last executing test programs:

8m20.202577337s ago: executing program 3 (id=744):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0)

8m19.526566486s ago: executing program 3 (id=748):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000450f0000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m19.029313855s ago: executing program 3 (id=751):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x1b, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x3b}], 0x10}, 0x40)

8m18.789173099s ago: executing program 3 (id=752):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080))
recvmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x2002)
socketpair(0x22, 0x2, 0x23, &(0x7f0000000000))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000e00)="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", &(0x7f0000000100)=""/231}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001f3f0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000005000000bf09000000000000350901000000000095000000000000006e9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

8m18.464355488s ago: executing program 3 (id=754):
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xe, &(0x7f0000000000), 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x24, &(0x7f00000001c0)=r1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0xdd, 0xa}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair(0x22, 0x6, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28)
bpf$MAP_CREATE(0x300, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)

8m15.870983798s ago: executing program 3 (id=760):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x6301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd8261f770d6a89919b5a90fd26f07fded52a73b196c112f05253070e00c4ae7fc5ad83c414f7d58b391b5f8f70f7d40508f63742abeea7aab014c3fc8879453", 0x7f, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54df01f4be0d116504b668a1b0333527d74f3a1a5cbd4089b73a3d5abadc5686f34c62e62724be3d2952c0e901009641aa790fa63377fccfe8024ffab551b3ea979f2e7551550f3a5a48e126308c4b717")
syz_open_procfs$namespace(r3, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r7 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x400, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x2000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

8m0.674437682s ago: executing program 32 (id=760):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x6301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd8261f770d6a89919b5a90fd26f07fded52a73b196c112f05253070e00c4ae7fc5ad83c414f7d58b391b5f8f70f7d40508f63742abeea7aab014c3fc8879453", 0x7f, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54df01f4be0d116504b668a1b0333527d74f3a1a5cbd4089b73a3d5abadc5686f34c62e62724be3d2952c0e901009641aa790fa63377fccfe8024ffab551b3ea979f2e7551550f3a5a48e126308c4b717")
syz_open_procfs$namespace(r3, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r7 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r7, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x400, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x2000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2m14.639620495s ago: executing program 1 (id=2384):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m9.365269421s ago: executing program 1 (id=2387):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)

2m9.131920064s ago: executing program 1 (id=2389):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)

2m8.769401175s ago: executing program 1 (id=2390):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240)="6c59272998dab8cf7ccad5a6a4f5bd9a2b019bad3d35759260a8f300fcc4f5b6f0566a8279feb56d52ace3987bce3a0a1d9b1ba7b7ae4d62d735639fa3e94f0d0f001eec09b448c841d66da46b56701e12afedbde8fe40ac8246783564f187aa04b66d8610f40849e1c545fafd4f1938d879fb95dc728c84296dc6c3db8f316c65ce8fbd23a164bc48066795", &(0x7f0000000340)=""/127}, 0x20)
socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a80", 0xb}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)

2m7.607938213s ago: executing program 1 (id=2391):
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000020000000e00000000000011e6ff0000050000000f00000000000008e9ff"], 0x0, 0x36, 0x0, 0x1, 0x1, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x37}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000010c0), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xa8c94a5f12c90a91}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="800000000000edde00000000000000eb46000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x0, 0x1, 0x5, 0x3, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d7a}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x8f, &(0x7f0000000340)=""/143, 0x40f00, 0x8, '\x00', 0x0, @lsm=0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r2, r3, 0xffffffffffffffff, r4], &(0x7f0000000580), 0x10, 0x5}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="33fe00004a00530c", @ANYRESHEX=0x0], 0xfe33)
r7 = openat$cgroup_int(r5, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000380), 0x12)
write$cgroup_int(r7, &(0x7f0000000040), 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()

2m7.467495901s ago: executing program 1 (id=2394):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40000040)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x10061)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
gettid()
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1m51.565929015s ago: executing program 33 (id=2394):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40000040)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x10061)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
gettid()
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

6.346017221s ago: executing program 0 (id=2818):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x648}, {}, {}, [@generic={0x40, 0x8, 0x9, 0xffd3, 0x800}, @map_fd={0x18, 0x2}, @generic={0xb0, 0x8, 0x4, 0x1000, 0x8}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4a, 0x0, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
close(r6)
r8 = getpid()
syz_open_procfs$namespace(r8, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

5.650300101s ago: executing program 0 (id=2821):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x100000000000000)

5.564525196s ago: executing program 5 (id=2822):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x8, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)

5.466572362s ago: executing program 0 (id=2823):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4020, r0}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x8e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1})
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"})
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r5], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex, 0x26, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="2e0000efab650019000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES64=r8], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e000000000000006a0000000700004084"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="0b0000003400000000020000", @ANYRES32, @ANYRES64=r8], 0x20)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040))

5.215140127s ago: executing program 5 (id=2825):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000fa4c4241fc0560", 0xe}], 0x1}, 0x0)

4.393895464s ago: executing program 5 (id=2826):
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)="1c31f2381e", &(0x7f0000000000), 0x6, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080))

3.572872162s ago: executing program 2 (id=2832):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r3 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x0, 0x4, 0x0, 0x3, 0x0, 0x5, 0x40600, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0x80, 0x152, 0xc85, 0x7, 0x5, 0xd7, 0x2af4, 0x0, 0x80, 0x0, 0xfffffffffffff801}, 0x0, 0xb, r0, 0x2)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000010005008000000040d3ea89a420ebc46ef664144e49eb1e2f0d8152d665a4186ef1e1d321f0184210374e35dfcbf26f409c309c1f24e8faa561c15dfa7dd123b6a367926510f76335a4444488ddf5d9b6324599c2dcb7e3bcb68a812e14d748870926a05be50700", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x0)

3.44336654s ago: executing program 4 (id=2833):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b8", 0x15}], 0x1}, 0x880)

3.44042504s ago: executing program 5 (id=2834):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) (async)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd, &(0x7f0000000580)=""/250, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x23}, 0x23)
recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0)
recvmsg$kcm(r4, 0x0, 0x42)
recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0xfff3)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="3700000000000000000000d9", @ANYRES32, @ANYRES64], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="3700000000000000000000d9", @ANYRES32, @ANYRES64], 0x20)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r8)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) (async)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)

2.963178758s ago: executing program 0 (id=2835):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000040)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000000400000008000000ff07000008000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000000001f00"/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x9409, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4)
sendmsg(r4, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

2.962907197s ago: executing program 2 (id=2836):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000fa4c4241fc0560", 0xe}], 0x1}, 0x0)

2.780274998s ago: executing program 2 (id=2837):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040c00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.23002772s ago: executing program 4 (id=2838):
r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(r1)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000000)="d99f8291bdbcf6b772c8b970ce2638c1331f53f1de43ec63da0f22477a4bab0b4f27618d45e03719f19e4162107471b79179a05635f1352b2bac00ce3a5b", &(0x7f0000000040)=""/73}, 0x20)

1.760504458s ago: executing program 4 (id=2839):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_clone(0x4000, &(0x7f0000000880)="f876d34c8f9a6c5979e154245b9d9a", 0xf, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="752a686e9e9556eb878e9247921916a6891884c2b14e43e72326725a3d8b24e09ed270ade93705abe4d3e1563a9480506a2a3154f671b1fdbd6273d4112dc9f4e81e5d0104271f620f934e408fbbf320bca1912823ba6c770a7441137b794eac1477dc0425abd9a9e5855a76b44b0202a38f7d4393cdb37eca6aa1b167197e31665bda8af574dfdf2512c920edcc097b6873bba0c30e34cf9b05a0e8784de294e2152628b13acd23d56a5601081ca699510dbbea429bcf81d1504bb0a8")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="60e15b9de06d7e9ff8ff32cfc32a49c4004685ad02a3ff2f1e79f806000000000000002792ee8ec1f931b2", 0x2b}, {&(0x7f00000006c0)="aeccf5356ebed021afbaedaa795f46fd55252195e0f803643a32a70eb712cd6cd6e65c457ffdd8c8131cad206a1eb5733981a9a934baba42d4c61ac3db4f868a13ea001809af02b539295c1d41c5060b0429b1fa85410881b873129f2d5f70a87fd45bfa7953556d0ab23bd04ff72aceb289fa79ca2f4c6ff678d98915d301fec676820a0d4ccf500321ebf3712142f9a1d6e0e472b587da0f0e5c38a6cb2c011f1f77c285a7709f816de635a2f1ab25fb16f7e1f63091c722a3bb3f8e5ca7db8eda260a5304d842a1a940ab37fc1aeabbe2a7b684dff5d85cf1e39778", 0xdd}, {&(0x7f00000007c0)="5851ae00e76d4a7c41aa2954be49adbdab39d82ff2f2ced679379021b2826e9ab8fa46613efd3002c669120b585b9679638c50d331fb6eaaa19049a8febe472f3a8c498ac50523a5645f85ef622720d54ff3990cd681d736b248c43e529e8ae92acd317dbf1ec3d6e5b3347fc6c7fe9ff904c1be6b7bca1a33f64019b631", 0x7e}], 0x3, &(0x7f0000002440)=[{0x1050, 0x103, 0x6, "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"}, {0xd8, 0x1, 0xfffff773, "c090b783b3e722b1d5189661198c8ba86aa491211977ef14fe96831fc914510328a8c9965d258bc9044972c23097365cb3df406d72adc1f6fa3433f0f8e1d5be4ee4a480272c4cc11c52774ddef2d28b2abda2302e1c06691a0762bb40a53bf0f25514e5b2f486764f8584b703d5c42705053075af580b54b922100c267099e414fa3b092ffdf6b69df0befba148a34fe4e5f32943ec369667af8195e2f38251a372139993689916fd86c657e3d51580dd0aefae9daf78d371aa3255a0bdb78ca62e76"}, {0x100, 0x116, 0x10, "73cd67c5636f6689cbe665f8c408afdde6060423c1d0442d433d9d6e64c93220ee9299b23624ddce9aa333896e8bd464b54c5ffd0998d669f5ee8b8506ed03f9dff9c1083c9b07694bd71e895e61473535b8317010b6ce202212ef2dfe3e4932fe550061231c56191a521fc78f30da4c936beffa96af102fb26f9a2a2b91f6a006aa3fd3be17685f47b45cd467a21605e621249158935e1a2d3c7e088c8c99743f5d2fef80faee3400b0883ecafa7fc5c396b4e795982a920e657055346cce8368ce2c0fb1b5c11c01d513dc279604ff1a4f157a034c70b24be8172ac310c30565750a3240e7fff1eaeaff48"}, {0xe0, 0x101, 0x7, "cfb48eb733d27a9d0e1f8757b529c77de65cb0a1eb6d962ca55cf52cc3d00f4f0b25b80acfa64ee00a67a4e86a2b8d801633f76e1b38438f43d898d2ad2395d5bd8f3af98434b5531a33e8c3556f4ed2daccd7d84256de4f65de7c907aa809d346e7f27cbd5b35757181a794fc72c2e22476d0c31a4e42c5dbcf476450d3efa42b9ff7612bce101dfdc86e0784a820a5a09266d7d9a173a0bcb9619662c386a5391a35604bbdedf42ebf6f8bb246aacf827318c3c09ed1a0de9d9de827c64da585b7394a234b6f6231dc79"}, {0xb0, 0x117, 0x4, "614d16418dd24c72ac37de028238544d61ba1a689029d8f245a92053dacc524bd36b694bb3f7ba89efe5346e7540706fb74ce5001e1c24782459d6d7246eb0c840f8eb37f2338293be59c4749dfaa160e60fdfd0f540db20ed13fb85a28c678c648941635b0b17fb03bef6192c307e35731b18a4c3b6a3c25cc0454e9001e42cdad4720aa6da173a33901b88b4e2021ccd1ba43cd8abe356dd"}, {0x68, 0x119, 0xdb, "87acb8be43061068b46e327e1774e6ca62e11786f8cd72c5432aeb9959e581b214cd048d40f60f9580f15ddf8f76999bb2229e9e5e8e0e85f153eaa91f35296478a0fcc3fd79efa58607f0bedc1bd3dcf39d494be3a4bfa0"}, {0x80, 0x0, 0x1, "9e6dd06b720b90276ec5f243b64738111f30c39f3e49379428b404d11f4eb24e6a4ad8073a80164b5ad75f04de8b1127aa09ead3686e26c9af39b2cbabc4b5d00c0dbc8469e589df06fdacc66e9fc15f9244741ae176720e7d887c13deeb445555233984add08ba492"}, {0x100, 0x109, 0x0, "bee7041630c645af132fc30b654c402890f9dc4834b6a677e39292fe904001b076783956cd70b2fac00032056fb4652c2394151c9dfec3636e4cf841f2d7453e593907d7cfa6760e5b4c7e9c1005ac5cb55cacbfc75ea1ed73186a756a3d53601ac3e76ec3483b2ff454152c2ccaa872a5750002afae1f1f91b7d1f87413bea521f0c069a0563284b7ea1b40447138f00e43b602342622d079121dcbcb11be1371fdd8e36ac9e165aefd17de9ad5a5d5fdb973aa825215a832908fd96494141a5b7b5343d6e92b783da27b7339edf7af6f8ba2b949141e9ce3a725678df2665016a5f62922405313ee5341"}, {0xd0, 0x110, 0x7, "6f37a2e5a407c3379bff438c5e7a22d677fdb9c0003e825a052f705934287486e8122ab0324be78489a616ffb4688d1075ae91afd6c514914f9ac5251372dab7b48092cbb6410e255cc761b2c6207ca8018705c6c9570f3df6953c57866a850c43c28eb21f03215e6cc5f2ab455e91eba13314f71af381b09dcd6ee9cfa5e98a9063df6bcd00f9830ae117cfb744587731120472e93e7db03257c4b68aa42e9b1f6da76a824cfc57cb690562d486e1eece7f07522b27ebd05952b423067eca"}], 0x1670}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000040)="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", &(0x7f0000000200)=""/27, &(0x7f0000000240), &(0x7f0000000300)="f0192f2f03131524f38267bff7d399bc0a72d0dddbde17b9de78efc05680769f6108b02da770a0bb317502a46a4e63e6ae59f43b4ffec46433fe7f0fe6ee44c957f197e65286cb91d6d09e8b5c9a3fecefb7b99c213f94b051c79bab0c8ae2b596b46af47a86dcb6583e5bab063da4307890dbc30efdd6d41fd4cfb6fc8d47865085d45ffb65c00ecda635e28a3667db90ed5b90e21ca9f1d8", 0x80, r2, 0x4}, 0x38)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.571342278s ago: executing program 0 (id=2840):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x22, 0x3, 0x22)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r8, 0x4)
recvmsg$kcm(r0, &(0x7f0000002580)={&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000014c0)=""/5, 0x5}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/13, 0xd}], 0x3}, 0x2100)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0x5, 0xb1e, 0x3, 0x29d2, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x4}, 0x50)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0300000004000000040000000a000000dd000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x4, 0xf, &(0x7f0000002640)=ANY=[@ANYBLOB="180000000400000000000000020000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d00000085000000060000008520000001000000dda00c00f0ffffff852000000100000095000000000000003c7bd6082d726ac20078aea16af047b937de0793cd8cd7e71a49ed5207c9c93fea0647db53579c835bd90a0c22dfd5d06a6e9f07f85160825b40"], &(0x7f0000000bc0)='syzkaller\x00', 0x36, 0xd8, &(0x7f0000000c00)=""/216, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x4, 0x6, 0x3}, 0x10, r8, r1, 0x6, &(0x7f00000012c0)=[r9, r10], &(0x7f0000001300)=[{0x1, 0x5, 0x8, 0xa}, {0x1, 0x5, 0x10, 0x8}, {0x1, 0x1, 0xc, 0x1}, {0x4, 0x4, 0x4, 0x1}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x5}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaca9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080)
r11 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="29295b30ab47840d082648b2b4f84c7843634a947b9d9759301e67df8c6a681cd97286183374e4f418b5aae1656b2ce55a1d56506e4d7a4ecf", 0x39}, {&(0x7f0000000340)="3d23a1e2815956c6eb144db9f96271ea587d2402b85d6533e2ca090d94f0eefbc0d2a9d5f846d06b318de0ba9c596e0b8c83fe6d6827d2ea230f19f436c3c23ac0390968a3f5293eaa54355e641b282382be69219ebe38ee927021a846fded2106c7c2aacf094d8c62e5bee9f25fbc1ed8c812282c8d13441008a3990bed30650b6583156e9f44d7b3d74a9541249de461bc3fc99efe8e4971b797c19466a9fb7b62cff5d36886c0925e4172cc2516b3fb08feb38558af350f413a0e89ed7c69deff6940565725bf3a37f6fcdaba998754d7d5d1c6db5b55a4b4d27daeaf3094d4b08a903f87a640235be7de6953c282bf1527e6c21ed087d55394c4", 0xfc}, {&(0x7f00000001c0)="4d18adfbebe6ab94897fa19ee07e182eb2702bbbfd97b80a255698ad5a6705184aa67ae28cb64d7e931defe1d93980f5aa7937aab7d5469729d82099582029fd0eec4bccffceb360b2a8fb8d9a0eab66644cb05401a5375d1c1acdbe490c6bf8279c087e3d703b27e98dc895e413f47e091b08a3322cabd636500e175caeeea0061a1a622c0c3206fc20d964e71387ffe0a845a00c9038b156f78cece8d7394565", 0xa1}, {&(0x7f0000000100)="af1a78fb3a4d3f7db03613b5c9e3d02c05eeb6d3d46a9a686ae91c38851959dafbe93a9d47432b882b6cf96be0944dd0fc18930718c5f471b1d2414579aec9b4c6d0cf7684e7a1cb079ea7d588b59e86605127ab586d5f03d663cbed4202329da143a52aa2ec60719640f02232be4bbf16b5b159c6abf971bdea4c1dfa921065", 0x80}, {&(0x7f0000000700)="e8b56ddaa5b580b0b7cd42f3f225ef00e2fa30b54812f7a15f8214e153832a5b5ecb9dbd15b10ecb0a627a1931261d2503ce00234a5df453a7a488ed92d65bfbfd48316886b7ac7e5651a5c00b369ad66e0ab496d529d502ef3fdcc4dd9b78fc1608c331c9b4b51dfa2d8a1987cb53df1d290c39cd9baad6c2c01ab1ad4302b9765baa2dea5003ff5dc824e3131f6e53668dab6ee8c3ad2334bb91a67afc0f3b4335ba29835ac9a53b104d2c820688fd7fad4fe6c493189c5f764518623e9b5d6bbbef1089b3d67026a635ee9353c55f19e83b7e625f6e48a251eb85935ac9d8e83eb7aed1d0fc7a7ee94a00e522f9f2db39e4", 0xf3}, {&(0x7f0000000900)="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", 0xfa}, {&(0x7f0000000a00)="1f18baec34ff984325fccf5d963a1e656c52dbf4ef9cee4e0123a4aa75f336886f53c98dbcfd823b862fb2fb37062f2e3548f6fb3a39f92b042ed55958edae6459eff77d52fd255035dd0bbbcc9dcf948fc8c2d526e2d76ecf8bbac92b78597de15cee15931d98283428111d771c8f2f8694439d75920bf0beae3bc266139a4242a867b0084cc149c90aa60e41dbc3ad3d0e98b5e815a600aa7d357b828392e96ff6c92feeb5c2fc03450f4e79a807f9af212375114dccb9dcd8bb5bc9a0f18a2c6a28fda76a0915a2d051a3beee36c50e863b4f4397376f", 0xd8}], 0x7}, 0x20000852)
sendmsg$inet(r11, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r11, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea55", 0x7}], 0x1}, 0x8400)
sendmsg$inet(r11, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000000d40)="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", 0x43a}], 0x3}, 0x0)
r12 = socket$kcm(0x2, 0x5, 0x84)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r13}, 0x8)
setsockopt$sock_attach_bpf(r12, 0x84, 0x77, &(0x7f0000000000)=r13, 0x4)

1.556958649s ago: executing program 5 (id=2841):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000040)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000000400000008000000ff07000008000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000000001f00"/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f00000001c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x9409, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94)
r5 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4)
sendmsg(r5, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f00000000c0)="387f1ea67f9c1a4fb38767e942a1d3ea91eb8808287bbeeaddae3e7d44c61170a0446c1a265be9e84c52426679eb7d7c5d2cf0ecdb726fe1c94304c1a60373cbd2e52db08edba4a261a570f57749e52170077e80"}, 0x20)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
socket$kcm(0x2, 0x200000000000001, 0x106)

1.456650505s ago: executing program 2 (id=2842):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, 0x0, 0x20044818)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffcf400000000000000000000000000000200000000"], 0x0, 0xfc5f}, 0x20)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x2e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x20, 0x2f, &(0x7f0000000440)="b90103606908068c3c270040e72f839e0ff008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x301)

555.222117ms ago: executing program 0 (id=2843):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240)="6c59272998dab8cf7ccad5a6a4f5bd9a2b019bad3d35759260a8f300fcc4f5b6f0566a8279feb56d52ace3987bce3a0a1d9b1ba7b7ae4d62d735639fa3e94f0d0f001eec09b448c841d66da46b56701e12afedbde8fe40ac8246783564f187aa04b66d8610f40849e1c545fafd4f1938d879fb95dc728c84296dc6c3db8f316c65ce8fbd23a164bc48066795", &(0x7f0000000340)=""/127}, 0x20)
socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a80", 0xb}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)

508.47735ms ago: executing program 2 (id=2844):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(r0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180)=0x5000000, &(0x7f00000001c0)=r0}, 0x20)

432.698475ms ago: executing program 4 (id=2845):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000fa4c4241fc0560", 0xe}], 0x1}, 0x0)

341.57092ms ago: executing program 4 (id=2846):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r5, 0x0, 0x40002000)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

220.178127ms ago: executing program 5 (id=2847):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8994, &(0x7f0000000d00)={'bond0\x00', @broadcast})

178.51244ms ago: executing program 2 (id=2848):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x648}, {}, {}, [@generic={0x40, 0x8, 0x9, 0xffd3, 0x800}, @map_fd={0x18, 0x2}, @generic={0xb0, 0x8, 0x4, 0x1000, 0x8}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4a, 0x0, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
close(r6)
r8 = getpid()
syz_open_procfs$namespace(r8, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

0s ago: executing program 4 (id=2849):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8942, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

0] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2058'.
[  518.855826][T12490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2058'.
[  520.320047][T12507] FAULT_INJECTION: forcing a failure.
[  520.320047][T12507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  520.446728][T12507] CPU: 0 PID: 12507 Comm: syz.4.2061 Not tainted syzkaller #0
[  520.454287][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  520.464471][T12507] Call Trace:
[  520.468063][T12507]  <TASK>
[  520.471039][T12507]  dump_stack_lvl+0x18c/0x250
[  520.475785][T12507]  ? show_regs_print_info+0x20/0x20
[  520.481048][T12507]  ? load_image+0x400/0x400
[  520.485615][T12507]  ? __might_fault+0xaa/0x120
[  520.490336][T12507]  ? __lock_acquire+0x7d40/0x7d40
[  520.495412][T12507]  should_fail_ex+0x39d/0x4d0
[  520.500156][T12507]  _copy_from_user+0x2f/0xe0
[  520.504822][T12507]  kstrtouint_from_user+0xde/0x170
[  520.509998][T12507]  ? kstrtol_from_user+0x190/0x190
[  520.515181][T12507]  proc_fail_nth_write+0x8f/0x250
[  520.520249][T12507]  ? proc_fail_nth_read+0x260/0x260
[  520.525473][T12507]  ? proc_fail_nth_read+0x260/0x260
[  520.530691][T12507]  vfs_write+0x296/0x990
[  520.535000][T12507]  ? file_end_write+0x250/0x250
[  520.539881][T12507]  ? __fget_files+0x28/0x4b0
[  520.544481][T12507]  ? __fget_files+0x28/0x4b0
[  520.549087][T12507]  ? __fget_files+0x43d/0x4b0
[  520.553787][T12507]  ? __fdget_pos+0x2a3/0x330
[  520.558390][T12507]  ? ksys_write+0x75/0x260
[  520.562822][T12507]  ksys_write+0x150/0x260
[  520.567172][T12507]  ? __ia32_sys_read+0x90/0x90
[  520.571957][T12507]  ? lockdep_hardirqs_on+0x98/0x150
[  520.577176][T12507]  do_syscall_64+0x55/0xa0
[  520.581607][T12507]  ? clear_bhb_loop+0x40/0x90
[  520.586315][T12507]  ? clear_bhb_loop+0x40/0x90
[  520.591006][T12507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.596912][T12507] RIP: 0033:0x7f1d2d15c84e
[  520.601339][T12507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  520.621218][T12507] RSP: 002b:00007f1d2e09efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  520.629649][T12507] RAX: ffffffffffffffda RBX: 00007f1d2e09f6c0 RCX: 00007f1d2d15c84e
[  520.637741][T12507] RDX: 0000000000000001 RSI: 00007f1d2e09f0a0 RDI: 000000000000000e
[  520.645739][T12507] RBP: 00007f1d2e09f090 R08: 0000000000000000 R09: 0000000000000000
[  520.653725][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.661708][T12507] R13: 00007f1d2d416128 R14: 00007f1d2d416090 R15: 00007ffd982a4038
[  520.669710][T12507]  </TASK>
[  521.127398][ T5772] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  523.136728][T12552] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2076'.
[  523.457030][T12557] netlink: 'syz.4.2080': attribute type 10 has an invalid length.
[  523.574059][T12557] geneve0: entered promiscuous mode
[  523.915380][T12566] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2083'.
[  524.237281][T12557] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  525.130867][T12583] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  526.196064][T12602] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2095'.
[  526.735909][T12602] bridge0: port 3(bond0) entered disabled state
[  526.872476][T12602] bond0 (unregistering): left allmulticast mode
[  526.903989][T12602] bond_slave_1: left allmulticast mode
[  526.913380][T12602] bridge0: port 3(bond0) entered disabled state
[  526.925911][T12602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.936056][T12602] bond_slave_1: left promiscuous mode
[  526.963158][T12602] bond0 (unregistering): Released all slaves
[  527.115224][T12607] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2096'.
[  529.007627][T12635] netlink: 'syz.2.2104': attribute type 33 has an invalid length.
[  529.022602][T12635] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2104'.
[  529.046459][T12635] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  530.096272][T12644] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.2106'.
[  530.197130][T12654] netlink: 'syz.0.2112': attribute type 10 has an invalid length.
[  530.251653][T12654] geneve0: entered promiscuous mode
[  530.487228][T12654] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  533.399219][T12698] netlink: 'syz.2.2124': attribute type 10 has an invalid length.
[  533.441665][T12698] geneve0: entered promiscuous mode
[  534.280657][T12712] netlink: 'syz.1.2131': attribute type 10 has an invalid length.
[  534.674140][T12725] FAULT_INJECTION: forcing a failure.
[  534.674140][T12725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.704437][T12725] CPU: 1 PID: 12725 Comm: syz.4.2136 Not tainted syzkaller #0
[  534.711982][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  534.722175][T12725] Call Trace:
[  534.725490][T12725]  <TASK>
[  534.728457][T12725]  dump_stack_lvl+0x18c/0x250
[  534.733185][T12725]  ? show_regs_print_info+0x20/0x20
[  534.738427][T12725]  ? load_image+0x400/0x400
[  534.742970][T12725]  ? __lock_acquire+0x7d40/0x7d40
[  534.748050][T12725]  should_fail_ex+0x39d/0x4d0
[  534.752779][T12725]  _copy_from_user+0x2f/0xe0
[  534.757588][T12725]  __copy_msghdr+0x3bb/0x580
[  534.762233][T12725]  ___sys_sendmsg+0x214/0x360
[  534.766951][T12725]  ? __sys_sendmsg+0x2a0/0x2a0
[  534.771771][T12725]  ? __lock_acquire+0x7d40/0x7d40
[  534.776863][T12725]  __se_sys_sendmsg+0x1c2/0x2b0
[  534.781754][T12725]  ? __x64_sys_sendmsg+0x80/0x80
[  534.786773][T12725]  ? lockdep_hardirqs_on+0x98/0x150
[  534.792181][T12725]  do_syscall_64+0x55/0xa0
[  534.796634][T12725]  ? clear_bhb_loop+0x40/0x90
[  534.801337][T12725]  ? clear_bhb_loop+0x40/0x90
[  534.806058][T12725]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  534.811986][T12725] RIP: 0033:0x7f1d2d19bf79
[  534.816432][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.836167][T12725] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.844705][T12725] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  534.852703][T12725] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  534.860702][T12725] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  534.868751][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.876748][T12725] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  534.884863][T12725]  </TASK>
[  534.992305][T12728] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2137'.
[  535.507315][T12740] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.2139'.
[  535.575635][T12740] netlink: 182276 bytes leftover after parsing attributes in process `syz.2.2139'.
[  535.663801][T12739] netlink: 'syz.0.2140': attribute type 10 has an invalid length.
[  535.708367][T12739] 8021q: adding VLAN 0 to HW filter on device team0
[  535.744841][T12739] bond0: (slave team0): Enslaving as an active interface with an up link
[  535.920384][T12743] FAULT_INJECTION: forcing a failure.
[  535.920384][T12743] name failslab, interval 1, probability 0, space 0, times 0
[  535.939789][T12743] CPU: 1 PID: 12743 Comm: syz.1.2141 Not tainted syzkaller #0
[  535.947277][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  535.957358][T12743] Call Trace:
[  535.960644][T12743]  <TASK>
[  535.963588][T12743]  dump_stack_lvl+0x18c/0x250
[  535.968366][T12743]  ? sctp_sendmsg+0x1575/0x28c0
[  535.973232][T12743]  ? ___sys_sendmsg+0x2a6/0x360
[  535.978108][T12743]  ? show_regs_print_info+0x20/0x20
[  535.983312][T12743]  ? load_image+0x400/0x400
[  535.987849][T12743]  should_fail_ex+0x39d/0x4d0
[  535.992555][T12743]  should_failslab+0x9/0x20
[  535.997250][T12743]  slab_pre_alloc_hook+0x59/0x310
[  536.002305][T12743]  ? sctp_add_bind_addr+0x8c/0x360
[  536.007458][T12743]  __kmem_cache_alloc_node+0x53/0x250
[  536.012862][T12743]  ? sctp_add_bind_addr+0x8c/0x360
[  536.017998][T12743]  kmalloc_trace+0x2a/0xe0
[  536.022435][T12743]  sctp_add_bind_addr+0x8c/0x360
[  536.027481][T12743]  sctp_copy_local_addr_list+0x315/0x4f0
[  536.033200][T12743]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  536.038938][T12743]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  536.045031][T12743]  ? sctp_v4_is_any+0x35/0x60
[  536.049720][T12743]  ? sctp_copy_one_addr+0x8c/0x350
[  536.054939][T12743]  sctp_bind_addr_copy+0xb3/0x3c0
[  536.059994][T12743]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  536.066337][T12743]  sctp_connect_new_asoc+0x2f9/0x6a0
[  536.071641][T12743]  ? __sctp_connect+0xd80/0xd80
[  536.076501][T12743]  ? __local_bh_enable_ip+0x13a/0x1c0
[  536.081889][T12743]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  536.087499][T12743]  ? security_sctp_bind_connect+0x89/0xb0
[  536.093240][T12743]  sctp_sendmsg+0x1575/0x28c0
[  536.097941][T12743]  ? sctp_getsockopt+0xb60/0xb60
[  536.102892][T12743]  ? aa_sk_perm+0x83c/0x970
[  536.107421][T12743]  ? aa_af_perm+0x330/0x330
[  536.111970][T12743]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  536.118488][T12743]  ? sock_rps_record_flow+0x19/0x3f0
[  536.123790][T12743]  ? inet_sendmsg+0xe9/0x2f0
[  536.128392][T12743]  ? inet_send_prepare+0x260/0x260
[  536.133525][T12743]  ____sys_sendmsg+0x5ba/0x960
[  536.138316][T12743]  ? __lock_acquire+0x7d40/0x7d40
[  536.143357][T12743]  ? __asan_memset+0x22/0x40
[  536.147961][T12743]  ? __sys_sendmsg_sock+0x30/0x30
[  536.153030][T12743]  ? __import_iovec+0x5f2/0x850
[  536.157953][T12743]  ? import_iovec+0x73/0xa0
[  536.162490][T12743]  ___sys_sendmsg+0x2a6/0x360
[  536.167183][T12743]  ? get_pid_task+0x20/0x1e0
[  536.171797][T12743]  ? __sys_sendmsg+0x2a0/0x2a0
[  536.176592][T12743]  ? __lock_acquire+0x7d40/0x7d40
[  536.181665][T12743]  __se_sys_sendmsg+0x1c2/0x2b0
[  536.186528][T12743]  ? __x64_sys_sendmsg+0x80/0x80
[  536.191492][T12743]  ? lockdep_hardirqs_on+0x98/0x150
[  536.196709][T12743]  do_syscall_64+0x55/0xa0
[  536.201137][T12743]  ? clear_bhb_loop+0x40/0x90
[  536.205826][T12743]  ? clear_bhb_loop+0x40/0x90
[  536.210513][T12743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.216420][T12743] RIP: 0033:0x7f72b739bf79
[  536.220895][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.240567][T12743] RSP: 002b:00007f72b82e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.249040][T12743] RAX: ffffffffffffffda RBX: 00007f72b7615fa0 RCX: 00007f72b739bf79
[  536.257033][T12743] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000006
[  536.265019][T12743] RBP: 00007f72b82e7090 R08: 0000000000000000 R09: 0000000000000000
[  536.273087][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  536.281077][T12743] R13: 00007f72b7616038 R14: 00007f72b7615fa0 R15: 00007ffe51adab98
[  536.289094][T12743]  </TASK>
[  536.463332][T12752] netlink: 'syz.0.2151': attribute type 33 has an invalid length.
[  536.486303][T12752] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2151'.
[  536.501927][T12752] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  536.553711][T12751] netlink: 'syz.1.2144': attribute type 10 has an invalid length.
[  536.799768][T12764] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  536.868942][T12765] netlink: 'syz.4.2147': attribute type 10 has an invalid length.
[  536.883780][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2147'.
[  536.905327][T12765] netlink: 'syz.4.2147': attribute type 10 has an invalid length.
[  536.923488][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2147'.
[  536.947442][T12761] netlink: 'syz.4.2147': attribute type 10 has an invalid length.
[  536.955413][T12761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2147'.
[  537.133590][T12772] FAULT_INJECTION: forcing a failure.
[  537.133590][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.147081][T12772] CPU: 0 PID: 12772 Comm: syz.1.2152 Not tainted syzkaller #0
[  537.154578][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  537.164697][T12772] Call Trace:
[  537.167994][T12772]  <TASK>
[  537.170927][T12772]  dump_stack_lvl+0x18c/0x250
[  537.175623][T12772]  ? show_regs_print_info+0x20/0x20
[  537.180824][T12772]  ? load_image+0x400/0x400
[  537.185330][T12772]  ? __lock_acquire+0x7d40/0x7d40
[  537.190358][T12772]  should_fail_ex+0x39d/0x4d0
[  537.195046][T12772]  _copy_from_user+0x2f/0xe0
[  537.199754][T12772]  __copy_msghdr+0x3bb/0x580
[  537.204400][T12772]  ___sys_sendmsg+0x214/0x360
[  537.209123][T12772]  ? __sys_sendmsg+0x2a0/0x2a0
[  537.213926][T12772]  ? __lock_acquire+0x7d40/0x7d40
[  537.218990][T12772]  __se_sys_sendmsg+0x1c2/0x2b0
[  537.223854][T12772]  ? __x64_sys_sendmsg+0x80/0x80
[  537.229251][T12772]  ? lockdep_hardirqs_on+0x98/0x150
[  537.234467][T12772]  do_syscall_64+0x55/0xa0
[  537.238897][T12772]  ? clear_bhb_loop+0x40/0x90
[  537.243584][T12772]  ? clear_bhb_loop+0x40/0x90
[  537.248272][T12772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  537.254173][T12772] RIP: 0033:0x7f72b739bf79
[  537.258605][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.278308][T12772] RSP: 002b:00007f72b82e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.286820][T12772] RAX: ffffffffffffffda RBX: 00007f72b7615fa0 RCX: 00007f72b739bf79
[  537.294803][T12772] RDX: 000000002400c041 RSI: 0000200000000000 RDI: 0000000000000003
[  537.302782][T12772] RBP: 00007f72b82e7090 R08: 0000000000000000 R09: 0000000000000000
[  537.310769][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.319014][T12772] R13: 00007f72b7616038 R14: 00007f72b7615fa0 R15: 00007ffe51adab98
[  537.327020][T12772]  </TASK>
[  537.536989][T12781] netlink: 'syz.4.2156': attribute type 33 has an invalid length.
[  537.544889][T12781] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2156'.
[  537.577012][T12781] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  537.748050][   T11] tipc: Subscription rejected, illegal request
[  537.809268][T12791] netlink: 'syz.0.2168': attribute type 33 has an invalid length.
[  537.817729][T12791] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2168'.
[  537.828702][T12791] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  538.012021][T12796] netlink: 'syz.0.2161': attribute type 9 has an invalid length.
[  538.022143][T12798] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  538.041349][T12796] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2161'.
[  538.647452][T12811] IPv6: NLM_F_CREATE should be specified when creating new route
[  539.532244][T12827] openvswitch: netlink: Key type 29 is not supported
[  540.156825][T12839] FAULT_INJECTION: forcing a failure.
[  540.156825][T12839] name failslab, interval 1, probability 0, space 0, times 0
[  540.239468][T12839] CPU: 1 PID: 12839 Comm: syz.4.2177 Not tainted syzkaller #0
[  540.247013][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  540.257124][T12839] Call Trace:
[  540.260441][T12839]  <TASK>
[  540.263400][T12839]  dump_stack_lvl+0x18c/0x250
[  540.268127][T12839]  ? show_regs_print_info+0x20/0x20
[  540.273461][T12839]  ? load_image+0x400/0x400
[  540.278005][T12839]  ? __might_sleep+0xe0/0xe0
[  540.282636][T12839]  ? __lock_acquire+0x7d40/0x7d40
[  540.287691][T12839]  ? trace_contention_end+0x39/0xe0
[  540.292927][T12839]  should_fail_ex+0x39d/0x4d0
[  540.297649][T12839]  should_failslab+0x9/0x20
[  540.302208][T12839]  slab_pre_alloc_hook+0x59/0x310
[  540.307307][T12839]  ? tcx_prog_attach+0x2f5/0x780
[  540.312309][T12839]  __kmem_cache_alloc_node+0x53/0x250
[  540.317754][T12839]  ? tcx_prog_attach+0x2f5/0x780
[  540.322741][T12839]  kmalloc_trace+0x2a/0xe0
[  540.327290][T12839]  tcx_prog_attach+0x2f5/0x780
[  540.332099][T12839]  ? netns_bpf_pernet_pre_exit+0x1d0/0x1d0
[  540.337983][T12839]  ? bpf_prog_attach_check_attach_type+0x188/0x440
[  540.344538][T12839]  bpf_prog_attach+0x478/0x5c0
[  540.349446][T12839]  __sys_bpf+0x306/0x890
[  540.353729][T12839]  ? bpf_link_show_fdinfo+0x390/0x390
[  540.359163][T12839]  ? lock_chain_count+0x20/0x20
[  540.364072][T12839]  __x64_sys_bpf+0x7c/0x90
[  540.368613][T12839]  do_syscall_64+0x55/0xa0
[  540.373062][T12839]  ? clear_bhb_loop+0x40/0x90
[  540.377788][T12839]  ? clear_bhb_loop+0x40/0x90
[  540.382522][T12839]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.388459][T12839] RIP: 0033:0x7f1d2d19bf79
[  540.392916][T12839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.412567][T12839] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  540.421039][T12839] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  540.429043][T12839] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000008
[  540.437047][T12839] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  540.445063][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.453237][T12839] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  540.461258][T12839]  </TASK>
[  540.469585][T12846] validate_nla: 2 callbacks suppressed
[  540.469603][T12846] netlink: 'syz.2.2178': attribute type 10 has an invalid length.
[  540.674071][T12851] netlink: 'syz.2.2181': attribute type 33 has an invalid length.
[  540.692790][T12851] __nla_validate_parse: 2 callbacks suppressed
[  540.692812][T12851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2181'.
[  540.721165][T12851] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  540.853504][T12853] FAULT_INJECTION: forcing a failure.
[  540.853504][T12853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  540.894721][T12853] CPU: 0 PID: 12853 Comm: syz.4.2182 Not tainted syzkaller #0
[  540.902271][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  540.912460][T12853] Call Trace:
[  540.915787][T12853]  <TASK>
[  540.918760][T12853]  dump_stack_lvl+0x18c/0x250
[  540.923579][T12853]  ? lock_chain_count+0x20/0x20
[  540.928498][T12853]  ? show_regs_print_info+0x20/0x20
[  540.933847][T12853]  ? load_image+0x400/0x400
[  540.938437][T12853]  ? lockdep_hardirqs_on+0x98/0x150
[  540.943911][T12853]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  540.950128][T12853]  should_fail_ex+0x39d/0x4d0
[  540.954859][T12853]  _copy_from_iter+0x1d9/0x12e0
[  540.959757][T12853]  ? rep_movs_alternative+0x4a/0x90
[  540.964992][T12853]  ? _copy_from_iter+0x24e/0x12e0
[  540.970038][T12853]  ? __virt_addr_valid+0x18c/0x540
[  540.975250][T12853]  ? copyout_mc+0x70/0x70
[  540.979611][T12853]  ? copyout_mc+0x70/0x70
[  540.983956][T12853]  ? __sanitizer_cov_trace_pc+0x10/0x60
[  540.989514][T12853]  ? page_copy_sane+0x16a/0x270
[  540.994389][T12853]  copy_page_from_iter+0x7b/0x100
[  540.999432][T12853]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  541.005264][T12853]  packet_sendmsg+0x3566/0x4d70
[  541.010156][T12853]  ? lockdep_hardirqs_on+0x98/0x150
[  541.015365][T12853]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  541.021631][T12853]  ? aa_sk_perm+0x83c/0x970
[  541.026149][T12853]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  541.032312][T12853]  ? lockdep_hardirqs_on+0x98/0x150
[  541.037520][T12853]  ? packet_getsockopt+0xad0/0xad0
[  541.042654][T12853]  ? aa_sock_msg_perm+0x94/0x150
[  541.047611][T12853]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  541.052939][T12853]  ? security_socket_sendmsg+0x80/0xa0
[  541.058407][T12853]  ? packet_getsockopt+0xad0/0xad0
[  541.063535][T12853]  ____sys_sendmsg+0x5ba/0x960
[  541.068309][T12853]  ? __lock_acquire+0x7d40/0x7d40
[  541.073521][T12853]  ? __asan_memset+0x22/0x40
[  541.078131][T12853]  ? __sys_sendmsg_sock+0x30/0x30
[  541.083245][T12853]  ? __import_iovec+0x5f2/0x850
[  541.088118][T12853]  ? import_iovec+0x73/0xa0
[  541.092686][T12853]  ___sys_sendmsg+0x2a6/0x360
[  541.097377][T12853]  ? __sys_sendmsg+0x2a0/0x2a0
[  541.102164][T12853]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  541.108436][T12853]  __se_sys_sendmsg+0x1c2/0x2b0
[  541.113391][T12853]  ? __x64_sys_sendmsg+0x80/0x80
[  541.118351][T12853]  ? lockdep_hardirqs_on+0x98/0x150
[  541.123600][T12853]  do_syscall_64+0x55/0xa0
[  541.128033][T12853]  ? clear_bhb_loop+0x40/0x90
[  541.132723][T12853]  ? clear_bhb_loop+0x40/0x90
[  541.137408][T12853]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.143311][T12853] RIP: 0033:0x7f1d2d19bf79
[  541.147749][T12853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.167481][T12853] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.175995][T12853] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  541.183980][T12853] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  541.192043][T12853] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  541.200024][T12853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  541.208024][T12853] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  541.216018][T12853]  </TASK>
[  541.739690][T12874] FAULT_INJECTION: forcing a failure.
[  541.739690][T12874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.754223][T12874] CPU: 1 PID: 12874 Comm: syz.2.2189 Not tainted syzkaller #0
[  541.761731][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  541.771816][T12874] Call Trace:
[  541.775128][T12874]  <TASK>
[  541.778087][T12874]  dump_stack_lvl+0x18c/0x250
[  541.782812][T12874]  ? show_regs_print_info+0x20/0x20
[  541.788057][T12874]  ? load_image+0x400/0x400
[  541.792600][T12874]  ? __might_fault+0xaa/0x120
[  541.797394][T12874]  ? __lock_acquire+0x7d40/0x7d40
[  541.802455][T12874]  should_fail_ex+0x39d/0x4d0
[  541.807189][T12874]  _copy_from_user+0x2f/0xe0
[  541.811816][T12874]  ___sys_sendmsg+0x1c7/0x360
[  541.816531][T12874]  ? __sys_sendmsg+0x2a0/0x2a0
[  541.821349][T12874]  ? __lock_acquire+0x7d40/0x7d40
[  541.826435][T12874]  __se_sys_sendmsg+0x1c2/0x2b0
[  541.831320][T12874]  ? __x64_sys_sendmsg+0x80/0x80
[  541.836306][T12874]  ? lockdep_hardirqs_on+0x98/0x150
[  541.841540][T12874]  do_syscall_64+0x55/0xa0
[  541.845994][T12874]  ? clear_bhb_loop+0x40/0x90
[  541.850704][T12874]  ? clear_bhb_loop+0x40/0x90
[  541.855413][T12874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.861336][T12874] RIP: 0033:0x7fa38359bf79
[  541.865782][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.885523][T12874] RSP: 002b:00007fa384505028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.893995][T12874] RAX: ffffffffffffffda RBX: 00007fa383815fa0 RCX: 00007fa38359bf79
[  541.902001][T12874] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  541.910017][T12874] RBP: 00007fa384505090 R08: 0000000000000000 R09: 0000000000000000
[  541.918031][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.926120][T12874] R13: 00007fa383816038 R14: 00007fa383815fa0 R15: 00007ffc0afddee8
[  541.934142][T12874]  </TASK>
[  542.376838][T12854] delete_channel: no stack
[  542.753770][T12889] netlink: 'syz.4.2195': attribute type 29 has an invalid length.
[  542.767757][T12889] netlink: 'syz.4.2195': attribute type 29 has an invalid length.
[  543.048798][T12896] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2198'.
[  543.081925][T12896] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  543.735081][T12914] FAULT_INJECTION: forcing a failure.
[  543.735081][T12914] name failslab, interval 1, probability 0, space 0, times 0
[  543.751076][T12914] CPU: 0 PID: 12914 Comm: syz.0.2204 Not tainted syzkaller #0
[  543.758587][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  543.768696][T12914] Call Trace:
[  543.772002][T12914]  <TASK>
[  543.774945][T12914]  dump_stack_lvl+0x18c/0x250
[  543.779657][T12914]  ? show_regs_print_info+0x20/0x20
[  543.784906][T12914]  ? load_image+0x400/0x400
[  543.789432][T12914]  ? __might_sleep+0xe0/0xe0
[  543.794025][T12914]  ? __lock_acquire+0x7d40/0x7d40
[  543.799139][T12914]  should_fail_ex+0x39d/0x4d0
[  543.803821][T12914]  should_failslab+0x9/0x20
[  543.808325][T12914]  slab_pre_alloc_hook+0x59/0x310
[  543.813350][T12914]  ? __lock_acquire+0x7d40/0x7d40
[  543.818375][T12914]  kmem_cache_alloc_node+0x60/0x320
[  543.823571][T12914]  ? __alloc_skb+0x103/0x2c0
[  543.828165][T12914]  __alloc_skb+0x103/0x2c0
[  543.832584][T12914]  netlink_sendmsg+0x66a/0xbf0
[  543.837352][T12914]  ? netlink_getsockopt+0x590/0x590
[  543.842583][T12914]  ? aa_sock_msg_perm+0x94/0x150
[  543.847525][T12914]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  543.852813][T12914]  ? security_socket_sendmsg+0x80/0xa0
[  543.858271][T12914]  ? netlink_getsockopt+0x590/0x590
[  543.863470][T12914]  ____sys_sendmsg+0x5ba/0x960
[  543.868583][T12914]  ? __asan_memset+0x22/0x40
[  543.873249][T12914]  ? __sys_sendmsg_sock+0x30/0x30
[  543.878267][T12914]  ? __import_iovec+0x5f2/0x850
[  543.883125][T12914]  ? import_iovec+0x73/0xa0
[  543.887698][T12914]  ___sys_sendmsg+0x2a6/0x360
[  543.892388][T12914]  ? __sys_sendmsg+0x2a0/0x2a0
[  543.897179][T12914]  ? __lock_acquire+0x7d40/0x7d40
[  543.902218][T12914]  __se_sys_sendmsg+0x1c2/0x2b0
[  543.907086][T12914]  ? __x64_sys_sendmsg+0x80/0x80
[  543.912042][T12914]  ? lockdep_hardirqs_on+0x98/0x150
[  543.917241][T12914]  do_syscall_64+0x55/0xa0
[  543.921697][T12914]  ? clear_bhb_loop+0x40/0x90
[  543.926367][T12914]  ? clear_bhb_loop+0x40/0x90
[  543.931041][T12914]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  543.936933][T12914] RIP: 0033:0x7f8cee79bf79
[  543.941344][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.960972][T12914] RSP: 002b:00007f8cef59c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.969475][T12914] RAX: ffffffffffffffda RBX: 00007f8ceea15fa0 RCX: 00007f8cee79bf79
[  543.977531][T12914] RDX: 0000000024002040 RSI: 0000200000000000 RDI: 0000000000000003
[  543.985617][T12914] RBP: 00007f8cef59c090 R08: 0000000000000000 R09: 0000000000000000
[  543.993583][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.001552][T12914] R13: 00007f8ceea16038 R14: 00007f8ceea15fa0 R15: 00007fff907d92c8
[  544.009538][T12914]  </TASK>
[  544.609702][T12925] syzkaller0: entered promiscuous mode
[  544.622376][T12925] syzkaller0: entered allmulticast mode
[  544.663657][T12929] netlink: 'syz.4.2211': attribute type 33 has an invalid length.
[  544.680499][T12929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2211'.
[  544.692842][T12925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2210'.
[  544.707695][T12929] `: renamed from team0 (while UP)
[  545.480779][T12925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2210'.
[  546.891958][T12947] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2215'.
[  548.199768][T12927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2210'.
[  548.253273][T12941] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2212'.
[  548.262795][T12941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  550.250347][T12985] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2230'.
[  550.296500][T12985] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  550.631373][T12996] sctp: [Deprecated]: syz.4.2235 (pid 12996) Use of int in max_burst socket option deprecated.
[  550.631373][T12996] Use struct sctp_assoc_value instead
[  550.892888][T13006] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  552.187177][T13039] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  554.021882][T13061] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  554.955408][T13071] netlink: 'syz.0.2261': attribute type 33 has an invalid length.
[  555.003184][T13071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2261'.
[  555.048694][T13071] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  555.591850][T13084] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  555.944195][T13092] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  556.274931][T13099] netlink: 'syz.1.2273': attribute type 29 has an invalid length.
[  556.283723][T13099] netlink: 'syz.1.2273': attribute type 29 has an invalid length.
[  556.297304][T13099] FAULT_INJECTION: forcing a failure.
[  556.297304][T13099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.325783][T13099] CPU: 0 PID: 13099 Comm: syz.1.2273 Not tainted syzkaller #0
[  556.333405][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  556.343513][T13099] Call Trace:
[  556.346840][T13099]  <TASK>
[  556.349814][T13099]  dump_stack_lvl+0x18c/0x250
[  556.354569][T13099]  ? show_regs_print_info+0x20/0x20
[  556.359825][T13099]  ? load_image+0x400/0x400
[  556.364468][T13099]  ? __might_fault+0xaa/0x120
[  556.369208][T13099]  should_fail_ex+0x39d/0x4d0
[  556.374040][T13099]  copyout+0x1a/0x90
[  556.377989][T13099]  _copy_to_iter+0x432/0x1120
[  556.382729][T13099]  ? iov_iter_init+0x1e0/0x1e0
[  556.387535][T13099]  ? __virt_addr_valid+0x18c/0x540
[  556.392688][T13099]  ? __virt_addr_valid+0x469/0x540
[  556.397837][T13099]  ? __phys_addr_symbol+0x2f/0x70
[  556.402913][T13099]  __skb_datagram_iter+0xdb/0x780
[  556.407980][T13099]  ? skb_copy_datagram_iter+0x200/0x200
[  556.413680][T13099]  skb_copy_datagram_iter+0xb1/0x200
[  556.419021][T13099]  netlink_recvmsg+0x2d4/0xe60
[  556.423834][T13099]  ? netlink_sendmsg+0xbf0/0xbf0
[  556.428799][T13099]  ? aa_af_perm+0x330/0x330
[  556.433315][T13099]  ? __lock_acquire+0x1273/0x7d40
[  556.438363][T13099]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  556.443748][T13099]  ? security_socket_recvmsg+0x89/0xb0
[  556.449259][T13099]  ? netlink_sendmsg+0xbf0/0xbf0
[  556.454221][T13099]  ____sys_recvmsg+0x2ce/0x5e0
[  556.459013][T13099]  ? __sys_recvmsg_sock+0x50/0x50
[  556.464060][T13099]  ? import_iovec+0x73/0xa0
[  556.468585][T13099]  ___sys_recvmsg+0x216/0x590
[  556.473286][T13099]  ? __sys_recvmsg+0x2a0/0x2a0
[  556.478063][T13099]  ? trace_call_bpf+0xc3/0x6c0
[  556.482843][T13099]  ? trace_call_bpf+0x5e9/0x6c0
[  556.487721][T13099]  ? __fget_files+0x43d/0x4b0
[  556.492427][T13099]  __x64_sys_recvmsg+0x20c/0x2e0
[  556.497376][T13099]  ? perf_trace_preemptirq_template+0x269/0x330
[  556.503646][T13099]  ? ___sys_recvmsg+0x590/0x590
[  556.508523][T13099]  ? lockdep_hardirqs_on+0x98/0x150
[  556.513734][T13099]  do_syscall_64+0x55/0xa0
[  556.518169][T13099]  ? clear_bhb_loop+0x40/0x90
[  556.522856][T13099]  ? clear_bhb_loop+0x40/0x90
[  556.527544][T13099]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.533447][T13099] RIP: 0033:0x7f72b739bf79
[  556.537886][T13099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.557506][T13099] RSP: 002b:00007f72b82e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  556.565932][T13099] RAX: ffffffffffffffda RBX: 00007f72b7615fa0 RCX: 00007f72b739bf79
[  556.573914][T13099] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003
[  556.581895][T13099] RBP: 00007f72b82e7090 R08: 0000000000000000 R09: 0000000000000000
[  556.589880][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.597868][T13099] R13: 00007f72b7616038 R14: 00007f72b7615fa0 R15: 00007ffe51adab98
[  556.605874][T13099]  </TASK>
[  556.610969][T13099] netlink: 'syz.1.2273': attribute type 29 has an invalid length.
[  557.158348][ T5772] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1
[  557.158526][T13113] netlink: 'syz.2.2276': attribute type 41 has an invalid length.
[  557.159832][ T5772] Bluetooth: hci2: hardware error 0x00
[  557.353171][T13119] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2279'.
[  557.364522][T13119] netlink: zone id is out of range
[  557.405021][T13119] netlink: 'syz.1.2279': attribute type 3 has an invalid length.
[  557.414201][T13119] netlink: 'syz.1.2279': attribute type 7 has an invalid length.
[  557.424351][T13119] netlink: 'syz.1.2279': attribute type 8 has an invalid length.
[  557.436085][T13119] netlink: 'syz.1.2279': attribute type 7 has an invalid length.
[  557.445095][T13119] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.2279'.
[  557.534000][T13123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2280'.
[  557.543716][T13124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2280'.
[  557.590223][T13119] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2279'.
[  557.946756][T13127] netlink: 'syz.0.2282': attribute type 33 has an invalid length.
[  557.954783][T13127] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2282'.
[  557.965716][T13127] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  558.097319][T13131] FAULT_INJECTION: forcing a failure.
[  558.097319][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  558.112826][T13131] CPU: 1 PID: 13131 Comm: syz.2.2285 Not tainted syzkaller #0
[  558.120356][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  558.130555][T13131] Call Trace:
[  558.133925][T13131]  <TASK>
[  558.136871][T13131]  dump_stack_lvl+0x18c/0x250
[  558.141655][T13131]  ? show_regs_print_info+0x20/0x20
[  558.146871][T13131]  ? load_image+0x400/0x400
[  558.151388][T13131]  ? __might_fault+0xaa/0x120
[  558.156074][T13131]  ? __lock_acquire+0x7d40/0x7d40
[  558.161202][T13131]  should_fail_ex+0x39d/0x4d0
[  558.165913][T13131]  _copy_to_user+0x2f/0xa0
[  558.170352][T13131]  bpf_test_finish+0x4e7/0x650
[  558.175145][T13131]  ? convert___skb_to_skb+0x590/0x590
[  558.180530][T13131]  ? convert_skb_to___skb+0x420/0x420
[  558.185923][T13131]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  558.191317][T13131]  ? cpu_online+0x60/0x60
[  558.195657][T13131]  bpf_prog_test_run+0x321/0x390
[  558.200607][T13131]  __sys_bpf+0x49d/0x890
[  558.204902][T13131]  ? bpf_link_show_fdinfo+0x390/0x390
[  558.210382][T13131]  ? lock_chain_count+0x20/0x20
[  558.215252][T13131]  __x64_sys_bpf+0x7c/0x90
[  558.219683][T13131]  do_syscall_64+0x55/0xa0
[  558.224295][T13131]  ? clear_bhb_loop+0x40/0x90
[  558.229078][T13131]  ? clear_bhb_loop+0x40/0x90
[  558.233768][T13131]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  558.239756][T13131] RIP: 0033:0x7fa38359bf79
[  558.244185][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.263805][T13131] RSP: 002b:00007fa384505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  558.272259][T13131] RAX: ffffffffffffffda RBX: 00007fa383815fa0 RCX: 00007fa38359bf79
[  558.280426][T13131] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a
[  558.288418][T13131] RBP: 00007fa384505090 R08: 0000000000000000 R09: 0000000000000000
[  558.296406][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  558.304605][T13131] R13: 00007fa383816038 R14: 00007fa383815fa0 R15: 00007ffc0afddee8
[  558.312698][T13131]  </TASK>
[  558.320078][T13133] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  559.087662][T13117] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  559.212167][ T5772] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  559.851034][T13161] raw_sendmsg: syz.0.2295 forgot to set AF_INET. Fix it!
[  560.062157][T13167] FAULT_INJECTION: forcing a failure.
[  560.062157][T13167] name failslab, interval 1, probability 0, space 0, times 0
[  560.101032][T13167] CPU: 0 PID: 13167 Comm: syz.0.2296 Not tainted syzkaller #0
[  560.108665][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  560.118932][T13167] Call Trace:
[  560.122328][T13167]  <TASK>
[  560.125394][T13167]  dump_stack_lvl+0x18c/0x250
[  560.130122][T13167]  ? show_regs_print_info+0x20/0x20
[  560.135359][T13167]  ? load_image+0x400/0x400
[  560.139904][T13167]  ? __might_sleep+0xe0/0xe0
[  560.144538][T13167]  ? __lock_acquire+0x7d40/0x7d40
[  560.149602][T13167]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  560.155277][T13167]  should_fail_ex+0x39d/0x4d0
[  560.160000][T13167]  should_failslab+0x9/0x20
[  560.164545][T13167]  slab_pre_alloc_hook+0x59/0x310
[  560.169638][T13167]  kmem_cache_alloc_node+0x60/0x320
[  560.174969][T13167]  ? __alloc_skb+0x103/0x2c0
[  560.179622][T13167]  __alloc_skb+0x103/0x2c0
[  560.184082][T13167]  __ip6_append_data+0x2abc/0x3c50
[  560.189261][T13167]  ? rawv6_send_hdrinc+0x1640/0x1640
[  560.194594][T13167]  ? ip6_setup_cork+0xfe0/0xfe0
[  560.199494][T13167]  ip6_append_data+0x1b0/0x350
[  560.204305][T13167]  ? rawv6_send_hdrinc+0x1640/0x1640
[  560.209630][T13167]  rawv6_sendmsg+0x1264/0x1770
[  560.214451][T13167]  ? compat_rawv6_ioctl+0x70/0x70
[  560.219534][T13167]  ? aa_sk_perm+0x83c/0x970
[  560.224093][T13167]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  560.230555][T13167]  ? inet_sendmsg+0x7c/0x2f0
[  560.235179][T13167]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  560.240498][T13167]  ? security_socket_sendmsg+0x80/0xa0
[  560.245993][T13167]  ? inet_send_prepare+0x260/0x260
[  560.251138][T13167]  ____sys_sendmsg+0x5ba/0x960
[  560.255931][T13167]  ? __lock_acquire+0x7d40/0x7d40
[  560.260994][T13167]  ? __asan_memset+0x22/0x40
[  560.265621][T13167]  ? __sys_sendmsg_sock+0x30/0x30
[  560.270682][T13167]  ? __import_iovec+0x5f2/0x850
[  560.275592][T13167]  ? import_iovec+0x73/0xa0
[  560.280136][T13167]  ___sys_sendmsg+0x2a6/0x360
[  560.284864][T13167]  ? get_pid_task+0x20/0x1e0
[  560.289518][T13167]  ? __sys_sendmsg+0x2a0/0x2a0
[  560.294346][T13167]  ? __lock_acquire+0x7d40/0x7d40
[  560.299439][T13167]  __se_sys_sendmsg+0x1c2/0x2b0
[  560.304329][T13167]  ? __x64_sys_sendmsg+0x80/0x80
[  560.309335][T13167]  ? lockdep_hardirqs_on+0x98/0x150
[  560.314595][T13167]  do_syscall_64+0x55/0xa0
[  560.319062][T13167]  ? clear_bhb_loop+0x40/0x90
[  560.323861][T13167]  ? clear_bhb_loop+0x40/0x90
[  560.328605][T13167]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.334526][T13167] RIP: 0033:0x7f8cee79bf79
[  560.338981][T13167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.358618][T13167] RSP: 002b:00007f8cef59c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  560.367079][T13167] RAX: ffffffffffffffda RBX: 00007f8ceea15fa0 RCX: 00007f8cee79bf79
[  560.375170][T13167] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003
[  560.383175][T13167] RBP: 00007f8cef59c090 R08: 0000000000000000 R09: 0000000000000000
[  560.391172][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.399164][T13167] R13: 00007f8ceea16038 R14: 00007f8ceea15fa0 R15: 00007fff907d92c8
[  560.407149][T13167]  </TASK>
[  560.864018][T13183] netlink: 'syz.2.2303': attribute type 33 has an invalid length.
[  560.874790][T13183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2303'.
[  560.893672][T13183] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  561.268005][T13192] netlink: 'syz.2.2305': attribute type 3 has an invalid length.
[  561.313716][T13190] netlink: 'syz.2.2305': attribute type 3 has an invalid length.
[  561.349419][T13192] netlink: 'syz.2.2305': attribute type 7 has an invalid length.
[  561.367555][T13195] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2305'.
[  561.401107][T13190] netlink: 'syz.2.2305': attribute type 7 has an invalid length.
[  561.455656][T13192] netlink: 'syz.2.2305': attribute type 8 has an invalid length.
[  561.463468][T13192] netlink: 'syz.2.2305': attribute type 7 has an invalid length.
[  561.495272][T13190] netlink: 'syz.2.2305': attribute type 8 has an invalid length.
[  561.514995][T13192] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.2305'.
[  561.527452][T13190] netlink: 'syz.2.2305': attribute type 7 has an invalid length.
[  561.612891][T13190] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.2305'.
[  561.907776][T13209] FAULT_INJECTION: forcing a failure.
[  561.907776][T13209] name failslab, interval 1, probability 0, space 0, times 0
[  561.938705][T13209] CPU: 1 PID: 13209 Comm: syz.0.2307 Not tainted syzkaller #0
[  561.946252][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  561.956354][T13209] Call Trace:
[  561.959667][T13209]  <TASK>
[  561.962648][T13209]  dump_stack_lvl+0x18c/0x250
[  561.967380][T13209]  ? show_regs_print_info+0x20/0x20
[  561.972635][T13209]  ? load_image+0x400/0x400
[  561.977196][T13209]  ? __might_sleep+0xe0/0xe0
[  561.981836][T13209]  ? __lock_acquire+0x7d40/0x7d40
[  561.986916][T13209]  should_fail_ex+0x39d/0x4d0
[  561.991653][T13209]  should_failslab+0x9/0x20
[  561.996210][T13209]  slab_pre_alloc_hook+0x59/0x310
[  562.001288][T13209]  kmem_cache_alloc+0x5a/0x2d0
[  562.006183][T13209]  ? security_inode_alloc+0x34/0x110
[  562.011536][T13209]  security_inode_alloc+0x34/0x110
[  562.016693][T13209]  inode_init_always+0x8fc/0xc90
[  562.021674][T13209]  new_inode_pseudo+0x95/0x1d0
[  562.026489][T13209]  __sock_create+0x12d/0x940
[  562.031141][T13209]  mptcp_subflow_create_socket+0x10b/0xac0
[  562.037000][T13209]  ? mark_lock+0x94/0x320
[  562.041487][T13209]  ? __mptcp_subflow_connect+0x1450/0x1450
[  562.047346][T13209]  ? lock_chain_count+0x20/0x20
[  562.052339][T13209]  __mptcp_nmpc_sk+0x157/0x740
[  562.057155][T13209]  ? __local_bh_enable_ip+0x13a/0x1c0
[  562.062592][T13209]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  562.069421][T13209]  mptcp_setsockopt+0xe7a/0x3390
[  562.074519][T13209]  ? __fget_files+0x28/0x4b0
[  562.079170][T13209]  ? pm_nl_exit_net+0x230/0x230
[  562.084077][T13209]  ? aa_af_perm+0x330/0x330
[  562.088632][T13209]  ? __fget_files+0x28/0x4b0
[  562.093437][T13209]  ? __fget_files+0x28/0x4b0
[  562.098167][T13209]  ? aa_sock_opt_perm+0x74/0x100
[  562.103154][T13209]  ? sock_common_setsockopt+0x36/0xc0
[  562.108612][T13209]  ? sock_common_recvmsg+0x190/0x190
[  562.113945][T13209]  do_sock_setsockopt+0x175/0x1a0
[  562.119026][T13209]  ? __fdget+0x180/0x210
[  562.123321][T13209]  __x64_sys_setsockopt+0x182/0x200
[  562.128573][T13209]  do_syscall_64+0x55/0xa0
[  562.133041][T13209]  ? clear_bhb_loop+0x40/0x90
[  562.137768][T13209]  ? clear_bhb_loop+0x40/0x90
[  562.142486][T13209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  562.148430][T13209] RIP: 0033:0x7f8cee79bf79
[  562.152895][T13209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.172547][T13209] RSP: 002b:00007f8cef59c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  562.181019][T13209] RAX: ffffffffffffffda RBX: 00007f8ceea15fa0 RCX: 00007f8cee79bf79
[  562.189039][T13209] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000003
[  562.197058][T13209] RBP: 00007f8cef59c090 R08: 0000000000004000 R09: 0000000000000000
[  562.205350][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.213809][T13209] R13: 00007f8ceea16038 R14: 00007f8ceea15fa0 R15: 00007fff907d92c8
[  562.222014][T13209]  </TASK>
[  562.263390][T13209] socket: no more sockets
[  562.872866][T13117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  562.885732][T13117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  562.905834][T13117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  562.928797][T13117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  562.955930][T13117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  562.967234][T13117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  563.150426][T13237] netlink: 'syz.0.2318': attribute type 3 has an invalid length.
[  563.467868][T13234] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.2318'.
[  563.525703][T13237] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.2318'.
[  563.688297][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  563.694831][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  563.824493][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.854579][T13238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2317'.
[  563.901771][T13237] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2318'.
[  563.962252][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.107866][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.137257][T13117] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  564.239877][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.452007][T13228] chnl_net:caif_netlink_parms(): no params data found
[  564.741766][T13228] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.749827][T13228] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.757328][T13228] bridge_slave_0: entered allmulticast mode
[  564.764313][T13228] bridge_slave_0: entered promiscuous mode
[  564.774557][T13228] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.781961][T13228] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.790655][T13228] bridge_slave_1: entered allmulticast mode
[  564.797911][T13228] bridge_slave_1: entered promiscuous mode
[  564.842523][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.854901][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.888371][T13228] team0: Port device team_slave_0 added
[  564.916818][T13228] team0: Port device team_slave_1 added
[  564.947391][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.954404][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.981064][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.995981][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.003065][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.045718][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.070417][T13117] Bluetooth: hci1: command tx timeout
[  565.162725][T13270] FAULT_INJECTION: forcing a failure.
[  565.162725][T13270] name failslab, interval 1, probability 0, space 0, times 0
[  565.195855][T13270] CPU: 0 PID: 13270 Comm: syz.4.2328 Not tainted syzkaller #0
[  565.203406][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  565.213596][T13270] Call Trace:
[  565.216913][T13270]  <TASK>
[  565.219898][T13270]  dump_stack_lvl+0x18c/0x250
[  565.224630][T13270]  ? show_regs_print_info+0x20/0x20
[  565.229883][T13270]  ? load_image+0x400/0x400
[  565.234438][T13270]  ? __might_sleep+0xe0/0xe0
[  565.239205][T13270]  ? __lock_acquire+0x7d40/0x7d40
[  565.244279][T13270]  should_fail_ex+0x39d/0x4d0
[  565.249014][T13270]  should_failslab+0x9/0x20
[  565.253595][T13270]  slab_pre_alloc_hook+0x59/0x310
[  565.258845][T13270]  ? tomoyo_encode+0x28b/0x540
[  565.263650][T13270]  ? tomoyo_encode+0x28b/0x540
[  565.268425][T13270]  __kmem_cache_alloc_node+0x53/0x250
[  565.273849][T13270]  ? tomoyo_encode+0x28b/0x540
[  565.278646][T13270]  __kmalloc+0xa4/0x230
[  565.282836][T13270]  tomoyo_encode+0x28b/0x540
[  565.287541][T13270]  tomoyo_realpath_from_path+0x592/0x5d0
[  565.293199][T13270]  tomoyo_path_number_perm+0x248/0x620
[  565.298674][T13270]  ? tomoyo_path_number_perm+0x217/0x620
[  565.304332][T13270]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  565.309813][T13270]  ? ksys_write+0x1c4/0x260
[  565.314376][T13270]  ? __fget_files+0x28/0x4b0
[  565.318983][T13270]  ? __fget_files+0x28/0x4b0
[  565.323683][T13270]  security_file_ioctl+0x70/0xa0
[  565.328662][T13270]  __se_sys_ioctl+0x48/0x170
[  565.333265][T13270]  do_syscall_64+0x55/0xa0
[  565.337718][T13270]  ? clear_bhb_loop+0x40/0x90
[  565.342431][T13270]  ? clear_bhb_loop+0x40/0x90
[  565.347238][T13270]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  565.353163][T13270] RIP: 0033:0x7f1d2d19bf79
[  565.357604][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.377228][T13270] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  565.385829][T13270] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  565.393821][T13270] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  565.401802][T13270] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  565.409783][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.417772][T13270] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  565.425776][T13270]  </TASK>
[  565.518773][T13270] ERROR: Out of memory at tomoyo_realpath_from_path.
[  565.852420][T13228] hsr_slave_0: entered promiscuous mode
[  565.924971][T13228] hsr_slave_1: entered promiscuous mode
[  565.984609][T13228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.024382][T13228] Cannot create hsr debugfs directory
[  566.271285][T13285] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  567.126752][T13117] Bluetooth: hci1: command tx timeout
[  567.196911][T13310] FAULT_INJECTION: forcing a failure.
[  567.196911][T13310] name failslab, interval 1, probability 0, space 0, times 0
[  567.222070][T13308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  567.238163][T13310] CPU: 1 PID: 13310 Comm: syz.0.2338 Not tainted syzkaller #0
[  567.245769][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  567.255883][T13310] Call Trace:
[  567.259174][T13310]  <TASK>
[  567.262115][T13310]  dump_stack_lvl+0x18c/0x250
[  567.266818][T13310]  ? show_regs_print_info+0x20/0x20
[  567.272031][T13310]  ? load_image+0x400/0x400
[  567.276557][T13310]  ? __might_sleep+0xe0/0xe0
[  567.281162][T13310]  ? __lock_acquire+0x7d40/0x7d40
[  567.286201][T13310]  should_fail_ex+0x39d/0x4d0
[  567.290898][T13310]  should_failslab+0x9/0x20
[  567.295414][T13310]  slab_pre_alloc_hook+0x59/0x310
[  567.300451][T13310]  ? __mutex_lock+0x315/0xcc0
[  567.305147][T13310]  ? tracepoint_add_func+0x2f9/0x990
[  567.310463][T13310]  ? tracepoint_add_func+0x2f9/0x990
[  567.315794][T13310]  __kmem_cache_alloc_node+0x53/0x250
[  567.321196][T13310]  ? tracepoint_add_func+0x2f9/0x990
[  567.326485][T13310]  __kmalloc+0xa4/0x230
[  567.330660][T13310]  ? trace_event_raw_event_sys_enter+0x120/0x120
[  567.337014][T13310]  tracepoint_add_func+0x2f9/0x990
[  567.342252][T13310]  ? trace_event_raw_event_sys_enter+0x120/0x120
[  567.348603][T13310]  tracepoint_probe_register+0x5e/0x90
[  567.354072][T13310]  ? trace_event_raw_event_sys_enter+0x120/0x120
[  567.360413][T13310]  perf_trace_event_init+0x4d2/0x9b0
[  567.365719][T13310]  perf_trace_init+0x238/0x2d0
[  567.370500][T13310]  perf_tp_event_init+0x8d/0x110
[  567.375454][T13310]  perf_try_init_event+0x12b/0x3c0
[  567.380677][T13310]  perf_event_alloc+0xfa4/0x21b0
[  567.385625][T13310]  ? perf_event_alloc+0xc06/0x21b0
[  567.390755][T13310]  ? find_lively_task_by_vpid+0x19/0x290
[  567.396410][T13310]  __se_sys_perf_event_open+0x740/0x1c50
[  567.402064][T13310]  ? mutex_unlock+0x10/0x10
[  567.406583][T13310]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  567.412239][T13310]  ? lock_chain_count+0x20/0x20
[  567.417113][T13310]  ? lockdep_hardirqs_on+0x98/0x150
[  567.422319][T13310]  ? __x64_sys_perf_event_open+0x20/0xc0
[  567.427972][T13310]  do_syscall_64+0x55/0xa0
[  567.432403][T13310]  ? clear_bhb_loop+0x40/0x90
[  567.437101][T13310]  ? clear_bhb_loop+0x40/0x90
[  567.441793][T13310]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  567.447700][T13310] RIP: 0033:0x7f8cee79bf79
[  567.452126][T13310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.471761][T13310] RSP: 002b:00007f8cef59c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  567.480192][T13310] RAX: ffffffffffffffda RBX: 00007f8ceea15fa0 RCX: 00007f8cee79bf79
[  567.488175][T13310] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500
[  567.496192][T13310] RBP: 00007f8cef59c090 R08: 0000000000000000 R09: 0000000000000000
[  567.504168][T13310] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  567.512715][T13310] R13: 00007f8ceea16038 R14: 00007f8ceea15fa0 R15: 00007fff907d92c8
[  567.520860][T13310]  </TASK>
[  568.532600][T13308] syzkaller0: entered promiscuous mode
[  568.538401][T13308] syzkaller0: entered allmulticast mode
[  569.207389][T13117] Bluetooth: hci1: command tx timeout
[  571.067956][T13117] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  571.286096][T13117] Bluetooth: hci1: command tx timeout
[  573.122140][T13348] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  576.268569][T13228] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  576.374265][T13228] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  576.907413][T13228] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  577.048032][T13228] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  577.310134][T13430] validate_nla: 7 callbacks suppressed
[  577.310155][T13430] netlink: 'syz.4.2365': attribute type 3 has an invalid length.
[  577.338116][T13422] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  577.357914][T13430] netlink: 'syz.4.2365': attribute type 1 has an invalid length.
[  577.367264][T13430] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2365'.
[  578.289303][T13438] netlink: 'syz.4.2366': attribute type 33 has an invalid length.
[  578.305916][T13438] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2366'.
[  578.317448][T13438] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  578.362981][   T42] hsr_slave_0: left promiscuous mode
[  578.376888][   T42] hsr_slave_1: left promiscuous mode
[  578.407883][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.422325][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.459824][   T42] bridge_slave_1: left allmulticast mode
[  578.474005][   T42] bridge_slave_1: left promiscuous mode
[  578.481995][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.497941][   T42] bridge_slave_0: left allmulticast mode
[  578.503748][   T42] bridge_slave_0: left promiscuous mode
[  578.519316][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.550966][   T42] veth1_vlan: left promiscuous mode
[  578.559076][   T42] veth0_vlan: left promiscuous mode
[  579.165128][   T42] team0 (unregistering): Port device team_slave_1 removed
[  579.220441][   T42] team0 (unregistering): Port device C removed
[  580.010209][T13228] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.083425][T13228] 8021q: adding VLAN 0 to HW filter on device team0
[  580.103926][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.111184][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.145239][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.152479][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.218732][T13228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  580.233537][T13228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.619350][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.739878][T13228] veth0_vlan: entered promiscuous mode
[  580.772947][T13228] veth1_vlan: entered promiscuous mode
[  580.863616][T13228] veth0_macvtap: entered promiscuous mode
[  580.881084][T13228] veth1_macvtap: entered promiscuous mode
[  580.933193][T13228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.948293][T13228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.961028][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.003132][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.033672][T13228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.058105][T13228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.069251][T13228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.078170][T13228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.204358][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.228850][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.270319][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.280192][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.556609][T13485] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  582.795659][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  582.806183][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  582.822907][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  582.834895][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  582.846690][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  582.854542][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  583.895622][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.963211][T13498] chnl_net:caif_netlink_parms(): no params data found
[  584.257610][   T77] wlan1: Trigger new scan to find an IBSS to join
[  584.931165][ T5772] Bluetooth: hci2: command tx timeout
[  585.203408][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.497976][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.603986][T13537] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  585.669723][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.403974][T13498] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.441387][T13498] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.449437][T13498] bridge_slave_0: entered allmulticast mode
[  586.457721][T13498] bridge_slave_0: entered promiscuous mode
[  586.468053][T13498] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.475323][T13498] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.483507][T13498] bridge_slave_1: entered allmulticast mode
[  586.509846][T13498] bridge_slave_1: entered promiscuous mode
[  586.574811][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.158192][ T5772] Bluetooth: hci2: command tx timeout
[  587.296366][ T2912] wlan1: Trigger new scan to find an IBSS to join
[  589.207322][ T5772] Bluetooth: hci2: command tx timeout
[  589.777763][ T2912] wlan1: Creating new IBSS network, BSSID 6e:35:b7:f7:94:18
[  589.783151][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.998803][T13498] team0: Port device team_slave_0 added
[  590.019459][T13498] team0: Port device team_slave_1 added
[  590.173338][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.184476][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.198899][T13550] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2385'.
[  590.215870][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.363732][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.373023][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.399614][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.434558][T13551] netlink: 'syz.0.2385': attribute type 21 has an invalid length.
[  590.444342][T13551] netlink: 'syz.0.2385': attribute type 15 has an invalid length.
[  590.464403][T13554] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  590.473979][T13554] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.481705][T13554] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.502734][T13554] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.510858][T13554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.519239][T13554] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.526501][T13554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.541538][T13554] team0: Port device bridge0 added
[  590.688736][T13498] hsr_slave_0: entered promiscuous mode
[  590.696323][T13498] hsr_slave_1: entered promiscuous mode
[  590.703121][T13498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  590.711402][T13498] Cannot create hsr debugfs directory
[  591.293088][ T5772] Bluetooth: hci2: command tx timeout
[  592.791548][T13498] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  592.846145][T13498] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  592.922373][T13498] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  592.942190][T13498] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  593.307314][T13498] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.341759][T13498] 8021q: adding VLAN 0 to HW filter on device team0
[  593.508611][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.515816][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.588566][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.595814][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  594.773028][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.062555][T13498] veth0_vlan: entered promiscuous mode
[  595.113400][   T42] hsr_slave_0: left promiscuous mode
[  595.135072][   T42] hsr_slave_1: left promiscuous mode
[  595.163502][   T42] bridge_slave_1: left allmulticast mode
[  595.197253][   T42] bridge_slave_1: left promiscuous mode
[  595.203214][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.241543][   T42] bridge_slave_0: left promiscuous mode
[  595.249614][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.337223][   T42] hsr_slave_0: left promiscuous mode
[  595.356624][   T42] hsr_slave_1: left promiscuous mode
[  595.435775][   T42] bridge_slave_1: left allmulticast mode
[  595.446670][   T42] bridge_slave_1: left promiscuous mode
[  595.452504][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.485409][   T42] bridge_slave_0: left promiscuous mode
[  595.503781][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.519125][T13631] netlink: 'syz.4.2388': attribute type 3 has an invalid length.
[  595.533208][T13631] netlink: 'syz.4.2388': attribute type 1 has an invalid length.
[  595.541715][T13631] netlink: 193404 bytes leftover after parsing attributes in process `syz.4.2388'.
[  596.675428][   T42] veth1_vlan: left promiscuous mode
[  596.680934][   T42] veth0_vlan: left promiscuous mode
[  596.735188][   T42] veth1_macvtap: left promiscuous mode
[  596.743195][   T42] veth0_macvtap: left promiscuous mode
[  596.749209][   T42] veth1_vlan: left promiscuous mode
[  596.754576][   T42] veth0_vlan: left promiscuous mode
[  599.659519][   T42] ` (unregistering): Port device team_slave_1 removed
[  599.711246][   T42] ` (unregistering): Port device team_slave_0 removed
[  600.753471][   T42] ` (unregistering): Port device team_slave_1 removed
[  601.213426][ T5772] Bluetooth: hci0: command 0x0406 tx timeout
[  601.297424][T13629] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  601.319887][T13655] netlink: 'syz.4.2392': attribute type 33 has an invalid length.
[  601.327985][T13655] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2392'.
[  601.340011][T13655] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  602.178867][T13498] veth1_vlan: entered promiscuous mode
[  602.424316][T13498] veth0_macvtap: entered promiscuous mode
[  605.063926][T13498] veth1_macvtap: entered promiscuous mode
[  606.820089][T13699] netlink: 'syz.4.2403': attribute type 33 has an invalid length.
[  606.832393][T13699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2403'.
[  606.860646][T13699] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  606.892852][T13498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.904966][T13498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.916173][T13498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.927190][T13498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.940680][T13498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.022106][T13701] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  607.111936][T13498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.122668][T13498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.137218][T13498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.169240][T13498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.197604][T13498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.211829][T13498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.221074][T13498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.111683][ T9503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.156085][ T9503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.171576][T13707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2407'.
[  608.204637][T13707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2407'.
[  608.244126][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.244913][T13708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2407'.
[  608.295666][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.252793][T13738] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2422'.
[  612.660704][T13738] openvswitch: netlink: Duplicate key (type 0).
[  613.373887][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  613.384583][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  613.393151][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  613.435012][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  613.513094][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  613.525236][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  613.956482][ T5772] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  614.610391][T13764] netlink: 'syz.2.2421': attribute type 1 has an invalid length.
[  614.619900][T13764] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2421'.
[  615.695596][ T5772] Bluetooth: hci3: command tx timeout
[  616.375043][T13745] chnl_net:caif_netlink_parms(): no params data found
[  616.933275][T13745] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.955383][T13745] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.981629][T13745] bridge_slave_0: entered allmulticast mode
[  617.019160][T13745] bridge_slave_0: entered promiscuous mode
[  617.051400][T13745] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.073441][T13745] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.088721][T13745] bridge_slave_1: entered allmulticast mode
[  617.101285][T13745] bridge_slave_1: entered promiscuous mode
[  617.232667][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.272616][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.362285][T13745] team0: Port device team_slave_0 added
[  617.417353][T13745] team0: Port device team_slave_1 added
[  617.504582][T13786] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  617.531675][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.542361][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  617.569594][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.644088][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.675535][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  617.816609][ T5772] Bluetooth: hci3: command tx timeout
[  617.886188][ T5772] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  617.905665][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.866309][   T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  621.065599][ T5772] Bluetooth: hci3: command tx timeout
[  621.217625][T13745] hsr_slave_0: entered promiscuous mode
[  621.230023][T13745] hsr_slave_1: entered promiscuous mode
[  621.976734][T13745] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  622.053693][T13745] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  622.099875][T13745] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  622.133883][T13812] FAULT_INJECTION: forcing a failure.
[  622.133883][T13812] name failslab, interval 1, probability 0, space 0, times 0
[  622.160780][T13745] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  622.170362][T13812] CPU: 1 PID: 13812 Comm: syz.4.2436 Not tainted syzkaller #0
[  622.177909][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  622.188101][T13812] Call Trace:
[  622.191404][T13812]  <TASK>
[  622.194350][T13812]  dump_stack_lvl+0x18c/0x250
[  622.199069][T13812]  ? show_regs_print_info+0x20/0x20
[  622.204296][T13812]  ? load_image+0x400/0x400
[  622.208834][T13812]  ? __might_sleep+0xe0/0xe0
[  622.213443][T13812]  ? __lock_acquire+0x7d40/0x7d40
[  622.218497][T13812]  should_fail_ex+0x39d/0x4d0
[  622.223197][T13812]  should_failslab+0x9/0x20
[  622.227718][T13812]  slab_pre_alloc_hook+0x59/0x310
[  622.232788][T13812]  ? d_instantiate+0x6f/0x90
[  622.237426][T13812]  kmem_cache_alloc+0x5a/0x2d0
[  622.242278][T13812]  ? alloc_empty_file+0x9e/0x1d0
[  622.247271][T13812]  alloc_empty_file+0x9e/0x1d0
[  622.252060][T13812]  alloc_file+0x5c/0x600
[  622.256348][T13812]  alloc_file_pseudo+0x184/0x210
[  622.261328][T13812]  ? alloc_empty_backing_file+0xe0/0xe0
[  622.266909][T13812]  anon_inode_getfile+0xc5/0x1a0
[  622.271878][T13812]  __se_sys_perf_event_open+0xee7/0x1c50
[  622.277538][T13812]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  622.283195][T13812]  ? lock_chain_count+0x20/0x20
[  622.288065][T13812]  ? __x64_sys_perf_event_open+0x20/0xc0
[  622.293710][T13812]  do_syscall_64+0x55/0xa0
[  622.298181][T13812]  ? clear_bhb_loop+0x40/0x90
[  622.302896][T13812]  ? clear_bhb_loop+0x40/0x90
[  622.307608][T13812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.313540][T13812] RIP: 0033:0x7f1d2d19bf79
[  622.317969][T13812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.337614][T13812] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  622.346049][T13812] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  622.354032][T13812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  622.362015][T13812] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  622.369994][T13812] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  622.377974][T13812] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  622.385985][T13812]  </TASK>
[  622.610698][ T5772] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  622.728127][T13745] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.766029][T13745] 8021q: adding VLAN 0 to HW filter on device team0
[  622.817335][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.824614][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.874854][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.882144][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.136691][ T5772] Bluetooth: hci3: command tx timeout
[  623.180197][T13745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  623.373757][T13838] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  624.732711][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  624.740631][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.751457][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  624.971381][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.024666][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.316208][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.776192][T13871] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  625.901796][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.929865][T13908] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  627.288234][T13745] veth0_vlan: entered promiscuous mode
[  627.319591][   T11] wlan1: Trigger new scan to find an IBSS to join
[  627.341605][T13916] netlink: 'syz.2.2458': attribute type 8 has an invalid length.
[  627.693399][T13745] veth1_vlan: entered promiscuous mode
[  627.924820][T13745] veth0_macvtap: entered promiscuous mode
[  627.993093][T13745] veth1_macvtap: entered promiscuous mode
[  628.192920][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.211382][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.221977][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.233016][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.242964][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.253931][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.266493][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  628.296212][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.306917][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.319569][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.330546][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.342416][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  628.386450][T13745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  628.395227][T13745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  628.413701][T13745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  628.422885][T13745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  628.610578][T13938] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  628.859345][   T42] hsr_slave_0: left promiscuous mode
[  628.867228][   T42] hsr_slave_1: left promiscuous mode
[  628.873751][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.882046][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  628.903746][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  628.911475][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  628.926795][   T42] bridge_slave_1: left allmulticast mode
[  628.944664][   T42] bridge_slave_1: left promiscuous mode
[  628.967151][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.998947][   T42] bridge_slave_0: left allmulticast mode
[  629.004678][   T42] bridge_slave_0: left promiscuous mode
[  629.094396][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.444809][   T42] veth1_macvtap: left promiscuous mode
[  629.508757][   T42] veth0_macvtap: left promiscuous mode
[  629.514564][   T42] veth1_vlan: left promiscuous mode
[  629.565797][   T42] veth0_vlan: left promiscuous mode
[  629.924034][T13950] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2468'.
[  630.248781][ T9503] wlan1: Trigger new scan to find an IBSS to join
[  631.372844][   T42] team0 (unregistering): Port device team_slave_1 removed
[  631.429081][   T42] team0 (unregistering): Port device team_slave_0 removed
[  631.489745][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.544366][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  631.979955][   T42] bond0 (unregistering): Released all slaves
[  632.083070][T13947] netlink: 'syz.4.2468': attribute type 11 has an invalid length.
[  632.109764][T13961] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2469'.
[  632.124332][T13961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  632.362089][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.377534][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.504770][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.559662][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.353182][   T12] wlan1: Trigger new scan to find an IBSS to join
[  633.406911][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'.
[  633.570065][   T11] wlan1: Creating new IBSS network, BSSID da:32:b5:9b:05:bf
[  633.606096][T13987] netlink: 'syz.0.2473': attribute type 22 has an invalid length.
[  633.676211][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'.
[  633.739690][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2475'.
[  634.164218][T14001] netlink: 'syz.5.2477': attribute type 33 has an invalid length.
[  634.178010][T14001] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2477'.
[  634.228993][T14005] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  634.495824][T14009] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  635.791833][T14028] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  636.102511][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'.
[  636.311356][T14038] bridge_slave_1: left allmulticast mode
[  636.373354][T14038] bridge_slave_1: left promiscuous mode
[  636.423192][T14038] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.229289][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  637.246621][T14038] bridge_slave_0: left allmulticast mode
[  637.254697][T14038] bridge_slave_0: left promiscuous mode
[  637.357184][T14038] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.841550][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2487'.
[  639.855703][T14047] netlink: 'syz.5.2487': attribute type 22 has an invalid length.
[  639.863604][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'.
[  639.935996][T14072] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  639.962028][T14071] netlink: 'syz.0.2503': attribute type 33 has an invalid length.
[  640.008980][T14071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2503'.
[  640.023575][T14071] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  640.247372][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  640.319717][T14087] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  640.420261][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'.
[  642.286222][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  642.322369][T14109] netlink: 'syz.2.2504': attribute type 11 has an invalid length.
[  643.371494][T14130] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2509'.
[  644.189302][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'.
[  644.246295][ T9503] wlan1: Trigger new scan to find an IBSS to join
[  644.870619][T14145] netlink: 'syz.5.2514': attribute type 10 has an invalid length.
[  645.029378][T14145] team0: Cannot enslave team device to itself
[  645.141418][T14154] netlink: 'syz.2.2517': attribute type 33 has an invalid length.
[  645.170683][T14154] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2517'.
[  645.232692][T14161] netlink: 'syz.4.2519': attribute type 33 has an invalid length.
[  645.260054][T14161] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2519'.
[  645.307298][T14161] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  646.247260][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  647.027079][T14201] netlink: 'syz.0.2529': attribute type 33 has an invalid length.
[  647.046586][T14201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2529'.
[  647.097089][T14201] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  647.210747][T14207] netlink: 'syz.2.2532': attribute type 33 has an invalid length.
[  647.221239][T14207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2532'.
[  648.258311][ T2925] wlan1: Creating new IBSS network, BSSID 7e:8c:db:be:43:32
[  648.275549][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  648.395159][ T2925] wlan1: Creating new IBSS network, BSSID 76:77:71:52:f1:b5
[  651.533134][T14253] netlink: 'syz.5.2544': attribute type 33 has an invalid length.
[  651.575983][T14253] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2544'.
[  651.778463][T14256] netlink: 'syz.0.2545': attribute type 33 has an invalid length.
[  651.805661][T14256] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2545'.
[  651.834353][T14256] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  652.010651][T14267] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  652.663100][T14288] netlink: 'syz.5.2555': attribute type 12 has an invalid length.
[  652.689009][T14288] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2555'.
[  653.449333][T14297] netlink: 'syz.5.2556': attribute type 33 has an invalid length.
[  653.487351][T14297] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2556'.
[  655.418133][T14338] netlink: 'syz.5.2567': attribute type 33 has an invalid length.
[  655.439980][T14338] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2567'.
[  656.707987][T14357] netlink: 'syz.5.2574': attribute type 3 has an invalid length.
[  656.718612][T14357] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2574'.
[  657.413063][T14374] FAULT_INJECTION: forcing a failure.
[  657.413063][T14374] name failslab, interval 1, probability 0, space 0, times 0
[  657.430870][T14374] CPU: 1 PID: 14374 Comm: syz.2.2581 Not tainted syzkaller #0
[  657.438436][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  657.448642][T14374] Call Trace:
[  657.451976][T14374]  <TASK>
[  657.454963][T14374]  dump_stack_lvl+0x18c/0x250
[  657.459724][T14374]  ? show_regs_print_info+0x20/0x20
[  657.464997][T14374]  ? load_image+0x400/0x400
[  657.469570][T14374]  ? __lock_acquire+0x7d40/0x7d40
[  657.474749][T14374]  ? perf_tp_event+0x132d/0x1450
[  657.479928][T14374]  should_fail_ex+0x39d/0x4d0
[  657.484684][T14374]  should_failslab+0x9/0x20
[  657.489337][T14374]  slab_pre_alloc_hook+0x59/0x310
[  657.494439][T14374]  kmem_cache_alloc+0x5a/0x2d0
[  657.499254][T14374]  ? alloc_empty_file+0x9e/0x1d0
[  657.504237][T14374]  alloc_empty_file+0x9e/0x1d0
[  657.509105][T14374]  path_openat+0x113/0x3230
[  657.513676][T14374]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  657.519510][T14374]  ? do_filp_open+0x430/0x430
[  657.524212][T14374]  ? perf_trace_lock+0x304/0x3b0
[  657.529192][T14374]  ? trace_event_raw_event_lock+0x250/0x250
[  657.535128][T14374]  do_filp_open+0x1f5/0x430
[  657.539736][T14374]  ? alloc_fd+0x58f/0x630
[  657.544102][T14374]  ? vfs_tmpfile+0x490/0x490
[  657.548750][T14374]  ? _raw_spin_unlock+0x28/0x40
[  657.553623][T14374]  ? alloc_fd+0x58f/0x630
[  657.558082][T14374]  do_sys_openat2+0x134/0x1d0
[  657.562796][T14374]  ? do_sys_open+0xe0/0xe0
[  657.567253][T14374]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  657.573266][T14374]  ? lock_chain_count+0x20/0x20
[  657.578151][T14374]  __x64_sys_openat+0x139/0x160
[  657.583033][T14374]  do_syscall_64+0x55/0xa0
[  657.587477][T14374]  ? clear_bhb_loop+0x40/0x90
[  657.592169][T14374]  ? clear_bhb_loop+0x40/0x90
[  657.596868][T14374]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.602804][T14374] RIP: 0033:0x7f64d219bf79
[  657.607512][T14374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.627229][T14374] RSP: 002b:00007f64d30af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  657.635756][T14374] RAX: ffffffffffffffda RBX: 00007f64d2415fa0 RCX: 00007f64d219bf79
[  657.643831][T14374] RDX: 000075324cc7ada9 RSI: 0000200000000040 RDI: ffffffffffffffff
[  657.651829][T14374] RBP: 00007f64d30af090 R08: 0000000000000000 R09: 0000000000000000
[  657.659824][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.667811][T14374] R13: 00007f64d2416038 R14: 00007f64d2415fa0 R15: 00007ffc2b224d68
[  657.675828][T14374]  </TASK>
[  658.128778][   T11] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  658.174152][   T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  658.242476][T14384] delete_channel: no stack
[  659.571350][T14419] FAULT_INJECTION: forcing a failure.
[  659.571350][T14419] name failslab, interval 1, probability 0, space 0, times 0
[  659.637932][T14419] CPU: 0 PID: 14419 Comm: syz.2.2595 Not tainted syzkaller #0
[  659.645500][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  659.655629][T14419] Call Trace:
[  659.659036][T14419]  <TASK>
[  659.662018][T14419]  dump_stack_lvl+0x18c/0x250
[  659.666758][T14419]  ? show_regs_print_info+0x20/0x20
[  659.672010][T14419]  ? load_image+0x400/0x400
[  659.676567][T14419]  ? __might_sleep+0xe0/0xe0
[  659.681221][T14419]  ? __lock_acquire+0x7d40/0x7d40
[  659.686301][T14419]  should_fail_ex+0x39d/0x4d0
[  659.691049][T14419]  should_failslab+0x9/0x20
[  659.695603][T14419]  slab_pre_alloc_hook+0x59/0x310
[  659.700685][T14419]  ? trace_probe_init+0x302/0x410
[  659.705756][T14419]  ? trace_probe_init+0x302/0x410
[  659.710824][T14419]  __kmem_cache_alloc_node+0x53/0x250
[  659.716259][T14419]  ? trace_probe_init+0x302/0x410
[  659.721331][T14419]  __kmalloc_node_track_caller+0xa2/0x230
[  659.727115][T14419]  kstrdup+0x3b/0x80
[  659.731060][T14419]  trace_probe_init+0x302/0x410
[  659.735941][T14419]  create_local_trace_uprobe+0x186/0x6e0
[  659.741785][T14419]  ? bpf_get_uprobe_info+0x520/0x520
[  659.747096][T14419]  ? __might_fault+0xaa/0x120
[  659.751801][T14419]  ? _copy_from_user+0xa5/0xe0
[  659.756590][T14419]  perf_uprobe_init+0xf3/0x190
[  659.761458][T14419]  perf_uprobe_event_init+0xe6/0x180
[  659.766762][T14419]  perf_try_init_event+0x12b/0x3c0
[  659.771893][T14419]  perf_event_alloc+0xfa4/0x21b0
[  659.776865][T14419]  ? perf_event_alloc+0xc06/0x21b0
[  659.782039][T14419]  ? find_lively_task_by_vpid+0x19/0x290
[  659.787797][T14419]  __se_sys_perf_event_open+0x740/0x1c50
[  659.793466][T14419]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  659.799245][T14419]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  659.804932][T14419]  ? lock_chain_count+0x20/0x20
[  659.809821][T14419]  ? __x64_sys_perf_event_open+0x20/0xc0
[  659.815494][T14419]  do_syscall_64+0x55/0xa0
[  659.820114][T14419]  ? clear_bhb_loop+0x40/0x90
[  659.824806][T14419]  ? clear_bhb_loop+0x40/0x90
[  659.829497][T14419]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  659.835413][T14419] RIP: 0033:0x7f64d219bf79
[  659.839955][T14419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.859573][T14419] RSP: 002b:00007f64d308e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  659.868087][T14419] RAX: ffffffffffffffda RBX: 00007f64d2416090 RCX: 00007f64d219bf79
[  659.876085][T14419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  659.884094][T14419] RBP: 00007f64d308e090 R08: 0000000000000000 R09: 0000000000000000
[  659.892078][T14419] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  659.900061][T14419] R13: 00007f64d2416128 R14: 00007f64d2416090 R15: 00007ffc2b224d68
[  659.908075][T14419]  </TASK>
[  659.965961][T14419] trace_uprobe: Failed to allocate trace_uprobe.(-12)
[  661.408883][T14455] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2606'.
[  661.630084][ T9503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.804620][ T9503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.955253][ T9503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.015072][T14479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  662.206964][ T9503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.695171][T13117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  662.706324][T13117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  662.717602][T13117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  662.730320][T13117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  662.739859][T13117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  662.752000][T13117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  663.738994][T14532] FAULT_INJECTION: forcing a failure.
[  663.738994][T14532] name failslab, interval 1, probability 0, space 0, times 0
[  663.754524][T14532] CPU: 0 PID: 14532 Comm: syz.5.2628 Not tainted syzkaller #0
[  663.762050][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  663.772166][T14532] Call Trace:
[  663.775485][T14532]  <TASK>
[  663.778463][T14532]  dump_stack_lvl+0x18c/0x250
[  663.783298][T14532]  ? show_regs_print_info+0x20/0x20
[  663.788557][T14532]  ? load_image+0x400/0x400
[  663.793119][T14532]  ? __might_sleep+0xe0/0xe0
[  663.797768][T14532]  ? __lock_acquire+0x7d40/0x7d40
[  663.802830][T14532]  ? trace_contention_end+0x39/0xe0
[  663.808052][T14532]  should_fail_ex+0x39d/0x4d0
[  663.812738][T14532]  should_failslab+0x9/0x20
[  663.817267][T14532]  slab_pre_alloc_hook+0x59/0x310
[  663.822405][T14532]  kmem_cache_alloc+0x5a/0x2d0
[  663.827184][T14532]  ? skb_clone+0x1eb/0x370
[  663.831639][T14532]  skb_clone+0x1eb/0x370
[  663.835910][T14532]  pfkey_sendmsg+0x4b1/0x10e0
[  663.840600][T14532]  ? __might_sleep+0xe0/0xe0
[  663.845208][T14532]  ? mark_lock+0x94/0x320
[  663.849553][T14532]  ? __lock_acquire+0x1273/0x7d40
[  663.854595][T14532]  ? pfkey_release+0x320/0x320
[  663.859392][T14532]  ? aa_sock_msg_perm+0x94/0x150
[  663.864350][T14532]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  663.869656][T14532]  ? security_socket_sendmsg+0x80/0xa0
[  663.875216][T14532]  ? pfkey_release+0x320/0x320
[  663.880047][T14532]  ____sys_sendmsg+0x5ba/0x960
[  663.884834][T14532]  ? __asan_memset+0x22/0x40
[  663.889438][T14532]  ? __sys_sendmsg_sock+0x30/0x30
[  663.894472][T14532]  ? __import_iovec+0x5f2/0x850
[  663.899441][T14532]  ? import_iovec+0x73/0xa0
[  663.903963][T14532]  ___sys_sendmsg+0x2a6/0x360
[  663.908653][T14532]  ? get_pid_task+0x20/0x1e0
[  663.913260][T14532]  ? __sys_sendmsg+0x2a0/0x2a0
[  663.918085][T14532]  ? __lock_acquire+0x7d40/0x7d40
[  663.923147][T14532]  __se_sys_sendmsg+0x1c2/0x2b0
[  663.928055][T14532]  ? __x64_sys_sendmsg+0x80/0x80
[  663.933057][T14532]  ? trace_sys_enter+0x1f/0x80
[  663.937849][T14532]  do_syscall_64+0x55/0xa0
[  663.942279][T14532]  ? clear_bhb_loop+0x40/0x90
[  663.946965][T14532]  ? clear_bhb_loop+0x40/0x90
[  663.951678][T14532]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  663.957580][T14532] RIP: 0033:0x7fec6c99bf79
[  663.962003][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.981709][T14532] RSP: 002b:00007fec6d8ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.990145][T14532] RAX: ffffffffffffffda RBX: 00007fec6cc16090 RCX: 00007fec6c99bf79
[  663.998131][T14532] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000008
[  664.006113][T14532] RBP: 00007fec6d8ec090 R08: 0000000000000000 R09: 0000000000000000
[  664.014089][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.022074][T14532] R13: 00007fec6cc16128 R14: 00007fec6cc16090 R15: 00007ffe9ef8a7f8
[  664.030075][T14532]  </TASK>
[  664.233174][T14496] chnl_net:caif_netlink_parms(): no params data found
[  664.263670][T14537] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2631'.
[  664.312489][T14540] FAULT_INJECTION: forcing a failure.
[  664.312489][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  664.330750][T14540] CPU: 0 PID: 14540 Comm: syz.4.2632 Not tainted syzkaller #0
[  664.338318][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  664.348420][T14540] Call Trace:
[  664.351718][T14540]  <TASK>
[  664.354658][T14540]  dump_stack_lvl+0x18c/0x250
[  664.359365][T14540]  ? show_regs_print_info+0x20/0x20
[  664.364607][T14540]  ? load_image+0x400/0x400
[  664.369312][T14540]  ? __might_fault+0xaa/0x120
[  664.374057][T14540]  ? __lock_acquire+0x7d40/0x7d40
[  664.379161][T14540]  should_fail_ex+0x39d/0x4d0
[  664.383912][T14540]  _copy_from_user+0x2f/0xe0
[  664.388570][T14540]  ___sys_sendmsg+0x1c7/0x360
[  664.393270][T14540]  ? get_pid_task+0x20/0x1e0
[  664.397905][T14540]  ? __sys_sendmsg+0x2a0/0x2a0
[  664.402763][T14540]  ? __lock_acquire+0x7d40/0x7d40
[  664.407903][T14540]  __se_sys_sendmsg+0x1c2/0x2b0
[  664.412807][T14540]  ? __x64_sys_sendmsg+0x80/0x80
[  664.417836][T14540]  ? trace_sys_enter+0x1f/0x80
[  664.422643][T14540]  do_syscall_64+0x55/0xa0
[  664.427116][T14540]  ? clear_bhb_loop+0x40/0x90
[  664.431875][T14540]  ? clear_bhb_loop+0x40/0x90
[  664.436611][T14540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.442545][T14540] RIP: 0033:0x7f1d2d19bf79
[  664.446996][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.466635][T14540] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  664.475123][T14540] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  664.483144][T14540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  664.491163][T14540] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  664.499168][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.507173][T14540] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  664.515226][T14540]  </TASK>
[  664.807286][T13117] Bluetooth: hci0: command tx timeout
[  664.874054][T14496] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.890164][T14496] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.905767][T14496] bridge_slave_0: entered allmulticast mode
[  664.921349][T14496] bridge_slave_0: entered promiscuous mode
[  664.950259][T14496] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.977002][T14496] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.991639][T14496] bridge_slave_1: entered allmulticast mode
[  665.016611][T14496] bridge_slave_1: entered promiscuous mode
[  665.145246][T14558] netlink: 'syz.2.2635': attribute type 33 has an invalid length.
[  665.154371][T14558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2635'.
[  665.242121][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.300741][ T9503] hsr_slave_0: left promiscuous mode
[  665.314758][ T9503] hsr_slave_1: left promiscuous mode
[  665.332568][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.345650][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.377336][ T9503] bridge_slave_1: left allmulticast mode
[  665.383081][ T9503] bridge_slave_1: left promiscuous mode
[  665.410887][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.437956][ T9503] bridge_slave_0: left allmulticast mode
[  665.448462][ T9503] bridge_slave_0: left promiscuous mode
[  665.454390][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.495075][ T9503] veth1_macvtap: left promiscuous mode
[  665.500910][ T9503] veth0_macvtap: left promiscuous mode
[  665.507426][ T9503] veth1_vlan: left promiscuous mode
[  665.512957][ T9503] veth0_vlan: left promiscuous mode
[  666.054246][ T9503] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  666.624085][ T9503] team0 (unregistering): Port device team_slave_1 removed
[  666.683926][ T9503] team0 (unregistering): Port device team_slave_0 removed
[  666.730841][ T9503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.793180][ T9503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.889418][T13117] Bluetooth: hci0: command tx timeout
[  667.134790][ T9503] bond0 (unregistering): (slave team0): Releasing backup interface
[  667.150868][ T9503] team0 (unregistering): Port device bridge0 removed
[  667.186399][ T9503] bond0 (unregistering): Released all slaves
[  667.269741][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.280136][T14571] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  667.310614][T14576] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.2639'.
[  667.411371][T14496] team0: Port device team_slave_0 added
[  667.468121][T14496] team0: Port device team_slave_1 added
[  667.626014][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.662027][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.758734][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.824421][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.865926][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.945811][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.215298][T14496] hsr_slave_0: entered promiscuous mode
[  668.313548][T14496] hsr_slave_1: entered promiscuous mode
[  668.444135][T14496] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  668.499923][T14496] Cannot create hsr debugfs directory
[  668.624295][T13117] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  668.630461][T14611] netlink: 'syz.5.2646': attribute type 33 has an invalid length.
[  668.665898][T14611] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2646'.
[  668.988119][T13117] Bluetooth: hci0: command tx timeout
[  670.224240][T14643] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  670.233871][ T2925] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  670.276710][ T2925] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  670.819988][T14496] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  670.857759][T14496] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  670.897260][T14496] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  670.949013][T14496] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  671.053420][T13117] Bluetooth: hci0: command tx timeout
[  671.205987][   T42] wlan1: Trigger new scan to find an IBSS to join
[  671.298990][T14673] netlink: 'syz.4.2657': attribute type 33 has an invalid length.
[  671.323900][T14673] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2657'.
[  671.357925][T14673] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  671.583313][T14496] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.613616][T14496] 8021q: adding VLAN 0 to HW filter on device team0
[  671.634714][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.641976][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.684221][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.691489][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.710012][T13117] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  673.049910][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  673.521228][T14709] syzkaller0: entered promiscuous mode
[  673.539828][T14709] syzkaller0: entered allmulticast mode
[  673.750462][T14496] veth0_vlan: entered promiscuous mode
[  673.803565][T14496] veth1_vlan: entered promiscuous mode
[  673.858565][T14496] veth0_macvtap: entered promiscuous mode
[  673.881565][T14496] veth1_macvtap: entered promiscuous mode
[  673.918476][T14720] tap0: tun_chr_ioctl cmd 1074025675
[  673.924132][T14720] tap0: persist enabled
[  674.105215][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  674.136565][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.169177][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  674.200421][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.241686][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  674.284785][T14720] tap1: tun_chr_ioctl cmd 1074025677
[  674.310863][T14720] tap1: linktype set to 778
[  674.478368][T14726] tap0: tun_chr_ioctl cmd 1074025675
[  674.491850][T14726] tap0: persist enabled
[  674.781292][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.822419][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.854080][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  674.913479][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  674.938857][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.976906][T14727] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  675.205992][   T77] wlan1: Trigger new scan to find an IBSS to join
[  675.253740][   T77] wlan1: Creating new IBSS network, BSSID ee:ef:00:97:b2:94
[  677.306898][T14745] netlink: 'syz.2.2667': attribute type 33 has an invalid length.
[  677.314931][T14745] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2667'.
[  677.331946][T14752] tap1: tun_chr_ioctl cmd 1074025675
[  677.342552][T14752] tap1: persist enabled
[  677.375982][T14755] tap2: tun_chr_ioctl cmd 1074025677
[  677.381786][T14755] tap2: linktype set to 778
[  677.431767][T14756] tap1: tun_chr_ioctl cmd 1074025675
[  677.441533][T14756] tap1: persist enabled
[  677.455422][T14496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.472004][T14496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.481288][T14496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.490828][T14496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.492366][T13117] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  677.803534][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.829059][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.912215][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.934188][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.734504][T14789] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  679.318924][T14800] netlink: 'syz.5.2677': attribute type 33 has an invalid length.
[  679.338940][T14800] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2677'.
[  679.562934][T13117] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  679.739015][T14811] netlink: 'syz.5.2688': attribute type 33 has an invalid length.
[  679.813149][T14811] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2688'.
[  679.976949][T14808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.030238][T14808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.243421][T14808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.368676][T14808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  680.399588][T14828] FAULT_INJECTION: forcing a failure.
[  680.399588][T14828] name failslab, interval 1, probability 0, space 0, times 0
[  680.454722][T14828] CPU: 0 PID: 14828 Comm: syz.5.2682 Not tainted syzkaller #0
[  680.462533][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  680.472645][T14828] Call Trace:
[  680.475983][T14828]  <TASK>
[  680.478957][T14828]  dump_stack_lvl+0x18c/0x250
[  680.483711][T14828]  ? show_regs_print_info+0x20/0x20
[  680.488958][T14828]  ? load_image+0x400/0x400
[  680.493508][T14828]  ? __might_sleep+0xe0/0xe0
[  680.498150][T14828]  ? __lock_acquire+0x7d40/0x7d40
[  680.503229][T14828]  should_fail_ex+0x39d/0x4d0
[  680.507966][T14828]  should_failslab+0x9/0x20
[  680.512687][T14828]  slab_pre_alloc_hook+0x59/0x310
[  680.517753][T14828]  ? __lock_acquire+0x7d40/0x7d40
[  680.522832][T14828]  kmem_cache_alloc_node+0x60/0x320
[  680.528072][T14828]  ? __alloc_skb+0x103/0x2c0
[  680.532711][T14828]  __alloc_skb+0x103/0x2c0
[  680.537177][T14828]  netlink_sendmsg+0x66a/0xbf0
[  680.541999][T14828]  ? netlink_getsockopt+0x590/0x590
[  680.547254][T14828]  ? aa_sock_msg_perm+0x94/0x150
[  680.552225][T14828]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  680.557543][T14828]  ? security_socket_sendmsg+0x80/0xa0
[  680.563034][T14828]  ? netlink_getsockopt+0x590/0x590
[  680.568284][T14828]  ____sys_sendmsg+0x5ba/0x960
[  680.573095][T14828]  ? __asan_memset+0x22/0x40
[  680.577737][T14828]  ? __sys_sendmsg_sock+0x30/0x30
[  680.582979][T14828]  ? __import_iovec+0x5f2/0x850
[  680.587887][T14828]  ? import_iovec+0x73/0xa0
[  680.592458][T14828]  ___sys_sendmsg+0x2a6/0x360
[  680.597276][T14828]  ? __sys_sendmsg+0x2a0/0x2a0
[  680.602115][T14828]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  680.608438][T14828]  __se_sys_sendmsg+0x1c2/0x2b0
[  680.613331][T14828]  ? __x64_sys_sendmsg+0x80/0x80
[  680.618345][T14828]  ? trace_sys_enter+0x1f/0x80
[  680.623163][T14828]  do_syscall_64+0x55/0xa0
[  680.627713][T14828]  ? clear_bhb_loop+0x40/0x90
[  680.632427][T14828]  ? clear_bhb_loop+0x40/0x90
[  680.637152][T14828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  680.643089][T14828] RIP: 0033:0x7fec6c99bf79
[  680.647668][T14828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.667319][T14828] RSP: 002b:00007fec6d8ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  680.675789][T14828] RAX: ffffffffffffffda RBX: 00007fec6cc16090 RCX: 00007fec6c99bf79
[  680.683804][T14828] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[  680.691826][T14828] RBP: 00007fec6d8ec090 R08: 0000000000000000 R09: 0000000000000000
[  680.699846][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  680.707871][T14828] R13: 00007fec6cc16128 R14: 00007fec6cc16090 R15: 00007ffe9ef8a7f8
[  680.715950][T14828]  </TASK>
[  681.121926][T14829] tap0: tun_chr_ioctl cmd 1074025675
[  681.132109][T14829] tap0: persist enabled
[  684.313336][T14835] tap1: tun_chr_ioctl cmd 1074025677
[  684.320479][T14835] tap1: linktype set to 778
[  684.330906][T14836] tap0: tun_chr_ioctl cmd 1074025675
[  684.337211][T14836] tap0: persist enabled
[  684.370837][T14821] syzkaller0: entered promiscuous mode
[  684.379991][T14821] syzkaller0: entered allmulticast mode
[  684.642566][T13117] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  686.175388][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.183304][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  687.539512][T14868] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  687.553106][T14874] netlink: 'syz.5.2691': attribute type 33 has an invalid length.
[  687.561318][T14874] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2691'.
[  690.265523][ T3488] wlan1: Trigger new scan to find an IBSS to join
[  690.680541][T13117] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  690.906527][T14938] tap1: tun_chr_ioctl cmd 1074025677
[  690.912111][T14938] tap1: linktype set to 778
[  690.991480][T14952] netlink: 'syz.5.2701': attribute type 33 has an invalid length.
[  691.022529][T14952] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2701'.
[  691.381348][T14955] netlink: 'syz.4.2700': attribute type 14 has an invalid length.
[  691.393043][T14955] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2700'.
[  691.966652][T14970] sctp: [Deprecated]: syz.2.2704 (pid 14970) Use of struct sctp_assoc_value in delayed_ack socket option.
[  691.966652][T14970] Use struct sctp_sack_info instead
[  693.230900][   T12] wlan1: Trigger new scan to find an IBSS to join
[  693.388234][T13117] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  693.436577][T14986] netlink: 'syz.5.2707': attribute type 10 has an invalid length.
[  693.607769][T14991] netlink: 'syz.0.2710': attribute type 33 has an invalid length.
[  693.655799][T14991] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2710'.
[  694.910486][T15011] netlink: 'syz.0.2714': attribute type 14 has an invalid length.
[  694.962588][T15011] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2714'.
[  695.295973][   T12] wlan1: Creating new IBSS network, BSSID 4e:df:9d:24:c9:28
[  695.496528][T15018] tap1: tun_chr_ioctl cmd 1074025677
[  695.508307][T15018] tap1: linktype set to 778
[  696.938686][T15033] netlink: 'syz.4.2722': attribute type 33 has an invalid length.
[  697.002553][T15033] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2722'.
[  697.047879][T15033] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  697.859312][T15044] netlink: 'syz.4.2724': attribute type 10 has an invalid length.
[  697.949182][T15044] macsec0: left allmulticast mode
[  697.954311][T15044] veth1_macvtap: left allmulticast mode
[  697.987361][T15044] macsec0: left promiscuous mode
[  697.992805][T15044] bridge0: port 3(macsec0) entered disabled state
[  698.055327][T15044] bridge_slave_1: left allmulticast mode
[  698.084288][T15044] bridge_slave_1: left promiscuous mode
[  698.099516][T15044] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.849066][T15044] bridge_slave_0: left allmulticast mode
[  698.854795][T15044] bridge_slave_0: left promiscuous mode
[  698.886573][T15044] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.057558][T15044] bridge0 (unregistering): left promiscuous mode
[  699.064062][T15044] bridge0 (unregistering): left allmulticast mode
[  699.177094][T15044] `: Port device bridge0 removed
[  699.278104][T15062] netlink: 'syz.2.2727': attribute type 14 has an invalid length.
[  699.326859][T15062] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2727'.
[  699.423995][T15067] netlink: 'syz.4.2730': attribute type 33 has an invalid length.
[  699.444605][T15067] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2730'.
[  700.441563][T15075] netlink: 'syz.5.2732': attribute type 33 has an invalid length.
[  700.497223][T15075] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2732'.
[  701.127649][T13117] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  702.803529][T15101] FAULT_INJECTION: forcing a failure.
[  702.803529][T15101] name failslab, interval 1, probability 0, space 0, times 0
[  702.866432][T15101] CPU: 1 PID: 15101 Comm: syz.5.2741 Not tainted syzkaller #0
[  702.874018][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  702.884255][T15101] Call Trace:
[  702.887599][T15101]  <TASK>
[  702.890595][T15101]  dump_stack_lvl+0x18c/0x250
[  702.895374][T15101]  ? show_regs_print_info+0x20/0x20
[  702.900650][T15101]  ? load_image+0x400/0x400
[  702.905247][T15101]  ? __might_sleep+0xe0/0xe0
[  702.909921][T15101]  ? __lock_acquire+0x7d40/0x7d40
[  702.915485][T15101]  should_fail_ex+0x39d/0x4d0
[  702.920261][T15101]  should_failslab+0x9/0x20
[  702.924849][T15101]  slab_pre_alloc_hook+0x59/0x310
[  702.929998][T15101]  kmem_cache_alloc_lru+0x4d/0x2d0
[  702.935270][T15101]  ? __d_alloc+0x31/0x730
[  702.939703][T15101]  __d_alloc+0x31/0x730
[  702.944016][T15101]  ? __ns_get_path+0x321/0x640
[  702.948908][T15101]  __ns_get_path+0x3ea/0x640
[  702.953593][T15101]  ? __put_net+0x60/0x60
[  702.957916][T15101]  open_related_ns+0xce/0x210
[  702.962679][T15101]  ? apparmor_capable+0x137/0x1a0
[  702.967956][T15101]  ? ns_get_path+0x90/0x90
[  702.972490][T15101]  __tun_chr_ioctl+0xcea/0x2000
[  702.977450][T15101]  ? tun_flow_create+0x310/0x310
[  702.982530][T15101]  ? bpf_lsm_file_ioctl+0x9/0x10
[  702.987620][T15101]  ? security_file_ioctl+0x80/0xa0
[  702.992808][T15101]  ? tun_chr_poll+0x630/0x630
[  702.997575][T15101]  __se_sys_ioctl+0xfd/0x170
[  703.002256][T15101]  do_syscall_64+0x55/0xa0
[  703.006746][T15101]  ? clear_bhb_loop+0x40/0x90
[  703.011493][T15101]  ? clear_bhb_loop+0x40/0x90
[  703.016514][T15101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.022481][T15101] RIP: 0033:0x7fec6c99bf79
[  703.027054][T15101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.047019][T15101] RSP: 002b:00007fec6d90d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.055593][T15101] RAX: ffffffffffffffda RBX: 00007fec6cc15fa0 RCX: 00007fec6c99bf79
[  703.063635][T15101] RDX: 0000000000000000 RSI: 00000000000054e3 RDI: 0000000000000005
[  703.071660][T15101] RBP: 00007fec6d90d090 R08: 0000000000000000 R09: 0000000000000000
[  703.079679][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.087680][T15101] R13: 00007fec6cc16038 R14: 00007fec6cc15fa0 R15: 00007ffe9ef8a7f8
[  703.095755][T15101]  </TASK>
[  703.202180][T15105] netlink: 'syz.0.2742': attribute type 33 has an invalid length.
[  703.273237][T15105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2742'.
[  703.580398][T15113] netlink: 'syz.5.2745': attribute type 6 has an invalid length.
[  703.609243][T13117] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  703.610117][T15113] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2745'.
[  704.290011][T15121] netlink: 'syz.4.2749': attribute type 10 has an invalid length.
[  704.511777][T15127] netlink: 'syz.5.2747': attribute type 14 has an invalid length.
[  704.632140][T15127] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2747'.
[  707.865076][T15154] netlink: 'syz.4.2757': attribute type 13 has an invalid length.
[  707.883215][T15154] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.2757'.
[  707.984205][ T5772] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  708.169980][T15160] netlink: 'syz.4.2760': attribute type 46 has an invalid length.
[  708.179488][T15160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2760'.
[  708.198586][T15160] FAULT_INJECTION: forcing a failure.
[  708.198586][T15160] name failslab, interval 1, probability 0, space 0, times 0
[  708.223475][T15160] CPU: 1 PID: 15160 Comm: syz.4.2760 Not tainted syzkaller #0
[  708.231022][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  708.241136][T15160] Call Trace:
[  708.244456][T15160]  <TASK>
[  708.247429][T15160]  dump_stack_lvl+0x18c/0x250
[  708.252269][T15160]  ? show_regs_print_info+0x20/0x20
[  708.257529][T15160]  ? load_image+0x400/0x400
[  708.262079][T15160]  ? __might_sleep+0xe0/0xe0
[  708.266802][T15160]  ? __lock_acquire+0x7d40/0x7d40
[  708.271963][T15160]  ? __lock_acquire+0x1273/0x7d40
[  708.277067][T15160]  should_fail_ex+0x39d/0x4d0
[  708.281803][T15160]  should_failslab+0x9/0x20
[  708.286365][T15160]  slab_pre_alloc_hook+0x59/0x310
[  708.291441][T15160]  ? mark_lock+0x94/0x320
[  708.295814][T15160]  kmem_cache_alloc_node+0x60/0x320
[  708.301067][T15160]  ? __lock_acquire+0x1273/0x7d40
[  708.306130][T15160]  ? __alloc_skb+0x103/0x2c0
[  708.310773][T15160]  __alloc_skb+0x103/0x2c0
[  708.315232][T15160]  netlink_ack+0x376/0x1180
[  708.319786][T15160]  ? verify_lock_unused+0x140/0x140
[  708.325030][T15160]  ? netlink_dump+0xe50/0xe50
[  708.329764][T15160]  netlink_rcv_skb+0x2c5/0x4d0
[  708.334548][T15160]  ? rtnetlink_bind+0x80/0x80
[  708.339326][T15160]  ? netlink_ack+0x1180/0x1180
[  708.344228][T15160]  ? __lock_acquire+0x7d40/0x7d40
[  708.349382][T15160]  ? net_generic+0x1e/0x240
[  708.353915][T15160]  ? netlink_deliver_tap+0x2e/0x1b0
[  708.359132][T15160]  netlink_unicast+0x751/0x8d0
[  708.363944][T15160]  netlink_sendmsg+0x8d0/0xbf0
[  708.368728][T15160]  ? netlink_getsockopt+0x590/0x590
[  708.373949][T15160]  ? aa_sock_msg_perm+0x94/0x150
[  708.378925][T15160]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  708.384249][T15160]  ? security_socket_sendmsg+0x80/0xa0
[  708.389750][T15160]  ? netlink_getsockopt+0x590/0x590
[  708.394969][T15160]  ____sys_sendmsg+0x5ba/0x960
[  708.399763][T15160]  ? __asan_memset+0x22/0x40
[  708.404367][T15160]  ? __sys_sendmsg_sock+0x30/0x30
[  708.409400][T15160]  ? __import_iovec+0x5f2/0x850
[  708.414362][T15160]  ? import_iovec+0x73/0xa0
[  708.418885][T15160]  ___sys_sendmsg+0x2a6/0x360
[  708.423570][T15160]  ? get_pid_task+0x20/0x1e0
[  708.428263][T15160]  ? __sys_sendmsg+0x2a0/0x2a0
[  708.433053][T15160]  ? __lock_acquire+0x7d40/0x7d40
[  708.438114][T15160]  __se_sys_sendmsg+0x1c2/0x2b0
[  708.443123][T15160]  ? __x64_sys_sendmsg+0x80/0x80
[  708.448107][T15160]  ? trace_sys_enter+0x1f/0x80
[  708.452921][T15160]  do_syscall_64+0x55/0xa0
[  708.457356][T15160]  ? clear_bhb_loop+0x40/0x90
[  708.462038][T15160]  ? clear_bhb_loop+0x40/0x90
[  708.466728][T15160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  708.472632][T15160] RIP: 0033:0x7f1d2d19bf79
[  708.477061][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.496766][T15160] RSP: 002b:00007f1d2e0c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  708.505219][T15160] RAX: ffffffffffffffda RBX: 00007f1d2d415fa0 RCX: 00007f1d2d19bf79
[  708.513249][T15160] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  708.521236][T15160] RBP: 00007f1d2e0c0090 R08: 0000000000000000 R09: 0000000000000000
[  708.529217][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.537197][T15160] R13: 00007f1d2d416038 R14: 00007f1d2d415fa0 R15: 00007ffd982a4038
[  708.545195][T15160]  </TASK>
[  708.820040][ T5772] Bluetooth: hci2: command 0x0406 tx timeout
[  708.873589][T15168] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2762'.
[  709.455822][T13117] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255
[  714.667289][T15228] netlink: 'syz.5.2783': attribute type 33 has an invalid length.
[  714.677535][T15228] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2783'.
[  714.711690][T15228] `: renamed from team0
[  715.222298][T15241] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  716.408494][T15268] Ÿë
: port 1(gretap0) entered blocking state
[  716.425797][T15268] Ÿë
: port 1(gretap0) entered disabled state
[  716.433156][T15268] gretap0: entered allmulticast mode
[  716.444294][T15268] gretap0: entered promiscuous mode
[  716.677128][T15283] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  718.277645][T15322] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  719.287502][   T12] wlan1: Trigger new scan to find an IBSS to join
[  721.407676][ T2925] wlan1: Trigger new scan to find an IBSS to join
[  721.414384][ T2925] wlan1: Trigger new scan to find an IBSS to join
[  721.504760][T15360] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2834'.
[  721.538598][T15360] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2834'.
[  722.257176][T15360] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2834'.
[  723.724107][T15391] netlink: 'syz.5.2841': attribute type 10 has an invalid length.
[  724.311915][   T49] wlan1: Trigger new scan to find an IBSS to join
[  724.323900][ T2912] wlan1: Trigger new scan to find an IBSS to join
[  724.483653][   T77] wlan1: Creating new IBSS network, BSSID 96:27:3c:26:8a:de
[  724.522641][ T2912] ------------[ cut here ]------------
[  724.528677][ T2912] WARNING: CPU: 1 PID: 2912 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440
[  724.538679][ T2912] Modules linked in:
[  724.542613][ T2912] CPU: 1 PID: 2912 Comm: kworker/u4:8 Not tainted syzkaller #0
[  724.550374][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  724.560723][ T2912] Workqueue: cfg80211 cfg80211_event_work
[  724.566629][ T2912] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  724.573138][ T2912] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 6d a2 f7 0f 0b eb bb e8 ae 6d a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 a0 6d a2 f7 0f 0b e9 e0 fd ff ff e8
[  724.592991][ T2912] RSP: 0018:ffffc9000bd27a20 EFLAGS: 00010293
[  724.599476][ T2912] RAX: ffffffff89e4a5f2 RBX: dffffc0000000000 RCX: ffff88802be85a00
[  724.607563][ T2912] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0
[  724.615673][ T2912] RBP: ffffc9000bd27af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead
[  724.623875][ T2912] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888064f20c90
[  724.632025][ T2912] R13: 1ffff920017a4f4c R14: ffff88807f5ab5f8 R15: 000000000000001f
[  724.640101][ T2912] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  724.649558][ T2912] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  724.656265][ T2912] CR2: 0000001b2fa1bff8 CR3: 0000000046133000 CR4: 00000000003506e0
[  724.664298][ T2912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  724.672422][ T2912] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  724.680510][ T2912] Call Trace:
[  724.683827][ T2912]  <TASK>
[  724.686889][ T2912]  ? mutex_lock_nested+0x20/0x20
[  724.691885][ T2912]  ? trace_rdev_return_void+0x1c0/0x1c0
[  724.697629][ T2912]  cfg80211_process_wdev_events+0x3bc/0x550
[  724.703581][ T2912]  cfg80211_process_rdev_events+0xa1/0x110
[  724.709537][ T2912]  cfg80211_event_work+0x2f/0x40
[  724.714545][ T2912]  ? process_scheduled_works+0x96f/0x15d0
[  724.720529][ T2912]  process_scheduled_works+0xa5d/0x15d0
[  724.726216][ T2912]  ? assign_work+0x430/0x430
[  724.730862][ T2912]  ? assign_work+0x3d0/0x430
[  724.735645][ T2912]  worker_thread+0xa55/0xfc0
[  724.740311][ T2912]  kthread+0x2fa/0x390
[  724.744415][ T2912]  ? pr_cont_work+0x560/0x560
[  724.749207][ T2912]  ? kthread_blkcg+0xd0/0xd0
[  724.753839][ T2912]  ret_from_fork+0x48/0x80
[  724.758356][ T2912]  ? kthread_blkcg+0xd0/0xd0
[  724.762994][ T2912]  ret_from_fork_asm+0x11/0x20
[  724.767907][ T2912]  </TASK>
[  724.770973][ T2912] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  724.778277][ T2912] CPU: 1 PID: 2912 Comm: kworker/u4:8 Not tainted syzkaller #0
[  724.785864][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  724.795952][ T2912] Workqueue: cfg80211 cfg80211_event_work
[  724.801743][ T2912] Call Trace:
[  724.805140][ T2912]  <TASK>
[  724.808101][ T2912]  dump_stack_lvl+0x18c/0x250
[  724.812825][ T2912]  ? show_regs_print_info+0x20/0x20
[  724.818155][ T2912]  ? load_image+0x400/0x400
[  724.822714][ T2912]  panic+0x2dc/0x730
[  724.826655][ T2912]  ? bpf_jit_dump+0xd0/0xd0
[  724.831219][ T2912]  ? ret_from_fork_asm+0x11/0x20
[  724.836296][ T2912]  __warn+0x2e0/0x470
[  724.840309][ T2912]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  724.845893][ T2912]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  724.851471][ T2912]  report_bug+0x2be/0x4f0
[  724.855839][ T2912]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  724.861418][ T2912]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  724.867024][ T2912]  ? __cfg80211_ibss_joined+0x3d4/0x440
[  724.872607][ T2912]  handle_bug+0xcf/0x120
[  724.876888][ T2912]  exc_invalid_op+0x1a/0x50
[  724.881430][ T2912]  asm_exc_invalid_op+0x1a/0x20
[  724.886312][ T2912] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  724.892505][ T2912] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 6d a2 f7 0f 0b eb bb e8 ae 6d a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 a0 6d a2 f7 0f 0b e9 e0 fd ff ff e8
[  724.912147][ T2912] RSP: 0018:ffffc9000bd27a20 EFLAGS: 00010293
[  724.918334][ T2912] RAX: ffffffff89e4a5f2 RBX: dffffc0000000000 RCX: ffff88802be85a00
[  724.926339][ T2912] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0
[  724.934432][ T2912] RBP: ffffc9000bd27af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead
[  724.942530][ T2912] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888064f20c90
[  724.950530][ T2912] R13: 1ffff920017a4f4c R14: ffff88807f5ab5f8 R15: 000000000000001f
[  724.958539][ T2912]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  724.964131][ T2912]  ? mutex_lock_nested+0x20/0x20
[  724.969115][ T2912]  ? trace_rdev_return_void+0x1c0/0x1c0
[  724.974705][ T2912]  cfg80211_process_wdev_events+0x3bc/0x550
[  724.980650][ T2912]  cfg80211_process_rdev_events+0xa1/0x110
[  724.986496][ T2912]  cfg80211_event_work+0x2f/0x40
[  724.991472][ T2912]  ? process_scheduled_works+0x96f/0x15d0
[  724.997281][ T2912]  process_scheduled_works+0xa5d/0x15d0
[  725.002894][ T2912]  ? assign_work+0x430/0x430
[  725.007527][ T2912]  ? assign_work+0x3d0/0x430
[  725.012158][ T2912]  worker_thread+0xa55/0xfc0
[  725.016992][ T2912]  kthread+0x2fa/0x390
[  725.021178][ T2912]  ? pr_cont_work+0x560/0x560
[  725.025891][ T2912]  ? kthread_blkcg+0xd0/0xd0
[  725.030517][ T2912]  ret_from_fork+0x48/0x80
[  725.034971][ T2912]  ? kthread_blkcg+0xd0/0xd0
[  725.039595][ T2912]  ret_from_fork_asm+0x11/0x20
[  725.044426][ T2912]  </TASK>
[  725.048002][ T2912] Kernel Offset: disabled
[  725.052392][ T2912] Rebooting in 86400 seconds..