last executing test programs:

3.569732894s ago: executing program 2 (id=3764):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xa8, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20020005, 0x0, 0x0, 0x6, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r5, 0x0, 0x27, 0x0, &(0x7f0000000080)="9222fb01e2db7bf2b9f57013cbc294f6537c0615a203523fa509244c0d9fd9fff636abcd88ede3", &(0x7f0000000740), 0x9, 0x0, 0x1000, 0x28, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="571251ababf53703948ba7adbf427a43c4bc4a547ea658791a12d487ce429b5ca84e01b647c9feb3", 0x1, 0x0, 0x800}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0x6, 0xa, 0x9, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8b0c}, @call={0x85, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, r6, r7], &(0x7f00000005c0)=[{0x2, 0x1, 0x9, 0x8}, {0x4, 0x5, 0x10, 0x7}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x1, 0xb, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0xe7}, 0x94)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)

3.322397571s ago: executing program 1 (id=3767):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f0000000080)="9222fb01e2db7bf2b9f57013cbc294f6537c0615a203523fa509244c0d9fd9fff636abcd88ede3", &(0x7f0000000740), 0x9, 0x0, 0xff8, 0x28, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="571251ababf53703948ba7adbf427a43c4bc4a547ea658791a12d487ce429b5ca84e01b647c9feb3", 0x1, 0x0, 0x800}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@exit, @map_fd={0x18, 0xb}, @alu={0x7, 0x1, 0x6, 0xa, 0x9, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8b0c}, @call={0x85, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x2, 0x1, 0x9, 0x8}, {0x4, 0x5, 0x10, 0x7}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x1, 0xb, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0xe7}, 0x94)

3.130333455s ago: executing program 1 (id=3770):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000003c0)="aa89a42f0322c8fb7ba6f25cad56435427972b684f5e75a0a70df9f56a05ee7d019da98f74cf742061b1a6412a5310a8d1152c07539153ddf907448265554b302e2a8c20df4864f9e85da288c4cdcefed711eca709b8bd5c8e130d08347765657c9628f4826b64084d2c434ef379d4486ba7500516bed7c9b679e0", 0x7b}, {&(0x7f00000006c0)="d5a5e15e01661d0c489e9eeb97df52d29a8aa0ffb3fec6d9fc3e1fe5eb5ad51ecbfd0024a7ad14979c7c9d9685a24bc671c62eeb34f337fc08736a92568e01fc235e6faef485df3c847a87a3e4c2bbc64eb6459a", 0x54}], 0x3, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)="c5", 0x1}], 0x1}, 0x40c0)

3.042755907s ago: executing program 1 (id=3772):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01120000016001600014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x10, &(0x7f0000000840)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079100800000000001812", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES32=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004)
r8 = socket$kcm(0x10, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace802cafeff8d7974013429c3317cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xc2}, {&(0x7f0000000280)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d73829", 0x16}], 0x2}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={0xffffffffffffffff, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000001e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10)

3.000228808s ago: executing program 2 (id=3773):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000002800f346aeaba6ce00002000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004570000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340)=r7, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.577637628s ago: executing program 3 (id=3774):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xffffffff}, 0x100904, 0x0, 0x0, 0x0, 0xc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu  '], 0x3f)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x16e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./cgroup/../file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x4, [@datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x8, 0x5}], "3bc2cd"}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000600)=""/4096, 0x38, 0x1000, 0x1, 0x2, 0x10000}, 0x28)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x1aa, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @restrict={0x3}, @var={0xe, 0x0, 0x0, 0xe, 0x5, 0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x6, [{0xe, 0x4}, {0xb, 0x3, 0xfffffff9}, {0x1, 0x2, 0x8}, {0x10, 0x3, 0x7}, {0x6, 0x1, 0x45d54be5}]}]}, {0x0, [0x5f, 0x30, 0x30, 0x0]}}, 0x0, 0xa6, 0x0, 0x1, 0x5, 0x10000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x7, <r13=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x2b, &(0x7f00000001c0)=""/43, 0x0, 0x12, '\x00', r11, @cgroup_sysctl=0x12, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x4, 0xbd5c}, 0x10, r13, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r14, 0x1], 0x0, 0x10, 0x9}, 0x94)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r15, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x23)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001740)={{0xffffffffffffffff, <r16=>0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)='%pS    \x00'}, 0x20)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0x0, 0xf, 0x8}, 0xc)
r18 = openat$cgroup_ro(r2, &(0x7f00000017c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50)
r20 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x1, 0x4, 0x200020, 0x812, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x7, 0x27, &(0x7f0000002500)=ANY=[@ANYBLOB="1800000033000000000000001300000018110000a7", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000090000000000000009000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000059e03000700000018150000", @ANYRES32=r7, @ANYBLOB="000000000000000018530000100000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x4d, &(0x7f0000000480)=""/77, 0x41100, 0x0, '\x00', r8, @fallback=0x15, r9, 0x8, &(0x7f0000001640)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x9, 0x0, 0x2, 0xfffffff1}, 0x10, r13, r0, 0x8, &(0x7f0000001900)=[r15, r16, r17, r0, r18, r19, r20], &(0x7f0000001940)=[{0x0, 0x3, 0x20e, 0x9}, {0x9, 0x1, 0xc, 0x2}, {0x0, 0x5, 0xf, 0xa}, {0x4, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xa, 0xb}, {0x2, 0x5, 0x2, 0xa}, {0x3, 0x3, 0xc, 0x4}, {0x5, 0x1, 0x1, 0x3}], 0x10, 0x4}, 0x94)

2.308607345s ago: executing program 3 (id=3775):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xd8)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, &(0x7f0000000140))

2.057581291s ago: executing program 3 (id=3777):
perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x4, 0xa, 0x6a, 0xfa, 0x0, 0x4804ca8b, 0x40218, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x778, 0x400}, 0x4020, 0x1, 0x4c8, 0x5, 0x9e3, 0x2c8, 0xcc1, 0x0, 0x7, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7)
r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"})

1.765552577s ago: executing program 1 (id=3778):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f0000000080)="9222fb01e2db7bf2b9f57013cbc294f6537c0615a203523fa509244c0d9fd9fff636abcd88ede3", &(0x7f0000000740), 0x9, 0x0, 0xffc, 0x28, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="571251ababf53703948ba7adbf427a43c4bc4a547ea658791a12d487ce429b5ca84e01b647c9feb3", 0x1, 0x0, 0x800}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@exit, @map_fd={0x18, 0xb}, @alu={0x7, 0x1, 0x6, 0xa, 0x9, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8b0c}, @call={0x85, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x2, 0x1, 0x9, 0x8}, {0x4, 0x5, 0x10, 0x7}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x1, 0xb, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0xe7}, 0x94)

1.736336228s ago: executing program 2 (id=3779):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xe, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x82346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x800, 0x8000000c8, 0x0, 0x0, 0x0, 0xf7fffffe, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
close(r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)

1.580893142s ago: executing program 0 (id=3780):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000003c0)="aa89a42f0322c8fb7ba6f25cad56435427972b684f5e75a0a70df9f56a05ee7d019da98f74cf742061b1a6412a5310a8d1152c07539153ddf907448265554b302e2a8c20df4864f9e85da288c4cdcefed711eca709b8bd5c8e130d08347765657c9628f4826b64084d2c434ef379d4486ba7500516bed7c9b679e0", 0x7b}, {&(0x7f00000006c0)="d5a5e15e01661d0c489e9eeb97df52d29a8aa0ffb3fec6d9fc3e1fe5eb5ad51ecbfd0024a7ad14979c7c9d9685a24bc671c62eeb34f337fc08736a92568e01fc235e6faef485df3c847a87a3e4c2bbc64eb6459a", 0x54}], 0x3, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)="c5", 0x1}], 0x1}, 0x40c0)

1.579113332s ago: executing program 2 (id=3781):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xa8, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20020005, 0x0, 0x0, 0x6, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r5, 0x0, 0x27, 0x0, &(0x7f0000000080)="9222fb01e2db7bf2b9f57013cbc294f6537c0615a203523fa509244c0d9fd9fff636abcd88ede3", &(0x7f0000000740), 0x9, 0x0, 0x1000, 0x28, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="571251ababf53703948ba7adbf427a43c4bc4a547ea658791a12d487ce429b5ca84e01b647c9feb3", 0x1, 0x0, 0x800}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0x6, 0xa, 0x9, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8b0c}, @call={0x85, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, r6, r7], &(0x7f00000005c0)=[{0x2, 0x1, 0x9, 0x8}, {0x4, 0x5, 0x10, 0x7}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x1, 0xb, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0xe7}, 0x94)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)

1.577854812s ago: executing program 3 (id=3788):
perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x4, 0xa, 0x6a, 0xfa, 0x0, 0x4804ca8b, 0x40218, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x778, 0x400}, 0x4020, 0x1, 0x4c8, 0x5, 0x9e3, 0x2c8, 0xcc1, 0x0, 0x7, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7)
r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"})

1.430183876s ago: executing program 1 (id=3782):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x0, 0xfffffffd}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xccd6}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x41, 0x0, 0x0)

1.419838056s ago: executing program 0 (id=3783):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xc1\xf7\xab\x9f\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xce\x9d\xc5BI!\xdc\x84\x89E\xfdE\xf0\xad\x91\xf6R\r\xff\xf8\x13\xfb\xd1\xc2.zl\x11\xef\xd8\xe6D\xe6/\xb2\xbe\xc1\'\x1b\x16\xa8\xd0\x9a\xa5i{\xc1\xa9\xc4\xdd\xc1\xa2\xd7\"\xc0n\xa2\xc8\x90\xf2\xcc\x10\xf5\xc8\x14\x95QG\xca\xd8\xbb6N\x9b\x19\xc3\xcfP\"]\x9f,[E\xd0\xb8MPO\xf1\x83I\x83D\"[\xa0\x17\xa0|\x136\xc9R\x8c\xaa\xd0\x04ea\x18\xc9\x11\xc1\xf7\xe3\xa4\xdf\x12\xf2\x92\xfea\xb4Q!x\xf9Q;$\xfc\xc3\xe3\\7,\r>\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc')

1.388731467s ago: executing program 3 (id=3784):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})
socket$kcm(0xa, 0x3, 0x106)
socket$kcm(0xa, 0x3, 0x106)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x29, &(0x7f0000003fc0)}, 0x10)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r1)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="000000000000000090d7d52c008fbc2af1aa7198", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0xb00}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0xffd8, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x62, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xf3, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c077212", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x50)

1.194332642s ago: executing program 0 (id=3785):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xd8)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, &(0x7f0000000140))

912.278808ms ago: executing program 2 (id=3786):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) (fail_nth: 1)

907.523828ms ago: executing program 1 (id=3787):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000002800f346aeaba6ce00002000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004570000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340)=r7, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

526.336437ms ago: executing program 0 (id=3789):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xe, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x82346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x800, 0x8000000c8, 0x0, 0x0, 0x0, 0xf7fffffe, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
close(r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)

445.704279ms ago: executing program 3 (id=3790):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7}, 0x28)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01120000016001600014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x10, &(0x7f0000000840)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079100800000000001812", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES32=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004)
r8 = socket$kcm(0x10, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace802cafeff8d7974013429c3317cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xc2}, {&(0x7f0000000280)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d73829", 0x16}], 0x2}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={0xffffffffffffffff, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000001e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10)

358.345321ms ago: executing program 2 (id=3791):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f0000000080)="9222fb01e2db7bf2b9f57013cbc294f6537c0615a203523fa509244c0d9fd9fff636abcd88ede3", &(0x7f0000000740), 0x9, 0x0, 0xffc, 0x28, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="571251ababf53703948ba7adbf427a43c4bc4a547ea658791a12d487ce429b5ca84e01b647c9feb3", 0x1, 0x0, 0x800}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@exit, @map_fd={0x18, 0xb}, @alu={0x7, 0x1, 0x6, 0xa, 0x9, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8b0c}, @call={0x85, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x2, 0x1, 0x9, 0x8}, {0x4, 0x5, 0x10, 0x7}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x1, 0xb, 0x4}, {0x4, 0x4, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x10, 0x8}], 0x10, 0xe7}, 0x94)

253.536853ms ago: executing program 0 (id=3792):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)="c5", 0x1}], 0x1}, 0x40c0)

0s ago: executing program 0 (id=3793):
perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x4, 0xa, 0x6a, 0xfa, 0x0, 0x4804ca8b, 0x40218, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x778, 0x400}, 0x4020, 0x1, 0x4c8, 0x5, 0x9e3, 0x2c8, 0xcc1, 0x0, 0x7, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7)
r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"})

kernel console output (not intermixed with test programs):

  602.169019][T13643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3061'.
[  602.187937][T13641] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  602.947562][T13000] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  604.036545][T13682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3072'.
[  604.263847][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'.
[  604.314345][T13686] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  604.564852][T13696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3077'.
[  604.579957][T13696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3077'.
[  604.600072][T13696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3077'.
[  604.692289][T13699] FAULT_INJECTION: forcing a failure.
[  604.692289][T13699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.723359][T13699] CPU: 1 PID: 13699 Comm: syz.1.3078 Not tainted syzkaller #0
[  604.730883][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  604.740960][T13699] Call Trace:
[  604.744252][T13699]  <TASK>
[  604.747189][T13699]  dump_stack_lvl+0x18c/0x250
[  604.751885][T13699]  ? show_regs_print_info+0x20/0x20
[  604.757086][T13699]  ? load_image+0x420/0x420
[  604.761591][T13699]  ? __might_fault+0xaa/0x120
[  604.766355][T13699]  ? __lock_acquire+0x7d80/0x7d80
[  604.771379][T13699]  should_fail_ex+0x394/0x4c0
[  604.776066][T13699]  _copy_from_user+0x2f/0xe0
[  604.780658][T13699]  ___sys_sendmsg+0x1c7/0x360
[  604.785333][T13699]  ? get_pid_task+0x20/0x1e0
[  604.789925][T13699]  ? __sys_sendmsg+0x2b0/0x2b0
[  604.794699][T13699]  ? __lock_acquire+0x7d80/0x7d80
[  604.799738][T13699]  __se_sys_sendmsg+0x1d0/0x2c0
[  604.804590][T13699]  ? __x64_sys_sendmsg+0x80/0x80
[  604.809540][T13699]  ? lockdep_hardirqs_on+0x98/0x150
[  604.814744][T13699]  do_syscall_64+0x55/0xb0
[  604.819156][T13699]  ? clear_bhb_loop+0x40/0x90
[  604.823827][T13699]  ? clear_bhb_loop+0x40/0x90
[  604.828498][T13699]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  604.834398][T13699] RIP: 0033:0x7f0f4159de99
[  604.838812][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.858415][T13699] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.866914][T13699] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  604.874885][T13699] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003
[  604.882854][T13699] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  604.890824][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.898789][T13699] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  604.906782][T13699]  </TASK>
[  606.155064][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  607.804529][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3081'.
[  607.946405][T13715] netlink: 'syz.0.3083': attribute type 21 has an invalid length.
[  607.979223][T13715] netlink: 'syz.0.3083': attribute type 3 has an invalid length.
[  607.991265][T13715] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3083'.
[  608.036334][T13719] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  608.084141][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3087'.
[  608.093431][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3087'.
[  608.103719][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3087'.
[  611.278275][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  611.630222][T13752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3095'.
[  611.751636][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3096'.
[  611.774682][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3096'.
[  611.802736][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3096'.
[  611.830791][T13759] netlink: 'syz.1.3099': attribute type 21 has an invalid length.
[  611.852657][T13759] netlink: 'syz.1.3099': attribute type 3 has an invalid length.
[  611.861206][T13759] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3099'.
[  611.871525][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3096'.
[  611.931754][T13761] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  612.086645][T13770] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.3103'.
[  613.162314][T13786] FAULT_INJECTION: forcing a failure.
[  613.162314][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.200618][T13786] CPU: 0 PID: 13786 Comm: syz.1.3107 Not tainted syzkaller #0
[  613.208147][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  613.218226][T13786] Call Trace:
[  613.221520][T13786]  <TASK>
[  613.224469][T13786]  dump_stack_lvl+0x18c/0x250
[  613.229174][T13786]  ? show_regs_print_info+0x20/0x20
[  613.234398][T13786]  ? load_image+0x420/0x420
[  613.238935][T13786]  ? __might_fault+0xaa/0x120
[  613.243636][T13786]  ? __lock_acquire+0x7d80/0x7d80
[  613.248689][T13786]  should_fail_ex+0x394/0x4c0
[  613.253399][T13786]  _copy_from_user+0x2f/0xe0
[  613.258021][T13786]  ___sys_sendmsg+0x1c7/0x360
[  613.262732][T13786]  ? __sys_sendmsg+0x2b0/0x2b0
[  613.267542][T13786]  ? __lock_acquire+0x7d80/0x7d80
[  613.272623][T13786]  __se_sys_sendmsg+0x1d0/0x2c0
[  613.277503][T13786]  ? __x64_sys_sendmsg+0x80/0x80
[  613.282482][T13786]  ? lockdep_hardirqs_on+0x98/0x150
[  613.287707][T13786]  do_syscall_64+0x55/0xb0
[  613.292142][T13786]  ? clear_bhb_loop+0x40/0x90
[  613.296850][T13786]  ? clear_bhb_loop+0x40/0x90
[  613.301553][T13786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.307466][T13786] RIP: 0033:0x7f0f4159de99
[  613.311898][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.331552][T13786] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  613.339995][T13786] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  613.347987][T13786] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003
[  613.355977][T13786] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  613.363975][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.371968][T13786] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  613.379982][T13786]  </TASK>
[  616.139209][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'.
[  616.174669][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'.
[  616.210927][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3110'.
[  616.255166][T13800] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  617.624717][T13820] __nla_validate_parse: 1 callbacks suppressed
[  617.624734][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3118'.
[  618.012595][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3123'.
[  618.022643][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3123'.
[  618.034952][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3123'.
[  618.045083][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3123'.
[  618.247275][T13835] netlink: 'syz.0.3124': attribute type 12 has an invalid length.
[  618.260304][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3124'.
[  620.418037][T13843] FAULT_INJECTION: forcing a failure.
[  620.418037][T13843] name failslab, interval 1, probability 0, space 0, times 0
[  620.464508][T13843] CPU: 1 PID: 13843 Comm: syz.2.3126 Not tainted syzkaller #0
[  620.472032][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  620.482106][T13843] Call Trace:
[  620.485415][T13843]  <TASK>
[  620.488357][T13843]  dump_stack_lvl+0x18c/0x250
[  620.493065][T13843]  ? show_regs_print_info+0x20/0x20
[  620.498294][T13843]  ? load_image+0x420/0x420
[  620.502828][T13843]  ? __might_sleep+0xe0/0xe0
[  620.507429][T13843]  ? __lock_acquire+0x7d80/0x7d80
[  620.512471][T13843]  should_fail_ex+0x394/0x4c0
[  620.517172][T13843]  should_failslab+0x9/0x20
[  620.521683][T13843]  slab_pre_alloc_hook+0x59/0x300
[  620.526719][T13843]  ? __get_vm_area_node+0x125/0x370
[  620.531917][T13843]  __kmem_cache_alloc_node+0x53/0x250
[  620.537298][T13843]  ? __get_vm_area_node+0x125/0x370
[  620.542496][T13843]  kmalloc_node_trace+0x26/0xe0
[  620.547354][T13843]  __get_vm_area_node+0x125/0x370
[  620.552383][T13843]  __vmalloc_node_range+0x36f/0x1320
[  620.557673][T13843]  ? netlink_sendmsg+0x602/0xbf0
[  620.562605][T13843]  ? netlink_insert+0x1094/0x1390
[  620.567646][T13843]  ? netlink_insert+0x2ba/0x1390
[  620.572618][T13843]  ? free_vm_area+0x50/0x50
[  620.577131][T13843]  ? netlink_sendmsg+0x602/0xbf0
[  620.582067][T13843]  vmalloc+0x79/0x90
[  620.585968][T13843]  ? netlink_sendmsg+0x602/0xbf0
[  620.590899][T13843]  netlink_sendmsg+0x602/0xbf0
[  620.595669][T13843]  ? netlink_getsockopt+0x590/0x590
[  620.600951][T13843]  ? apparmor_socket_sendmsg+0x8e/0x330
[  620.606499][T13843]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  620.611785][T13843]  ? security_socket_sendmsg+0x80/0xa0
[  620.617243][T13843]  sock_write_iter+0x2dc/0x420
[  620.622011][T13843]  ? sock_read_iter+0x3f0/0x3f0
[  620.626868][T13843]  ? common_file_perm+0x198/0x1f0
[  620.631897][T13843]  vfs_write+0x474/0x9a0
[  620.636147][T13843]  ? file_end_write+0x250/0x250
[  620.641002][T13843]  ? __fget_files+0x3fc/0x460
[  620.645686][T13843]  ? __fdget_pos+0x1d8/0x330
[  620.650272][T13843]  ? ksys_write+0x74/0x260
[  620.654695][T13843]  ksys_write+0x151/0x260
[  620.659027][T13843]  ? __ia32_sys_read+0x90/0x90
[  620.663794][T13843]  ? lockdep_hardirqs_on+0x98/0x150
[  620.668995][T13843]  do_syscall_64+0x55/0xb0
[  620.673409][T13843]  ? clear_bhb_loop+0x40/0x90
[  620.678080][T13843]  ? clear_bhb_loop+0x40/0x90
[  620.682782][T13843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  620.688673][T13843] RIP: 0033:0x7f46abb9de99
[  620.693087][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.712696][T13843] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  620.721111][T13843] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  620.729082][T13843] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004
[  620.737053][T13843] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  620.745037][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.753016][T13843] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  620.761023][T13843]  </TASK>
[  620.780844][T13843] syz.2.3126: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  620.817049][T13843] CPU: 0 PID: 13843 Comm: syz.2.3126 Not tainted syzkaller #0
[  620.824577][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  620.834655][T13843] Call Trace:
[  620.837950][T13843]  <TASK>
[  620.840893][T13843]  dump_stack_lvl+0x18c/0x250
[  620.845599][T13843]  ? show_regs_print_info+0x20/0x20
[  620.850824][T13843]  ? load_image+0x420/0x420
[  620.855360][T13843]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  620.861802][T13843]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  620.867219][T13848] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  620.868315][T13843]  warn_alloc+0x246/0x340
[  620.868340][T13843]  ? __get_vm_area_node+0x125/0x370
[  620.886944][T13843]  ? zone_watermark_ok_safe+0x230/0x230
[  620.892512][T13843]  ? rcu_is_watching+0x15/0xb0
[  620.897306][T13843]  ? __get_vm_area_node+0x356/0x370
[  620.902540][T13843]  __vmalloc_node_range+0x394/0x1320
[  620.907848][T13843]  ? netlink_insert+0x1094/0x1390
[  620.912887][T13843]  ? netlink_insert+0x2ba/0x1390
[  620.917837][T13843]  ? free_vm_area+0x50/0x50
[  620.922351][T13843]  ? netlink_sendmsg+0x602/0xbf0
[  620.927282][T13843]  vmalloc+0x79/0x90
[  620.931177][T13843]  ? netlink_sendmsg+0x602/0xbf0
[  620.936112][T13843]  netlink_sendmsg+0x602/0xbf0
[  620.940879][T13843]  ? netlink_getsockopt+0x590/0x590
[  620.946074][T13843]  ? apparmor_socket_sendmsg+0x8e/0x330
[  620.951614][T13843]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  620.956897][T13843]  ? security_socket_sendmsg+0x80/0xa0
[  620.962349][T13843]  sock_write_iter+0x2dc/0x420
[  620.967110][T13843]  ? sock_read_iter+0x3f0/0x3f0
[  620.971961][T13843]  ? common_file_perm+0x198/0x1f0
[  620.976987][T13843]  vfs_write+0x474/0x9a0
[  620.981231][T13843]  ? file_end_write+0x250/0x250
[  620.986087][T13843]  ? __fget_files+0x3fc/0x460
[  620.990766][T13843]  ? __fdget_pos+0x1d8/0x330
[  620.995353][T13843]  ? ksys_write+0x74/0x260
[  620.999770][T13843]  ksys_write+0x151/0x260
[  621.004100][T13843]  ? __ia32_sys_read+0x90/0x90
[  621.008864][T13843]  ? lockdep_hardirqs_on+0x98/0x150
[  621.014060][T13843]  do_syscall_64+0x55/0xb0
[  621.018466][T13843]  ? clear_bhb_loop+0x40/0x90
[  621.023135][T13843]  ? clear_bhb_loop+0x40/0x90
[  621.027833][T13843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  621.033727][T13843] RIP: 0033:0x7f46abb9de99
[  621.038139][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.057743][T13843] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  621.066159][T13843] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  621.074124][T13843] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004
[  621.082087][T13843] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  621.090052][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.098019][T13843] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  621.105999][T13843]  </TASK>
[  621.151968][T13843] Mem-Info:
[  621.155424][T13843] active_anon:5255 inactive_anon:0 isolated_anon:0
[  621.155424][T13843]  active_file:19442 inactive_file:40172 isolated_file:0
[  621.155424][T13843]  unevictable:768 dirty:102 writeback:0
[  621.155424][T13843]  slab_reclaimable:10365 slab_unreclaimable:97876
[  621.155424][T13843]  mapped:25030 shmem:1361 pagetables:568
[  621.155424][T13843]  sec_pagetables:0 bounce:0
[  621.155424][T13843]  kernel_misc_reclaimable:0
[  621.155424][T13843]  free:1337652 free_pcp:9745 free_cma:0
[  621.209118][T13843] Node 0 active_anon:21220kB inactive_anon:0kB active_file:77768kB inactive_file:160488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100120kB dirty:408kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11084kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no
[  621.262879][T13843] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  621.300468][T13843] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  621.348940][T13843] lowmem_reserve[]: 0 2521 2522 2522 2522
[  621.372040][T13843] Node 0 DMA32 free:1444096kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20884kB inactive_anon:0kB active_file:77768kB inactive_file:159652kB unevictable:1536kB writepending:408kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:17256kB local_pcp:4628kB free_cma:0kB
[  621.416797][T13843] lowmem_reserve[]: 0 0 0 0 0
[  621.421603][T13843] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  621.470625][T13843] lowmem_reserve[]: 0 0 0 0 0
[  621.476490][T13843] Node 1 Normal free:3889976kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23304kB local_pcp:11784kB free_cma:0kB
[  621.509309][T13843] lowmem_reserve[]: 0 0 0 0 0
[  621.514079][T13843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  621.527294][T13843] Node 0 DMA32: 970*4kB (UME) 1717*8kB (UME) 905*16kB (UME) 1388*32kB (UME) 300*64kB (UME) 620*128kB (UME) 357*256kB (UM) 198*512kB (UME) 130*1024kB (UME) 28*2048kB (UME) 216*4096kB (UM) = 1443040kB
[  621.548073][T13843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  621.561114][T13843] Node 1 Normal: 298*4kB (UME) 76*8kB (UME) 49*16kB (UME) 45*32kB (UME) 18*64kB (UME) 6*128kB (UE) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3889976kB
[  621.607751][T13843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  621.623182][T13843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  621.636568][T13843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  621.639145][T13864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3132'.
[  621.651643][T13861] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3130'.
[  621.665641][T13843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  621.675460][T13843] 60975 total pagecache pages
[  621.683026][T13843] 0 pages in swap cache
[  621.689431][T13864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3132'.
[  621.696649][T13843] Free swap  = 124996kB
[  621.702628][T13843] Total swap = 124996kB
[  621.704905][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3132'.
[  621.707403][T13843] 2097051 pages RAM
[  621.719759][T13843] 0 pages HighMem/MovableOnly
[  621.726179][T13843] 416955 pages reserved
[  621.730992][T13843] 0 pages cma reserved
[  622.152283][T13879] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  622.768328][T13884] __nla_validate_parse: 6 callbacks suppressed
[  622.768360][T13884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3141'.
[  623.046276][T13903] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  623.199564][ T5782] Bluetooth: hci4: ISO packet for unknown connection handle 1854
[  623.235770][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3151'.
[  623.359573][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3153'.
[  623.385207][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3153'.
[  623.408296][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3153'.
[  623.437379][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3153'.
[  623.940954][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'.
[  624.047772][T13931] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  624.179174][T13936] netlink: 'syz.0.3162': attribute type 1 has an invalid length.
[  624.195803][T13936] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3162'.
[  624.265231][T13936] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3162'.
[  624.286644][T13944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3165'.
[  624.308329][T13941] netlink: 'syz.0.3162': attribute type 21 has an invalid length.
[  624.578342][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  624.584877][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  625.552101][T13967] FAULT_INJECTION: forcing a failure.
[  625.552101][T13967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.582343][T13967] CPU: 1 PID: 13967 Comm: syz.2.3171 Not tainted syzkaller #0
[  625.589883][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  625.599960][T13967] Call Trace:
[  625.601890][T13968] netlink: 'syz.0.3167': attribute type 10 has an invalid length.
[  625.603242][T13967]  <TASK>
[  625.603253][T13967]  dump_stack_lvl+0x18c/0x250
[  625.618679][T13967]  ? show_regs_print_info+0x20/0x20
[  625.623909][T13967]  ? load_image+0x420/0x420
[  625.628447][T13967]  ? __might_fault+0xaa/0x120
[  625.630951][T13968] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  625.633124][T13967]  ? __lock_acquire+0x7d80/0x7d80
[  625.633153][T13967]  should_fail_ex+0x394/0x4c0
[  625.644740][T13968] team0: Port device wlan1 added
[  625.645005][T13967]  _copy_from_user+0x2f/0xe0
[  625.659217][T13967]  ___sys_sendmsg+0x1c7/0x360
[  625.663916][T13967]  ? get_pid_task+0x20/0x1e0
[  625.668533][T13967]  ? __sys_sendmsg+0x2b0/0x2b0
[  625.673350][T13967]  ? __lock_acquire+0x7d80/0x7d80
[  625.678435][T13967]  __se_sys_sendmsg+0x1d0/0x2c0
[  625.683321][T13967]  ? __x64_sys_sendmsg+0x80/0x80
[  625.688310][T13967]  ? lockdep_hardirqs_on+0x98/0x150
[  625.693542][T13967]  do_syscall_64+0x55/0xb0
[  625.697985][T13967]  ? clear_bhb_loop+0x40/0x90
[  625.702686][T13967]  ? clear_bhb_loop+0x40/0x90
[  625.707392][T13967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.713340][T13967] RIP: 0033:0x7f46abb9de99
[  625.717781][T13967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.737851][T13967] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  625.746294][T13967] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  625.754291][T13967] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003
[  625.762282][T13967] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  625.770271][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.778263][T13967] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  625.786273][T13967]  </TASK>
[  626.047134][T13976] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  626.531299][T13997] FAULT_INJECTION: forcing a failure.
[  626.531299][T13997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.563212][T13997] CPU: 1 PID: 13997 Comm: syz.1.3183 Not tainted syzkaller #0
[  626.570720][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  626.580795][T13997] Call Trace:
[  626.584090][T13997]  <TASK>
[  626.587035][T13997]  dump_stack_lvl+0x18c/0x250
[  626.591823][T13997]  ? show_regs_print_info+0x20/0x20
[  626.597035][T13997]  ? load_image+0x420/0x420
[  626.601551][T13997]  ? __might_fault+0xaa/0x120
[  626.606237][T13997]  ? __lock_acquire+0x7d80/0x7d80
[  626.611268][T13997]  should_fail_ex+0x394/0x4c0
[  626.615954][T13997]  _copy_from_user+0x2f/0xe0
[  626.620548][T13997]  ___sys_sendmsg+0x1c7/0x360
[  626.625226][T13997]  ? get_pid_task+0x20/0x1e0
[  626.629821][T13997]  ? __sys_sendmsg+0x2b0/0x2b0
[  626.634601][T13997]  ? __lock_acquire+0x7d80/0x7d80
[  626.639650][T13997]  __se_sys_sendmsg+0x1d0/0x2c0
[  626.644510][T13997]  ? __x64_sys_sendmsg+0x80/0x80
[  626.649459][T13997]  ? lockdep_hardirqs_on+0x98/0x150
[  626.654663][T13997]  do_syscall_64+0x55/0xb0
[  626.659079][T13997]  ? clear_bhb_loop+0x40/0x90
[  626.663752][T13997]  ? clear_bhb_loop+0x40/0x90
[  626.668427][T13997]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  626.674314][T13997] RIP: 0033:0x7f0f4159de99
[  626.678746][T13997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.698373][T13997] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  626.706786][T13997] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  626.714753][T13997] RDX: 0000000020001850 RSI: 00002000000000c0 RDI: 0000000000000003
[  626.722719][T13997] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  626.730688][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.738656][T13997] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  626.746665][T13997]  </TASK>
[  626.974238][T14007] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  627.052163][T14009] FAULT_INJECTION: forcing a failure.
[  627.052163][T14009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.072968][T14009] CPU: 0 PID: 14009 Comm: syz.2.3189 Not tainted syzkaller #0
[  627.080483][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  627.090565][T14009] Call Trace:
[  627.093866][T14009]  <TASK>
[  627.096824][T14009]  dump_stack_lvl+0x18c/0x250
[  627.101536][T14009]  ? show_regs_print_info+0x20/0x20
[  627.106758][T14009]  ? load_image+0x420/0x420
[  627.111285][T14009]  ? __might_fault+0xaa/0x120
[  627.115980][T14009]  ? __lock_acquire+0x7d80/0x7d80
[  627.121034][T14009]  should_fail_ex+0x394/0x4c0
[  627.125735][T14009]  _copy_from_user+0x2f/0xe0
[  627.130355][T14009]  ___sys_sendmsg+0x1c7/0x360
[  627.135060][T14009]  ? get_pid_task+0x20/0x1e0
[  627.139681][T14009]  ? __sys_sendmsg+0x2b0/0x2b0
[  627.144486][T14009]  ? __lock_acquire+0x7d80/0x7d80
[  627.149569][T14009]  __se_sys_sendmsg+0x1d0/0x2c0
[  627.154445][T14009]  ? __x64_sys_sendmsg+0x80/0x80
[  627.159425][T14009]  ? lockdep_hardirqs_on+0x98/0x150
[  627.164686][T14009]  do_syscall_64+0x55/0xb0
[  627.169126][T14009]  ? clear_bhb_loop+0x40/0x90
[  627.173815][T14009]  ? clear_bhb_loop+0x40/0x90
[  627.178501][T14009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.184433][T14009] RIP: 0033:0x7f46abb9de99
[  627.188856][T14009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.208464][T14009] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.216877][T14009] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  627.224861][T14009] RDX: 00000000000040c0 RSI: 0000200000001980 RDI: 0000000000000003
[  627.232857][T14009] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  627.240828][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.248808][T14009] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  627.256828][T14009]  </TASK>
[  628.088367][T13000] wlan1: Trigger new scan to find an IBSS to join
[  630.550696][T14031] FAULT_INJECTION: forcing a failure.
[  630.550696][T14031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  630.564897][T14031] CPU: 0 PID: 14031 Comm: syz.2.3197 Not tainted syzkaller #0
[  630.572406][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  630.582484][T14031] Call Trace:
[  630.585776][T14031]  <TASK>
[  630.588718][T14031]  dump_stack_lvl+0x18c/0x250
[  630.593418][T14031]  ? show_regs_print_info+0x20/0x20
[  630.598640][T14031]  ? load_image+0x420/0x420
[  630.603179][T14031]  ? __might_fault+0xaa/0x120
[  630.607897][T14031]  ? __lock_acquire+0x7d80/0x7d80
[  630.612961][T14031]  should_fail_ex+0x394/0x4c0
[  630.617679][T14031]  _copy_from_user+0x2f/0xe0
[  630.622296][T14031]  ___sys_sendmsg+0x1c7/0x360
[  630.627003][T14031]  ? get_pid_task+0x20/0x1e0
[  630.631628][T14031]  ? __sys_sendmsg+0x2b0/0x2b0
[  630.636437][T14031]  ? __lock_acquire+0x7d80/0x7d80
[  630.641505][T14031]  __se_sys_sendmsg+0x1d0/0x2c0
[  630.646383][T14031]  ? __x64_sys_sendmsg+0x80/0x80
[  630.651378][T14031]  ? lockdep_hardirqs_on+0x98/0x150
[  630.656572][T14031]  do_syscall_64+0x55/0xb0
[  630.660998][T14031]  ? clear_bhb_loop+0x40/0x90
[  630.665700][T14031]  ? clear_bhb_loop+0x40/0x90
[  630.670405][T14031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  630.676324][T14031] RIP: 0033:0x7f46abb9de99
[  630.680756][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.700383][T14031] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  630.708832][T14031] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  630.716838][T14031] RDX: 0000000000044000 RSI: 00002000000001c0 RDI: 0000000000000004
[  630.724828][T14031] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  630.732864][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  630.740860][T14031] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  630.748903][T14031]  </TASK>
[  630.977803][T14041] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[  630.992300][T14043] __nla_validate_parse: 15 callbacks suppressed
[  630.992319][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'.
[  630.992416][T14041] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3200'.
[  631.031856][T14041] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3200'.
[  631.062495][T14045] netlink: 'syz.2.3200': attribute type 21 has an invalid length.
[  631.092930][T14043] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  631.764724][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  631.946641][T14051] netlink: 'syz.3.3203': attribute type 10 has an invalid length.
[  631.969538][T14051] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  632.001316][T14051] team0: Port device wlan1 added
[  634.084646][T12996] wlan1: Trigger new scan to find an IBSS to join
[  634.101329][T13000] wlan1: Trigger new scan to find an IBSS to join
[  635.092332][T13004] wlan1: Creating new IBSS network, BSSID c2:52:74:91:a6:50
[  635.137642][T14088] netlink: 'syz.1.3214': attribute type 1 has an invalid length.
[  635.171281][T14088] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3214'.
[  635.188713][T14088] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3214'.
[  635.224716][T14088] netlink: 'syz.1.3214': attribute type 21 has an invalid length.
[  638.627100][T14105] FAULT_INJECTION: forcing a failure.
[  638.627100][T14105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  638.669263][T14105] CPU: 0 PID: 14105 Comm: syz.3.3219 Not tainted syzkaller #0
[  638.676784][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  638.686865][T14105] Call Trace:
[  638.690159][T14105]  <TASK>
[  638.693104][T14105]  dump_stack_lvl+0x18c/0x250
[  638.697815][T14105]  ? show_regs_print_info+0x20/0x20
[  638.703034][T14105]  ? load_image+0x420/0x420
[  638.707557][T14105]  ? __might_fault+0xaa/0x120
[  638.712251][T14105]  ? __lock_acquire+0x7d80/0x7d80
[  638.717306][T14105]  should_fail_ex+0x394/0x4c0
[  638.722014][T14105]  _copy_from_user+0x2f/0xe0
[  638.726638][T14105]  __sys_bpf+0x23e/0x890
[  638.730915][T14105]  ? bpf_link_show_fdinfo+0x390/0x390
[  638.736331][T14105]  ? lock_chain_count+0x20/0x20
[  638.741213][T14105]  __x64_sys_bpf+0x7c/0x90
[  638.745649][T14105]  do_syscall_64+0x55/0xb0
[  638.750081][T14105]  ? clear_bhb_loop+0x40/0x90
[  638.754773][T14105]  ? clear_bhb_loop+0x40/0x90
[  638.759473][T14105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  638.765384][T14105] RIP: 0033:0x7f90f219de99
[  638.769816][T14105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.789450][T14105] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  638.797890][T14105] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  638.805878][T14105] RDX: 000000000000000c RSI: 0000200000000200 RDI: 000000000000000a
[  638.813872][T14105] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  638.821873][T14105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.829869][T14105] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  638.837876][T14105]  </TASK>
[  639.115873][T13004] wlan1: Trigger new scan to find an IBSS to join
[  639.730679][T14120] netlink: 'syz.1.3218': attribute type 10 has an invalid length.
[  639.791837][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'.
[  639.811099][T14120] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  639.858067][T14120] team0: Port device wlan1 added
[  640.085745][T14127] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  640.142202][T13004] wlan1: Creating new IBSS network, BSSID 42:e8:77:9c:44:40
[  642.082170][T13004] wlan1: Trigger new scan to find an IBSS to join
[  643.351913][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[  643.415269][T14148] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  643.691925][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  643.691962][ T5786] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  643.755636][T14153] delete_channel: no stack
[  643.800325][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'.
[  643.855107][T14163] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  644.021104][T14170] FAULT_INJECTION: forcing a failure.
[  644.021104][T14170] name failslab, interval 1, probability 0, space 0, times 0
[  644.052217][T14170] CPU: 1 PID: 14170 Comm: syz.3.3242 Not tainted syzkaller #0
[  644.059743][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  644.069812][T14170] Call Trace:
[  644.073100][T14170]  <TASK>
[  644.076052][T14170]  dump_stack_lvl+0x18c/0x250
[  644.080759][T14170]  ? show_regs_print_info+0x20/0x20
[  644.085996][T14170]  ? load_image+0x420/0x420
[  644.090714][T14170]  ? __might_sleep+0xe0/0xe0
[  644.095345][T14170]  ? __lock_acquire+0x7d80/0x7d80
[  644.100468][T14170]  should_fail_ex+0x394/0x4c0
[  644.105199][T14170]  should_failslab+0x9/0x20
[  644.109737][T14170]  slab_pre_alloc_hook+0x59/0x300
[  644.114830][T14170]  kmem_cache_alloc_node+0x5e/0x310
[  644.120058][T14170]  ? __alloc_skb+0x103/0x2c0
[  644.124672][T14170]  __alloc_skb+0x103/0x2c0
[  644.129114][T14170]  alloc_skb_with_frags+0xcd/0x7a0
[  644.134265][T14170]  sock_alloc_send_pskb+0x883/0x9a0
[  644.139510][T14170]  ? sock_kzfree_s+0x50/0x50
[  644.144147][T14170]  tun_get_user+0xa2e/0x3d70
[  644.148776][T14170]  ? aa_file_perm+0x3e3/0xee0
[  644.153473][T14170]  ? rcu_read_unlock+0xa0/0xa0
[  644.158265][T14170]  ? tun_get+0x1c/0x2e0
[  644.162498][T14170]  ? __lock_acquire+0x7d80/0x7d80
[  644.167552][T14170]  ? tun_get+0x1c/0x2e0
[  644.171744][T14170]  tun_chr_write_iter+0x119/0x200
[  644.176790][T14170]  vfs_write+0x474/0x9a0
[  644.181078][T14170]  ? file_end_write+0x250/0x250
[  644.185969][T14170]  ? __fget_files+0x3fc/0x460
[  644.190680][T14170]  ? __fdget_pos+0x1d8/0x330
[  644.195294][T14170]  ? ksys_write+0x74/0x260
[  644.199733][T14170]  ksys_write+0x151/0x260
[  644.204088][T14170]  ? __ia32_sys_read+0x90/0x90
[  644.208885][T14170]  ? lockdep_hardirqs_on+0x98/0x150
[  644.214111][T14170]  do_syscall_64+0x55/0xb0
[  644.218551][T14170]  ? clear_bhb_loop+0x40/0x90
[  644.223250][T14170]  ? clear_bhb_loop+0x40/0x90
[  644.227953][T14170]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.233866][T14170] RIP: 0033:0x7f90f219de99
[  644.238305][T14170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.258005][T14170] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  644.266422][T14170] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  644.274388][T14170] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8
[  644.282360][T14170] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  644.290333][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.298302][T14170] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  644.306286][T14170]  </TASK>
[  645.220124][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'.
[  645.358509][T14195] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  645.608068][ T5786] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17
[  645.608103][ T5786] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[  645.759139][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'.
[  645.794397][T14208] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  646.074707][T13002] wlan1: Trigger new scan to find an IBSS to join
[  646.076166][T12998] wlan1: Trigger new scan to find an IBSS to join
[  648.085676][T13000] wlan1: Trigger new scan to find an IBSS to join
[  648.386400][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  648.545116][T14233] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  648.668515][ T5786] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17
[  648.668553][ T5786] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[  648.897015][T14242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3266'.
[  649.076981][T14248] netlink: 'syz.3.3266': attribute type 29 has an invalid length.
[  649.094935][T14248] netlink: 'syz.3.3266': attribute type 3 has an invalid length.
[  649.136617][T14248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3266'.
[  651.118577][T13000] wlan1: Trigger new scan to find an IBSS to join
[  651.125274][T13007] wlan1: Trigger new scan to find an IBSS to join
[  651.134679][T12996] wlan1: Trigger new scan to find an IBSS to join
[  652.254845][T13002] wlan1: Creating new IBSS network, BSSID ce:49:34:ca:fb:1f
[  652.265975][T12996] wlan1: Creating new IBSS network, BSSID 8a:91:3f:b2:5e:6b
[  652.418727][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  652.488308][T14266] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  653.343759][T14282] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3279'.
[  654.076319][T12996] wlan1: Creating new IBSS network, BSSID ea:2d:93:11:a7:3d
[  655.116227][T13007] wlan1: Trigger new scan to find an IBSS to join
[  658.249858][T14315] netlink: 'syz.0.3292': attribute type 13 has an invalid length.
[  658.278628][T14315] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.3292'.
[  658.859111][T14333] FAULT_INJECTION: forcing a failure.
[  658.859111][T14333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.896589][T14333] CPU: 0 PID: 14333 Comm: syz.1.3297 Not tainted syzkaller #0
[  658.904109][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  658.914190][T14333] Call Trace:
[  658.917479][T14333]  <TASK>
[  658.920416][T14333]  dump_stack_lvl+0x18c/0x250
[  658.925114][T14333]  ? show_regs_print_info+0x20/0x20
[  658.930312][T14333]  ? load_image+0x420/0x420
[  658.934828][T14333]  ? __might_fault+0xaa/0x120
[  658.939508][T14333]  ? __lock_acquire+0x7d80/0x7d80
[  658.944545][T14333]  should_fail_ex+0x394/0x4c0
[  658.949233][T14333]  _copy_from_user+0x2f/0xe0
[  658.953827][T14333]  ___sys_sendmsg+0x1c7/0x360
[  658.958507][T14333]  ? get_pid_task+0x20/0x1e0
[  658.963116][T14333]  ? __sys_sendmsg+0x2b0/0x2b0
[  658.967899][T14333]  ? __lock_acquire+0x7d80/0x7d80
[  658.973033][T14333]  __se_sys_sendmsg+0x1d0/0x2c0
[  658.977893][T14333]  ? __x64_sys_sendmsg+0x80/0x80
[  658.982841][T14333]  ? lockdep_hardirqs_on+0x98/0x150
[  658.988072][T14333]  do_syscall_64+0x55/0xb0
[  658.992485][T14333]  ? clear_bhb_loop+0x40/0x90
[  658.997158][T14333]  ? clear_bhb_loop+0x40/0x90
[  659.001833][T14333]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  659.007756][T14333] RIP: 0033:0x7f0f4159de99
[  659.012522][T14333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.032306][T14333] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.040723][T14333] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  659.048698][T14333] RDX: 0000000020001850 RSI: 00002000000000c0 RDI: 0000000000000003
[  659.056672][T14333] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  659.064642][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.072610][T14333] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  659.080593][T14333]  </TASK>
[  659.463959][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3299'.
[  659.688309][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'.
[  659.742645][T14350] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  660.017897][T14362] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3308'.
[  660.990560][T14379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'.
[  661.416223][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'.
[  661.463531][T14390] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  661.530261][T14397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3318'.
[  661.649021][T14397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3318'.
[  661.789516][T14400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3318'.
[  661.840565][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3318'.
[  662.075511][T13004] wlan1: Trigger new scan to find an IBSS to join
[  664.074708][T13003] wlan1: Trigger new scan to find an IBSS to join
[  664.234989][T13003] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  664.726780][T14416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3325'.
[  665.228998][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3330'.
[  665.240939][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3330'.
[  665.252277][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3330'.
[  665.263063][T14435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3330'.
[  665.515740][T14442] netlink: 'syz.0.3335': attribute type 21 has an invalid length.
[  666.188261][T14453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3338'.
[  666.218023][T14453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3338'.
[  666.239972][T14457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3338'.
[  666.260418][T14453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3338'.
[  666.279727][T14458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3337'.
[  667.115282][T13002] wlan1: Trigger new scan to find an IBSS to join
[  667.129171][T12996] wlan1: Trigger new scan to find an IBSS to join
[  667.592706][T14504] FAULT_INJECTION: forcing a failure.
[  667.592706][T14504] name failslab, interval 1, probability 0, space 0, times 0
[  667.644830][T14504] CPU: 0 PID: 14504 Comm: syz.1.3358 Not tainted syzkaller #0
[  667.652352][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  667.662408][T14504] Call Trace:
[  667.665687][T14504]  <TASK>
[  667.668615][T14504]  dump_stack_lvl+0x18c/0x250
[  667.673326][T14504]  ? show_regs_print_info+0x20/0x20
[  667.678554][T14504]  ? load_image+0x420/0x420
[  667.683057][T14504]  ? __lock_acquire+0x7d80/0x7d80
[  667.688086][T14504]  ? verify_lock_unused+0x140/0x140
[  667.693288][T14504]  should_fail_ex+0x394/0x4c0
[  667.697976][T14504]  should_failslab+0x9/0x20
[  667.702483][T14504]  slab_pre_alloc_hook+0x59/0x300
[  667.707559][T14504]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  667.713104][T14504]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  667.718669][T14504]  __kmem_cache_alloc_node+0x53/0x250
[  667.724078][T14504]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  667.729634][T14504]  __kmalloc+0xa7/0x240
[  667.733803][T14504]  bpf_prog_test_run_skb+0x242/0x18f0
[  667.739178][T14504]  ? __fget_files+0x28/0x460
[  667.743777][T14504]  ? __fget_files+0x3fc/0x460
[  667.748460][T14504]  ? cpu_online+0x60/0x60
[  667.752795][T14504]  bpf_prog_test_run+0x31f/0x390
[  667.757734][T14504]  __sys_bpf+0x49d/0x890
[  667.761975][T14504]  ? bpf_link_show_fdinfo+0x390/0x390
[  667.767359][T14504]  ? lock_chain_count+0x20/0x20
[  667.772212][T14504]  __x64_sys_bpf+0x7c/0x90
[  667.776625][T14504]  do_syscall_64+0x55/0xb0
[  667.781069][T14504]  ? clear_bhb_loop+0x40/0x90
[  667.785759][T14504]  ? clear_bhb_loop+0x40/0x90
[  667.790442][T14504]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.796336][T14504] RIP: 0033:0x7f0f4159de99
[  667.800747][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.820355][T14504] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  667.828769][T14504] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  667.836757][T14504] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  667.844733][T14504] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  667.852719][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.860691][T14504] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  667.868673][T14504]  </TASK>
[  668.213227][T14522] FAULT_INJECTION: forcing a failure.
[  668.213227][T14522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.248098][T14522] CPU: 1 PID: 14522 Comm: syz.2.3364 Not tainted syzkaller #0
[  668.255614][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  668.265679][T14522] Call Trace:
[  668.268965][T14522]  <TASK>
[  668.271903][T14522]  dump_stack_lvl+0x18c/0x250
[  668.276609][T14522]  ? show_regs_print_info+0x20/0x20
[  668.281825][T14522]  ? load_image+0x420/0x420
[  668.286363][T14522]  ? __lock_acquire+0x7d80/0x7d80
[  668.291407][T14522]  ? snprintf+0xe9/0x140
[  668.295680][T14522]  should_fail_ex+0x394/0x4c0
[  668.300390][T14522]  _copy_to_user+0x2f/0xa0
[  668.304834][T14522]  simple_read_from_buffer+0xe7/0x150
[  668.310241][T14522]  proc_fail_nth_read+0x1e8/0x260
[  668.315290][T14522]  ? proc_fault_inject_write+0x360/0x360
[  668.320951][T14522]  ? fsnotify_perm+0x271/0x5e0
[  668.325739][T14522]  ? proc_fault_inject_write+0x360/0x360
[  668.331391][T14522]  vfs_read+0x298/0x990
[  668.335583][T14522]  ? kernel_read+0x1e0/0x1e0
[  668.340200][T14522]  ? __fget_files+0x28/0x460
[  668.344811][T14522]  ? __fget_files+0x3fc/0x460
[  668.349527][T14522]  ? __fdget_pos+0x2a3/0x330
[  668.354140][T14522]  ? ksys_read+0x74/0x260
[  668.358495][T14522]  ksys_read+0x151/0x260
[  668.362759][T14522]  ? vfs_write+0x9a0/0x9a0
[  668.367200][T14522]  ? lockdep_hardirqs_on+0x98/0x150
[  668.372430][T14522]  do_syscall_64+0x55/0xb0
[  668.376869][T14522]  ? clear_bhb_loop+0x40/0x90
[  668.381572][T14522]  ? clear_bhb_loop+0x40/0x90
[  668.386272][T14522]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  668.392189][T14522] RIP: 0033:0x7f46abb5e6ce
[  668.396624][T14522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  668.416331][T14522] RSP: 002b:00007f46aca6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  668.424747][T14522] RAX: ffffffffffffffda RBX: 00007f46aca6e6c0 RCX: 00007f46abb5e6ce
[  668.432714][T14522] RDX: 000000000000000f RSI: 00007f46aca6e0a0 RDI: 0000000000000004
[  668.440693][T14522] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  668.448665][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  668.456636][T14522] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  668.464632][T14522]  </TASK>
[  668.541530][T13000] wlan1: Creating new IBSS network, BSSID 06:6a:bd:49:f1:7d
[  668.552892][T13002] wlan1: Creating new IBSS network, BSSID ba:57:21:41:96:d7
[  669.953335][T14558] netlink: 'syz.2.3376': attribute type 6 has an invalid length.
[  671.085198][T14580] __nla_validate_parse: 13 callbacks suppressed
[  671.085216][T14580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3382'.
[  672.422750][T14580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3382'.
[  672.613554][T14590] FAULT_INJECTION: forcing a failure.
[  672.613554][T14590] name failslab, interval 1, probability 0, space 0, times 0
[  672.660633][T14590] CPU: 0 PID: 14590 Comm: syz.3.3386 Not tainted syzkaller #0
[  672.668162][T14590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  672.678240][T14590] Call Trace:
[  672.681542][T14590]  <TASK>
[  672.684508][T14590]  dump_stack_lvl+0x18c/0x250
[  672.689214][T14590]  ? show_regs_print_info+0x20/0x20
[  672.694435][T14590]  ? load_image+0x420/0x420
[  672.698968][T14590]  ? __might_sleep+0xe0/0xe0
[  672.703568][T14590]  ? __lock_acquire+0x7d80/0x7d80
[  672.708612][T14590]  ? trace_contention_end+0x39/0xe0
[  672.713816][T14590]  should_fail_ex+0x394/0x4c0
[  672.718509][T14590]  should_failslab+0x9/0x20
[  672.723016][T14590]  slab_pre_alloc_hook+0x59/0x300
[  672.728047][T14590]  ? mutex_lock_nested+0x20/0x20
[  672.733041][T14590]  ? tcx_prog_attach+0x2e4/0x780
[  672.737985][T14590]  __kmem_cache_alloc_node+0x53/0x250
[  672.743367][T14590]  ? tcx_prog_attach+0x2e4/0x780
[  672.748308][T14590]  kmalloc_trace+0x2a/0xe0
[  672.752736][T14590]  tcx_prog_attach+0x2e4/0x780
[  672.757507][T14590]  ? netns_bpf_pernet_pre_exit+0x1d0/0x1d0
[  672.763321][T14590]  ? bpf_prog_attach_check_attach_type+0x188/0x440
[  672.769857][T14590]  bpf_prog_attach+0x415/0x560
[  672.774651][T14590]  __sys_bpf+0x306/0x890
[  672.778917][T14590]  ? bpf_link_show_fdinfo+0x390/0x390
[  672.784314][T14590]  ? lock_chain_count+0x20/0x20
[  672.789180][T14590]  __x64_sys_bpf+0x7c/0x90
[  672.793599][T14590]  do_syscall_64+0x55/0xb0
[  672.798014][T14590]  ? clear_bhb_loop+0x40/0x90
[  672.802690][T14590]  ? clear_bhb_loop+0x40/0x90
[  672.807373][T14590]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  672.813265][T14590] RIP: 0033:0x7f90f219de99
[  672.817687][T14590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.837310][T14590] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  672.845740][T14590] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  672.853743][T14590] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000008
[  672.861727][T14590] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  672.869699][T14590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.877668][T14590] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  672.885654][T14590]  </TASK>
[  673.318934][T14604] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3390'.
[  673.585565][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'.
[  673.614857][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'.
[  673.625080][T14611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'.
[  673.927586][T14617] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3392'.
[  674.565512][T14633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3397'.
[  674.654130][T14635] netlink: 'syz.1.3396': attribute type 6 has an invalid length.
[  675.031711][T14645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3403'.
[  676.572363][T14645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3403'.
[  676.791248][T14654] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3406'.
[  676.963317][T14662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3405'.
[  677.091020][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'.
[  677.150298][T14666] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  677.595860][T14672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3411'.
[  677.717896][T14682] netlink: 'syz.0.3416': attribute type 5 has an invalid length.
[  677.746910][T14682] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3416'.
[  677.763031][T14682] hsr_slave_0: left promiscuous mode
[  677.794142][T14682] hsr_slave_1: left promiscuous mode
[  678.306427][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3419'.
[  678.493802][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'.
[  678.544509][T14706] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3421'.
[  678.580313][T14705] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  678.955620][T14712] netlink: 'syz.0.3418': attribute type 6 has an invalid length.
[  679.284107][T14721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3425'.
[  681.118947][T13000] wlan1: Trigger new scan to find an IBSS to join
[  681.124598][T12996] wlan1: Trigger new scan to find an IBSS to join
[  682.337761][T14779] __nla_validate_parse: 2 callbacks suppressed
[  682.337780][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'.
[  682.379742][T14780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3443'.
[  682.569458][T14787] FAULT_INJECTION: forcing a failure.
[  682.569458][T14787] name failslab, interval 1, probability 0, space 0, times 0
[  682.600926][T14787] CPU: 0 PID: 14787 Comm: syz.1.3447 Not tainted syzkaller #0
[  682.608445][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  682.618527][T14787] Call Trace:
[  682.621834][T14787]  <TASK>
[  682.624780][T14787]  dump_stack_lvl+0x18c/0x250
[  682.629482][T14787]  ? show_regs_print_info+0x20/0x20
[  682.634792][T14787]  ? load_image+0x420/0x420
[  682.639418][T14787]  ? __might_sleep+0xe0/0xe0
[  682.644121][T14787]  ? __lock_acquire+0x7d80/0x7d80
[  682.649163][T14787]  ? rcu_is_watching+0x15/0xb0
[  682.653961][T14787]  should_fail_ex+0x394/0x4c0
[  682.658670][T14787]  should_failslab+0x9/0x20
[  682.663196][T14787]  slab_pre_alloc_hook+0x59/0x300
[  682.668246][T14787]  ? netlink_dump+0xf8/0xec0
[  682.672859][T14787]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.678952][T14787]  kmem_cache_alloc_node+0x5e/0x310
[  682.684179][T14787]  ? __alloc_skb+0x103/0x2c0
[  682.688802][T14787]  __alloc_skb+0x103/0x2c0
[  682.693249][T14787]  netlink_dump+0x1ee/0xec0
[  682.697789][T14787]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  682.703787][T14787]  ? lock_chain_count+0x20/0x20
[  682.708655][T14787]  ? netlink_lookup+0x200/0x200
[  682.713561][T14787]  ? slab_free_freelist_hook+0x130/0x1a0
[  682.719224][T14787]  ? netlink_recvmsg+0x5e7/0xe60
[  682.724171][T14787]  ? kmem_cache_free+0xf8/0x290
[  682.729037][T14787]  netlink_recvmsg+0x693/0xe60
[  682.733806][T14787]  ? netlink_sendmsg+0xbf0/0xbf0
[  682.738744][T14787]  ? aa_af_perm+0x330/0x330
[  682.743273][T14787]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  682.748568][T14787]  ? security_socket_recvmsg+0x89/0xb0
[  682.754039][T14787]  ? netlink_sendmsg+0xbf0/0xbf0
[  682.759001][T14787]  ____sys_recvmsg+0x2bd/0x5d0
[  682.763787][T14787]  ? __sys_recvmsg_sock+0x50/0x50
[  682.768832][T14787]  ? import_iovec+0x73/0xa0
[  682.773376][T14787]  ___sys_recvmsg+0x214/0x590
[  682.778059][T14787]  ? __sys_recvmsg+0x2a0/0x2a0
[  682.782822][T14787]  ? ksys_write+0x1d2/0x260
[  682.787336][T14787]  ? __fget_files+0x3fc/0x460
[  682.792039][T14787]  __x64_sys_recvmsg+0x21e/0x2f0
[  682.796977][T14787]  ? ___sys_recvmsg+0x590/0x590
[  682.801837][T14787]  ? lockdep_hardirqs_on+0x98/0x150
[  682.807037][T14787]  do_syscall_64+0x55/0xb0
[  682.811445][T14787]  ? clear_bhb_loop+0x40/0x90
[  682.816149][T14787]  ? clear_bhb_loop+0x40/0x90
[  682.820822][T14787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.826710][T14787] RIP: 0033:0x7f0f4159de99
[  682.831123][T14787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.850904][T14787] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  682.859316][T14787] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  682.867289][T14787] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003
[  682.875258][T14787] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  682.883227][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.891300][T14787] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  682.899284][T14787]  </TASK>
[  683.313049][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'.
[  683.378953][T14807] netlink: 'syz.2.3455': attribute type 28 has an invalid length.
[  683.396042][T14807] netlink: 'syz.2.3455': attribute type 29 has an invalid length.
[  683.434788][T14807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3455'.
[  683.734986][T14821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3457'.
[  684.566137][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  684.714256][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'.
[  685.154848][T14840] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  686.020799][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  686.027210][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  687.001958][T14848] netlink: 'syz.2.3477': attribute type 2 has an invalid length.
[  687.045984][T14848] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3477'.
[  687.140816][T14854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3469'.
[  687.607805][T14865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3473'.
[  687.939546][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'.
[  687.967596][T14875] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  688.087531][T14880] netlink: 'syz.0.3482': attribute type 2 has an invalid length.
[  688.102118][T14880] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3482'.
[  688.534759][T14896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3488'.
[  688.591686][T14898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3485'.
[  689.005426][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  689.035228][T13002] wlan1: Trigger new scan to find an IBSS to join
[  689.035883][T14906] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  689.139129][T14912] netlink: 'syz.1.3494': attribute type 2 has an invalid length.
[  689.148262][T14912] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3494'.
[  689.799322][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3506'.
[  689.989002][T14935] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  690.141919][T14937] FAULT_INJECTION: forcing a failure.
[  690.141919][T14937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.157046][T14937] CPU: 0 PID: 14937 Comm: syz.2.3507 Not tainted syzkaller #0
[  690.164550][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  690.174627][T14937] Call Trace:
[  690.177909][T14937]  <TASK>
[  690.180841][T14937]  dump_stack_lvl+0x18c/0x250
[  690.185554][T14937]  ? show_regs_print_info+0x20/0x20
[  690.190751][T14937]  ? load_image+0x420/0x420
[  690.195256][T14937]  ? __might_fault+0xaa/0x120
[  690.199941][T14937]  ? __lock_acquire+0x7d80/0x7d80
[  690.204999][T14937]  should_fail_ex+0x394/0x4c0
[  690.209714][T14937]  _copy_from_user+0x2f/0xe0
[  690.214330][T14937]  ___sys_sendmsg+0x1c7/0x360
[  690.219015][T14937]  ? get_pid_task+0x20/0x1e0
[  690.223617][T14937]  ? __sys_sendmsg+0x2b0/0x2b0
[  690.228388][T14937]  ? __lock_acquire+0x7d80/0x7d80
[  690.233475][T14937]  __se_sys_sendmsg+0x1d0/0x2c0
[  690.238337][T14937]  ? __x64_sys_sendmsg+0x80/0x80
[  690.243282][T14937]  ? lockdep_hardirqs_on+0x98/0x150
[  690.248483][T14937]  do_syscall_64+0x55/0xb0
[  690.252900][T14937]  ? clear_bhb_loop+0x40/0x90
[  690.257590][T14937]  ? clear_bhb_loop+0x40/0x90
[  690.262267][T14937]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  690.268158][T14937] RIP: 0033:0x7f46abb9de99
[  690.272571][T14937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.292180][T14937] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  690.300599][T14937] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  690.308566][T14937] RDX: 00000000000040c0 RSI: 0000200000001980 RDI: 0000000000000003
[  690.316534][T14937] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  690.324499][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.332556][T14937] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  690.340564][T14937]  </TASK>
[  690.827217][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'.
[  690.888525][T14963] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  692.095358][T13002] wlan1: Trigger new scan to find an IBSS to join
[  692.095914][T13004] wlan1: Trigger new scan to find an IBSS to join
[  692.139169][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'.
[  692.187256][T14989] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  692.425677][T14993] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  692.981611][T15019] FAULT_INJECTION: forcing a failure.
[  692.981611][T15019] name failslab, interval 1, probability 0, space 0, times 0
[  693.032813][T15019] CPU: 0 PID: 15019 Comm: syz.0.3540 Not tainted syzkaller #0
[  693.040340][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  693.050424][T15019] Call Trace:
[  693.053730][T15019]  <TASK>
[  693.056683][T15019]  dump_stack_lvl+0x18c/0x250
[  693.061401][T15019]  ? show_regs_print_info+0x20/0x20
[  693.066629][T15019]  ? load_image+0x420/0x420
[  693.071171][T15019]  ? __might_sleep+0xe0/0xe0
[  693.075804][T15019]  ? __lock_acquire+0x7d80/0x7d80
[  693.080855][T15019]  should_fail_ex+0x394/0x4c0
[  693.085583][T15019]  should_failslab+0x9/0x20
[  693.090109][T15019]  slab_pre_alloc_hook+0x59/0x300
[  693.095174][T15019]  kmem_cache_alloc_node+0x5e/0x310
[  693.100403][T15019]  ? perf_event_alloc+0x146/0x2150
[  693.105540][T15019]  perf_event_alloc+0x146/0x2150
[  693.110599][T15019]  ? _raw_spin_unlock+0x28/0x40
[  693.115476][T15019]  ? find_lively_task_by_vpid+0x19/0x290
[  693.121133][T15019]  ? find_lively_task_by_vpid+0x19/0x290
[  693.126797][T15019]  __se_sys_perf_event_open+0x740/0x1c60
[  693.132470][T15019]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  693.138140][T15019]  ? lock_chain_count+0x20/0x20
[  693.143025][T15019]  ? lockdep_hardirqs_on+0x98/0x150
[  693.148251][T15019]  ? __x64_sys_perf_event_open+0x20/0xc0
[  693.153909][T15019]  do_syscall_64+0x55/0xb0
[  693.158350][T15019]  ? clear_bhb_loop+0x40/0x90
[  693.163047][T15019]  ? clear_bhb_loop+0x40/0x90
[  693.167744][T15019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  693.173661][T15019] RIP: 0033:0x7f8a4859de99
[  693.178101][T15019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.197747][T15019] RSP: 002b:00007f8a494c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  693.206187][T15019] RAX: ffffffffffffffda RBX: 00007f8a48826090 RCX: 00007f8a4859de99
[  693.214177][T15019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  693.222169][T15019] RBP: 00007f8a494c3090 R08: 0000000000000008 R09: 0000000000000000
[  693.230161][T15019] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  693.238153][T15019] R13: 00007f8a48826128 R14: 00007f8a48826090 R15: 00007fff582f2a48
[  693.246171][T15019]  </TASK>
[  693.319794][T15023] __nla_validate_parse: 2 callbacks suppressed
[  693.319813][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3541'.
[  693.676809][T15016] delete_channel: no stack
[  693.809352][T15025] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  694.061161][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'.
[  694.117183][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  694.127695][T15027] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  694.127774][T15029] FAULT_INJECTION: forcing a failure.
[  694.127774][T15029] name failslab, interval 1, probability 0, space 0, times 0
[  694.183035][T15029] CPU: 1 PID: 15029 Comm: syz.1.3543 Not tainted syzkaller #0
[  694.190556][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  694.200635][T15029] Call Trace:
[  694.203910][T15029]  <TASK>
[  694.206839][T15029]  dump_stack_lvl+0x18c/0x250
[  694.211520][T15029]  ? show_regs_print_info+0x20/0x20
[  694.216714][T15029]  ? load_image+0x420/0x420
[  694.221218][T15029]  ? __might_sleep+0xe0/0xe0
[  694.225807][T15029]  ? __lock_acquire+0x7d80/0x7d80
[  694.230834][T15029]  should_fail_ex+0x394/0x4c0
[  694.235511][T15029]  should_failslab+0x9/0x20
[  694.240011][T15029]  slab_pre_alloc_hook+0x59/0x300
[  694.245037][T15029]  kmem_cache_alloc_node+0x5e/0x310
[  694.250235][T15029]  ? perf_event_alloc+0x146/0x2150
[  694.255349][T15029]  perf_event_alloc+0x146/0x2150
[  694.260314][T15029]  ? _raw_spin_unlock+0x28/0x40
[  694.265167][T15029]  ? find_lively_task_by_vpid+0x19/0x290
[  694.270798][T15029]  ? find_lively_task_by_vpid+0x19/0x290
[  694.276431][T15029]  __se_sys_perf_event_open+0x740/0x1c60
[  694.282072][T15029]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  694.287794][T15029]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  694.293428][T15029]  ? lock_chain_count+0x20/0x20
[  694.298368][T15029]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  694.304350][T15029]  ? lockdep_hardirqs_on+0x98/0x150
[  694.309545][T15029]  ? __x64_sys_perf_event_open+0x20/0xc0
[  694.315186][T15029]  do_syscall_64+0x55/0xb0
[  694.319593][T15029]  ? clear_bhb_loop+0x40/0x90
[  694.324270][T15029]  ? clear_bhb_loop+0x40/0x90
[  694.329028][T15029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.334916][T15029] RIP: 0033:0x7f0f4159de99
[  694.339327][T15029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.358962][T15029] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  694.367379][T15029] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  694.375348][T15029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  694.383311][T15029] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  694.391273][T15029] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  694.399327][T15029] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  694.407336][T15029]  </TASK>
[  694.445416][T15028] delete_channel: no stack
[  694.502724][T15034] FAULT_INJECTION: forcing a failure.
[  694.502724][T15034] name failslab, interval 1, probability 0, space 0, times 0
[  694.531374][T15034] CPU: 0 PID: 15034 Comm: syz.3.3545 Not tainted syzkaller #0
[  694.538895][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  694.548977][T15034] Call Trace:
[  694.552275][T15034]  <TASK>
[  694.555234][T15034]  dump_stack_lvl+0x18c/0x250
[  694.559940][T15034]  ? show_regs_print_info+0x20/0x20
[  694.565158][T15034]  ? load_image+0x420/0x420
[  694.569675][T15034]  ? __might_sleep+0xe0/0xe0
[  694.574361][T15034]  ? __lock_acquire+0x7d80/0x7d80
[  694.579388][T15034]  should_fail_ex+0x394/0x4c0
[  694.584072][T15034]  should_failslab+0x9/0x20
[  694.588585][T15034]  slab_pre_alloc_hook+0x59/0x300
[  694.593611][T15034]  ? tomoyo_encode+0x2ad/0x570
[  694.598375][T15034]  ? tomoyo_encode+0x2ad/0x570
[  694.603139][T15034]  __kmem_cache_alloc_node+0x53/0x250
[  694.608523][T15034]  ? tomoyo_encode+0x2ad/0x570
[  694.613283][T15034]  __kmalloc+0xa7/0x240
[  694.617444][T15034]  tomoyo_encode+0x2ad/0x570
[  694.622130][T15034]  tomoyo_realpath_from_path+0x57c/0x5c0
[  694.627769][T15034]  ? tomoyo_domain+0xd6/0x120
[  694.632463][T15034]  tomoyo_path_number_perm+0x248/0x5e0
[  694.638016][T15034]  ? tomoyo_path_number_perm+0x217/0x5e0
[  694.643648][T15034]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  694.649110][T15034]  ? ksys_write+0x1d2/0x260
[  694.653640][T15034]  ? __fget_files+0x28/0x460
[  694.658249][T15034]  security_file_ioctl+0x70/0xa0
[  694.663191][T15034]  __se_sys_ioctl+0x48/0x170
[  694.667780][T15034]  do_syscall_64+0x55/0xb0
[  694.672194][T15034]  ? clear_bhb_loop+0x40/0x90
[  694.676874][T15034]  ? clear_bhb_loop+0x40/0x90
[  694.681572][T15034]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.687983][T15034] RIP: 0033:0x7f90f219de99
[  694.692398][T15034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.712164][T15034] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  694.720583][T15034] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  694.728553][T15034] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000008
[  694.736537][T15034] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  694.744528][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.752519][T15034] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  694.760517][T15034]  </TASK>
[  694.778572][T15034] ERROR: Out of memory at tomoyo_realpath_from_path.
[  694.831588][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'.
[  694.846857][T15034] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  694.900376][T15033] delete_channel: no stack
[  694.962273][T15039] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  695.095028][T15044] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  695.143934][T15043] delete_channel: no stack
[  695.269918][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'.
[  695.351571][T15051] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  695.541600][T15047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3550'.
[  695.553224][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  695.594791][T13007] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  695.646252][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'.
[  696.077860][T12996] wlan1: Trigger new scan to find an IBSS to join
[  696.084844][T13000] wlan1: Trigger new scan to find an IBSS to join
[  696.143818][T15058] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  696.163468][T15062] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  696.233238][T15059] delete_channel: no stack
[  696.552595][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'.
[  696.645893][T15072] veth1_to_bond: entered allmulticast mode
[  696.804207][T15077] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  696.816455][T15078] netlink: 'syz.1.3560': attribute type 39 has an invalid length.
[  696.838555][T15078] macvlan0: entered promiscuous mode
[  696.864115][T15078] macvlan0: entered allmulticast mode
[  696.890755][T15078] veth1_vlan: entered allmulticast mode
[  696.914854][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'.
[  696.926168][T15082] veth1_to_bond: entered allmulticast mode
[  697.025660][T15084] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  697.052762][T13000] wlan1: Creating new IBSS network, BSSID d2:ea:39:67:51:e8
[  697.083176][ T5786] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  697.100240][T15081] netlink: 'syz.2.3562': attribute type 39 has an invalid length.
[  697.119525][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'.
[  697.124339][T15081] macvlan0: entered promiscuous mode
[  697.138458][T15081] macvlan0: entered allmulticast mode
[  697.144034][T15081] veth1_vlan: entered allmulticast mode
[  697.165116][T15089] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  697.460013][T15103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3567'.
[  697.775140][T15100] netlink: 'syz.1.3569': attribute type 39 has an invalid length.
[  697.793333][T15108] FAULT_INJECTION: forcing a failure.
[  697.793333][T15108] name failslab, interval 1, probability 0, space 0, times 0
[  697.808963][T15108] CPU: 0 PID: 15108 Comm: syz.2.3572 Not tainted syzkaller #0
[  697.816469][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  697.826547][T15108] Call Trace:
[  697.829846][T15108]  <TASK>
[  697.832798][T15108]  dump_stack_lvl+0x18c/0x250
[  697.837509][T15108]  ? show_regs_print_info+0x20/0x20
[  697.842824][T15108]  ? load_image+0x420/0x420
[  697.847390][T15108]  ? __might_sleep+0xe0/0xe0
[  697.851995][T15108]  ? __lock_acquire+0x7d80/0x7d80
[  697.857153][T15108]  should_fail_ex+0x394/0x4c0
[  697.861866][T15108]  should_failslab+0x9/0x20
[  697.866434][T15108]  slab_pre_alloc_hook+0x59/0x300
[  697.871495][T15108]  ? __get_vm_area_node+0x125/0x370
[  697.876728][T15108]  __kmem_cache_alloc_node+0x53/0x250
[  697.882153][T15108]  ? __get_vm_area_node+0x125/0x370
[  697.887383][T15108]  kmalloc_node_trace+0x26/0xe0
[  697.892262][T15108]  __get_vm_area_node+0x125/0x370
[  697.897311][T15108]  __vmalloc_node_range+0x36f/0x1320
[  697.902628][T15108]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  697.908200][T15108]  ? perf_trace_preemptirq_template+0x269/0x330
[  697.914465][T15108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  697.920479][T15108]  ? aa_get_newest_label+0xfd/0x5c0
[  697.925702][T15108]  ? free_vm_area+0x50/0x50
[  697.930239][T15108]  ? end_current_label_crit_section+0x170/0x170
[  697.936547][T15108]  ? safesetid_security_capable+0x42/0x1a0
[  697.937407][ T5786] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17
[  697.942371][T15108]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  697.942398][T15108]  __vmalloc+0x7a/0x90
[  697.942420][T15108]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  697.949924][ T5786] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[  697.955044][T15108]  bpf_prog_alloc_no_stats+0x46/0x430
[  697.955073][T15108]  bpf_prog_alloc+0x3d/0x1a0
[  697.955094][T15108]  bpf_prog_load+0x6b2/0x1610
[  697.955122][T15108]  ? map_freeze+0x420/0x420
[  697.992275][T15108]  ? __might_fault+0xaa/0x120
[  697.996983][T15108]  ? __lock_acquire+0x7d80/0x7d80
[  698.002053][T15108]  ? __might_fault+0xaa/0x120
[  698.006774][T15108]  ? __might_fault+0xc6/0x120
[  698.011519][T15108]  ? __might_fault+0xaa/0x120
[  698.016229][T15108]  ? bpf_lsm_bpf+0x9/0x10
[  698.020595][T15108]  ? security_bpf+0x7e/0xa0
[  698.025117][T15108]  __sys_bpf+0x5ba/0x890
[  698.029389][T15108]  ? bpf_link_show_fdinfo+0x390/0x390
[  698.034860][T15108]  ? lock_chain_count+0x20/0x20
[  698.039732][T15108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  698.045748][T15108]  __x64_sys_bpf+0x7c/0x90
[  698.050191][T15108]  do_syscall_64+0x55/0xb0
[  698.054622][T15108]  ? clear_bhb_loop+0x40/0x90
[  698.059309][T15108]  ? clear_bhb_loop+0x40/0x90
[  698.064000][T15108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  698.069902][T15108] RIP: 0033:0x7f46abb9de99
[  698.074315][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.094091][T15108] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  698.102511][T15108] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  698.110585][T15108] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  698.118671][T15108] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  698.126643][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.134629][T15108] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  698.142633][T15108]  </TASK>
[  698.172307][T15115] FAULT_INJECTION: forcing a failure.
[  698.172307][T15115] name failslab, interval 1, probability 0, space 0, times 0
[  698.180380][T15108] syz.2.3572: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  698.188342][T15115] CPU: 1 PID: 15115 Comm: syz.1.3573 Not tainted syzkaller #0
[  698.193014][T15116] netlink: 'syz.2.3572': attribute type 39 has an invalid length.
[  698.202163][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  698.202176][T15115] Call Trace:
[  698.202184][T15115]  <TASK>
[  698.202191][T15115]  dump_stack_lvl+0x18c/0x250
[  698.202220][T15115]  ? show_regs_print_info+0x20/0x20
[  698.202239][T15115]  ? load_image+0x420/0x420
[  698.202264][T15115]  ? __might_sleep+0xe0/0xe0
[  698.202286][T15115]  ? __lock_acquire+0x7d80/0x7d80
[  698.202307][T15115]  ? expand_files+0x70c/0x820
[  698.202331][T15115]  should_fail_ex+0x394/0x4c0
[  698.202358][T15115]  should_failslab+0x9/0x20
[  698.202381][T15115]  slab_pre_alloc_hook+0x59/0x300
[  698.202411][T15115]  kmem_cache_alloc_node+0x5e/0x310
[  698.202434][T15115]  ? perf_event_alloc+0x146/0x2150
[  698.214590][T15108] ,cpuset=
[  698.217661][T15115]  perf_event_alloc+0x146/0x2150
[  698.217694][T15115]  ? _raw_spin_unlock+0x28/0x40
[  698.217719][T15115]  ? alloc_fd+0x590/0x640
[  698.232665][T15108] syz2
[  698.234097][T15115]  __se_sys_perf_event_open+0x61f/0x1c60
[  698.242295][T15108] ,mems_allowed=0-1
[  698.244136][T15115]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  698.244174][T15115]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  698.244218][T15115]  ? syscall_enter_from_user_mode+0x2e/0x80
[  698.253806][T15108] 
[  698.258310][T15115]  ? __x64_sys_perf_event_open+0x20/0xc0
[  698.258342][T15115]  do_syscall_64+0x55/0xb0
[  698.258362][T15115]  ? clear_bhb_loop+0x40/0x90
[  698.258381][T15115]  ? clear_bhb_loop+0x40/0x90
[  698.258401][T15115]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  698.258421][T15115] RIP: 0033:0x7f0f4159de99
[  698.258440][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.387003][T15115] RSP: 002b:00007f0f4246b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  698.395436][T15115] RAX: ffffffffffffffda RBX: 00007f0f41825fa0 RCX: 00007f0f4159de99
[  698.403435][T15115] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000200
[  698.411411][T15115] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  698.419472][T15115] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  698.427444][T15115] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  698.435430][T15115]  </TASK>
[  698.439237][T15108] CPU: 0 PID: 15108 Comm: syz.2.3572 Not tainted syzkaller #0
[  698.446751][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  698.456836][T15108] Call Trace:
[  698.460139][T15108]  <TASK>
[  698.463116][T15108]  dump_stack_lvl+0x18c/0x250
[  698.467831][T15108]  ? show_regs_print_info+0x20/0x20
[  698.473055][T15108]  ? load_image+0x420/0x420
[  698.477562][T15108]  ? __rcu_read_unlock+0x7c/0xd0
[  698.482530][T15108]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  698.488956][T15108]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  698.495477][T15108]  warn_alloc+0x246/0x340
[  698.499816][T15108]  ? __get_vm_area_node+0x125/0x370
[  698.505019][T15108]  ? zone_watermark_ok_safe+0x230/0x230
[  698.510562][T15108]  ? rcu_is_watching+0x15/0xb0
[  698.515334][T15108]  ? __get_vm_area_node+0x356/0x370
[  698.520543][T15108]  __vmalloc_node_range+0x394/0x1320
[  698.525829][T15108]  ? perf_trace_preemptirq_template+0x269/0x330
[  698.532077][T15108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  698.538068][T15108]  ? aa_get_newest_label+0xfd/0x5c0
[  698.543265][T15108]  ? free_vm_area+0x50/0x50
[  698.547769][T15108]  ? end_current_label_crit_section+0x170/0x170
[  698.554007][T15108]  ? safesetid_security_capable+0x42/0x1a0
[  698.559832][T15108]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  698.565385][T15108]  __vmalloc+0x7a/0x90
[  698.569469][T15108]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  698.575020][T15108]  bpf_prog_alloc_no_stats+0x46/0x430
[  698.580402][T15108]  bpf_prog_alloc+0x3d/0x1a0
[  698.584993][T15108]  bpf_prog_load+0x6b2/0x1610
[  698.589686][T15108]  ? map_freeze+0x420/0x420
[  698.594194][T15108]  ? __might_fault+0xaa/0x120
[  698.598867][T15108]  ? __lock_acquire+0x7d80/0x7d80
[  698.603890][T15108]  ? __might_fault+0xaa/0x120
[  698.608567][T15108]  ? __might_fault+0xc6/0x120
[  698.613236][T15108]  ? __might_fault+0xaa/0x120
[  698.617908][T15108]  ? bpf_lsm_bpf+0x9/0x10
[  698.622243][T15108]  ? security_bpf+0x7e/0xa0
[  698.626747][T15108]  __sys_bpf+0x5ba/0x890
[  698.630998][T15108]  ? bpf_link_show_fdinfo+0x390/0x390
[  698.636378][T15108]  ? lock_chain_count+0x20/0x20
[  698.641229][T15108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  698.647212][T15108]  __x64_sys_bpf+0x7c/0x90
[  698.651628][T15108]  do_syscall_64+0x55/0xb0
[  698.656064][T15108]  ? clear_bhb_loop+0x40/0x90
[  698.660751][T15108]  ? clear_bhb_loop+0x40/0x90
[  698.665434][T15108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  698.671332][T15108] RIP: 0033:0x7f46abb9de99
[  698.675757][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.695381][T15108] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  698.703799][T15108] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  698.712032][T15108] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[  698.719996][T15108] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  698.727964][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.735943][T15108] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  698.743923][T15108]  </TASK>
[  698.752777][T15113] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  698.769694][T15108] Mem-Info:
[  698.772856][T15108] active_anon:5253 inactive_anon:0 isolated_anon:0
[  698.772856][T15108]  active_file:19631 inactive_file:40202 isolated_file:0
[  698.772856][T15108]  unevictable:768 dirty:717 writeback:0
[  698.772856][T15108]  slab_reclaimable:10648 slab_unreclaimable:94213
[  698.772856][T15108]  mapped:25198 shmem:1361 pagetables:558
[  698.772856][T15108]  sec_pagetables:0 bounce:0
[  698.772856][T15108]  kernel_misc_reclaimable:0
[  698.772856][T15108]  free:1342069 free_pcp:8214 free_cma:0
[  698.820056][T15108] Node 0 active_anon:21012kB inactive_anon:0kB active_file:78524kB inactive_file:160608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100792kB dirty:2868kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11148kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no
[  698.860895][T15117] netlink: 'syz.1.3573': attribute type 39 has an invalid length.
[  698.872927][T15108] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  698.908720][T15108] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  698.938605][T15108] lowmem_reserve[]: 0 2521 2522 2522 2522
[  698.944539][T15108] Node 0 DMA32 free:1462688kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20976kB inactive_anon:0kB active_file:78524kB inactive_file:159772kB unevictable:1536kB writepending:2868kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:9948kB local_pcp:6068kB free_cma:0kB
[  698.965258][T15120] __nla_validate_parse: 1 callbacks suppressed
[  698.965273][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'.
[  698.996000][T15108] lowmem_reserve[]: 0 0 0 0 0
[  699.000971][T15108] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  699.028406][T15119] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  699.092985][T15108] lowmem_reserve[]: 0 0 0 0 0
[  699.115763][T15108] Node 1 Normal free:3889976kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23304kB local_pcp:11520kB free_cma:0kB
[  699.158297][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'.
[  699.167661][T15108] lowmem_reserve[]: 0 0 0 0 0
[  699.182281][T15108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  699.233744][T15108] Node 0 DMA32: 1154*4kB (UM) 1869*8kB (UME) 2137*16kB (UM) 1182*32kB (UME) 510*64kB (UME) 606*128kB (UME) 343*256kB (UM) 213*512kB (UME) 139*1024kB (UME) 18*2048kB (UME) 216*4096kB (UM) = 1462592kB
[  699.253575][T15108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  699.265367][T15108] Node 1 Normal: 298*4kB (UME) 76*8kB (UME) 49*16kB (UME) 45*32kB (UME) 18*64kB (UME) 6*128kB (UE) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3889976kB
[  699.293579][T15124] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  699.308471][T15108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  699.327856][T15108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  699.337527][T15108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  699.348381][T15108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  699.358576][T15108] 61194 total pagecache pages
[  699.363286][T15108] 0 pages in swap cache
[  699.367973][T15108] Free swap  = 124996kB
[  699.372241][T15108] Total swap = 124996kB
[  699.382082][T15108] 2097051 pages RAM
[  699.391339][T15108] 0 pages HighMem/MovableOnly
[  699.396226][T15108] 416955 pages reserved
[  699.400657][T15108] 0 pages cma reserved
[  699.488872][T15130] netlink: 'syz.3.3581': attribute type 5 has an invalid length.
[  699.546318][T15130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3581'.
[  699.577005][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  699.585697][T15130] hsr_slave_0: left promiscuous mode
[  699.628944][T15130] hsr_slave_1: left promiscuous mode
[  699.750868][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'.
[  699.834244][T15144] netlink: 'syz.1.3582': attribute type 39 has an invalid length.
[  699.877564][T15142] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  699.910755][T15146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3584'.
[  700.099524][T15148] netlink: 'syz.3.3586': attribute type 39 has an invalid length.
[  700.119058][T15148] veth1_vlan: entered allmulticast mode
[  700.440268][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  700.477307][T15156] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  700.505848][T15154] netlink: 'syz.0.3589': attribute type 12 has an invalid length.
[  700.513817][T15154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3589'.
[  700.892090][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  700.939329][T15170] netlink: 'syz.3.3593': attribute type 39 has an invalid length.
[  700.969596][T15167] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  701.104038][T15169] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  701.116287][T13000] wlan1: Trigger new scan to find an IBSS to join
[  701.179009][T15168] delete_channel: no stack
[  701.261910][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'.
[  701.318526][T15176] team0: Port device geneve1 added
[  701.338399][T15182] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  701.625026][T15188] FAULT_INJECTION: forcing a failure.
[  701.625026][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  701.641368][T15188] CPU: 1 PID: 15188 Comm: syz.0.3601 Not tainted syzkaller #0
[  701.648868][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  701.658944][T15188] Call Trace:
[  701.662239][T15188]  <TASK>
[  701.665187][T15188]  dump_stack_lvl+0x18c/0x250
[  701.669897][T15188]  ? show_regs_print_info+0x20/0x20
[  701.675119][T15188]  ? load_image+0x420/0x420
[  701.679658][T15188]  ? __lock_acquire+0x7d80/0x7d80
[  701.684710][T15188]  should_fail_ex+0x394/0x4c0
[  701.684764][T15189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3600'.
[  701.689485][T15188]  _copy_from_user+0x2f/0xe0
[  701.689512][T15188]  __copy_msghdr+0x388/0x560
[  701.689538][T15188]  ___sys_sendmsg+0x214/0x360
[  701.712514][T15188]  ? __sys_sendmsg+0x2b0/0x2b0
[  701.717340][T15188]  ? __lock_acquire+0x7d80/0x7d80
[  701.722419][T15188]  __se_sys_sendmsg+0x1d0/0x2c0
[  701.727296][T15188]  ? perf_trace_preemptirq_template+0x269/0x330
[  701.733581][T15188]  ? __x64_sys_sendmsg+0x80/0x80
[  701.738565][T15188]  ? lockdep_hardirqs_on+0x98/0x150
[  701.743806][T15188]  do_syscall_64+0x55/0xb0
[  701.748262][T15188]  ? clear_bhb_loop+0x40/0x90
[  701.753059][T15188]  ? clear_bhb_loop+0x40/0x90
[  701.757788][T15188]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  701.763717][T15188] RIP: 0033:0x7f8a4859de99
[  701.768159][T15188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.787798][T15188] RSP: 002b:00007f8a494e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  701.796223][T15188] RAX: ffffffffffffffda RBX: 00007f8a48825fa0 RCX: 00007f8a4859de99
[  701.804222][T15188] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 000000000000000b
[  701.812192][T15188] RBP: 00007f8a494e4090 R08: 0000000000000000 R09: 0000000000000000
[  701.820173][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.828179][T15188] R13: 00007f8a48826038 R14: 00007f8a48825fa0 R15: 00007fff582f2a48
[  701.836182][T15188]  </TASK>
[  701.967807][T15192] FAULT_INJECTION: forcing a failure.
[  701.967807][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  701.986205][T15192] CPU: 1 PID: 15192 Comm: syz.0.3602 Not tainted syzkaller #0
[  701.993743][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  702.003803][T15192] Call Trace:
[  702.007109][T15192]  <TASK>
[  702.010041][T15192]  dump_stack_lvl+0x18c/0x250
[  702.014736][T15192]  ? show_regs_print_info+0x20/0x20
[  702.019934][T15192]  ? load_image+0x420/0x420
[  702.024474][T15192]  ? __might_fault+0xaa/0x120
[  702.029157][T15192]  ? __lock_acquire+0x7d80/0x7d80
[  702.034191][T15192]  should_fail_ex+0x394/0x4c0
[  702.038875][T15192]  _copy_from_user+0x2f/0xe0
[  702.043477][T15192]  btf_get_info_by_fd+0x111/0x5d0
[  702.048506][T15192]  ? asm_exc_page_fault+0x26/0x30
[  702.053619][T15192]  ? btf_get_by_fd+0x160/0x160
[  702.058389][T15192]  ? check_zeroed_user+0x73/0x160
[  702.063430][T15192]  bpf_obj_get_info_by_fd+0xc1c/0x3120
[  702.068896][T15192]  ? perf_trace_buf_alloc+0x290/0x290
[  702.074274][T15192]  ? debug_object_activate+0x309/0x500
[  702.079740][T15192]  ? verify_lock_unused+0x140/0x140
[  702.084950][T15192]  ? bpf_map_get_fd_by_id+0x330/0x330
[  702.090321][T15192]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  702.096053][T15192]  ? perf_trace_preemptirq_template+0x269/0x330
[  702.102296][T15192]  ? irqentry_enter+0x37/0x50
[  702.106975][T15192]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  702.112958][T15192]  ? lock_chain_count+0x20/0x20
[  702.117813][T15192]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  702.123963][T15192]  ? lockdep_hardirqs_on+0x98/0x150
[  702.129163][T15192]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  702.135332][T15192]  ? rep_movs_alternative+0x33/0x90
[  702.140534][T15192]  ? bpf_lsm_bpf+0x9/0x10
[  702.144897][T15192]  ? security_bpf+0x7e/0xa0
[  702.149402][T15192]  __sys_bpf+0x7eb/0x890
[  702.153644][T15192]  ? bpf_link_show_fdinfo+0x390/0x390
[  702.159030][T15192]  ? lock_chain_count+0x20/0x20
[  702.163906][T15192]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  702.169909][T15192]  __x64_sys_bpf+0x7c/0x90
[  702.174323][T15192]  do_syscall_64+0x55/0xb0
[  702.178735][T15192]  ? clear_bhb_loop+0x40/0x90
[  702.183410][T15192]  ? clear_bhb_loop+0x40/0x90
[  702.188084][T15192]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  702.193972][T15192] RIP: 0033:0x7f8a4859de99
[  702.198387][T15192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.218010][T15192] RSP: 002b:00007f8a494e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  702.226424][T15192] RAX: ffffffffffffffda RBX: 00007f8a48825fa0 RCX: 00007f8a4859de99
[  702.234407][T15192] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000f
[  702.242379][T15192] RBP: 00007f8a494e4090 R08: 0000000000000000 R09: 0000000000000000
[  702.250353][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.258329][T15192] R13: 00007f8a48826038 R14: 00007f8a48825fa0 R15: 00007fff582f2a48
[  702.266410][T15192]  </TASK>
[  702.295826][T12996] wlan1: Trigger new scan to find an IBSS to join
[  702.545657][T15201] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  702.716308][ T5786] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17
[  702.842987][T15212] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  703.035919][T15222] validate_nla: 1 callbacks suppressed
[  703.035936][T15222] netlink: 'syz.1.3610': attribute type 39 has an invalid length.
[  703.114616][T13002] wlan1: Trigger new scan to find an IBSS to join
[  703.172153][T15229] FAULT_INJECTION: forcing a failure.
[  703.172153][T15229] name failslab, interval 1, probability 0, space 0, times 0
[  703.200544][T15229] CPU: 1 PID: 15229 Comm: syz.2.3615 Not tainted syzkaller #0
[  703.208065][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  703.218142][T15229] Call Trace:
[  703.221446][T15229]  <TASK>
[  703.224397][T15229]  dump_stack_lvl+0x18c/0x250
[  703.229133][T15229]  ? show_regs_print_info+0x20/0x20
[  703.234342][T15229]  ? load_image+0x420/0x420
[  703.238859][T15229]  ? __might_sleep+0xe0/0xe0
[  703.243454][T15229]  ? __lock_acquire+0x7d80/0x7d80
[  703.248484][T15229]  should_fail_ex+0x394/0x4c0
[  703.253167][T15229]  should_failslab+0x9/0x20
[  703.257672][T15229]  slab_pre_alloc_hook+0x59/0x300
[  703.262699][T15229]  kmem_cache_alloc+0x5a/0x2c0
[  703.267462][T15229]  ? security_inode_alloc+0x34/0x110
[  703.272749][T15229]  security_inode_alloc+0x34/0x110
[  703.277869][T15229]  inode_init_always+0x914/0xc90
[  703.282813][T15229]  new_inode_pseudo+0x95/0x1d0
[  703.287577][T15229]  __sock_create+0x12d/0x940
[  703.292166][T15229]  ? lockdep_hardirqs_on+0x98/0x150
[  703.297368][T15229]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  703.303521][T15229]  __sys_socket+0xd7/0x1b0
[  703.307944][T15229]  __x64_sys_socket+0x7a/0x90
[  703.312624][T15229]  do_syscall_64+0x55/0xb0
[  703.317037][T15229]  ? clear_bhb_loop+0x40/0x90
[  703.321710][T15229]  ? clear_bhb_loop+0x40/0x90
[  703.326384][T15229]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.332276][T15229] RIP: 0033:0x7f46abb9de99
[  703.336686][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.356296][T15229] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  703.364713][T15229] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  703.372680][T15229] RDX: 0000000000000106 RSI: 0000000000000003 RDI: 000000000000000a
[  703.380649][T15229] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  703.388615][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.396581][T15229] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  703.404560][T15229]  </TASK>
[  703.465239][T15229] socket: no more sockets
[  703.605762][T15241] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  703.745608][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  703.964812][T15251] __nla_validate_parse: 3 callbacks suppressed
[  703.964831][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'.
[  704.026263][T15254] netlink: 'syz.0.3622': attribute type 5 has an invalid length.
[  704.068275][T15251] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  704.084994][T15254] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3622'.
[  704.270654][T15261] netlink: 'syz.1.3625': attribute type 10 has an invalid length.
[  704.287643][T15261] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3625'.
[  704.449075][T15270] FAULT_INJECTION: forcing a failure.
[  704.449075][T15270] name failslab, interval 1, probability 0, space 0, times 0
[  704.483014][T15270] CPU: 0 PID: 15270 Comm: syz.0.3628 Not tainted syzkaller #0
[  704.490528][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  704.500604][T15270] Call Trace:
[  704.503903][T15270]  <TASK>
[  704.506888][T15270]  dump_stack_lvl+0x18c/0x250
[  704.511588][T15270]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  704.517766][T15270]  ? show_regs_print_info+0x20/0x20
[  704.522954][T15270]  ? load_image+0x420/0x420
[  704.527488][T15270]  should_fail_ex+0x394/0x4c0
[  704.532204][T15270]  should_failslab+0x9/0x20
[  704.536741][T15270]  slab_pre_alloc_hook+0x59/0x300
[  704.541797][T15270]  ? __lock_acquire+0x7d80/0x7d80
[  704.546855][T15270]  kmem_cache_alloc_node+0x5e/0x310
[  704.552087][T15270]  ? __alloc_skb+0x103/0x2c0
[  704.556760][T15270]  __alloc_skb+0x103/0x2c0
[  704.561207][T15270]  netlink_sendmsg+0x66a/0xbf0
[  704.566007][T15270]  ? netlink_getsockopt+0x590/0x590
[  704.571262][T15270]  ? apparmor_socket_sendmsg+0x8e/0x330
[  704.576837][T15270]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  704.582155][T15270]  ? security_socket_sendmsg+0x80/0xa0
[  704.587635][T15270]  ? netlink_getsockopt+0x590/0x590
[  704.592859][T15270]  ____sys_sendmsg+0x61b/0x980
[  704.597660][T15270]  ? __asan_memset+0x22/0x40
[  704.602281][T15270]  ? __sys_sendmsg_sock+0x30/0x30
[  704.607319][T15270]  ? __import_iovec+0x5f2/0x850
[  704.612170][T15270]  ? import_iovec+0x73/0xa0
[  704.616670][T15270]  ___sys_sendmsg+0x2a6/0x360
[  704.621462][T15270]  ? __sys_sendmsg+0x2b0/0x2b0
[  704.626245][T15270]  __se_sys_sendmsg+0x1d0/0x2c0
[  704.631107][T15270]  ? perf_trace_preemptirq_template+0x269/0x330
[  704.637347][T15270]  ? __x64_sys_sendmsg+0x80/0x80
[  704.642281][T15270]  ? lockdep_hardirqs_on+0x98/0x150
[  704.647503][T15270]  do_syscall_64+0x55/0xb0
[  704.651908][T15270]  ? clear_bhb_loop+0x40/0x90
[  704.656586][T15270]  ? clear_bhb_loop+0x40/0x90
[  704.661349][T15270]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  704.667240][T15270] RIP: 0033:0x7f8a4859de99
[  704.671653][T15270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  704.691347][T15270] RSP: 002b:00007f8a494e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  704.699762][T15270] RAX: ffffffffffffffda RBX: 00007f8a48825fa0 RCX: 00007f8a4859de99
[  704.707759][T15270] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008
[  704.715736][T15270] RBP: 00007f8a494e4090 R08: 0000000000000000 R09: 0000000000000000
[  704.723711][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  704.731709][T15270] R13: 00007f8a48826038 R14: 00007f8a48825fa0 R15: 00007fff582f2a48
[  704.739686][T15270]  </TASK>
[  704.939213][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'.
[  705.046313][T15274] netlink: 'syz.2.3627': attribute type 39 has an invalid length.
[  705.050003][T13004] wlan1: Trigger new scan to find an IBSS to join
[  705.084351][T15278] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  705.110494][ T5786] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17
[  705.467478][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'.
[  705.498255][T15296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3633'.
[  705.581684][T15297] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  705.962131][ T5786] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  705.996829][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[  706.031250][T15318] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  706.074682][T13007] wlan1: Trigger new scan to find an IBSS to join
[  706.534431][T15333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3646'.
[  706.773275][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  706.773310][ T5786] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  706.954417][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'.
[  707.012794][T15352] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  707.136919][T13007] wlan1: Trigger new scan to find an IBSS to join
[  707.425346][T15366] FAULT_INJECTION: forcing a failure.
[  707.425346][T15366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  707.482629][T15366] CPU: 0 PID: 15366 Comm: syz.1.3658 Not tainted syzkaller #0
[  707.490178][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  707.500300][T15366] Call Trace:
[  707.503624][T15366]  <TASK>
[  707.506595][T15366]  dump_stack_lvl+0x18c/0x250
[  707.511349][T15366]  ? show_regs_print_info+0x20/0x20
[  707.516595][T15366]  ? load_image+0x420/0x420
[  707.521157][T15366]  ? __lock_acquire+0x7d80/0x7d80
[  707.526242][T15366]  ? snprintf+0xe9/0x140
[  707.530560][T15366]  should_fail_ex+0x394/0x4c0
[  707.535304][T15366]  _copy_to_user+0x2f/0xa0
[  707.539772][T15366]  simple_read_from_buffer+0xe7/0x150
[  707.545209][T15366]  proc_fail_nth_read+0x1e8/0x260
[  707.550290][T15366]  ? proc_fault_inject_write+0x360/0x360
[  707.555987][T15366]  ? fsnotify_perm+0x271/0x5e0
[  707.560793][T15366]  ? proc_fault_inject_write+0x360/0x360
[  707.566483][T15366]  vfs_read+0x298/0x990
[  707.570714][T15366]  ? kernel_read+0x1e0/0x1e0
[  707.575355][T15366]  ? __fget_files+0x28/0x460
[  707.580002][T15366]  ? __fget_files+0x3fc/0x460
[  707.584750][T15366]  ? __fdget_pos+0x2a3/0x330
[  707.589379][T15366]  ? ksys_read+0x74/0x260
[  707.593770][T15366]  ksys_read+0x151/0x260
[  707.598068][T15366]  ? vfs_write+0x9a0/0x9a0
[  707.602547][T15366]  ? lockdep_hardirqs_on+0x98/0x150
[  707.607810][T15366]  do_syscall_64+0x55/0xb0
[  707.612265][T15366]  ? clear_bhb_loop+0x40/0x90
[  707.616981][T15366]  ? clear_bhb_loop+0x40/0x90
[  707.621792][T15366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  707.627723][T15366] RIP: 0033:0x7f0f4155e6ce
[  707.632199][T15366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  707.651860][T15366] RSP: 002b:00007f0f4246afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  707.660337][T15366] RAX: ffffffffffffffda RBX: 00007f0f4246b6c0 RCX: 00007f0f4155e6ce
[  707.668348][T15366] RDX: 000000000000000f RSI: 00007f0f4246b0a0 RDI: 0000000000000007
[  707.676359][T15366] RBP: 00007f0f4246b090 R08: 0000000000000000 R09: 0000000000000000
[  707.684373][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.692478][T15366] R13: 00007f0f41826038 R14: 00007f0f41825fa0 R15: 00007fffa7de0908
[  707.700545][T15366]  </TASK>
[  707.940080][T15369] sock: sock_set_timeout: `syz.3.3659' (pid 15369) tries to set negative timeout
[  708.063886][T15373] netlink: 'syz.2.3668': attribute type 5 has an invalid length.
[  708.088665][T13002] wlan1: Trigger new scan to find an IBSS to join
[  708.151517][T15380] FAULT_INJECTION: forcing a failure.
[  708.151517][T15380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.169699][T15373] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3668'.
[  708.189630][T15380] CPU: 0 PID: 15380 Comm: syz.3.3663 Not tainted syzkaller #0
[  708.197146][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  708.207222][T15380] Call Trace:
[  708.210522][T15380]  <TASK>
[  708.213469][T15380]  dump_stack_lvl+0x18c/0x250
[  708.218180][T15380]  ? show_regs_print_info+0x20/0x20
[  708.223403][T15380]  ? load_image+0x420/0x420
[  708.227937][T15380]  ? __lock_acquire+0x7d80/0x7d80
[  708.232998][T15380]  should_fail_ex+0x394/0x4c0
[  708.237774][T15380]  _copy_from_user+0x2f/0xe0
[  708.242394][T15380]  __copy_msghdr+0x388/0x560
[  708.247101][T15380]  ___sys_sendmsg+0x214/0x360
[  708.251808][T15380]  ? __sys_sendmsg+0x2b0/0x2b0
[  708.256613][T15380]  ? trace_call_bpf+0xc3/0x6c0
[  708.261421][T15380]  __se_sys_sendmsg+0x1d0/0x2c0
[  708.266290][T15380]  ? perf_trace_preemptirq_template+0x269/0x330
[  708.272560][T15380]  ? __x64_sys_sendmsg+0x80/0x80
[  708.277539][T15380]  ? lockdep_hardirqs_on+0x98/0x150
[  708.282766][T15380]  do_syscall_64+0x55/0xb0
[  708.287202][T15380]  ? clear_bhb_loop+0x40/0x90
[  708.291905][T15380]  ? clear_bhb_loop+0x40/0x90
[  708.296605][T15380]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  708.302519][T15380] RIP: 0033:0x7f90f219de99
[  708.306950][T15380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.326598][T15380] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  708.335038][T15380] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  708.343027][T15380] RDX: 0000000020040044 RSI: 00002000000001c0 RDI: 0000000000000005
[  708.351020][T15380] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  708.359017][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.367016][T15380] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  708.375033][T15380]  </TASK>
[  708.465162][T15373] hsr_slave_0: left promiscuous mode
[  708.477535][T13007] wlan1: Creating new IBSS network, BSSID d6:7f:95:6e:b0:7e
[  708.491400][T15373] hsr_slave_1: left promiscuous mode
[  708.895764][T15394] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  709.298466][T15409] FAULT_INJECTION: forcing a failure.
[  709.298466][T15409] name failslab, interval 1, probability 0, space 0, times 0
[  709.341193][T15409] CPU: 0 PID: 15409 Comm: syz.2.3673 Not tainted syzkaller #0
[  709.348709][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  709.358764][T15409] Call Trace:
[  709.362041][T15409]  <TASK>
[  709.364970][T15409]  dump_stack_lvl+0x18c/0x250
[  709.369652][T15409]  ? show_regs_print_info+0x20/0x20
[  709.374848][T15409]  ? load_image+0x420/0x420
[  709.379360][T15409]  ? __lock_acquire+0x7d80/0x7d80
[  709.384381][T15409]  ? trace_contention_end+0x39/0xe0
[  709.389576][T15409]  ? __mutex_lock+0x30d/0xc80
[  709.394258][T15409]  should_fail_ex+0x394/0x4c0
[  709.398947][T15409]  should_failslab+0x9/0x20
[  709.403455][T15409]  slab_pre_alloc_hook+0x59/0x300
[  709.408480][T15409]  ? mutex_lock_nested+0x20/0x20
[  709.413508][T15409]  ? fanout_add+0x24f/0x1310
[  709.418096][T15409]  __kmem_cache_alloc_node+0x53/0x250
[  709.423470][T15409]  ? fanout_add+0x24f/0x1310
[  709.428051][T15409]  kmalloc_trace+0x2a/0xe0
[  709.432467][T15409]  fanout_add+0x24f/0x1310
[  709.436885][T15409]  ? _copy_from_user+0xa5/0xe0
[  709.441651][T15409]  packet_setsockopt+0xc48/0x1500
[  709.446678][T15409]  ? packet_ioctl+0x350/0x350
[  709.451423][T15409]  ? aa_sk_perm+0x83c/0x970
[  709.455931][T15409]  ? __fget_files+0x28/0x460
[  709.460614][T15409]  ? aa_af_perm+0x330/0x330
[  709.465128][T15409]  ? __fget_files+0x28/0x460
[  709.469715][T15409]  ? aa_sock_opt_perm+0x74/0x100
[  709.474653][T15409]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  709.480284][T15409]  ? security_socket_setsockopt+0x7e/0xa0
[  709.485999][T15409]  ? packet_ioctl+0x350/0x350
[  709.490675][T15409]  do_sock_setsockopt+0x175/0x1a0
[  709.495724][T15409]  ? __fdget+0x180/0x210
[  709.499969][T15409]  __x64_sys_setsockopt+0x182/0x200
[  709.505178][T15409]  do_syscall_64+0x55/0xb0
[  709.509591][T15409]  ? clear_bhb_loop+0x40/0x90
[  709.514266][T15409]  ? clear_bhb_loop+0x40/0x90
[  709.519030][T15409]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  709.524923][T15409] RIP: 0033:0x7f46abb9de99
[  709.529348][T15409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.548971][T15409] RSP: 002b:00007f46aca4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  709.557393][T15409] RAX: ffffffffffffffda RBX: 00007f46abe26090 RCX: 00007f46abb9de99
[  709.565368][T15409] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004
[  709.573796][T15409] RBP: 00007f46aca4d090 R08: 0000000000000004 R09: 0000000000000000
[  709.581772][T15409] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[  709.589754][T15409] R13: 00007f46abe26128 R14: 00007f46abe26090 R15: 00007fff71f07828
[  709.597744][T15409]  </TASK>
[  709.812571][T15421] __nla_validate_parse: 1 callbacks suppressed
[  709.812590][T15421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3676'.
[  709.925749][T15423] netlink: 'syz.3.3677': attribute type 33 has an invalid length.
[  709.934051][T15423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3677'.
[  710.282320][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'.
[  710.381535][T15431] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  710.481391][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  710.481415][ T5786] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  710.638145][T15446] netlink: 'syz.1.3687': attribute type 33 has an invalid length.
[  710.646415][T15446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3687'.
[  710.718234][T15450] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3688'.
[  710.811575][T15452] netlink: 208888 bytes leftover after parsing attributes in process `syz.1.3689'.
[  710.823598][T15452] netlink: 'syz.1.3689': attribute type 1 has an invalid length.
[  710.843363][T15452] netlink: 'syz.1.3689': attribute type 2 has an invalid length.
[  711.120987][T13004] wlan1: Trigger new scan to find an IBSS to join
[  711.125000][T13000] wlan1: Trigger new scan to find an IBSS to join
[  711.328074][ T5786] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  711.328111][ T5786] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  711.374857][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'.
[  711.433073][T15472] netlink: 'syz.0.3696': attribute type 33 has an invalid length.
[  711.450044][T15472] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3696'.
[  711.464228][T15469] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  711.590511][T15480] FAULT_INJECTION: forcing a failure.
[  711.590511][T15480] name failslab, interval 1, probability 0, space 0, times 0
[  711.614351][T15480] CPU: 1 PID: 15480 Comm: syz.3.3700 Not tainted syzkaller #0
[  711.621867][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  711.631938][T15480] Call Trace:
[  711.635222][T15480]  <TASK>
[  711.638150][T15480]  dump_stack_lvl+0x18c/0x250
[  711.642834][T15480]  ? show_regs_print_info+0x20/0x20
[  711.648031][T15480]  ? load_image+0x420/0x420
[  711.652552][T15480]  ? __might_sleep+0xe0/0xe0
[  711.657186][T15480]  ? __lock_acquire+0x7d80/0x7d80
[  711.662221][T15480]  should_fail_ex+0x394/0x4c0
[  711.666911][T15480]  should_failslab+0x9/0x20
[  711.671419][T15480]  slab_pre_alloc_hook+0x59/0x300
[  711.676538][T15480]  ? tomoyo_encode+0x2ad/0x570
[  711.681325][T15480]  ? tomoyo_encode+0x2ad/0x570
[  711.686139][T15480]  __kmem_cache_alloc_node+0x53/0x250
[  711.691542][T15480]  ? tomoyo_encode+0x2ad/0x570
[  711.696329][T15480]  __kmalloc+0xa7/0x240
[  711.700521][T15480]  tomoyo_encode+0x2ad/0x570
[  711.705156][T15480]  tomoyo_realpath_from_path+0x57c/0x5c0
[  711.710824][T15480]  ? tomoyo_domain+0xd6/0x120
[  711.715530][T15480]  tomoyo_path_number_perm+0x248/0x5e0
[  711.721011][T15480]  ? tomoyo_path_number_perm+0x217/0x5e0
[  711.726656][T15480]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  711.732155][T15480]  ? ksys_write+0x1d2/0x260
[  711.736690][T15480]  ? __fget_files+0x28/0x460
[  711.741294][T15480]  security_file_ioctl+0x70/0xa0
[  711.746282][T15480]  __se_sys_ioctl+0x48/0x170
[  711.750918][T15480]  do_syscall_64+0x55/0xb0
[  711.755350][T15480]  ? clear_bhb_loop+0x40/0x90
[  711.760047][T15480]  ? clear_bhb_loop+0x40/0x90
[  711.764731][T15480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  711.770634][T15480] RIP: 0033:0x7f90f219de99
[  711.775050][T15480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.794663][T15480] RSP: 002b:00007f90f3159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  711.803092][T15480] RAX: ffffffffffffffda RBX: 00007f90f2425fa0 RCX: 00007f90f219de99
[  711.811067][T15480] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003
[  711.819042][T15480] RBP: 00007f90f3159090 R08: 0000000000000000 R09: 0000000000000000
[  711.827011][T15480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.834982][T15480] R13: 00007f90f2426038 R14: 00007f90f2425fa0 R15: 00007ffff1505768
[  711.842976][T15480]  </TASK>
[  711.847609][T15480] ERROR: Out of memory at tomoyo_realpath_from_path.
[  711.910981][T15477] netlink: 'syz.1.3698': attribute type 2 has an invalid length.
[  712.051187][T15479] netlink: 'syz.0.3697': attribute type 33 has an invalid length.
[  712.069928][T15479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3697'.
[  712.385018][ T5786] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  712.385054][ T5786] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  712.659662][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'.
[  712.691039][T15509] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  712.943722][T15520] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  713.073199][T15518] netlink: 'syz.2.3714': attribute type 33 has an invalid length.
[  713.300383][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  713.300420][ T5786] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  713.421204][T15531] FAULT_INJECTION: forcing a failure.
[  713.421204][T15531] name failslab, interval 1, probability 0, space 0, times 0
[  713.457713][T15531] CPU: 1 PID: 15531 Comm: syz.0.3719 Not tainted syzkaller #0
[  713.465231][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  713.475333][T15531] Call Trace:
[  713.478912][T15531]  <TASK>
[  713.482044][T15531]  dump_stack_lvl+0x18c/0x250
[  713.486744][T15531]  ? show_regs_print_info+0x20/0x20
[  713.491969][T15531]  ? load_image+0x420/0x420
[  713.496524][T15531]  ? __might_sleep+0xe0/0xe0
[  713.501123][T15531]  ? __lock_acquire+0x7d80/0x7d80
[  713.506154][T15531]  should_fail_ex+0x394/0x4c0
[  713.510840][T15531]  should_failslab+0x9/0x20
[  713.515348][T15531]  slab_pre_alloc_hook+0x59/0x300
[  713.520380][T15531]  ? tomoyo_encode+0x2ad/0x570
[  713.525149][T15531]  ? tomoyo_encode+0x2ad/0x570
[  713.529915][T15531]  __kmem_cache_alloc_node+0x53/0x250
[  713.535300][T15531]  ? tomoyo_encode+0x2ad/0x570
[  713.540067][T15531]  __kmalloc+0xa7/0x240
[  713.544231][T15531]  tomoyo_encode+0x2ad/0x570
[  713.548828][T15531]  tomoyo_realpath_from_path+0x57c/0x5c0
[  713.554474][T15531]  ? tomoyo_domain+0xd6/0x120
[  713.559171][T15531]  tomoyo_path_number_perm+0x248/0x5e0
[  713.564639][T15531]  ? tomoyo_path_number_perm+0x217/0x5e0
[  713.570280][T15531]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  713.575744][T15531]  ? ksys_write+0x1d2/0x260
[  713.580279][T15531]  ? __fget_files+0x28/0x460
[  713.584906][T15531]  security_file_ioctl+0x70/0xa0
[  713.589869][T15531]  __se_sys_ioctl+0x48/0x170
[  713.594471][T15531]  do_syscall_64+0x55/0xb0
[  713.598900][T15531]  ? clear_bhb_loop+0x40/0x90
[  713.603595][T15531]  ? clear_bhb_loop+0x40/0x90
[  713.608310][T15531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.614222][T15531] RIP: 0033:0x7f8a4859de99
[  713.618737][T15531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.638352][T15531] RSP: 002b:00007f8a494e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  713.646797][T15531] RAX: ffffffffffffffda RBX: 00007f8a48825fa0 RCX: 00007f8a4859de99
[  713.654779][T15531] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000018
[  713.662765][T15531] RBP: 00007f8a494e4090 R08: 0000000000000000 R09: 0000000000000000
[  713.670763][T15531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.678751][T15531] R13: 00007f8a48826038 R14: 00007f8a48825fa0 R15: 00007fff582f2a48
[  713.686748][T15531]  </TASK>
[  713.717886][T15531] ERROR: Out of memory at tomoyo_realpath_from_path.
[  714.096149][T15544] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  714.342470][ T5786] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  714.342506][ T5786] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  715.115130][T13002] wlan1: Trigger new scan to find an IBSS to join
[  715.278392][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  715.537424][T15594] __nla_validate_parse: 6 callbacks suppressed
[  715.537443][T15594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3741'.
[  715.795958][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'.
[  717.284807][T12996] wlan1: Creating new IBSS network, BSSID c6:a8:f6:c6:9f:a9
[  717.716972][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'.
[  717.727296][T15631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3752'.
[  718.076269][T12996] wlan1: Trigger new scan to find an IBSS to join
[  719.203238][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'.
[  719.326106][T15668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3764'.
[  719.646161][T15680] netlink: 'syz.3.3771': attribute type 1 has an invalid length.
[  719.654384][T15680] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3771'.
[  719.704787][T15682] netlink: 'syz.1.3772': attribute type 5 has an invalid length.
[  719.823103][T15682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3772'.
[  719.848546][T15682] hsr_slave_0: left promiscuous mode
[  719.869453][T15682] hsr_slave_1: left promiscuous mode
[  720.120549][T15682] bridge0: port 2(hsr0) entered disabled state
[  720.663032][T15682] hsr0 (unregistering): left allmulticast mode
[  720.670382][T15682] bridge0: port 2(hsr0) entered disabled state
[  720.735529][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'.
[  720.835433][T15700] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  721.038370][T13002] wlan1: Trigger new scan to find an IBSS to join
[  721.121560][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  721.136388][T15708] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  721.329089][T15716] netlink: 'syz.1.3782': attribute type 1 has an invalid length.
[  721.338230][T15716] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3782'.
[  721.356015][T15719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3781'.
[  721.848141][T15730] FAULT_INJECTION: forcing a failure.
[  721.848141][T15730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.908820][T15730] CPU: 0 PID: 15730 Comm: syz.2.3786 Not tainted syzkaller #0
[  721.916331][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  721.926398][T15730] Call Trace:
[  721.929689][T15730]  <TASK>
[  721.932635][T15730]  dump_stack_lvl+0x18c/0x250
[  721.937342][T15730]  ? show_regs_print_info+0x20/0x20
[  721.942563][T15730]  ? load_image+0x420/0x420
[  721.947097][T15730]  ? __might_fault+0xaa/0x120
[  721.951803][T15730]  ? __lock_acquire+0x7d80/0x7d80
[  721.956858][T15730]  should_fail_ex+0x394/0x4c0
[  721.961570][T15730]  _copy_from_user+0x2f/0xe0
[  721.966182][T15730]  ___sys_sendmsg+0x1c7/0x360
[  721.970874][T15730]  ? get_pid_task+0x20/0x1e0
[  721.975483][T15730]  ? __sys_sendmsg+0x2b0/0x2b0
[  721.980274][T15730]  ? __lock_acquire+0x7d80/0x7d80
[  721.985333][T15730]  __se_sys_sendmsg+0x1d0/0x2c0
[  721.990198][T15730]  ? __x64_sys_sendmsg+0x80/0x80
[  721.995158][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  722.000371][T15730]  do_syscall_64+0x55/0xb0
[  722.004801][T15730]  ? clear_bhb_loop+0x40/0x90
[  722.009495][T15730]  ? clear_bhb_loop+0x40/0x90
[  722.014193][T15730]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  722.020097][T15730] RIP: 0033:0x7f46abb9de99
[  722.024524][T15730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.044159][T15730] RSP: 002b:00007f46aca6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.052591][T15730] RAX: ffffffffffffffda RBX: 00007f46abe25fa0 RCX: 00007f46abb9de99
[  722.060571][T15730] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003
[  722.068583][T15730] RBP: 00007f46aca6e090 R08: 0000000000000000 R09: 0000000000000000
[  722.076994][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.084968][T15730] R13: 00007f46abe26038 R14: 00007f46abe25fa0 R15: 00007fff71f07828
[  722.092959][T15730]  </TASK>
[  722.334058][T15734] netlink: 'syz.3.3790': attribute type 5 has an invalid length.
[  722.427010][T15734] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3790'.
[  722.740943][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3793'.
[  722.901335][T13000] wlan1: Creating new IBSS network, BSSID c6:02:4a:00:22:71
[  722.921219][T15741] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  722.922614][T13000] ------------[ cut here ]------------
[  722.936543][T13000] WARNING: CPU: 1 PID: 13000 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430
[  722.946623][T13000] Modules linked in:
[  722.950563][T13000] CPU: 1 PID: 13000 Comm: kworker/u4:27 Not tainted syzkaller #0
[  722.958524][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  722.968682][T13000] Workqueue: cfg80211 cfg80211_event_work
[  722.974513][T13000] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430
[  722.980704][T13000] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 4a 9a f7 0f 0b eb bf e8 b5 4a 9a f7 <0f> 0b eb b6 e8 ac 4a 9a f7 0f 0b e9 e2 fd ff ff e8 a0 4a 9a f7 0f
[  723.000378][T13000] RSP: 0018:ffffc90003367a40 EFLAGS: 00010293
[  723.006764][T13000] RAX: ffffffff89ed2a1b RBX: dffffc0000000000 RCX: ffff888063e05a00
[  723.014895][T13000] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660
[  723.022985][T13000] RBP: ffffc90003367af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad
[  723.031168][T13000] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff8880333d0d10
[  723.039377][T13000] R13: ffff88804dae3618 R14: 1ffff9200066cf4c R15: 000000000000001f
[  723.047430][T13000] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  723.056445][T13000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  723.063063][T13000] CR2: 0000200000000080 CR3: 0000000060d4c000 CR4: 00000000003506e0
[  723.071108][T13000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  723.079167][T13000] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  723.087203][T13000] Call Trace:
[  723.090519][T13000]  <TASK>
[  723.093458][T13000]  ? trace_rdev_return_void+0x1c0/0x1c0
[  723.099176][T13000]  cfg80211_process_wdev_events+0x396/0x500
[  723.105153][T13000]  cfg80211_process_rdev_events+0xa1/0x110
[  723.111022][T13000]  cfg80211_event_work+0x2f/0x40
[  723.116083][T13000]  ? process_scheduled_works+0x975/0x1600
[  723.121831][T13000]  process_scheduled_works+0xa60/0x1600
[  723.127638][T13000]  ? worker_attach_to_pool+0x370/0x370
[  723.133214][T13000]  ? assign_work+0x3cc/0x5d0
[  723.137894][T13000]  worker_thread+0xa5e/0xfe0
[  723.142543][T13000]  kthread+0x2fa/0x390
[  723.146675][T13000]  ? pr_cont_work+0x550/0x550
[  723.151385][T13000]  ? kthread_blkcg+0xd0/0xd0
[  723.156062][T13000]  ret_from_fork+0x48/0x80
[  723.160546][T13000]  ? kthread_blkcg+0xd0/0xd0
[  723.165180][T13000]  ret_from_fork_asm+0x11/0x20
[  723.170014][T13000]  </TASK>
[  723.173044][T13000] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  723.180344][T13000] CPU: 1 PID: 13000 Comm: kworker/u4:27 Not tainted syzkaller #0
[  723.188066][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  723.198135][T13000] Workqueue: cfg80211 cfg80211_event_work
[  723.203857][T13000] Call Trace:
[  723.207139][T13000]  <TASK>
[  723.210082][T13000]  dump_stack_lvl+0x18c/0x250
[  723.214783][T13000]  ? show_regs_print_info+0x20/0x20
[  723.219996][T13000]  ? load_image+0x420/0x420
[  723.224522][T13000]  panic+0x2ca/0x720
[  723.228451][T13000]  ? bpf_jit_dump+0xd0/0xd0
[  723.232975][T13000]  ? ret_from_fork_asm+0x11/0x20
[  723.237932][T13000]  __warn+0x2e0/0x470
[  723.241919][T13000]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  723.247477][T13000]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  723.253051][T13000]  report_bug+0x2be/0x4f0
[  723.257387][T13000]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  723.263039][T13000]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  723.268589][T13000]  ? __cfg80211_ibss_joined+0x3cd/0x430
[  723.274148][T13000]  handle_bug+0xcf/0x120
[  723.278408][T13000]  exc_invalid_op+0x1a/0x50
[  723.282913][T13000]  asm_exc_invalid_op+0x1a/0x20
[  723.287764][T13000] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430
[  723.293927][T13000] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 4a 9a f7 0f 0b eb bf e8 b5 4a 9a f7 <0f> 0b eb b6 e8 ac 4a 9a f7 0f 0b e9 e2 fd ff ff e8 a0 4a 9a f7 0f
[  723.313538][T13000] RSP: 0018:ffffc90003367a40 EFLAGS: 00010293
[  723.319607][T13000] RAX: ffffffff89ed2a1b RBX: dffffc0000000000 RCX: ffff888063e05a00
[  723.327576][T13000] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660
[  723.335561][T13000] RBP: ffffc90003367af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad
[  723.343531][T13000] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff8880333d0d10
[  723.351496][T13000] R13: ffff88804dae3618 R14: 1ffff9200066cf4c R15: 000000000000001f
[  723.359489][T13000]  ? __cfg80211_ibss_joined+0x3cb/0x430
[  723.365047][T13000]  ? trace_rdev_return_void+0x1c0/0x1c0
[  723.370602][T13000]  cfg80211_process_wdev_events+0x396/0x500
[  723.376524][T13000]  cfg80211_process_rdev_events+0xa1/0x110
[  723.382331][T13000]  cfg80211_event_work+0x2f/0x40
[  723.387264][T13000]  ? process_scheduled_works+0x975/0x1600
[  723.392979][T13000]  process_scheduled_works+0xa60/0x1600
[  723.398548][T13000]  ? worker_attach_to_pool+0x370/0x370
[  723.404007][T13000]  ? assign_work+0x3cc/0x5d0
[  723.408592][T13000]  worker_thread+0xa5e/0xfe0
[  723.413205][T13000]  kthread+0x2fa/0x390
[  723.417264][T13000]  ? pr_cont_work+0x550/0x550
[  723.421946][T13000]  ? kthread_blkcg+0xd0/0xd0
[  723.426528][T13000]  ret_from_fork+0x48/0x80
[  723.430938][T13000]  ? kthread_blkcg+0xd0/0xd0
[  723.435521][T13000]  ret_from_fork_asm+0x11/0x20
[  723.440330][T13000]  </TASK>
[  723.443470][T13000] Kernel Offset: disabled
[  723.447846][T13000] Rebooting in 86400 seconds..