13192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1830.650191][T13192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1830.660204][ T1581] 8021q: adding VLAN 0 to HW filter on device team0
[ 1830.669132][T13192] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1830.678209][T13192] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1830.721397][ T1581] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1830.775559][ T1570] device syzkaller0 entered promiscuous mode
[ 1832.784103][T21850] Bluetooth: hci3: command 0x0409 tx timeout
[ 1833.020110][    T9] device hsr_slave_0 left promiscuous mode
[ 1833.026977][    T9] device hsr_slave_1 left promiscuous mode
[ 1833.034033][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1833.041836][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1833.055662][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1833.063891][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1833.113305][    T9] device veth0_macvtap left promiscuous mode
[ 1833.119428][    T9] device veth1_vlan left promiscuous mode
[ 1833.138462][    T9] device veth0_vlan left promiscuous mode
[ 1833.415819][    T9] team0 (unregistering): Port device geneve1 removed
[ 1834.483565][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 1834.540455][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 1834.603791][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1834.711631][    T9] team0 (unregistering): Port device bridge_slave_1 removed
[ 1834.865566][T21850] Bluetooth: hci3: command 0x041b tx timeout
[ 1835.108329][    T9] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1835.156924][    T9] bond0 (unregistering): Released all slaves
[ 1835.218948][ T1594] mac80211_hwsim hwsim319 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1835.243435][ T1597] __nla_validate_parse: 3 callbacks suppressed
[ 1835.243454][ T1597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9205'.
[ 1835.302935][ T1615] mac80211_hwsim hwsim310 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1835.331727][ T1616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9212'.
[ 1835.499331][ T1620] mac80211_hwsim hwsim315 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1835.597871][ T1620] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9213'.
[ 1835.838550][ T1633] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1835.846488][ T1633] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1835.863508][ T1633] device veth0_to_team entered promiscuous mode
[ 1836.023231][ T1630] FAULT_INJECTION: forcing a failure.
[ 1836.023231][ T1630] name failslab, interval 1, probability 0, space 0, times 0
[ 1836.071388][ T1583] chnl_net:caif_netlink_parms(): no params data found
[ 1836.110666][ T1630] CPU: 0 PID: 1630 Comm: syz.3.9216 Not tainted syzkaller #0
[ 1836.118131][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1836.128243][ T1630] Call Trace:
[ 1836.131572][ T1630]  <TASK>
[ 1836.134542][ T1630]  dump_stack_lvl+0x188/0x24e
[ 1836.139367][ T1630]  ? show_regs_print_info+0x12/0x12
[ 1836.144626][ T1630]  ? load_image+0x400/0x400
[ 1836.149179][ T1630]  ? verify_lock_unused+0x140/0x140
[ 1836.154444][ T1630]  should_fail_ex+0x399/0x4d0
[ 1836.159172][ T1630]  should_failslab+0x5/0x20
[ 1836.163717][ T1630]  slab_pre_alloc_hook+0x59/0x310
[ 1836.168790][ T1630]  kmem_cache_alloc+0x56/0x2f0
[ 1836.173598][ T1630]  ? skb_clone+0x1e7/0x370
[ 1836.178086][ T1630]  skb_clone+0x1e7/0x370
[ 1836.182400][ T1630]  __netlink_deliver_tap+0x3ed/0x800
[ 1836.187756][ T1630]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1836.193019][ T1630]  netlink_deliver_tap+0x19c/0x1b0
[ 1836.198205][ T1630]  netlink_unicast+0x728/0x8d0
[ 1836.203046][ T1630]  netlink_sendmsg+0x8ad/0xbd0
[ 1836.207872][ T1630]  ? netlink_getsockopt+0x550/0x550
[ 1836.213127][ T1630]  ? aa_sock_msg_perm+0x94/0x150
[ 1836.218111][ T1630]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1836.223439][ T1630]  ? security_socket_sendmsg+0x7c/0xa0
[ 1836.228950][ T1630]  ? netlink_getsockopt+0x550/0x550
[ 1836.234208][ T1630]  ____sys_sendmsg+0x5be/0x970
[ 1836.239040][ T1630]  ? __sys_sendmsg_sock+0x30/0x30
[ 1836.244116][ T1630]  ? __import_iovec+0x315/0x500
[ 1836.249021][ T1630]  ? import_iovec+0x6f/0xa0
[ 1836.253624][ T1630]  ___sys_sendmsg+0x2a2/0x360
[ 1836.258359][ T1630]  ? __sys_sendmsg+0x290/0x290
[ 1836.263290][ T1630]  ? __lock_acquire+0x7d10/0x7d10
[ 1836.268407][ T1630]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1836.273330][ T1630]  ? __x64_sys_sendmsg+0x80/0x80
[ 1836.278345][ T1630]  ? lockdep_hardirqs_on+0x94/0x140
[ 1836.283604][ T1630]  do_syscall_64+0x4c/0xa0
[ 1836.288169][ T1630]  ? clear_bhb_loop+0x60/0xb0
[ 1836.292899][ T1630]  ? clear_bhb_loop+0x60/0xb0
[ 1836.297628][ T1630]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1836.303578][ T1630] RIP: 0033:0x7f7dfb39ce59
[ 1836.308034][ T1630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1836.327693][ T1630] RSP: 002b:00007f7dfc2e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1836.336244][ T1630] RAX: ffffffffffffffda RBX: 00007f7dfb615fa0 RCX: 00007f7dfb39ce59
[ 1836.344259][ T1630] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1836.352270][ T1630] RBP: 00007f7dfc2e2090 R08: 0000000000000000 R09: 0000000000000000
[ 1836.360281][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1836.368289][ T1630] R13: 00007f7dfb616038 R14: 00007f7dfb615fa0 R15: 00007ffd296fcb48
[ 1836.376325][ T1630]  </TASK>
[ 1836.930628][ T1630] netlink: 'syz.3.9216': attribute type 10 has an invalid length.
[ 1836.942855][T21850] Bluetooth: hci3: command 0x040f tx timeout
[ 1837.044933][ T1630] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1837.079696][ T1630] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1837.248958][ T1652] device syzkaller0 entered promiscuous mode
[ 1837.291034][ T1655] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.9223'.
[ 1837.321887][ T1658] mac80211_hwsim hwsim310 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1837.482730][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.505316][ T1658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9224'.
[ 1837.538949][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1837.547162][ T1583] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1837.559734][ T1583] device bridge_slave_0 entered promiscuous mode
[ 1837.618454][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.660275][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1837.674979][ T1583] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1837.692454][ T1583] device bridge_slave_1 entered promiscuous mode
[ 1837.751282][T31745] wlan1: Trigger new scan to find an IBSS to join
[ 1837.757941][  T679] wlan1: Trigger new scan to find an IBSS to join
[ 1837.777112][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.847197][ T1583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1837.881739][ T1583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1837.935386][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1838.442024][ T1689] delete_channel: no stack
[ 1839.023509][T21850] Bluetooth: hci3: command 0x0419 tx timeout
[ 1840.314606][ T1583] team0: Port device team_slave_0 added
[ 1840.333508][ T1583] team0: Port device team_slave_1 added
[ 1840.345016][ T1691] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1840.351801][ T1691] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1840.368078][ T1691] device veth0_to_team entered promiscuous mode
[ 1840.466146][ T1583] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1840.497039][ T1583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1840.558903][ T1583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1840.598613][ T1583] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1840.606006][ T1583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1840.633073][ T1583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1840.716424][ T1706] mac80211_hwsim hwsim321 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1840.782235][    T9] device 0 left promiscuous mode
[ 1840.787905][  T650] wlan1: Trigger new scan to find an IBSS to join
[ 1840.793688][ T9881] wlan1: Trigger new scan to find an IBSS to join
[ 1840.884014][ T1583] device hsr_slave_0 entered promiscuous mode
[ 1840.923492][ T1714] FAULT_INJECTION: forcing a failure.
[ 1840.923492][ T1714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1840.940832][ T1583] device hsr_slave_1 entered promiscuous mode
[ 1840.951342][ T1583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1840.965751][ T1714] CPU: 0 PID: 1714 Comm: syz.5.9240 Not tainted syzkaller #0
[ 1840.973222][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1840.983341][ T1714] Call Trace:
[ 1840.986664][ T1714]  <TASK>
[ 1840.989645][ T1714]  dump_stack_lvl+0x188/0x24e
[ 1840.994483][ T1714]  ? show_regs_print_info+0x12/0x12
[ 1840.999740][ T1714]  ? load_image+0x400/0x400
[ 1841.004313][ T1714]  ? __might_fault+0xa6/0x120
[ 1841.009049][ T1714]  should_fail_ex+0x399/0x4d0
[ 1841.013777][ T1714]  copyin+0x1b/0x120
[ 1841.017721][ T1714]  _copy_from_iter+0x447/0x1130
[ 1841.022651][ T1714]  ? copyout_mc+0x110/0x110
[ 1841.027220][ T1714]  ? __virt_addr_valid+0x188/0x540
[ 1841.032409][ T1714]  ? __virt_addr_valid+0x188/0x540
[ 1841.037585][ T1714]  ? __virt_addr_valid+0x465/0x540
[ 1841.042757][ T1714]  ? __check_object_size+0x500/0xa40
[ 1841.048101][ T1714]  netlink_sendmsg+0x755/0xbd0
[ 1841.053029][ T1714]  ? netlink_getsockopt+0x550/0x550
[ 1841.058306][ T1714]  ? aa_sock_msg_perm+0x94/0x150
[ 1841.063308][ T1714]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1841.068666][ T1714]  ? security_socket_sendmsg+0x7c/0xa0
[ 1841.074206][ T1714]  ? netlink_getsockopt+0x550/0x550
[ 1841.079497][ T1714]  ____sys_sendmsg+0x5be/0x970
[ 1841.084346][ T1714]  ? __sys_sendmsg_sock+0x30/0x30
[ 1841.089441][ T1714]  ? __import_iovec+0x315/0x500
[ 1841.094353][ T1714]  ? import_iovec+0x6f/0xa0
[ 1841.098917][ T1714]  ___sys_sendmsg+0x2a2/0x360
[ 1841.103663][ T1714]  ? __sys_sendmsg+0x290/0x290
[ 1841.108506][ T1714]  ? __lock_acquire+0x7d10/0x7d10
[ 1841.113616][ T1714]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1841.118546][ T1714]  ? __x64_sys_sendmsg+0x80/0x80
[ 1841.123565][ T1714]  ? lockdep_hardirqs_on+0x94/0x140
[ 1841.128851][ T1714]  do_syscall_64+0x4c/0xa0
[ 1841.133330][ T1714]  ? clear_bhb_loop+0x60/0xb0
[ 1841.138068][ T1714]  ? clear_bhb_loop+0x60/0xb0
[ 1841.142804][ T1714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1841.148749][ T1714] RIP: 0033:0x7f7aea39ce59
[ 1841.153311][ T1714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1841.172974][ T1714] RSP: 002b:00007f7aeb348028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1841.181446][ T1714] RAX: ffffffffffffffda RBX: 00007f7aea615fa0 RCX: 00007f7aea39ce59
[ 1841.185489][ T1583] Cannot create hsr debugfs directory
[ 1841.189536][ T1714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1841.189557][ T1714] RBP: 00007f7aeb348090 R08: 0000000000000000 R09: 0000000000000000
[ 1841.189573][ T1714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1841.219025][ T1714] R13: 00007f7aea616038 R14: 00007f7aea615fa0 R15: 00007ffcf89d4318
[ 1841.227060][ T1714]  </TASK>
[ 1841.746207][ T1729] netlink: 'syz.2.9244': attribute type 2 has an invalid length.
[ 1841.756045][ T1729] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9244'.
[ 1842.140384][ T1740] netlink: 'syz.0.9247': attribute type 4 has an invalid length.
[ 1842.608082][ T1754] Ÿë
: port 1(veth0_to_team) entered blocking state
[ 1842.636779][ T1754] Ÿë
: port 1(veth0_to_team) entered disabled state
[ 1842.684068][ T1754] device veth0_to_team entered promiscuous mode
[ 1842.770397][ T1764] mac80211_hwsim hwsim315 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1842.811308][T31745] wlan1: Trigger new scan to find an IBSS to join
[ 1843.047114][ T1583] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1843.125864][ T1583] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1843.151907][ T1583] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1843.193830][ T1583] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1844.312000][ T1804] netlink: 'syz.3.9260': attribute type 10 has an invalid length.
[ 1844.333114][ T1804] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9260'.
[ 1844.711914][T24867] wlan1: Trigger new scan to find an IBSS to join
[ 1844.782986][T31745] wlan1: Trigger new scan to find an IBSS to join
[ 1845.048867][ T1828] mac80211_hwsim hwsim315 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1845.114477][ T1834] FAULT_INJECTION: forcing a failure.
[ 1845.114477][ T1834] name failslab, interval 1, probability 0, space 0, times 0
[ 1845.134688][    T9] device hsr_slave_0 left promiscuous mode
[ 1845.161698][    T9] device hsr_slave_1 left promiscuous mode
[ 1845.171385][ T1834] CPU: 1 PID: 1834 Comm: syz.2.9267 Not tainted syzkaller #0
[ 1845.178857][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1845.188980][ T1834] Call Trace:
[ 1845.192317][ T1834]  <TASK>
[ 1845.195300][ T1834]  dump_stack_lvl+0x188/0x24e
[ 1845.200057][ T1834]  ? show_regs_print_info+0x12/0x12
[ 1845.205326][ T1834]  ? load_image+0x400/0x400
[ 1845.209908][ T1834]  ? __might_sleep+0xd0/0xd0
[ 1845.214551][ T1834]  ? __lock_acquire+0x7d10/0x7d10
[ 1845.219626][ T1834]  ? trace_event_raw_event_lock+0x250/0x250
[ 1845.225579][ T1834]  should_fail_ex+0x399/0x4d0
[ 1845.230310][ T1834]  should_failslab+0x5/0x20
[ 1845.234854][ T1834]  slab_pre_alloc_hook+0x59/0x310
[ 1845.240010][ T1834]  ? slhc_init+0x72/0x6f0
[ 1845.244390][ T1834]  __kmem_cache_alloc_node+0x4f/0x260
[ 1845.249809][ T1834]  ? slhc_init+0x72/0x6f0
[ 1845.254182][ T1834]  kmalloc_trace+0x26/0xe0
[ 1845.258654][ T1834]  slhc_init+0x72/0x6f0
[ 1845.262860][ T1834]  ? __might_fault+0xc2/0x120
[ 1845.267579][ T1834]  ? __might_fault+0xa6/0x120
[ 1845.272295][ T1834]  ppp_ioctl+0x1426/0x1a50
[ 1845.276762][ T1834]  ? ppp_poll+0x250/0x250
[ 1845.281134][ T1834]  ? __fget_files+0x28/0x4b0
[ 1845.285788][ T1834]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1845.290769][ T1834]  ? security_file_ioctl+0x7c/0xa0
[ 1845.295926][ T1834]  ? ppp_poll+0x250/0x250
[ 1845.300296][ T1834]  __se_sys_ioctl+0xfa/0x170
[ 1845.304930][ T1834]  do_syscall_64+0x4c/0xa0
[ 1845.309423][ T1834]  ? clear_bhb_loop+0x60/0xb0
[ 1845.314144][ T1834]  ? clear_bhb_loop+0x60/0xb0
[ 1845.318883][ T1834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1845.324833][ T1834] RIP: 0033:0x7fe90e59ce59
[ 1845.329288][ T1834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1845.348931][ T1834] RSP: 002b:00007fe90f487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1845.357391][ T1834] RAX: ffffffffffffffda RBX: 00007fe90e815fa0 RCX: 00007fe90e59ce59
[ 1845.365412][ T1834] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000004
[ 1845.373426][ T1834] RBP: 00007fe90f487090 R08: 0000000000000000 R09: 0000000000000000
[ 1845.381522][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1845.389883][ T1834] R13: 00007fe90e816038 R14: 00007fe90e815fa0 R15: 00007ffee3f62cf8
[ 1845.397928][ T1834]  </TASK>
[ 1845.403753][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1845.432803][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1845.450448][ T1837] netlink: 'syz.3.9268': attribute type 29 has an invalid length.
[ 1845.459686][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1845.468595][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1845.518184][    T9] device veth1_vlan left promiscuous mode
[ 1845.530799][    T9] device veth0_vlan left promiscuous mode
[ 1845.750156][    T9] team0 (unregistering): Port device geneve1 removed
[ 1845.893362][ T9881] wlan1: Creating new IBSS network, BSSID c2:a9:9e:cc:a3:2f
[ 1846.058049][    T9] team0 (unregistering): Port device hsr0 removed
[ 1846.248452][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 1846.297812][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 1846.343095][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1846.400233][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1846.768383][    T9] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1846.800245][ T4349] wlan1: Trigger new scan to find an IBSS to join
[ 1846.815562][    T9] bond0 (unregistering): Released all slaves
[ 1846.861233][ T1583] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1846.870708][ T1837] netlink: 'syz.3.9268': attribute type 29 has an invalid length.
[ 1846.904057][ T1854] netlink: 'syz.0.9271': attribute type 22 has an invalid length.
[ 1846.922517][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9271'.
[ 1846.941546][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1846.975499][T24867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1847.033747][ T1583] 8021q: adding VLAN 0 to HW filter on device team0
[ 1847.056491][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1847.074746][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1847.103884][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.111114][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1847.201866][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1847.235753][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1847.253827][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1847.330057][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.337387][ T9881] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1847.346770][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1847.369589][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1847.380513][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1847.410954][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1847.456566][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1847.493548][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1847.533575][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1847.571965][ T1583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1847.625680][ T1583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1847.663045][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1847.687204][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1847.711725][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1847.727792][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1847.740703][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1848.147968][ T4329] wlan1: Creating new IBSS network, BSSID 7e:e3:1a:42:17:98
[ 1848.170670][ T1878] mac80211_hwsim hwsim321 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1848.174002][ T9881] ------------[ cut here ]------------
[ 1848.185960][ T9881] WARNING: CPU: 0 PID: 9881 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0
[ 1848.195887][ T9881] Modules linked in:
[ 1848.199858][ T9881] CPU: 0 PID: 9881 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 1848.207504][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1848.217661][ T9881] Workqueue: cfg80211 cfg80211_event_work
[ 1848.223494][ T9881] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[ 1848.229702][ T9881] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f
[ 1848.249410][ T9881] RSP: 0018:ffffc90005077aa0 EFLAGS: 00010293
[ 1848.255582][ T9881] RAX: ffffffff8994eff8 RBX: dffffc0000000000 RCX: ffff888024df5940
[ 1848.263659][ T9881] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320
[ 1848.271827][ T9881] RBP: ffffc90005077b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254
[ 1848.280001][ T9881] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff88805cb0b5b8
[ 1848.288089][ T9881] R13: 1ffff92000a0ef5c R14: 000000000000001f R15: ffff888053164c90
[ 1848.296166][ T9881] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1848.305173][ T9881] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1848.311809][ T9881] CR2: 00005571a9729168 CR3: 000000005f19b000 CR4: 00000000003506f0
[ 1848.319890][ T9881] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000000000000000
[ 1848.328052][ T9881] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1848.336122][ T9881] Call Trace:
[ 1848.339445][ T9881]  <TASK>
[ 1848.342418][ T9881]  ? mutex_lock_nested+0x10/0x10
[ 1848.347488][ T9881]  ? trace_rdev_return_void+0x240/0x240
[ 1848.353214][ T9881]  cfg80211_process_wdev_events+0x3ad/0x550
[ 1848.359182][ T9881]  cfg80211_process_rdev_events+0x9d/0x110
[ 1848.365089][ T9881]  ? process_one_work+0x7b0/0x1160
[ 1848.370262][ T9881]  cfg80211_event_work+0x2b/0x40
[ 1848.375314][ T9881]  process_one_work+0x8a2/0x1160
[ 1848.380324][ T9881]  ? worker_detach_from_pool+0x240/0x240
[ 1848.386061][ T9881]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1848.391146][ T9881]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1848.396289][ T9881]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1848.401893][ T9881]  ? kthread_data+0x4b/0xc0
[ 1848.406513][ T9881]  worker_thread+0xaa2/0x1270
[ 1848.411283][ T9881]  kthread+0x29d/0x330
[ 1848.415459][ T9881]  ? worker_clr_flags+0x1a0/0x1a0
[ 1848.420559][ T9881]  ? kthread_blkcg+0xd0/0xd0
[ 1848.425256][ T9881]  ret_from_fork+0x1f/0x30
[ 1848.429837][ T9881]  </TASK>
[ 1848.432974][ T9881] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1848.440287][ T9881] CPU: 0 PID: 9881 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 1848.447874][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1848.457976][ T9881] Workqueue: cfg80211 cfg80211_event_work
[ 1848.463758][ T9881] Call Trace:
[ 1848.467073][ T9881]  <TASK>
[ 1848.470061][ T9881]  dump_stack_lvl+0x188/0x24e
[ 1848.474880][ T9881]  ? memcpy+0x3c/0x60
[ 1848.478918][ T9881]  ? show_regs_print_info+0x12/0x12
[ 1848.484175][ T9881]  ? load_image+0x400/0x400
[ 1848.488834][ T9881]  panic+0x2e5/0x730
[ 1848.492803][ T9881]  ? bpf_jit_dump+0xd0/0xd0
[ 1848.497359][ T9881]  ? ret_from_fork+0x1f/0x30
[ 1848.502006][ T9881]  __warn+0x2f8/0x4f0
[ 1848.506038][ T9881]  ? __cfg80211_ibss_joined+0x428/0x4b0
[ 1848.511630][ T9881]  ? __cfg80211_ibss_joined+0x428/0x4b0
[ 1848.517237][ T9881]  report_bug+0x2ba/0x4f0
[ 1848.521629][ T9881]  ? __cfg80211_ibss_joined+0x428/0x4b0
[ 1848.527227][ T9881]  handle_bug+0x3a/0x70
[ 1848.531444][ T9881]  exc_invalid_op+0x16/0x40
[ 1848.536007][ T9881]  asm_exc_invalid_op+0x16/0x20
[ 1848.540917][ T9881] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[ 1848.547121][ T9881] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f
[ 1848.566777][ T9881] RSP: 0018:ffffc90005077aa0 EFLAGS: 00010293
[ 1848.572907][ T9881] RAX: ffffffff8994eff8 RBX: dffffc0000000000 RCX: ffff888024df5940
[ 1848.580944][ T9881] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320
[ 1848.589048][ T9881] RBP: ffffc90005077b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254
[ 1848.597071][ T9881] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff88805cb0b5b8
[ 1848.605096][ T9881] R13: 1ffff92000a0ef5c R14: 000000000000001f R15: ffff888053164c90
[ 1848.613137][ T9881]  ? __cfg80211_ibss_joined+0x428/0x4b0
[ 1848.618753][ T9881]  ? mutex_lock_nested+0x10/0x10
[ 1848.623766][ T9881]  ? trace_rdev_return_void+0x240/0x240
[ 1848.629376][ T9881]  cfg80211_process_wdev_events+0x3ad/0x550
[ 1848.635332][ T9881]  cfg80211_process_rdev_events+0x9d/0x110
[ 1848.641186][ T9881]  ? process_one_work+0x7b0/0x1160
[ 1848.646350][ T9881]  cfg80211_event_work+0x2b/0x40
[ 1848.651345][ T9881]  process_one_work+0x8a2/0x1160
[ 1848.656353][ T9881]  ? worker_detach_from_pool+0x240/0x240
[ 1848.662031][ T9881]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1848.667115][ T9881]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1848.672192][ T9881]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1848.677791][ T9881]  ? kthread_data+0x4b/0xc0
[ 1848.682370][ T9881]  worker_thread+0xaa2/0x1270
[ 1848.687129][ T9881]  kthread+0x29d/0x330
[ 1848.691330][ T9881]  ? worker_clr_flags+0x1a0/0x1a0
[ 1848.696400][ T9881]  ? kthread_blkcg+0xd0/0xd0
[ 1848.701043][ T9881]  ret_from_fork+0x1f/0x30
[ 1848.704320][ T4349] wlan1: Trigger new scan to find an IBSS to join
[ 1848.711957][ T9881]  </TASK>
[ 1848.715589][ T9881] Kernel Offset: disabled
[ 1848.719986][ T9881] Rebooting in 86400 seconds..