last executing test programs:

21.036949862s ago: executing program 1 (id=6719):
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0xffffff7f00000000)

20.855144656s ago: executing program 1 (id=6722):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000e3f913ff00000000001000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

20.802461237s ago: executing program 1 (id=6723):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x20002800)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="0200000001", @ANYRES16=r3], 0x50)
r6 = syz_clone(0x6002000, &(0x7f00000002c0)="b232fccc22fc9d", 0x7, &(0x7f0000000300), &(0x7f0000000340), 0x0)
r7 = perf_event_open(0x0, r6, 0x0, r2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x42)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffe5, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

20.749781689s ago: executing program 3 (id=6725):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xb, &(0x7f0000000880)=@framed={{}, [@printk={@llu, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x500}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

20.611633082s ago: executing program 3 (id=6727):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040afe3f00000f040b067c9ccb0db66530700b06990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec5a2ee5a7cef40900df00000000000000e4b11602b2a10c11cefe04fb00000000010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e070000000400"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

20.422988937s ago: executing program 1 (id=6730):
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0x7fffffff, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xc000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x1)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711095000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000110000007b8af8ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b74d5213af197f05007d76000800000085000000c50000009500"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.399623227s ago: executing program 3 (id=6731):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4075, 0xfeb}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000480)=""/144, 0x26}, {&(0x7f0000000340)=""/17, 0x11}], 0x4}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000030000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="9800"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001700)={r7, &(0x7f00000015c0)="f768405ac66cb5c219617b1a45124a95faf2c28ba2bd49f3ac4182dd3cb81a62a954d921f2fc074ff4cc84fed35fdddbdaf8282f6d0d164b337c0d207da4c056fe51f1da720b2a60896bdd8a6c9097c0bf4902c0d470c80b1eb45997f8c73e", &(0x7f0000001640)=""/178}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.157767723s ago: executing program 1 (id=6736):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000fc43ea8b46953b353249c6a5c1f4d4d7fd69f1e00950f680b68c1b3574c066f3ea7ccd40bd50786909854d07466a7f494c28f8b273b231b4de78ff2ec37cb58d163028225730303395f5ed680c57cbb10bd539e1500ea4d567b668ba9be9ad80fa529bae8d4a0070b997e7fba1b3a850f9476daa778afcf42eedf59854a9dc4b508df0657b213ca034", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xf}, 0x828, 0x0, 0xffffffff, 0x9, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg(r4, &(0x7f0000000a40)={&(0x7f0000000740)=@nl, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="24b0b19f", 0x4}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000000c6afae0cef8a3989d23813d63ec26b2ed38535819aef9acfff9bd18d3afcd589524ceabaef0d4989fcee0c50349d0192b1fbe48ee67afb0fa5ca78926e7cdb474b8f8bf51bb9ead44b1c219925a695f661b92d68e222e66165719fa9fad420f0ecf809732e6b59befc9d4b648089577e98b39980154b1dc1c542d243dc393ba6dfed23177623a6228c902cdbe08b3b5e8038603a9800"], 0x10}, 0x40)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x8cfffffffffffff9}, 0x3b35, 0xfffffffffffffffc, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0xd9, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x208, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
r10 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x49, &(0x7f0000000100), 0x120)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080d87fa3a32240470a6595ede2b61f83202e7087b5ad44639d629848d167597186d0232240703d2429351507e1ec62ea935f26351ac14322f8ecbf70670f355c00612d48454443a98739a15260b08fe4d5c32663a82335e623f688bb192a5a388a626d2e1f66", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000186000000100000000000000080000009500000000001000"], &(0x7f0000000f80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r11]}, 0x90)

19.382492202s ago: executing program 3 (id=6738):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x10100e, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9ae"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a29"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r3}, 0x38)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000440)=""/135, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9", 0x20}], 0x2}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000c00000100000000000000000000000800000000006180"], 0x0, 0x27}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x20}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="95d6b0a6a092e96dc4638af26a138704ab95cad9074940277e9c3e2c772cd058ed1818f7429e08af809bdc002aa1dd053c67967abf6f3fa82564b74c60b75141ddfb4f9865c7f0928c77894aecdb39896f33f251e62975c06c1765eb575716ee881e506157b8c882d7e83a235e0cdbef04", 0x71}], 0x1, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"/5312], 0x14c0}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x42, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)

19.262668634s ago: executing program 2 (id=6739):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100ffef02010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40)

19.197303606s ago: executing program 0 (id=6740):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff000000)

19.059031359s ago: executing program 1 (id=6741):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0xffffffffffffff67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x565, 0x1}, 0x0, 0x0, 0xc00000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8844)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x2, 0x73)
r2 = socket$kcm(0xa, 0x2, 0x0)
close(r2)
socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000240)="82aab553850e671af11cd4ac0b4e22e9e4263f2a998e1b3251bed566b8abe2f1049227f9fe470e2167df62e9cd6ad35e11d21262f819b4a8e5f19d115e6dce97f8e5e4ba600406c670b4734142963a55b28d6982ae81d90fb0b38e0ff5", &(0x7f00000002c0)=""/59}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)

19.058499909s ago: executing program 2 (id=6742):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)

19.058298109s ago: executing program 0 (id=6743):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f913ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11000000}, 0x50)

18.964321161s ago: executing program 0 (id=6744):
perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0x7fffffff, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xc000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x1)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711095000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000110000007b8af8ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b74d5213af197f05007d76000800000085000000c50000009500"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.009592644s ago: executing program 3 (id=6745):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48)
r2 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast1, 0x8}}, 0x80, 0x0, 0x39}, 0x8804)
setsockopt$sock_attach_bpf(r2, 0x29, 0x2f, &(0x7f0000000100), 0x120)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40014, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10})
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

17.227010642s ago: executing program 2 (id=6746):
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

16.636928896s ago: executing program 2 (id=6747):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000feffffff0000001058820000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000700000000000000180000000000000000000000000000009500000000000000270300000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94)

16.519356899s ago: executing program 2 (id=6748):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000021", 0x4c}, {&(0x7f0000001a40)="e969b9ca2a9a2732559840ec1ed4bfe607b21531c4e677ffe27da0a9157d62acd6f8707097e994ef79268390a8b1c8bec6d2edd3a30819156fd7b6cf8d02b3c128b0e38807c6c0dbeece245c58a6ece453ceeda1ed3d7e225991e9ce06cae9d4fc7ea2e87adc53e8c9e0d64ff86f856586470783cf57a008a283be0ca07aec9f7bd8063dd7b8121d0c00824cba8bc03683a6392ce744fe7ac78840631e5fd77a717af96e35076ee0987bfb82b62907185d36f8bb0d6e226fb0f927f5f6f59fb26c714b75e2bf7575e7a62e71a5b4292cee2f156834b50d9b6bb4c272fc03a904a13177541045210604c2a0177c84ebcfe6cd9f34936aa1c98bdbc9ebc5c08ce2b04051f73e71b7205895e2042f8f1aa7486393595db0d13e599d1dccce6fec21c3e03543a4a62d57d9a0312d9637370f1efe6d711d09eb11d8fd7e234110cb876dda29d57b80a2c6b185fee558bb46dac5a9d59ff2ac8b07346a280a05f150f1084566ae2b8057b433ceaa7ae566bf6627e9a82fc18bf82d45702353211325cd505185a5c19d9b9249a67e2d8ba34c9e05040bbdacf74a45b4d7fc0897893476b5e4fe88d652287b9c462d26c9553cda36fe1e2bc48c5833ba044423b40b451cbf7d2b0ff9772e1949887bfa0f4b016d13b2336e74d914efab02c98eb19f6d4d1a7bf03be4a02925e6b888109cb60645af050bf53a3425370d77420caa3581dd2a8f7e270c68d95a359e6eb97594ea1b6b24884ce0336630e3638ceaa272badff0fe4b7ca515725161f031d95e0460074d63b8708ff6dea2a1a31bd541468bbb8d770f131f9afbf73af9e0bb2326a52beab528e239762e8fd3626de064ed3b30447e73003a19dee1a0745746dfc5d757a41e762b94a27f3a32d377bff74812955e97593f19567b7153c900cc04e9d2ec9f3e2529aedab30a6900760b2f3f65744fe88d12836dd23813d83455af836d8845a286ebc55475820d861433f1b22a3958d9e799081874211390543c933a71cc64c700fb66997fd19d08941c74fbea7c4519f00a2787f621ef2e4f841971d5f1f453a7d87fe31af0ad271ba66f743077bfa97341fda914bdb208faf836b24ddf13234b8b952ed88a535d9465af1446578db7996b0c56a84ed712d5329fcc9ea80e05667f32b3b0dd0524632edc07090139c4b8c9b6b0fde26442ba97592d1572882caca27dc16387d203e5a57caf08556b3cac6654f1978624b5669d6f7e958394d7d8d0b00b57377ebd4025b6cbe69b38d9621ad1c1fa59da63010ef72e573194cc0977490467536fd1ed41dcd0713fc6c813a1a951a1648f68e5cec776192b1e24887fbe0f7506a33ce33a46007576cdab50b16c1d09a850b700fa9ab01951230108a8250045ba9237e47550b807c21eea6cc198022bc9781b3520c0c19af08150d79c0271cdabf9ec36e60d4ee88ad5f2dc7e2ba85eb637db4ee4fcac4e6776ded538cd55dccfc2f62cae047ccf0d5c3f324403c4482112cf57a3b0b0815a09c0250e4420455350a0a086d10c1ab823ff414b1f5cd997968e35ffe5e34db90645baf2fddbe70a5aa64e65ccdb0a40020754b90b571c982641bd5a3a66cb747af4888d9aba217be9b0a0080f295e8582e0547ee5235cb927af979e2a16d334fef04af110af639bfcf538435483e9e4a9a3df281245fca24d4f8d106881fb5cf4eeaa4c17d7e074c6fd484abc02a65daa9125c2999cf0157afb83c3ff1e57199543d6e454eb583c7cc877f742ad4678e97d4022ffa07299839203e85f23a4a70044131a9b4b0d95caee2665602536e9d80f635b09d4aae1842d41e66a7bd62d2d5bdea2d2a02b6b3c4c0f3f9726e5a7405d77dd504277f05f1733bfe8764833d45d3a99de8396e529a7eccb9f9b2dc674f9cb4d963b423581a024b9f8a7fe0e0ccbd8c12f3a4c87beb135a573155b0c627986b79c12999a13559f85181aba1e634d92eae7e3e170f6bba66c6e81be582c135f94e34208f98dbee33fd5aed16d8be95f8732960062dd8ade74a633170df8b7b900a10e92c8deb78d92716af5721056465cea75cccea533f509c071d76798a155ff3dae5d04292c9ab7c951863a358262d6cef0d46ed3bb20398fe6b990f3f75da8a64e45329f7dd66e2699dfdb44f2f4892667f4e16b70d4dfb9d0636b7013e5bc6b3cb09cfdafbdeddb7a51540e618e226a7edb4d1d676888e7dff2a3d87d0d4bc0dc497b233d46a9f0b07808a849069dde96fc0928448d8478f038671d411ed39b094c0e015fc8ac8d398bae174c96cdbe63e63b21b8873207e031d301e849036a8df084620c963151c27dd1ea37b2540d78e15c913f03a301e727175d959295af3005f43f4d5e571cefdbc7185122a3b52996599a2e45b44cef66f56dcc347fe30b2e97f0138ac358f3ec1d52b3aab7dc8918ed6f2d1d5a6e7caaf779650f51b4060ef310638d2f6f8be6515b202fefb95f2947b5ca35aae027d7081a8a0148f92baafc1e6a5a4b50621ab8803ee86e580aea4128d8c12af1107e897f231b06ce22094131f8813d61b42c575a1b60fc944cb1769a45fa79f082d8fbe5342327bf5b945648a02a67a63ef987e6af6261361818c5439a34895737286285e96b053e512f809c2b2ceca71d9838ab305bba1fa89e17fd27c528d2c32364bd7ba7a0a269446a69639ff1aedd0d5f2fe08a1ca495f92dd0714c2e583669bd2f6215029684694174c5ffec194a1afc74972e701945162f9b2b19fef249b650c1e49fb8dff75f17fabfe73d5b4afd72c0458e63b93093ed4925b8fed9b3004f97d86a46ca76232c420eb23575289a0d450c4ff735967604aeb7cffcb12de41265bab51332c259b70598090a58b29562f17a1133defa8d8886fcdf007f6870126f3a3f8a7cead2c8f9b56b3294e6828fdfc580067c9bf1af74270142ae381bc5f9b01a9eabf150dba335fdc4cb76bc0d7d470af11893c9671169dab94d60ceec7e435808b07c4ab7431a095b2236136c557a73926c32339af1710be6bc0a89094b90edc7f7cf459cc7ba15a1a2231732c54c9d121f7eb661d2d1ec86d1a081e6dc3d2b4af9ed101d6b161b3dded03f11063500f399928e9185014978dd51b1373d926ac97a6554178f63d8a6377ef8ce9c58b15d1bc53380d081f1ef1e8d1eff5b0a48f8f1aab4f5fadf5709c05684eb864a2c78bfacd3b56c46b2b31c9c3ff7a2d7a2fe283b8ab6510c0eecec8cf5fc64875e6a3cc81cf3e54b4d56fabfa7022f25faf53f0d917e9b11c037f46c86c2c619f21b1395d841f51610d9ae3fdefcf4ef17350c8a8e0112025771cd958a77e528a0d4fdd53805a5d9dfdeeca27ed7987f8f031cc38fe8d16bb42a1c67184f2a67b1b0139bbe73900545fa6ba1c09290708142b47574649372ae6d9be962e424ab8d8113a846dfe1c13306237a1efc66e9745c6db3d4ff02fd3892c5ca2767963f9f626211b254b79f9f72740633c5fb713b3e44c8122bbdb2edf095758a5c68994d8971187d513f548caa695ae3b54944f854c760309de46f739fcd2cec4ddfe527ed8debd88466460daf402913b44e9b4cc3fc28ee477a6b33cbfd3699b48fd048bb443f6a25e26b0b0135a3ddb6e003403d619ce016b2cd88a9a0f8316847bd89b325d3fadaa3530f99eaf4bb1d9a305fbc9237c11a50a84b8502494c230943e74dcb838f3cb8e1ff089eb2a7ef319b3bd296568c3e9dafe4389081046f52aab36efdaa4b16e4b06c34928c7a878a69f12d9be564b728fb37d9e1ee30a0571176fddda624e98c94b45da6b6ae5b943f4a39736384ea15df85ff7ce0889c4470da8def371ae669dcb786f293b7a6aaee474fdeadc9f66ec0fbc2a98773883f6e03a7717863049cc998aafa1f7ed6ed56614459b7b4440b55f52fce808ca802e65617d27dc2036ed0f645404e12c98a0b3020da9e08439b8283ec80803b1ae94e8fe6558bba7349c3e4101daf6ed747fa9ac2219857fa89bb11427f2e71790f92615c03951db097a4bda737bff78d7290b57b5edac8f4bafb5dcfef6fdf4167c7a81f6966ec2d61025b67224141eefbac420f88553ae149c7cdeb9594ae0c769005789bb34a7189ea06dff7388334954c9ff27b8f28e727a5e760a0184f40a17c8504c374275ace39d4e618c0ea248f6f4683886ca737ece30582f2302e94843513470eac6929c3f5bd71a1fbb7211bd474f7507f20ec521e07d4ed0be3e20e5c9f5aeb9c205afbb3bb6663691a04f8c0b0b81de5dcf6764b3633935d03a3827bd774ed9f9796063f5b19aaec7df3927643c4cba77dc401a763bb0f68b6a908296d93328df3c0e33bf4f8f3b345368c248cd4ae68b6782636b47986a80cd77094830cdb9eea964f16657b9d63e4bbbd07e728bc343201200b448ad3240cd7729a7d4366365f2f3bc7ab9ef903232dddb48aa54757ae669994ce599ebbf6d0bf4367864ef37b1c4c54c8038e724b8f0fb7cd67147bc9fc3e1293a7d729a0cbf11f00c5c67669cc3a373ed2555c36ea710139183b848e780219bed62f65e3f46876bc110617a86018ebeca434991f5f2fc008aa9e9aea07d9a82d4ef2a66a09cbce4372a19b95059cbe52996167936e4cff8a3b404f544955338d9d54930972156fbe8e5e42cf698b2ba8dcea42b998e3ccb44bd87189ac768b3ed8f93288c2646d0333fce58ee6a1b82d564fc70f619850794c40fc836281defe9d80663b85a490ccfd4c126c5341bfe1ae99057ef92dd1d9ddc390e3f6ec454533fc2a0be6a2141fb9a67e38a0d2165084d9e6ed97e2a2ba58e26f79fbb1bfb42c1e341e0d7c6c9ae03102caf72a7da5ec080d923dca5a06891fa5ed05d75e974831ffec5a217113d0fc312c61a0fbb9cb66ceb6135ba79b5ea08e6b23c798072e41349e9eb11a20a27e28b1f07a5e81e0187154dea0aa86446741f8f228e6d68138e3a596ef3539a35ee80c74f1df87258676da00566ac1bf01c983bdaa841ff3b2b0a734ead1044daf68a922822a19a65d3fb899e15bf346fa0679bb4c91ae9a0c18d73dcdf713c2f7419b4da134fde0d3b154a496d86453b21cd1e004a88d1b6132a91dbd38ab64e961567f163d4461079a6b34465549e9e32909e39e77f3740c9ca900740546c77c5b27e935485eef207a1d9e5ce5d9ea612443394835d160ec8f90f6c15035ede5d52f5c36a6b7a7e0646baa3109404949e87af12edef72c9414e403d24e66e128093c3c1b3dd934ab16bba9610999d0052e334d6de4868def73a629add9eb0194ffbea6eb7336003264627b533cbf68f92c8e4b8549b8209c0f4114220831d438e35d4447f1ea65f48373b54dbd9c4e1f28e54a8685865e4e2741cc20562f87356b96bdf4e856744fe99a193624ea40d13ee0ac3c4101490c413420109e6dfa5da36791a63935e3342b7806fed6a1b25de14874f5cf82f0863e", 0xf0e}], 0x2}, 0x0)

16.138936918s ago: executing program 0 (id=6749):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r0 = socket$kcm(0x2b, 0xd, 0x0)
close(0x3)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x100, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0xfc6e)

16.103628709s ago: executing program 0 (id=6750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.016952771s ago: executing program 0 (id=6751):
r0 = socket$kcm(0x2, 0x3, 0x84)
socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000117a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814)

15.389916666s ago: executing program 2 (id=6752):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7fe) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac13780050002", 0x29}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32)
sendmsg$sock(r1, &(0x7f0000000a40)={&(0x7f0000001480)=@in6={0x2, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x40) (async)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2915f}, 0x38) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0xf7e5) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async, rerun: 64)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x4}, 0x20) (async, rerun: 64)
sendmsg$sock(r5, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013000100000002800000121f", 0x2e}], 0x1}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x9, 0x1, &(0x7f00000001c0)="faca15989d17ea2702", &(0x7f0000000280)=""/1, 0x7, 0x0, 0xaf, 0x5e, &(0x7f00000003c0)="c709acfc22a47678631871525bc770357d37271f225d66263de9ec58830cf460f870c115542ce45213bd499b9823f3cbc4e0f1f565a5bdcce551033794b0def72e67d90da5cf0b7f77258747e56a74d8dbb4d7ded7ad3ad836f2be0a1280230ca48991a1b60ddfc759282aa2720ea9007550ce167f97807ec84b35d933e7e68d1cbce9b47205a48b14c12c6a35b71b088d3f63600b43cb44bd6dcb479250e4863b17bf8fd21c4236641fe4fb70a87b", &(0x7f00000005c0)="569bd704e45140d8ebc16b1b121c0f420843c4f7e619117eada706b9266f79bb58aaa19cb689b777b1c73d0c451e7bb6930f607d1944e8d42dc03e7a563feb5491278ef25c42f7deb23a4bdb47a97b06ed5a5c8617ef55e3d076c89429ff", 0x0, 0x0, 0x80000000}, 0x50) (async)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)

15.386421746s ago: executing program 3 (id=6753):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xd41}, 0x1c184, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x800b, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=<r8=>0xffffffffffffffff, @ANYRESDEC], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={r3, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x27, &(0x7f00000026c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002780)}}, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r4, <r10=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000001bfa100000000040007010000145f8fbf17f6fee2085e080000000000200f00008500000006000000a3c83e14012f512315f28c290154cf6f014c674e772166726ff38e449ea345adeae3c5a4beb7bf0e36ca857fb8bc7fefa6924eed5868a1164e88200a352537e39afed719de7ec105f8a5120a8731ca7693996d01a7b5634c2ded483b12f196555856b87ab6236c9bee9e5a5037f799"], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r3, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r9, r3, 0x1, &(0x7f0000002a00)=[r10, r0, r0, r0, r7, r7], &(0x7f0000002a40)=[{0x2, 0x4, 0x6, 0x1}], 0x10, 0x7}, 0x94)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'syzkaller1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
r12 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r13=>0xffffffffffffffff})
sendmsg$unix(r13, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001400000000000000010000000100"], 0x38}, 0x0)

3.313226682s ago: executing program 32 (id=6741):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0xffffffffffffff67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x565, 0x1}, 0x0, 0x0, 0xc00000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8844)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x2, 0x2, 0x73)
r2 = socket$kcm(0xa, 0x2, 0x0)
close(r2)
socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000240)="82aab553850e671af11cd4ac0b4e22e9e4263f2a998e1b3251bed566b8abe2f1049227f9fe470e2167df62e9cd6ad35e11d21262f819b4a8e5f19d115e6dce97f8e5e4ba600406c670b4734142963a55b28d6982ae81d90fb0b38e0ff5", &(0x7f00000002c0)=""/59}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)

211.708816ms ago: executing program 33 (id=6751):
r0 = socket$kcm(0x2, 0x3, 0x84)
socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000117a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814)

133.669417ms ago: executing program 34 (id=6752):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7fe) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac13780050002", 0x29}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32)
sendmsg$sock(r1, &(0x7f0000000a40)={&(0x7f0000001480)=@in6={0x2, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x40) (async)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2915f}, 0x38) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0xf7e5) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async, rerun: 64)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x4}, 0x20) (async, rerun: 64)
sendmsg$sock(r5, 0x0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013000100000002800000121f", 0x2e}], 0x1}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x9, 0x1, &(0x7f00000001c0)="faca15989d17ea2702", &(0x7f0000000280)=""/1, 0x7, 0x0, 0xaf, 0x5e, &(0x7f00000003c0)="c709acfc22a47678631871525bc770357d37271f225d66263de9ec58830cf460f870c115542ce45213bd499b9823f3cbc4e0f1f565a5bdcce551033794b0def72e67d90da5cf0b7f77258747e56a74d8dbb4d7ded7ad3ad836f2be0a1280230ca48991a1b60ddfc759282aa2720ea9007550ce167f97807ec84b35d933e7e68d1cbce9b47205a48b14c12c6a35b71b088d3f63600b43cb44bd6dcb479250e4863b17bf8fd21c4236641fe4fb70a87b", &(0x7f00000005c0)="569bd704e45140d8ebc16b1b121c0f420843c4f7e619117eada706b9266f79bb58aaa19cb689b777b1c73d0c451e7bb6930f607d1944e8d42dc03e7a563feb5491278ef25c42f7deb23a4bdb47a97b06ed5a5c8617ef55e3d076c89429ff", 0x0, 0x0, 0x80000000}, 0x50) (async)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)

0s ago: executing program 35 (id=6753):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f00000001c0), 0x0}, 0x20)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xd41}, 0x1c184, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x800b, 0xffffffffffffffff, 0xb)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=<r8=>0xffffffffffffffff, @ANYRESDEC], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={r3, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x27, &(0x7f00000026c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002780)}}, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{r4, <r10=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1c, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000001bfa100000000040007010000145f8fbf17f6fee2085e080000000000200f00008500000006000000a3c83e14012f512315f28c290154cf6f014c674e772166726ff38e449ea345adeae3c5a4beb7bf0e36ca857fb8bc7fefa6924eed5868a1164e88200a352537e39afed719de7ec105f8a5120a8731ca7693996d01a7b5634c2ded483b12f196555856b87ab6236c9bee9e5a5037f799"], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, r3, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, r9, r3, 0x1, &(0x7f0000002a00)=[r10, r0, r0, r0, r7, r7], &(0x7f0000002a40)=[{0x2, 0x4, 0x6, 0x1}], 0x10, 0x7}, 0x94)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'syzkaller1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
r12 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r13=>0xffffffffffffffff})
sendmsg$unix(r13, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001400000000000000010000000100"], 0x38}, 0x0)

kernel console output (not intermixed with test programs):

.921411][T22542] validate_nla: 1 callbacks suppressed
[  875.921430][T22542] netlink: 'syz.1.5599': attribute type 10 has an invalid length.
[  875.955469][T22542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5599'.
[  875.979984][T22542] batadv_slave_1: entered promiscuous mode
[  876.000130][T22542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  876.038299][T22542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.406653][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5601'.
[  876.702311][T22564] netlink: 'syz.0.5607': attribute type 3 has an invalid length.
[  876.784682][T22564] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5607'.
[  877.295443][T22572] netlink: 'syz.1.5610': attribute type 10 has an invalid length.
[  877.303757][T22572] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5610'.
[  877.499752][T22580] FAULT_INJECTION: forcing a failure.
[  877.499752][T22580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  877.524669][T22580] CPU: 0 PID: 22580 Comm: syz.3.5614 Not tainted syzkaller #0
[  877.532194][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  877.542273][T22580] Call Trace:
[  877.545571][T22580]  <TASK>
[  877.548525][T22580]  dump_stack_lvl+0x18c/0x250
[  877.553222][T22580]  ? show_regs_print_info+0x20/0x20
[  877.558539][T22580]  ? load_image+0x420/0x420
[  877.563066][T22580]  ? __might_fault+0xaa/0x120
[  877.567757][T22580]  ? __lock_acquire+0x7d80/0x7d80
[  877.572957][T22580]  ? __virt_addr_valid+0x10c/0x380
[  877.578094][T22580]  should_fail_ex+0x394/0x4c0
[  877.582802][T22580]  _copy_from_user+0x2f/0xe0
[  877.587462][T22580]  generic_map_update_batch+0x53e/0x800
[  877.593022][T22580]  ? rcu_read_unlock+0xa0/0xa0
[  877.597795][T22580]  ? __fdget+0x180/0x210
[  877.602057][T22580]  ? rcu_read_unlock+0xa0/0xa0
[  877.606895][T22580]  bpf_map_do_batch+0x3f2/0x600
[  877.611771][T22580]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  877.617325][T22580]  __sys_bpf+0x381/0x890
[  877.621570][T22580]  ? bpf_link_show_fdinfo+0x390/0x390
[  877.626972][T22580]  ? lock_chain_count+0x20/0x20
[  877.631833][T22580]  __x64_sys_bpf+0x7c/0x90
[  877.636255][T22580]  do_syscall_64+0x55/0xb0
[  877.640677][T22580]  ? clear_bhb_loop+0x40/0x90
[  877.645355][T22580]  ? clear_bhb_loop+0x40/0x90
[  877.650098][T22580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  877.656031][T22580] RIP: 0033:0x7fc300f9e0d9
[  877.660447][T22580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.680054][T22580] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  877.688470][T22580] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  877.696452][T22580] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  877.704439][T22580] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  877.712415][T22580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  877.720420][T22580] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  877.728428][T22580]  </TASK>
[  878.264017][T22598] netlink: 'syz.2.5620': attribute type 21 has an invalid length.
[  878.291932][T22598] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.5620'.
[  879.138944][T22610] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5626'.
[  879.212129][T22612] netlink: 'syz.1.5624': attribute type 10 has an invalid length.
[  879.264673][T22612] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5624'.
[  880.683489][T22653] netlink: 'syz.3.5638': attribute type 10 has an invalid length.
[  880.724550][T22653] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5638'.
[  880.733491][T22653] batadv_slave_1: entered promiscuous mode
[  880.781792][T22653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.804256][T22657] sctp: [Deprecated]: syz.0.5642 (pid 22657) Use of int in maxseg socket option.
[  880.804256][T22657] Use struct sctp_assoc_value instead
[  880.829712][T22653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.850176][T22655] netlink: 'syz.1.5641': attribute type 10 has an invalid length.
[  881.357105][T22666] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5646'.
[  881.435668][T22666] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.5646'.
[  881.800573][T22686] netlink: 3554 bytes leftover after parsing attributes in process `syz.2.5653'.
[  882.537230][T22703] netlink: 668 bytes leftover after parsing attributes in process `syz.2.5660'.
[  882.584029][T22705] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5661'.
[  882.584476][T22703] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  882.601756][T22646] Bluetooth: hci1: command 0x0406 tx timeout
[  882.614722][T22703] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  883.232117][T22726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  883.807206][T22735] netlink: 'syz.0.5674': attribute type 10 has an invalid length.
[  883.963317][T22739] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5675'.
[  884.015059][T22739] : renamed from veth1 (while UP)
[  884.395547][T22745] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  885.662926][T22780] FAULT_INJECTION: forcing a failure.
[  885.662926][T22780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  885.690088][T22780] CPU: 1 PID: 22780 Comm: syz.0.5690 Not tainted syzkaller #0
[  885.697606][T22780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  885.707685][T22780] Call Trace:
[  885.710980][T22780]  <TASK>
[  885.713921][T22780]  dump_stack_lvl+0x18c/0x250
[  885.718628][T22780]  ? show_regs_print_info+0x20/0x20
[  885.723856][T22780]  ? load_image+0x420/0x420
[  885.728384][T22780]  ? __might_fault+0xaa/0x120
[  885.733083][T22780]  ? __lock_acquire+0x7d80/0x7d80
[  885.738132][T22780]  ? __virt_addr_valid+0x10c/0x380
[  885.743264][T22780]  should_fail_ex+0x394/0x4c0
[  885.747961][T22780]  _copy_from_user+0x2f/0xe0
[  885.752557][T22780]  generic_map_update_batch+0x53e/0x800
[  885.758110][T22780]  ? rcu_read_unlock+0xa0/0xa0
[  885.762875][T22780]  ? __fdget+0x180/0x210
[  885.767210][T22780]  ? rcu_read_unlock+0xa0/0xa0
[  885.772058][T22780]  bpf_map_do_batch+0x3f2/0x600
[  885.776928][T22780]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  885.782477][T22780]  __sys_bpf+0x381/0x890
[  885.786720][T22780]  ? bpf_link_show_fdinfo+0x390/0x390
[  885.792101][T22780]  ? lock_chain_count+0x20/0x20
[  885.796965][T22780]  __x64_sys_bpf+0x7c/0x90
[  885.801400][T22780]  do_syscall_64+0x55/0xb0
[  885.806448][T22780]  ? clear_bhb_loop+0x40/0x90
[  885.811154][T22780]  ? clear_bhb_loop+0x40/0x90
[  885.816056][T22780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  885.821999][T22780] RIP: 0033:0x7f72f559e0d9
[  885.826417][T22780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.846028][T22780] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  885.854446][T22780] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  885.862422][T22780] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  885.870396][T22780] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  885.878371][T22780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  885.886339][T22780] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  885.894343][T22780]  </TASK>
[  886.123933][T22785] netlink: 'syz.0.5691': attribute type 29 has an invalid length.
[  886.994831][T21201] wlan1: Trigger new scan to find an IBSS to join
[  887.694693][T22758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  887.716631][T22785] netlink: 'syz.0.5691': attribute type 29 has an invalid length.
[  887.867818][T22804] netlink: 'syz.2.5697': attribute type 4 has an invalid length.
[  887.994901][T22808] syzkaller0: entered promiscuous mode
[  888.000423][T22808] syzkaller0: entered allmulticast mode
[  888.441607][T22825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  888.875186][T22844] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5710'.
[  888.926341][T22844] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  888.943984][T22844] CPU: 1 PID: 22844 Comm: syz.1.5710 Not tainted syzkaller #0
[  888.951508][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  888.961601][T22844] Call Trace:
[  888.964903][T22844]  <TASK>
[  888.967857][T22844]  dump_stack_lvl+0x18c/0x250
[  888.972563][T22844]  ? show_regs_print_info+0x20/0x20
[  888.977781][T22844]  ? load_image+0x420/0x420
[  888.982317][T22844]  sysfs_warn_dup+0x8e/0xa0
[  888.986839][T22844]  sysfs_do_create_link_sd+0xc0/0x110
[  888.992306][T22844]  device_add_class_symlinks+0x1cf/0x240
[  888.998012][T22844]  device_add+0x4f9/0xc40
[  889.002348][T22844]  wiphy_register+0x1d99/0x2ac0
[  889.007221][T22844]  ? cfg80211_event_work+0x40/0x40
[  889.012354][T22844]  ? minstrel_ht_alloc+0x88a/0x990
[  889.017475][T22844]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  889.023554][T22844]  ieee80211_register_hw+0x2dd8/0x3b30
[  889.029033][T22844]  ? ieee80211_register_hw+0xf71/0x3b30
[  889.034589][T22844]  ? ieee80211_tasklet_handler+0x20/0x20
[  889.040221][T22844]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  889.046114][T22844]  ? __debug_object_init+0xec/0x450
[  889.051316][T22844]  ? __asan_memset+0x22/0x40
[  889.055957][T22844]  ? __hrtimer_init+0x189/0x270
[  889.060815][T22844]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  889.066561][T22844]  ? mac80211_hwsim_free+0x220/0x220
[  889.071933][T22844]  ? rcu_is_watching+0x15/0xb0
[  889.076710][T22844]  ? kstrndup+0xbd/0x140
[  889.080967][T22844]  hwsim_new_radio_nl+0xdad/0x1a70
[  889.086087][T22844]  ? __nla_validate+0x50/0x50
[  889.090785][T22844]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  889.097131][T22844]  ? __nla_parse+0x40/0x50
[  889.101551][T22844]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  889.107892][T22844]  genl_family_rcv_msg_doit+0x21a/0x310
[  889.113450][T22844]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  889.119353][T22844]  ? bpf_lsm_capable+0x9/0x10
[  889.124035][T22844]  ? security_capable+0x89/0xb0
[  889.128892][T22844]  genl_rcv_msg+0x611/0x7a0
[  889.133420][T22844]  ? genl_bind+0x360/0x360
[  889.137837][T22844]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  889.144166][T22844]  ? ref_tracker_free+0x686/0x830
[  889.149188][T22844]  ? __kasan_kmalloc_large+0x8b/0xa0
[  889.154490][T22844]  netlink_rcv_skb+0x235/0x4c0
[  889.159269][T22844]  ? genl_bind+0x360/0x360
[  889.163688][T22844]  ? netlink_ack+0x1160/0x1160
[  889.168461][T22844]  ? __lock_acquire+0x7d80/0x7d80
[  889.173516][T22844]  ? down_read+0x1ac/0x2e0
[  889.177944][T22844]  genl_rcv+0x28/0x40
[  889.181935][T22844]  netlink_unicast+0x7b1/0x930
[  889.186710][T22844]  netlink_sendmsg+0x8d0/0xbf0
[  889.191480][T22844]  ? netlink_getsockopt+0x590/0x590
[  889.196686][T22844]  ? apparmor_socket_sendmsg+0x8e/0x330
[  889.202233][T22844]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  889.207524][T22844]  ? security_socket_sendmsg+0x80/0xa0
[  889.212984][T22844]  ? netlink_getsockopt+0x590/0x590
[  889.218188][T22844]  ____sys_sendmsg+0x61b/0x980
[  889.222957][T22844]  ? __asan_memset+0x22/0x40
[  889.227552][T22844]  ? __sys_sendmsg_sock+0x30/0x30
[  889.232577][T22844]  ? __import_iovec+0x5f2/0x850
[  889.237460][T22844]  ? import_iovec+0x73/0xa0
[  889.241969][T22844]  ___sys_sendmsg+0x2a6/0x360
[  889.246733][T22844]  ? __lock_acquire+0x7d80/0x7d80
[  889.251763][T22844]  ? __sys_sendmsg+0x2b0/0x2b0
[  889.256572][T22844]  __se_sys_sendmsg+0x1d0/0x2c0
[  889.261427][T22844]  ? __x64_sys_sendmsg+0x80/0x80
[  889.266386][T22844]  ? lockdep_hardirqs_on+0x98/0x150
[  889.271600][T22844]  do_syscall_64+0x55/0xb0
[  889.276016][T22844]  ? clear_bhb_loop+0x40/0x90
[  889.280697][T22844]  ? clear_bhb_loop+0x40/0x90
[  889.285379][T22844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  889.291275][T22844] RIP: 0033:0x7fc79b39e0d9
[  889.295691][T22844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.315298][T22844] RSP: 002b:00007fc79c2ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  889.323710][T22844] RAX: ffffffffffffffda RBX: 00007fc79b626180 RCX: 00007fc79b39e0d9
[  889.331679][T22844] RDX: 0300000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  889.339650][T22844] RBP: 00007fc79b435024 R08: 0000000000000000 R09: 0000000000000000
[  889.347653][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.355639][T22844] R13: 00007fc79b626218 R14: 00007fc79b626180 R15: 00007ffc1da554b8
[  889.363624][T22844]  </TASK>
[  889.375110][T19811] wlan1: Trigger new scan to find an IBSS to join
[  889.647667][T22852] netlink: 668 bytes leftover after parsing attributes in process `syz.2.5714'.
[  889.665745][T22852] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  889.674059][T22852] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  890.035427][T22872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  890.069658][T22875] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5722'.
[  890.082488][T22875] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5722'.
[  890.155977][T22869] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.5721'.
[  890.185061][T22869] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  890.939260][T22895] netlink: 'syz.2.5727': attribute type 10 has an invalid length.
[  891.384027][T22922] netlink: 'syz.3.5739': attribute type 39 has an invalid length.
[  891.427750][T22924] netlink: 'syz.2.5740': attribute type 1 has an invalid length.
[  891.442030][T22924] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5740'.
[  891.586856][T22924] netlink: 'syz.2.5740': attribute type 2 has an invalid length.
[  891.604666][T22924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5740'.
[  891.759714][T22934] netlink: 'syz.1.5746': attribute type 10 has an invalid length.
[  891.769666][T22934] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5746'.
[  891.965016][T22944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5749'.
[  892.024796][T19811] wlan1: Trigger new scan to find an IBSS to join
[  892.041844][T22944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5749'.
[  892.119323][ T9403] wlan1: Creating new IBSS network, BSSID 3a:ff:ee:48:66:6d
[  892.160358][T22951] netlink: 'syz.1.5753': attribute type 1 has an invalid length.
[  892.306220][T22957] sctp: [Deprecated]: syz.2.5756 (pid 22957) Use of int in maxseg socket option.
[  892.306220][T22957] Use struct sctp_assoc_value instead
[  892.582770][T22972] netlink: 'syz.3.5761': attribute type 29 has an invalid length.
[  892.636318][T22972] netlink: 'syz.3.5761': attribute type 29 has an invalid length.
[  895.144373][T23027] netlink: 'syz.1.5783': attribute type 10 has an invalid length.
[  895.291856][T23038] netlink: 'syz.0.5786': attribute type 4 has an invalid length.
[  895.458417][T23045] FAULT_INJECTION: forcing a failure.
[  895.458417][T23045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  895.484619][T23045] CPU: 0 PID: 23045 Comm: syz.0.5789 Not tainted syzkaller #0
[  895.492143][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  895.502230][T23045] Call Trace:
[  895.505528][T23045]  <TASK>
[  895.508475][T23045]  dump_stack_lvl+0x18c/0x250
[  895.513180][T23045]  ? show_regs_print_info+0x20/0x20
[  895.518402][T23045]  ? load_image+0x420/0x420
[  895.522929][T23045]  ? __might_fault+0xaa/0x120
[  895.527637][T23045]  ? __lock_acquire+0x7d80/0x7d80
[  895.532691][T23045]  ? __virt_addr_valid+0x10c/0x380
[  895.537838][T23045]  should_fail_ex+0x394/0x4c0
[  895.542544][T23045]  _copy_from_user+0x2f/0xe0
[  895.547160][T23045]  generic_map_update_batch+0x58c/0x800
[  895.552745][T23045]  ? rcu_read_unlock+0xa0/0xa0
[  895.557541][T23045]  ? __fdget+0x180/0x210
[  895.561809][T23045]  ? rcu_read_unlock+0xa0/0xa0
[  895.566599][T23045]  bpf_map_do_batch+0x3f2/0x600
[  895.571474][T23045]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  895.577049][T23045]  __sys_bpf+0x381/0x890
[  895.581308][T23045]  ? bpf_link_show_fdinfo+0x390/0x390
[  895.586706][T23045]  ? lock_chain_count+0x20/0x20
[  895.591594][T23045]  __x64_sys_bpf+0x7c/0x90
[  895.596042][T23045]  do_syscall_64+0x55/0xb0
[  895.600503][T23045]  ? clear_bhb_loop+0x40/0x90
[  895.605210][T23045]  ? clear_bhb_loop+0x40/0x90
[  895.609913][T23045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.615834][T23045] RIP: 0033:0x7f72f559e0d9
[  895.620274][T23045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  895.639999][T23045] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  895.648445][T23045] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  895.656449][T23045] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  895.665402][T23045] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  895.673403][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  895.681405][T23045] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  895.689418][T23045]  </TASK>
[  896.791629][T23064] netlink: 'syz.3.5795': attribute type 10 has an invalid length.
[  896.850854][T23064] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.877332][T23064] team0: Port device bond0 added
[  899.933383][T23120] netlink: 'syz.3.5815': attribute type 13 has an invalid length.
[  899.943741][T23120] __nla_validate_parse: 8 callbacks suppressed
[  899.943755][T23120] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.5815'.
[  900.716627][T23139] netlink: 'syz.3.5822': attribute type 21 has an invalid length.
[  901.159094][T23160] netlink: 'syz.0.5830': attribute type 10 has an invalid length.
[  901.469647][T23167] sctp: [Deprecated]: syz.1.5833 (pid 23167) Use of int in maxseg socket option.
[  901.469647][T23167] Use struct sctp_assoc_value instead
[  901.580997][T23177] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5837'.
[  901.601211][T23177] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.5837'.
[  901.612324][T23179] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5838'.
[  902.603647][T23207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  902.724746][T23213] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5852'.
[  902.820431][T23215] netlink: 668 bytes leftover after parsing attributes in process `syz.2.5853'.
[  902.854689][T23215] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  902.863048][T23215] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  903.066960][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  903.117720][T23223] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5855'.
[  903.777773][T23250] FAULT_INJECTION: forcing a failure.
[  903.777773][T23250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  903.814603][T23250] CPU: 0 PID: 23250 Comm: syz.0.5866 Not tainted syzkaller #0
[  903.822150][T23250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  903.832411][T23250] Call Trace:
[  903.835711][T23250]  <TASK>
[  903.838662][T23250]  dump_stack_lvl+0x18c/0x250
[  903.843376][T23250]  ? show_regs_print_info+0x20/0x20
[  903.848606][T23250]  ? load_image+0x420/0x420
[  903.853137][T23250]  ? __might_fault+0xaa/0x120
[  903.857844][T23250]  ? __lock_acquire+0x7d80/0x7d80
[  903.862898][T23250]  ? __virt_addr_valid+0x10c/0x380
[  903.868033][T23250]  should_fail_ex+0x394/0x4c0
[  903.872723][T23250]  _copy_from_user+0x2f/0xe0
[  903.877346][T23250]  csum_and_copy_from_iter+0x46e/0x1480
[  903.882933][T23250]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  903.888567][T23250]  ? __kasan_slab_alloc+0x6c/0x80
[  903.893593][T23250]  ? slab_post_alloc_hook+0x86/0x4d0
[  903.898885][T23250]  ? rcu_is_watching+0x15/0xb0
[  903.903657][T23250]  ip_generic_getfrag+0x163/0x2f0
[  903.908685][T23250]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  903.913554][T23250]  ? raw_getfrag+0x11d/0x390
[  903.918179][T23250]  ? __alloc_skb+0x1b2/0x2c0
[  903.922780][T23250]  ? skb_put+0x112/0x210
[  903.927029][T23250]  __ip_append_data+0x2f3b/0x3bf0
[  903.932085][T23250]  ? trace_call_bpf+0xc3/0x6c0
[  903.936879][T23250]  ? raw_send_hdrinc+0x1150/0x1150
[  903.941996][T23250]  ? mark_lock+0x94/0x320
[  903.946367][T23250]  ? ip_setup_cork+0x840/0x840
[  903.951144][T23250]  ? ipv4_mtu+0x313/0x430
[  903.955483][T23250]  ? ip_setup_cork+0x527/0x840
[  903.960260][T23250]  ? lockdep_hardirqs_on+0x98/0x150
[  903.965465][T23250]  ip_append_data+0x10d/0x180
[  903.970146][T23250]  ? raw_send_hdrinc+0x1150/0x1150
[  903.975265][T23250]  raw_sendmsg+0x155e/0x1ba0
[  903.979874][T23250]  ? compat_raw_ioctl+0x70/0x70
[  903.984733][T23250]  ? aa_sk_perm+0x83c/0x970
[  903.989252][T23250]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  903.995671][T23250]  ? aa_sock_msg_perm+0x94/0x150
[  904.000608][T23250]  ? sock_rps_record_flow+0x19/0x3f0
[  904.005894][T23250]  ? inet_sendmsg+0x7e/0x2a0
[  904.010485][T23250]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  904.015773][T23250]  ? inet_send_prepare+0x250/0x250
[  904.020883][T23250]  ____sys_sendmsg+0x61b/0x980
[  904.025657][T23250]  ? __asan_memset+0x22/0x40
[  904.030251][T23250]  ? __sys_sendmsg_sock+0x30/0x30
[  904.035272][T23250]  ? __import_iovec+0x3fa/0x850
[  904.040134][T23250]  ? import_iovec+0x73/0xa0
[  904.044639][T23250]  ___sys_sendmsg+0x2a6/0x360
[  904.049322][T23250]  ? __sys_sendmsg+0x2b0/0x2b0
[  904.054107][T23250]  ? trace_call_bpf+0xc3/0x6c0
[  904.058889][T23250]  __se_sys_sendmsg+0x1d0/0x2c0
[  904.063742][T23250]  ? perf_trace_preemptirq_template+0x269/0x330
[  904.069987][T23250]  ? __x64_sys_sendmsg+0x80/0x80
[  904.074935][T23250]  ? lockdep_hardirqs_on+0x98/0x150
[  904.080139][T23250]  do_syscall_64+0x55/0xb0
[  904.084580][T23250]  ? clear_bhb_loop+0x40/0x90
[  904.089254][T23250]  ? clear_bhb_loop+0x40/0x90
[  904.093929][T23250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  904.099822][T23250] RIP: 0033:0x7f72f559e0d9
[  904.104240][T23250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  904.123845][T23250] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.132260][T23250] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  904.140233][T23250] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  904.148199][T23250] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  904.156169][T23250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.164143][T23250] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  904.172127][T23250]  </TASK>
[  904.208534][T23253] netlink: 'syz.3.5868': attribute type 10 has an invalid length.
[  904.492783][T23261] netlink: 'syz.3.5870': attribute type 3 has an invalid length.
[  904.524671][T23261] netlink: 'syz.3.5870': attribute type 1 has an invalid length.
[  904.532734][T23261] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.5870'.
[  904.908392][T23281] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  905.428344][T23309] FAULT_INJECTION: forcing a failure.
[  905.428344][T23309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  905.472244][T23309] CPU: 0 PID: 23309 Comm: syz.3.5889 Not tainted syzkaller #0
[  905.479946][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  905.490050][T23309] Call Trace:
[  905.493380][T23309]  <TASK>
[  905.496350][T23309]  dump_stack_lvl+0x18c/0x250
[  905.501093][T23309]  ? show_regs_print_info+0x20/0x20
[  905.506347][T23309]  ? load_image+0x420/0x420
[  905.510910][T23309]  ? __might_fault+0xaa/0x120
[  905.515641][T23309]  ? __lock_acquire+0x7d80/0x7d80
[  905.520696][T23309]  ? __virt_addr_valid+0x10c/0x380
[  905.525846][T23309]  should_fail_ex+0x394/0x4c0
[  905.530650][T23309]  _copy_from_user+0x2f/0xe0
[  905.535278][T23309]  generic_map_update_batch+0x58c/0x800
[  905.540874][T23309]  ? rcu_read_unlock+0xa0/0xa0
[  905.545680][T23309]  ? __fdget+0x180/0x210
[  905.549961][T23309]  ? rcu_read_unlock+0xa0/0xa0
[  905.554763][T23309]  bpf_map_do_batch+0x3f2/0x600
[  905.559647][T23309]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  905.565225][T23309]  __sys_bpf+0x381/0x890
[  905.569507][T23309]  ? bpf_link_show_fdinfo+0x390/0x390
[  905.574928][T23309]  ? lock_chain_count+0x20/0x20
[  905.579827][T23309]  __x64_sys_bpf+0x7c/0x90
[  905.584282][T23309]  do_syscall_64+0x55/0xb0
[  905.588734][T23309]  ? clear_bhb_loop+0x40/0x90
[  905.593446][T23309]  ? clear_bhb_loop+0x40/0x90
[  905.598163][T23309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  905.604265][T23309] RIP: 0033:0x7fc300f9e0d9
[  905.608715][T23309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  905.628357][T23309] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  905.636778][T23309] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  905.644749][T23309] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  905.652714][T23309] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  905.660682][T23309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  905.668654][T23309] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  905.676644][T23309]  </TASK>
[  906.613434][T23335] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5896'.
[  906.634777][T23336] netlink: 'syz.0.5897': attribute type 4 has an invalid length.
[  906.658020][T23335] netlink: 'syz.2.5896': attribute type 9 has an invalid length.
[  906.674848][T23335] netlink: 'syz.2.5896': attribute type 23 has an invalid length.
[  906.693193][T23335] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.5896'.
[  906.892742][T23345] syzkaller0: entered promiscuous mode
[  906.898568][T23345] syzkaller0: entered allmulticast mode
[  907.001347][T21201] wlan1: Trigger new scan to find an IBSS to join
[  907.086740][T23343] netlink: 'syz.1.5899': attribute type 21 has an invalid length.
[  907.141990][T23343] netlink: 'syz.1.5899': attribute type 6 has an invalid length.
[  907.190729][T23350] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5903'.
[  907.200621][T23343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5899'.
[  907.387042][T23357] netlink: 'syz.3.5906': attribute type 21 has an invalid length.
[  907.659375][T23374] netlink: 668 bytes leftover after parsing attributes in process `syz.0.5912'.
[  907.673800][T23374] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  907.694650][T23374] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  907.813202][T23379] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5910'.
[  907.873811][T23379] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  907.884606][T23379] CPU: 1 PID: 23379 Comm: syz.3.5910 Not tainted syzkaller #0
[  907.892186][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  907.902312][T23379] Call Trace:
[  907.905648][T23379]  <TASK>
[  907.908647][T23379]  dump_stack_lvl+0x18c/0x250
[  907.913417][T23379]  ? show_regs_print_info+0x20/0x20
[  907.918694][T23379]  ? load_image+0x420/0x420
[  907.923320][T23379]  sysfs_warn_dup+0x8e/0xa0
[  907.927897][T23379]  sysfs_do_create_link_sd+0xc0/0x110
[  907.933358][T23379]  device_add_class_symlinks+0x1cf/0x240
[  907.939074][T23379]  device_add+0x4f9/0xc40
[  907.943482][T23379]  wiphy_register+0x1d99/0x2ac0
[  907.948484][T23379]  ? cfg80211_event_work+0x40/0x40
[  907.953661][T23379]  ? minstrel_ht_alloc+0x88a/0x990
[  907.958869][T23379]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  907.965034][T23379]  ieee80211_register_hw+0x2dd8/0x3b30
[  907.970606][T23379]  ? ieee80211_register_hw+0xf71/0x3b30
[  907.976258][T23379]  ? ieee80211_tasklet_handler+0x20/0x20
[  907.981956][T23379]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  907.987930][T23379]  ? __debug_object_init+0xec/0x450
[  907.993216][T23379]  ? __asan_memset+0x22/0x40
[  907.998061][T23379]  ? __hrtimer_init+0x189/0x270
[  908.003077][T23379]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  908.008955][T23379]  ? mac80211_hwsim_free+0x220/0x220
[  908.014283][T23379]  ? rcu_is_watching+0x15/0xb0
[  908.019095][T23379]  ? kstrndup+0xbd/0x140
[  908.023505][T23379]  hwsim_new_radio_nl+0xdad/0x1a70
[  908.028713][T23379]  ? __nla_validate+0x50/0x50
[  908.033556][T23379]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  908.040017][T23379]  ? __nla_parse+0x40/0x50
[  908.044515][T23379]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  908.050900][T23379]  genl_family_rcv_msg_doit+0x21a/0x310
[  908.056515][T23379]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  908.062511][T23379]  ? bpf_lsm_capable+0x9/0x10
[  908.067300][T23379]  ? security_capable+0x89/0xb0
[  908.072229][T23379]  genl_rcv_msg+0x611/0x7a0
[  908.076818][T23379]  ? genl_bind+0x360/0x360
[  908.081314][T23379]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  908.087726][T23379]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  908.094425][T23379]  ? perf_trace_lock+0xfc/0x3b0
[  908.099822][T23379]  netlink_rcv_skb+0x235/0x4c0
[  908.104663][T23379]  ? genl_bind+0x360/0x360
[  908.109166][T23379]  ? netlink_ack+0x1160/0x1160
[  908.114065][T23379]  ? __lock_acquire+0x7d80/0x7d80
[  908.119189][T23379]  ? down_read+0x1ac/0x2e0
[  908.123690][T23379]  genl_rcv+0x28/0x40
[  908.127743][T23379]  netlink_unicast+0x7b1/0x930
[  908.132623][T23379]  netlink_sendmsg+0x8d0/0xbf0
[  908.137652][T23379]  ? netlink_getsockopt+0x590/0x590
[  908.142943][T23379]  ? apparmor_socket_sendmsg+0x8e/0x330
[  908.148585][T23379]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  908.153983][T23379]  ? security_socket_sendmsg+0x80/0xa0
[  908.159504][T23379]  ? netlink_getsockopt+0x590/0x590
[  908.164781][T23379]  ____sys_sendmsg+0x61b/0x980
[  908.169642][T23379]  ? __asan_memset+0x22/0x40
[  908.174304][T23379]  ? __sys_sendmsg_sock+0x30/0x30
[  908.179386][T23379]  ? __import_iovec+0x5f2/0x850
[  908.184351][T23379]  ? import_iovec+0x73/0xa0
[  908.188958][T23379]  ___sys_sendmsg+0x2a6/0x360
[  908.193706][T23379]  ? __lock_acquire+0x7d80/0x7d80
[  908.198817][T23379]  ? __sys_sendmsg+0x2b0/0x2b0
[  908.203743][T23379]  ? lock_chain_count+0x20/0x20
[  908.208771][T23379]  __se_sys_sendmsg+0x1d0/0x2c0
[  908.213703][T23379]  ? __x64_sys_sendmsg+0x80/0x80
[  908.218770][T23379]  ? lockdep_hardirqs_on+0x98/0x150
[  908.224042][T23379]  do_syscall_64+0x55/0xb0
[  908.228522][T23379]  ? clear_bhb_loop+0x40/0x90
[  908.233292][T23379]  ? clear_bhb_loop+0x40/0x90
[  908.238040][T23379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  908.243998][T23379] RIP: 0033:0x7fc300f9e0d9
[  908.248467][T23379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  908.268142][T23379] RSP: 002b:00007fc301dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  908.276634][T23379] RAX: ffffffffffffffda RBX: 00007fc301226180 RCX: 00007fc300f9e0d9
[  908.284738][T23379] RDX: 0400000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  908.292892][T23379] RBP: 00007fc301035024 R08: 0000000000000000 R09: 0000000000000000
[  908.300927][T23379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  908.308975][T23379] R13: 00007fc301226218 R14: 00007fc301226180 R15: 00007ffcf2960398
[  908.317079][T23379]  </TASK>
[  908.561999][T23396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5920'.
[  908.571680][T23396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5920'.
[  908.647923][T23400] netlink: 'syz.3.5922': attribute type 29 has an invalid length.
[  909.095874][T23419] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5929'.
[  909.298672][T23428] validate_nla: 2 callbacks suppressed
[  909.298688][T23428] netlink: 'syz.3.5934': attribute type 39 has an invalid length.
[  909.877739][T23448] netlink: 'syz.0.5942': attribute type 21 has an invalid length.
[  909.904834][T23448] netlink: 'syz.0.5942': attribute type 1 has an invalid length.
[  909.948424][T23455] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.5945'.
[  910.533334][T23487] netlink: 'syz.2.5957': attribute type 29 has an invalid length.
[  910.542725][T23487] netlink: 'syz.2.5957': attribute type 29 has an invalid length.
[  910.907742][T23497] netlink: 'syz.2.5961': attribute type 29 has an invalid length.
[  910.924835][T23497] netlink: 'syz.2.5961': attribute type 29 has an invalid length.
[  910.944814][T23497] netlink: 'syz.2.5961': attribute type 29 has an invalid length.
[  910.978789][T23497] netlink: 'syz.2.5961': attribute type 29 has an invalid length.
[  910.990595][T21201] wlan1: Trigger new scan to find an IBSS to join
[  912.196163][T23538] netlink: 'syz.3.5979': attribute type 10 has an invalid length.
[  912.696875][T23549] FAULT_INJECTION: forcing a failure.
[  912.696875][T23549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.710798][T23549] CPU: 0 PID: 23549 Comm: syz.0.5983 Not tainted syzkaller #0
[  912.718393][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  912.728476][T23549] Call Trace:
[  912.731782][T23549]  <TASK>
[  912.734733][T23549]  dump_stack_lvl+0x18c/0x250
[  912.735412][T23538] team0 (unregistering): Port device team_slave_0 removed
[  912.739427][T23549]  ? show_regs_print_info+0x20/0x20
[  912.739455][T23549]  ? load_image+0x420/0x420
[  912.739476][T23549]  ? __might_fault+0xaa/0x120
[  912.739501][T23549]  ? __lock_acquire+0x7d80/0x7d80
[  912.739524][T23549]  ? __virt_addr_valid+0x10c/0x380
[  912.739551][T23549]  should_fail_ex+0x394/0x4c0
[  912.775830][T23549]  _copy_from_user+0x2f/0xe0
[  912.780431][T23549]  generic_map_update_batch+0x53e/0x800
[  912.785985][T23549]  ? rcu_read_unlock+0xa0/0xa0
[  912.790750][T23549]  ? __fdget+0x180/0x210
[  912.794994][T23549]  ? rcu_read_unlock+0xa0/0xa0
[  912.799757][T23549]  bpf_map_do_batch+0x3f2/0x600
[  912.804611][T23549]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  912.810192][T23549]  __sys_bpf+0x381/0x890
[  912.814470][T23549]  ? bpf_link_show_fdinfo+0x390/0x390
[  912.819878][T23549]  ? lock_chain_count+0x20/0x20
[  912.824739][T23549]  __x64_sys_bpf+0x7c/0x90
[  912.829241][T23549]  do_syscall_64+0x55/0xb0
[  912.833655][T23549]  ? clear_bhb_loop+0x40/0x90
[  912.838332][T23549]  ? clear_bhb_loop+0x40/0x90
[  912.843012][T23549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  912.848908][T23549] RIP: 0033:0x7f72f559e0d9
[  912.853324][T23549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  912.872941][T23549] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  912.881359][T23549] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  912.889325][T23549] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  912.897292][T23549] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  912.905266][T23549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  912.913271][T23549] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  912.921259][T23549]  </TASK>
[  912.955435][T23538] team0 (unregistering): Port device team_slave_1 removed
[  913.021960][T23538] team0 (unregistering): Port device bond0 removed
[  913.067464][T21205] wlan1: Trigger new scan to find an IBSS to join
[  913.119589][T21201] wlan1: Creating new IBSS network, BSSID c6:8f:13:17:65:ee
[  913.427414][T23557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  913.683091][T23564] __nla_validate_parse: 3 callbacks suppressed
[  913.683109][T23564] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5990'.
[  913.917182][T23564] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5990'.
[  915.713261][T23593] FAULT_INJECTION: forcing a failure.
[  915.713261][T23593] name failslab, interval 1, probability 0, space 0, times 0
[  915.757501][T23593] CPU: 1 PID: 23593 Comm: syz.3.5999 Not tainted syzkaller #0
[  915.765054][T23593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  915.775192][T23593] Call Trace:
[  915.778523][T23593]  <TASK>
[  915.781513][T23593]  dump_stack_lvl+0x18c/0x250
[  915.786253][T23593]  ? show_regs_print_info+0x20/0x20
[  915.791497][T23593]  ? load_image+0x420/0x420
[  915.796057][T23593]  ? __might_sleep+0xe0/0xe0
[  915.800719][T23593]  ? __lock_acquire+0x7d80/0x7d80
[  915.805812][T23593]  should_fail_ex+0x394/0x4c0
[  915.810572][T23593]  should_failslab+0x9/0x20
[  915.815129][T23593]  slab_pre_alloc_hook+0x59/0x300
[  915.820222][T23593]  ? ip_setup_cork+0x222/0x840
[  915.825048][T23593]  __kmem_cache_alloc_node+0x53/0x250
[  915.830494][T23593]  ? ip_setup_cork+0x222/0x840
[  915.835318][T23593]  kmalloc_trace+0x2a/0xe0
[  915.839808][T23593]  ip_setup_cork+0x222/0x840
[  915.844478][T23593]  ip_make_skb+0x157/0x440
[  915.848952][T23593]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  915.853863][T23593]  ? ip_flush_pending_frames+0x250/0x250
[  915.859609][T23593]  udp_sendmsg+0x1ae1/0x23d0
[  915.864265][T23593]  ? release_sock+0x2f/0x1c0
[  915.868946][T23593]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  915.873855][T23593]  ? udp_cmsg_send+0x350/0x350
[  915.878693][T23593]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  915.884738][T23593]  ? lock_chain_count+0x20/0x20
[  915.889648][T23593]  ? inet_sendmsg+0x10d/0x2a0
[  915.894403][T23593]  ? __local_bh_enable_ip+0x13a/0x1c0
[  915.899814][T23593]  ? _local_bh_enable+0xa0/0xa0
[  915.904724][T23593]  ? inet_sendmsg+0x10d/0x2a0
[  915.909451][T23593]  ? inet_sendmsg+0x10d/0x2a0
[  915.914171][T23593]  ? inet_send_prepare+0x250/0x250
[  915.919338][T23593]  ____sys_sendmsg+0x61b/0x980
[  915.924181][T23593]  ? __sys_sendmsg_sock+0x30/0x30
[  915.929251][T23593]  ? __import_iovec+0x3fa/0x850
[  915.934187][T23593]  ? import_iovec+0x73/0xa0
[  915.938759][T23593]  ___sys_sendmsg+0x2a6/0x360
[  915.943495][T23593]  ? get_pid_task+0x20/0x1e0
[  915.948149][T23593]  ? __sys_sendmsg+0x2b0/0x2b0
[  915.953027][T23593]  ? __lock_acquire+0x7d80/0x7d80
[  915.958182][T23593]  __se_sys_sendmsg+0x1d0/0x2c0
[  915.963103][T23593]  ? __x64_sys_sendmsg+0x80/0x80
[  915.968147][T23593]  ? lockdep_hardirqs_on+0x98/0x150
[  915.973418][T23593]  do_syscall_64+0x55/0xb0
[  915.977884][T23593]  ? clear_bhb_loop+0x40/0x90
[  915.982614][T23593]  ? clear_bhb_loop+0x40/0x90
[  915.987354][T23593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  915.993317][T23593] RIP: 0033:0x7fc300f9e0d9
[  915.997785][T23593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.017457][T23593] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  916.025934][T23593] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  916.033957][T23593] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007
[  916.041983][T23593] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  916.050014][T23593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  916.058038][T23593] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  916.066201][T23593]  </TASK>
[  916.777673][T23616] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6007'.
[  916.796742][T23616] validate_nla: 3 callbacks suppressed
[  916.796759][T23616] netlink: 'syz.1.6007': attribute type 21 has an invalid length.
[  916.834566][T23616] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.6007'.
[  918.306206][T23636] netlink: 'syz.1.6016': attribute type 29 has an invalid length.
[  918.326286][T23636] netlink: 'syz.1.6016': attribute type 29 has an invalid length.
[  918.354948][T23637] netlink: 'syz.1.6016': attribute type 29 has an invalid length.
[  918.379982][T23636] netlink: 'syz.1.6016': attribute type 29 has an invalid length.
[  918.425820][T22646] Bluetooth: hci3: command 0x0406 tx timeout
[  918.434900][T23636] netlink: 'syz.1.6016': attribute type 29 has an invalid length.
[  920.001627][T23665] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6020'.
[  920.093783][T23663] netlink: 'syz.0.6023': attribute type 10 has an invalid length.
[  920.138340][T23663] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6023'.
[  921.217783][T23680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6028'.
[  921.787504][T23680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.925618][T23680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  922.019113][T23680] bond0 (unregistering): Released all slaves
[  922.477868][T23695] netlink: 'syz.1.6034': attribute type 10 has an invalid length.
[  922.494693][T23695] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6034'.
[  923.157017][T23702] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6036'.
[  923.224903][T23706] netlink: 'syz.3.6038': attribute type 10 has an invalid length.
[  924.471838][T23725] netlink: 'syz.1.6044': attribute type 10 has an invalid length.
[  924.494940][T23725] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6044'.
[  924.758358][T23731] netlink: 'syz.1.6055': attribute type 10 has an invalid length.
[  924.781080][T23731] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6055'.
[  924.845759][T23734] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.6048'.
[  924.873787][T23734] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.6048'.
[  925.179043][T23748] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6051'.
[  925.266280][T23751] sctp: [Deprecated]: syz.2.6052 (pid 23751) Use of int in maxseg socket option.
[  925.266280][T23751] Use struct sctp_assoc_value instead
[  926.008044][T23767] netlink: 'syz.1.6060': attribute type 10 has an invalid length.
[  926.022688][T23767] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6060'.
[  926.058281][T23765] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6058'.
[  926.172569][T23775] netlink: 'syz.3.6062': attribute type 9 has an invalid length.
[  926.186792][T23775] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6062'.
[  926.481829][T23786] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6066'.
[  926.504650][T23786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  926.558401][T23791] netlink: 115888 bytes leftover after parsing attributes in process `syz.1.6066'.
[  926.727228][T23795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  927.041942][T23799] netlink: 'syz.0.6071': attribute type 10 has an invalid length.
[  927.054522][T23799] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6071'.
[  927.068154][T23803] netlink: 668 bytes leftover after parsing attributes in process `syz.3.6073'.
[  927.090995][T23803] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  927.105856][T23803] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  927.135788][T23801] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.6072'.
[  927.299662][T23808] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6070'.
[  927.345220][T23808] hsr_slave_0: left promiscuous mode
[  927.429562][T23808] hsr_slave_1: left promiscuous mode
[  928.056235][T23828] netlink: 'syz.1.6082': attribute type 10 has an invalid length.
[  928.236814][T23833] netlink: 'syz.3.6083': attribute type 7 has an invalid length.
[  928.274179][T23833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  928.399482][T23842] netlink: 'syz.1.6088': attribute type 10 has an invalid length.
[  928.571045][T23850] FAULT_INJECTION: forcing a failure.
[  928.571045][T23850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  928.605098][T23850] CPU: 0 PID: 23850 Comm: syz.2.6091 Not tainted syzkaller #0
[  928.612625][T23850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  928.622700][T23850] Call Trace:
[  928.625987][T23850]  <TASK>
[  928.628954][T23850]  dump_stack_lvl+0x18c/0x250
[  928.633642][T23850]  ? show_regs_print_info+0x20/0x20
[  928.638840][T23850]  ? load_image+0x420/0x420
[  928.643345][T23850]  ? __might_fault+0xaa/0x120
[  928.648020][T23850]  ? __lock_acquire+0x7d80/0x7d80
[  928.653047][T23850]  should_fail_ex+0x394/0x4c0
[  928.657727][T23850]  _copy_from_user+0x2f/0xe0
[  928.662325][T23850]  kstrtouint_from_user+0xde/0x170
[  928.667437][T23850]  ? kstrtol_from_user+0x190/0x190
[  928.672645][T23850]  proc_fail_nth_write+0x8f/0x250
[  928.677671][T23850]  ? proc_fail_nth_read+0x260/0x260
[  928.682870][T23850]  ? proc_fail_nth_read+0x260/0x260
[  928.688069][T23850]  vfs_write+0x299/0x9a0
[  928.692318][T23850]  ? file_end_write+0x250/0x250
[  928.697200][T23850]  ? __fget_files+0x28/0x460
[  928.701790][T23850]  ? __fget_files+0x3fc/0x460
[  928.706473][T23850]  ? __fdget_pos+0x2a3/0x330
[  928.711059][T23850]  ? ksys_write+0x74/0x260
[  928.715480][T23850]  ksys_write+0x151/0x260
[  928.719811][T23850]  ? __ia32_sys_read+0x90/0x90
[  928.724578][T23850]  ? lockdep_hardirqs_on+0x98/0x150
[  928.729780][T23850]  do_syscall_64+0x55/0xb0
[  928.734192][T23850]  ? clear_bhb_loop+0x40/0x90
[  928.738869][T23850]  ? clear_bhb_loop+0x40/0x90
[  928.743563][T23850]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  928.749478][T23850] RIP: 0033:0x7f2f2d35e90e
[  928.753898][T23850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  928.773690][T23850] RSP: 002b:00007f2f2e327fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  928.782105][T23850] RAX: ffffffffffffffda RBX: 00007f2f2e3286c0 RCX: 00007f2f2d35e90e
[  928.790090][T23850] RDX: 0000000000000001 RSI: 00007f2f2e3280a0 RDI: 0000000000000005
[  928.798068][T23850] RBP: 00007f2f2e328090 R08: 0000000000000000 R09: 0000000000000000
[  928.806076][T23850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  928.814079][T23850] R13: 00007f2f2d626038 R14: 00007f2f2d625fa0 R15: 00007ffd457a67d8
[  928.822071][T23850]  </TASK>
[  929.014022][T23855] netlink: 'syz.1.6093': attribute type 10 has an invalid length.
[  929.026859][T23859] netlink: get zone limit has 4 unknown bytes
[  930.183033][T23878] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  930.229929][T21202] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  930.248476][T21202] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  930.406902][T23891] netlink: 'syz.2.6106': attribute type 10 has an invalid length.
[  930.420162][T23891] __nla_validate_parse: 4 callbacks suppressed
[  930.420181][T23891] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6106'.
[  930.443168][T23891] batadv_slave_1: entered promiscuous mode
[  930.450643][T23891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  930.492743][T23891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  930.515666][T23890] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6109'.
[  930.534085][T23892] netlink: 'syz.3.6109': attribute type 21 has an invalid length.
[  930.594993][T23892] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6109'.
[  930.616531][T23892] netlink: 'syz.3.6109': attribute type 4 has an invalid length.
[  931.033400][T23906] FAULT_INJECTION: forcing a failure.
[  931.033400][T23906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  931.059757][T23910] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.6117'.
[  931.069618][T23906] CPU: 1 PID: 23906 Comm: syz.3.6116 Not tainted syzkaller #0
[  931.077558][T23906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  931.087625][T23906] Call Trace:
[  931.090912][T23906]  <TASK>
[  931.093840][T23906]  dump_stack_lvl+0x18c/0x250
[  931.098523][T23906]  ? show_regs_print_info+0x20/0x20
[  931.103723][T23906]  ? load_image+0x420/0x420
[  931.108225][T23906]  ? __might_fault+0xaa/0x120
[  931.112905][T23906]  ? __lock_acquire+0x7d80/0x7d80
[  931.117927][T23906]  ? __virt_addr_valid+0x10c/0x380
[  931.123067][T23906]  should_fail_ex+0x394/0x4c0
[  931.127746][T23906]  _copy_from_user+0x2f/0xe0
[  931.132334][T23906]  generic_map_update_batch+0x53e/0x800
[  931.137886][T23906]  ? rcu_read_unlock+0xa0/0xa0
[  931.142656][T23906]  ? __fdget+0x180/0x210
[  931.146911][T23906]  ? rcu_read_unlock+0xa0/0xa0
[  931.151669][T23906]  bpf_map_do_batch+0x3f2/0x600
[  931.156543][T23906]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  931.162107][T23906]  __sys_bpf+0x381/0x890
[  931.166367][T23906]  ? bpf_link_show_fdinfo+0x390/0x390
[  931.171750][T23906]  ? lock_chain_count+0x20/0x20
[  931.176886][T23906]  __x64_sys_bpf+0x7c/0x90
[  931.181325][T23906]  do_syscall_64+0x55/0xb0
[  931.185747][T23906]  ? clear_bhb_loop+0x40/0x90
[  931.190433][T23906]  ? clear_bhb_loop+0x40/0x90
[  931.195111][T23906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  931.201009][T23906] RIP: 0033:0x7fc300f9e0d9
[  931.205497][T23906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.225119][T23906] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  931.233540][T23906] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  931.241535][T23906] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  931.249503][T23906] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  931.257468][T23906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  931.265440][T23906] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  931.273514][T23906]  </TASK>
[  931.501558][T23916] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6120'.
[  931.710299][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  931.719557][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  931.762362][T23926] netlink: 'syz.1.6122': attribute type 10 has an invalid length.
[  931.791729][T23926] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6122'.
[  931.890646][T23931] netlink: 'syz.2.6124': attribute type 4 has an invalid length.
[  932.322660][T23949] syzkaller0: entered promiscuous mode
[  932.330599][T23949] syzkaller0: entered allmulticast mode
[  932.435640][T23954] netlink: 'syz.0.6132': attribute type 21 has an invalid length.
[  932.443615][T23954] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6132'.
[  932.598228][T23961] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6135'.
[  932.952995][T23970] delete_channel: no stack
[  933.026465][T23980] netlink: 668 bytes leftover after parsing attributes in process `syz.1.6142'.
[  933.036731][T23980] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  933.045232][T23980] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  933.162275][T23986] validate_nla: 1 callbacks suppressed
[  933.162299][T23986] netlink: 'syz.1.6145': attribute type 10 has an invalid length.
[  933.177032][T23986] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6145'.
[  933.792353][T24004] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  933.846988][T22646] Bluetooth: hci4: command 0x0406 tx timeout
[  933.860340][T24004] CPU: 1 PID: 24004 Comm: syz.1.6149 Not tainted syzkaller #0
[  933.867853][T24004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  933.877927][T24004] Call Trace:
[  933.881222][T24004]  <TASK>
[  933.884164][T24004]  dump_stack_lvl+0x18c/0x250
[  933.888880][T24004]  ? show_regs_print_info+0x20/0x20
[  933.894111][T24004]  ? load_image+0x420/0x420
[  933.898648][T24004]  sysfs_warn_dup+0x8e/0xa0
[  933.903173][T24004]  sysfs_do_create_link_sd+0xc0/0x110
[  933.908570][T24004]  device_add_class_symlinks+0x1cf/0x240
[  933.914233][T24004]  device_add+0x4f9/0xc40
[  933.918586][T24004]  wiphy_register+0x1d99/0x2ac0
[  933.923489][T24004]  ? cfg80211_event_work+0x40/0x40
[  933.928625][T24004]  ? minstrel_ht_alloc+0x88a/0x990
[  933.933792][T24004]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  933.939902][T24004]  ieee80211_register_hw+0x2dd8/0x3b30
[  933.945414][T24004]  ? ieee80211_register_hw+0xf71/0x3b30
[  933.951005][T24004]  ? ieee80211_tasklet_handler+0x20/0x20
[  933.956677][T24004]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  933.962606][T24004]  ? __debug_object_init+0xec/0x450
[  933.967848][T24004]  ? __asan_memset+0x22/0x40
[  933.972477][T24004]  ? __hrtimer_init+0x189/0x270
[  933.977362][T24004]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  933.983140][T24004]  ? mac80211_hwsim_free+0x220/0x220
[  933.988455][T24004]  ? rcu_is_watching+0x15/0xb0
[  933.993249][T24004]  ? kstrndup+0xbd/0x140
[  933.997530][T24004]  hwsim_new_radio_nl+0xdad/0x1a70
[  934.002669][T24004]  ? __nla_validate+0x50/0x50
[  934.007492][T24004]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  934.013871][T24004]  ? __nla_parse+0x40/0x50
[  934.018338][T24004]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  934.024705][T24004]  genl_family_rcv_msg_doit+0x21a/0x310
[  934.030290][T24004]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  934.036225][T24004]  ? bpf_lsm_capable+0x9/0x10
[  934.040929][T24004]  ? security_capable+0x89/0xb0
[  934.045818][T24004]  genl_rcv_msg+0x611/0x7a0
[  934.050360][T24004]  ? genl_bind+0x360/0x360
[  934.054798][T24004]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  934.061150][T24004]  ? ref_tracker_free+0x686/0x830
[  934.066200][T24004]  ? __kasan_kmalloc_large+0x8b/0xa0
[  934.071533][T24004]  netlink_rcv_skb+0x235/0x4c0
[  934.076336][T24004]  ? genl_bind+0x360/0x360
[  934.080787][T24004]  ? netlink_ack+0x1160/0x1160
[  934.085584][T24004]  ? __lock_acquire+0x7d80/0x7d80
[  934.090642][T24004]  ? down_read+0x1ac/0x2e0
[  934.095089][T24004]  genl_rcv+0x28/0x40
[  934.099091][T24004]  netlink_unicast+0x7b1/0x930
[  934.104079][T24004]  netlink_sendmsg+0x8d0/0xbf0
[  934.108885][T24004]  ? netlink_getsockopt+0x590/0x590
[  934.114114][T24004]  ? apparmor_socket_sendmsg+0x8e/0x330
[  934.119687][T24004]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  934.125031][T24004]  ? security_socket_sendmsg+0x80/0xa0
[  934.130548][T24004]  ? netlink_getsockopt+0x590/0x590
[  934.135776][T24004]  ____sys_sendmsg+0x61b/0x980
[  934.140578][T24004]  ? __asan_memset+0x22/0x40
[  934.145196][T24004]  ? __sys_sendmsg_sock+0x30/0x30
[  934.150238][T24004]  ? __import_iovec+0x5f2/0x850
[  934.155127][T24004]  ? import_iovec+0x73/0xa0
[  934.159660][T24004]  ___sys_sendmsg+0x2a6/0x360
[  934.164376][T24004]  ? __sys_sendmsg+0x2b0/0x2b0
[  934.169196][T24004]  ? trace_call_bpf+0xc3/0x6c0
[  934.174015][T24004]  __se_sys_sendmsg+0x1d0/0x2c0
[  934.178890][T24004]  ? perf_trace_preemptirq_template+0x269/0x330
[  934.185249][T24004]  ? __x64_sys_sendmsg+0x80/0x80
[  934.190230][T24004]  ? lockdep_hardirqs_on+0x98/0x150
[  934.195460][T24004]  do_syscall_64+0x55/0xb0
[  934.199896][T24004]  ? clear_bhb_loop+0x40/0x90
[  934.204593][T24004]  ? clear_bhb_loop+0x40/0x90
[  934.209295][T24004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  934.215241][T24004] RIP: 0033:0x7fc79b39e0d9
[  934.219701][T24004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.239421][T24004] RSP: 002b:00007fc79c2ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.247867][T24004] RAX: ffffffffffffffda RBX: 00007fc79b626180 RCX: 00007fc79b39e0d9
[  934.255860][T24004] RDX: 0500000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  934.263861][T24004] RBP: 00007fc79b435024 R08: 0000000000000000 R09: 0000000000000000
[  934.271857][T24004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.279855][T24004] R13: 00007fc79b626218 R14: 00007fc79b626180 R15: 00007ffc1da554b8
[  934.287884][T24004]  </TASK>
[  934.553433][T24015] netlink: 'syz.1.6156': attribute type 10 has an invalid length.
[  935.352406][T24043] netlink: 'syz.2.6168': attribute type 10 has an invalid length.
[  935.417739][T24048] netlink: 'syz.1.6170': attribute type 39 has an invalid length.
[  938.730071][T24064] netlink: 'syz.0.6176': attribute type 9 has an invalid length.
[  938.764532][T24064] __nla_validate_parse: 6 callbacks suppressed
[  938.764547][T24064] netlink: 172496 bytes leftover after parsing attributes in process `syz.0.6176'.
[  939.064563][T24077] netlink: 'syz.1.6181': attribute type 10 has an invalid length.
[  939.083375][T24077] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6181'.
[  939.964342][T24109] netlink: 'syz.3.6195': attribute type 10 has an invalid length.
[  939.994997][T24109] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6195'.
[  940.110839][T24113] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.6197'.
[  940.131416][T24116] netlink: 'syz.3.6198': attribute type 29 has an invalid length.
[  940.143374][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6198'.
[  940.160037][T24116] netlink: 'syz.3.6198': attribute type 29 has an invalid length.
[  940.197696][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6198'.
[  940.668392][T24139] netlink: 'syz.1.6206': attribute type 10 has an invalid length.
[  940.724834][T24139] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6206'.
[  941.491850][T24163] netlink: 'syz.0.6216': attribute type 10 has an invalid length.
[  941.530863][T24163] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6216'.
[  941.787044][T24170] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6219'.
[  942.275232][T24187] netlink: 'syz.1.6228': attribute type 10 has an invalid length.
[  942.285204][T24188] FAULT_INJECTION: forcing a failure.
[  942.285204][T24188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  942.313890][T24187] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6228'.
[  942.334377][T24188] CPU: 1 PID: 24188 Comm: syz.0.6226 Not tainted syzkaller #0
[  942.341893][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  942.351979][T24188] Call Trace:
[  942.355272][T24188]  <TASK>
[  942.358216][T24188]  dump_stack_lvl+0x18c/0x250
[  942.362917][T24188]  ? show_regs_print_info+0x20/0x20
[  942.368152][T24188]  ? load_image+0x420/0x420
[  942.372862][T24188]  ? __might_fault+0xaa/0x120
[  942.377570][T24188]  ? __lock_acquire+0x7d80/0x7d80
[  942.382620][T24188]  ? __virt_addr_valid+0x10c/0x380
[  942.387760][T24188]  should_fail_ex+0x394/0x4c0
[  942.392465][T24188]  _copy_from_user+0x2f/0xe0
[  942.397078][T24188]  generic_map_update_batch+0x58c/0x800
[  942.402653][T24188]  ? rcu_read_unlock+0xa0/0xa0
[  942.407441][T24188]  ? __fdget+0x180/0x210
[  942.411726][T24188]  ? rcu_read_unlock+0xa0/0xa0
[  942.416520][T24188]  bpf_map_do_batch+0x3f2/0x600
[  942.421411][T24188]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  942.426997][T24188]  __sys_bpf+0x381/0x890
[  942.431279][T24188]  ? bpf_link_show_fdinfo+0x390/0x390
[  942.436700][T24188]  ? lock_chain_count+0x20/0x20
[  942.441574][T24188]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  942.447586][T24188]  __x64_sys_bpf+0x7c/0x90
[  942.452026][T24188]  do_syscall_64+0x55/0xb0
[  942.456469][T24188]  ? clear_bhb_loop+0x40/0x90
[  942.461207][T24188]  ? clear_bhb_loop+0x40/0x90
[  942.465908][T24188]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  942.471821][T24188] RIP: 0033:0x7f72f559e0d9
[  942.476256][T24188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.495886][T24188] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  942.504330][T24188] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  942.512322][T24188] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  942.520315][T24188] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  942.528305][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  942.536291][T24188] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  942.544298][T24188]  </TASK>
[  942.906117][T24198] netlink: 'syz.2.6231': attribute type 4 has an invalid length.
[  942.917771][T24196] netlink: 'syz.3.6230': attribute type 10 has an invalid length.
[  943.511469][T24213] tap0: tun_chr_ioctl cmd 35108
[  943.528588][T24213] tap0: tun_chr_ioctl cmd 1074025681
[  943.767717][T24219] netlink: 'syz.2.6237': attribute type 10 has an invalid length.
[  943.798548][T24219] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6237'.
[  943.824752][T24221] netlink: 'syz.3.6239': attribute type 21 has an invalid length.
[  943.840817][T24221] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6239'.
[  943.953912][T24235] netlink: 'syz.1.6242': attribute type 13 has an invalid length.
[  943.961983][T24235] netlink: 'syz.1.6242': attribute type 58 has an invalid length.
[  943.974828][T24235] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6242'.
[  944.013084][T24235] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6242'.
[  944.320637][T24245] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6245'.
[  944.579671][T24256] netlink: 'syz.1.6251': attribute type 10 has an invalid length.
[  944.615483][T24256] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6251'.
[  944.680074][T24259] FAULT_INJECTION: forcing a failure.
[  944.680074][T24259] name failslab, interval 1, probability 0, space 0, times 0
[  944.693447][T24259] CPU: 0 PID: 24259 Comm: syz.0.6252 Not tainted syzkaller #0
[  944.700974][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  944.711050][T24259] Call Trace:
[  944.714343][T24259]  <TASK>
[  944.717287][T24259]  dump_stack_lvl+0x18c/0x250
[  944.721990][T24259]  ? show_regs_print_info+0x20/0x20
[  944.727203][T24259]  ? load_image+0x420/0x420
[  944.731732][T24259]  ? __might_sleep+0xe0/0xe0
[  944.736349][T24259]  ? __lock_acquire+0x7d80/0x7d80
[  944.741415][T24259]  should_fail_ex+0x394/0x4c0
[  944.746147][T24259]  should_failslab+0x9/0x20
[  944.750678][T24259]  slab_pre_alloc_hook+0x59/0x300
[  944.755740][T24259]  kmem_cache_alloc_node+0x5e/0x310
[  944.760973][T24259]  ? __alloc_skb+0x103/0x2c0
[  944.765592][T24259]  __alloc_skb+0x103/0x2c0
[  944.770030][T24259]  alloc_skb_with_frags+0xcd/0x7a0
[  944.775174][T24259]  ? is_bpf_text_address+0x28f/0x2a0
[  944.780475][T24259]  ? is_bpf_text_address+0x26/0x2a0
[  944.785693][T24259]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.791786][T24259]  sock_alloc_send_pskb+0x883/0x9a0
[  944.797013][T24259]  ? stack_trace_save+0x100/0x100
[  944.802084][T24259]  ? sock_kzfree_s+0x50/0x50
[  944.806711][T24259]  ? __stack_depot_save+0x1f/0x660
[  944.811844][T24259]  ? kasan_set_track+0x5f/0x70
[  944.816625][T24259]  ? kasan_set_track+0x4e/0x70
[  944.821411][T24259]  __ip_append_data+0x2a08/0x3bf0
[  944.826459][T24259]  ? do_syscall_64+0x55/0xb0
[  944.831068][T24259]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.837181][T24259]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  944.842070][T24259]  ? ip_setup_cork+0x840/0x840
[  944.846886][T24259]  ? ip_setup_cork+0x527/0x840
[  944.851679][T24259]  ip_make_skb+0x22b/0x440
[  944.856125][T24259]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  944.860990][T24259]  ? ip_flush_pending_frames+0x250/0x250
[  944.866751][T24259]  udp_sendmsg+0x1ae1/0x23d0
[  944.871364][T24259]  ? release_sock+0x2f/0x1c0
[  944.876009][T24259]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  944.880880][T24259]  ? udp_cmsg_send+0x350/0x350
[  944.885679][T24259]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  944.891677][T24259]  ? lock_chain_count+0x20/0x20
[  944.896546][T24259]  ? inet_sendmsg+0x10d/0x2a0
[  944.901262][T24259]  ? __local_bh_enable_ip+0x13a/0x1c0
[  944.906648][T24259]  ? _local_bh_enable+0xa0/0xa0
[  944.911525][T24259]  ? inet_sendmsg+0x10d/0x2a0
[  944.916227][T24259]  ? inet_sendmsg+0x10d/0x2a0
[  944.920931][T24259]  ? inet_send_prepare+0x250/0x250
[  944.926073][T24259]  ____sys_sendmsg+0x61b/0x980
[  944.930872][T24259]  ? __sys_sendmsg_sock+0x30/0x30
[  944.935924][T24259]  ? __import_iovec+0x3fa/0x850
[  944.940805][T24259]  ? import_iovec+0x73/0xa0
[  944.945329][T24259]  ___sys_sendmsg+0x2a6/0x360
[  944.950036][T24259]  ? __sys_sendmsg+0x2b0/0x2b0
[  944.954841][T24259]  ? __lock_acquire+0x7d80/0x7d80
[  944.959922][T24259]  __se_sys_sendmsg+0x1d0/0x2c0
[  944.964801][T24259]  ? __x64_sys_sendmsg+0x80/0x80
[  944.969775][T24259]  ? lockdep_hardirqs_on+0x98/0x150
[  944.975001][T24259]  do_syscall_64+0x55/0xb0
[  944.979431][T24259]  ? clear_bhb_loop+0x40/0x90
[  944.984122][T24259]  ? clear_bhb_loop+0x40/0x90
[  944.988816][T24259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.994725][T24259] RIP: 0033:0x7f72f559e0d9
[  944.999157][T24259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  945.018795][T24259] RSP: 002b:00007f72f64a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  945.027243][T24259] RAX: ffffffffffffffda RBX: 00007f72f5825fa0 RCX: 00007f72f559e0d9
[  945.035240][T24259] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007
[  945.043250][T24259] RBP: 00007f72f64a5090 R08: 0000000000000000 R09: 0000000000000000
[  945.051253][T24259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  945.059249][T24259] R13: 00007f72f5826038 R14: 00007f72f5825fa0 R15: 00007ffeec866b58
[  945.067270][T24259]  </TASK>
[  945.279548][T24263] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6253'.
[  945.293201][T24267] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6253'.
[  945.561587][T24279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6260'.
[  945.615458][T24279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  945.675740][T24284] netlink: 'syz.3.6261': attribute type 10 has an invalid length.
[  945.684040][T24284] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6261'.
[  946.266986][T24307] netlink: 'syz.2.6270': attribute type 33 has an invalid length.
[  946.711679][T24317] netlink: 'syz.0.6274': attribute type 10 has an invalid length.
[  946.947129][T24328] netlink: 'syz.0.6279': attribute type 10 has an invalid length.
[  947.126348][T24334] openvswitch: netlink: Key type 8208 is out of range max 32
[  947.697453][T24350] sctp: [Deprecated]: syz.2.6287 (pid 24350) Use of int in maxseg socket option.
[  947.697453][T24350] Use struct sctp_assoc_value instead
[  947.852946][T24355] netlink: 'syz.1.6288': attribute type 10 has an invalid length.
[  949.128131][T24390] __nla_validate_parse: 8 callbacks suppressed
[  949.128149][T24390] netlink: 668 bytes leftover after parsing attributes in process `syz.3.6301'.
[  949.164716][T24390] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  949.201861][T24390] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  949.322874][T24391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  949.365944][T24397] validate_nla: 1 callbacks suppressed
[  949.365963][T24397] netlink: 'syz.2.6304': attribute type 10 has an invalid length.
[  949.407497][T24397] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6304'.
[  949.445934][T24398] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.6303'.
[  949.652205][T24406] netlink: 'syz.2.6306': attribute type 2 has an invalid length.
[  950.051194][T24410] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6308'.
[  950.395633][T24422] netlink: 'syz.2.6314': attribute type 10 has an invalid length.
[  950.424652][T24422] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6314'.
[  950.671252][T24433] netlink: 'syz.1.6316': attribute type 10 has an invalid length.
[  951.362485][T24455] netlink: 'syz.1.6326': attribute type 10 has an invalid length.
[  951.380267][T24455] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6326'.
[  951.601201][T24461] netlink: 'syz.0.6328': attribute type 28 has an invalid length.
[  951.721654][T24465] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  951.724533][ T9431] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  951.754570][ T9431] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  951.926378][T24473] netlink: 'syz.3.6333': attribute type 3 has an invalid length.
[  952.421547][T24489] FAULT_INJECTION: forcing a failure.
[  952.421547][T24489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  952.445527][T24489] CPU: 1 PID: 24489 Comm: syz.3.6341 Not tainted syzkaller #0
[  952.453079][T24489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  952.463159][T24489] Call Trace:
[  952.466463][T24489]  <TASK>
[  952.469416][T24489]  dump_stack_lvl+0x18c/0x250
[  952.474123][T24489]  ? show_regs_print_info+0x20/0x20
[  952.479361][T24489]  ? load_image+0x420/0x420
[  952.483884][T24489]  ? __might_fault+0xaa/0x120
[  952.488574][T24489]  ? __lock_acquire+0x7d80/0x7d80
[  952.493618][T24489]  ? __virt_addr_valid+0x10c/0x380
[  952.498757][T24489]  should_fail_ex+0x394/0x4c0
[  952.503452][T24489]  _copy_from_user+0x2f/0xe0
[  952.508043][T24489]  generic_map_update_batch+0x58c/0x800
[  952.513596][T24489]  ? rcu_read_unlock+0xa0/0xa0
[  952.518362][T24489]  ? __fdget+0x180/0x210
[  952.522606][T24489]  ? rcu_read_unlock+0xa0/0xa0
[  952.527369][T24489]  bpf_map_do_batch+0x3f2/0x600
[  952.532225][T24489]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  952.537786][T24489]  __sys_bpf+0x381/0x890
[  952.542036][T24489]  ? bpf_link_show_fdinfo+0x390/0x390
[  952.547622][T24489]  ? lock_chain_count+0x20/0x20
[  952.552635][T24489]  __x64_sys_bpf+0x7c/0x90
[  952.557069][T24489]  do_syscall_64+0x55/0xb0
[  952.561510][T24489]  ? clear_bhb_loop+0x40/0x90
[  952.566214][T24489]  ? clear_bhb_loop+0x40/0x90
[  952.571001][T24489]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  952.576994][T24489] RIP: 0033:0x7fc300f9e0d9
[  952.581415][T24489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  952.601028][T24489] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  952.609446][T24489] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  952.617416][T24489] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  952.625401][T24489] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  952.633391][T24489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  952.641368][T24489] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  952.649359][T24489]  </TASK>
[  953.019322][T24508] netlink: 'syz.0.6347': attribute type 4 has an invalid length.
[  953.453019][T24523] syzkaller0: entered promiscuous mode
[  953.465080][T24523] syzkaller0: entered allmulticast mode
[  953.472418][T24521] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6353'.
[  954.069312][T24544] netlink: 668 bytes leftover after parsing attributes in process `syz.2.6362'.
[  954.083194][T24544] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  954.093887][T24544] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  954.512499][T24561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6369'.
[  954.551537][T24561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6369'.
[  954.952318][T24586] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6372'.
[  954.977227][T24586] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  954.993711][T24586] CPU: 0 PID: 24586 Comm: syz.1.6372 Not tainted syzkaller #0
[  955.001233][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  955.011322][T24586] Call Trace:
[  955.014640][T24586]  <TASK>
[  955.017599][T24586]  dump_stack_lvl+0x18c/0x250
[  955.022323][T24586]  ? show_regs_print_info+0x20/0x20
[  955.027560][T24586]  ? load_image+0x420/0x420
[  955.032111][T24586]  sysfs_warn_dup+0x8e/0xa0
[  955.036648][T24586]  sysfs_do_create_link_sd+0xc0/0x110
[  955.042040][T24586]  device_add_class_symlinks+0x1cf/0x240
[  955.047717][T24586]  device_add+0x4f9/0xc40
[  955.052086][T24586]  wiphy_register+0x1d99/0x2ac0
[  955.056991][T24586]  ? cfg80211_event_work+0x40/0x40
[  955.062135][T24586]  ? minstrel_ht_alloc+0x88a/0x990
[  955.067268][T24586]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  955.073355][T24586]  ieee80211_register_hw+0x2dd8/0x3b30
[  955.078873][T24586]  ? ieee80211_register_hw+0xf71/0x3b30
[  955.084473][T24586]  ? ieee80211_tasklet_handler+0x20/0x20
[  955.090146][T24586]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  955.096073][T24586]  ? __debug_object_init+0xec/0x450
[  955.101324][T24586]  ? __asan_memset+0x22/0x40
[  955.105960][T24586]  ? __hrtimer_init+0x189/0x270
[  955.110854][T24586]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  955.116634][T24586]  ? mac80211_hwsim_free+0x220/0x220
[  955.121952][T24586]  ? rcu_is_watching+0x15/0xb0
[  955.126847][T24586]  ? kstrndup+0xbd/0x140
[  955.131160][T24586]  hwsim_new_radio_nl+0xdad/0x1a70
[  955.136321][T24586]  ? __nla_validate+0x50/0x50
[  955.141093][T24586]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  955.147478][T24586]  ? __nla_parse+0x40/0x50
[  955.151927][T24586]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  955.158299][T24586]  genl_family_rcv_msg_doit+0x21a/0x310
[  955.163881][T24586]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  955.169805][T24586]  ? bpf_lsm_capable+0x9/0x10
[  955.174497][T24586]  ? security_capable+0x89/0xb0
[  955.179374][T24586]  genl_rcv_msg+0x611/0x7a0
[  955.183892][T24586]  ? genl_bind+0x360/0x360
[  955.188341][T24586]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  955.194686][T24586]  ? ref_tracker_free+0x686/0x830
[  955.199721][T24586]  ? __kasan_kmalloc_large+0x8b/0xa0
[  955.205026][T24586]  netlink_rcv_skb+0x235/0x4c0
[  955.209801][T24586]  ? genl_bind+0x360/0x360
[  955.214223][T24586]  ? netlink_ack+0x1160/0x1160
[  955.219000][T24586]  ? __lock_acquire+0x7d80/0x7d80
[  955.224038][T24586]  ? down_read+0x1ac/0x2e0
[  955.228472][T24586]  genl_rcv+0x28/0x40
[  955.232462][T24586]  netlink_unicast+0x7b1/0x930
[  955.237265][T24586]  netlink_sendmsg+0x8d0/0xbf0
[  955.242060][T24586]  ? netlink_getsockopt+0x590/0x590
[  955.247268][T24586]  ? apparmor_socket_sendmsg+0x8e/0x330
[  955.252821][T24586]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  955.258116][T24586]  ? security_socket_sendmsg+0x80/0xa0
[  955.263579][T24586]  ? netlink_getsockopt+0x590/0x590
[  955.268786][T24586]  ____sys_sendmsg+0x61b/0x980
[  955.273563][T24586]  ? __asan_memset+0x22/0x40
[  955.278161][T24586]  ? __sys_sendmsg_sock+0x30/0x30
[  955.283186][T24586]  ? __import_iovec+0x5f2/0x850
[  955.288054][T24586]  ? import_iovec+0x73/0xa0
[  955.292564][T24586]  ___sys_sendmsg+0x2a6/0x360
[  955.297247][T24586]  ? __lock_acquire+0x7d80/0x7d80
[  955.302287][T24586]  ? __sys_sendmsg+0x2b0/0x2b0
[  955.307101][T24586]  __se_sys_sendmsg+0x1d0/0x2c0
[  955.311983][T24586]  ? __x64_sys_sendmsg+0x80/0x80
[  955.316939][T24586]  ? lockdep_hardirqs_on+0x98/0x150
[  955.322161][T24586]  do_syscall_64+0x55/0xb0
[  955.326581][T24586]  ? clear_bhb_loop+0x40/0x90
[  955.331265][T24586]  ? clear_bhb_loop+0x40/0x90
[  955.335948][T24586]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  955.341858][T24586] RIP: 0033:0x7fc79b39e0d9
[  955.346276][T24586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  955.366327][T24586] RSP: 002b:00007fc79c2ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  955.374751][T24586] RAX: ffffffffffffffda RBX: 00007fc79b626180 RCX: 00007fc79b39e0d9
[  955.382722][T24586] RDX: 0600000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  955.390693][T24586] RBP: 00007fc79b435024 R08: 0000000000000000 R09: 0000000000000000
[  955.398664][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  955.406653][T24586] R13: 00007fc79b626218 R14: 00007fc79b626180 R15: 00007ffc1da554b8
[  955.414644][T24586]  </TASK>
[  955.698227][T24607] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  955.924009][T24616] netlink: 'syz.2.6388': attribute type 39 has an invalid length.
[  956.029549][T24618] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6389'.
[  956.039404][T24618] bridge_slave_1: default FDB implementation only supports local addresses
[  956.162278][T24624] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6392'.
[  956.175075][T24624] bridge_slave_1: default FDB implementation only supports local addresses
[  956.736265][T24652] netlink: 'syz.1.6405': attribute type 10 has an invalid length.
[  956.753748][T24652] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6405'.
[  957.422213][T24673] netlink: 'syz.2.6415': attribute type 29 has an invalid length.
[  957.439296][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'.
[  957.454209][T24673] netlink: 'syz.2.6415': attribute type 29 has an invalid length.
[  957.466098][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'.
[  957.818508][T24684] netlink: 'syz.3.6418': attribute type 10 has an invalid length.
[  957.839828][T24684] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6418'.
[  958.472693][T24719] FAULT_INJECTION: forcing a failure.
[  958.472693][T24719] name failslab, interval 1, probability 0, space 0, times 0
[  958.511161][T24719] CPU: 1 PID: 24719 Comm: syz.3.6430 Not tainted syzkaller #0
[  958.518711][T24719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  958.528814][T24719] Call Trace:
[  958.532137][T24719]  <TASK>
[  958.535108][T24719]  dump_stack_lvl+0x18c/0x250
[  958.539852][T24719]  ? show_regs_print_info+0x20/0x20
[  958.545109][T24719]  ? load_image+0x420/0x420
[  958.549668][T24719]  ? __might_sleep+0xe0/0xe0
[  958.554312][T24719]  ? __lock_acquire+0x7d80/0x7d80
[  958.559390][T24719]  should_fail_ex+0x394/0x4c0
[  958.564110][T24719]  should_failslab+0x9/0x20
[  958.568646][T24719]  slab_pre_alloc_hook+0x59/0x300
[  958.573709][T24719]  ? trace_call_bpf+0x5e9/0x6c0
[  958.578590][T24719]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  958.584341][T24719]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  958.590087][T24719]  __kmem_cache_alloc_node+0x53/0x250
[  958.595500][T24719]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  958.601266][T24719]  __kmalloc+0xa7/0x240
[  958.605463][T24719]  tomoyo_realpath_from_path+0xe6/0x5c0
[  958.611052][T24719]  ? tomoyo_domain+0xd6/0x120
[  958.615772][T24719]  tomoyo_path_number_perm+0x248/0x5e0
[  958.621250][T24719]  ? tomoyo_path_number_perm+0x217/0x5e0
[  958.626928][T24719]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  958.632419][T24719]  ? ksys_write+0x1d2/0x260
[  958.637036][T24719]  ? __fget_files+0x28/0x460
[  958.641692][T24719]  security_file_ioctl+0x70/0xa0
[  958.646671][T24719]  __se_sys_ioctl+0x48/0x170
[  958.651391][T24719]  do_syscall_64+0x55/0xb0
[  958.655828][T24719]  ? clear_bhb_loop+0x40/0x90
[  958.660521][T24719]  ? clear_bhb_loop+0x40/0x90
[  958.665221][T24719]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  958.671138][T24719] RIP: 0033:0x7fc300f9e0d9
[  958.675582][T24719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.695239][T24719] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  958.703691][T24719] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  958.711690][T24719] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005
[  958.719683][T24719] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  958.727676][T24719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.735665][T24719] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  958.743695][T24719]  </TASK>
[  958.798758][T24719] ERROR: Out of memory at tomoyo_realpath_from_path.
[  959.396596][T24729] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6433'.
[  959.406672][T24729] openvswitch: netlink: Key type 29 is not supported
[  961.390211][T24720] netlink: 'syz.2.6431': attribute type 10 has an invalid length.
[  961.398178][T24720] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6431'.
[  961.517861][T24731] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6436'.
[  961.868614][T24752] netlink: 'syz.2.6442': attribute type 10 has an invalid length.
[  961.893035][T24752] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6442'.
[  962.045797][T24756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6443'.
[  962.103141][T24762] FAULT_INJECTION: forcing a failure.
[  962.103141][T24762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  962.116665][T24762] CPU: 0 PID: 24762 Comm: syz.1.6445 Not tainted syzkaller #0
[  962.124161][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  962.134327][T24762] Call Trace:
[  962.137640][T24762]  <TASK>
[  962.140599][T24762]  dump_stack_lvl+0x18c/0x250
[  962.145317][T24762]  ? show_regs_print_info+0x20/0x20
[  962.150548][T24762]  ? load_image+0x420/0x420
[  962.155060][T24762]  ? __might_fault+0xaa/0x120
[  962.159743][T24762]  ? __lock_acquire+0x7d80/0x7d80
[  962.164780][T24762]  ? __virt_addr_valid+0x10c/0x380
[  962.169888][T24762]  should_fail_ex+0x394/0x4c0
[  962.174578][T24762]  _copy_from_user+0x2f/0xe0
[  962.179175][T24762]  generic_map_update_batch+0x53e/0x800
[  962.184719][T24762]  ? rcu_read_unlock+0xa0/0xa0
[  962.189485][T24762]  ? __fdget+0x180/0x210
[  962.193751][T24762]  ? rcu_read_unlock+0xa0/0xa0
[  962.198507][T24762]  bpf_map_do_batch+0x3f2/0x600
[  962.203353][T24762]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  962.208891][T24762]  __sys_bpf+0x381/0x890
[  962.213126][T24762]  ? bpf_link_show_fdinfo+0x390/0x390
[  962.218497][T24762]  ? lock_chain_count+0x20/0x20
[  962.223381][T24762]  __x64_sys_bpf+0x7c/0x90
[  962.227803][T24762]  do_syscall_64+0x55/0xb0
[  962.232229][T24762]  ? clear_bhb_loop+0x40/0x90
[  962.236899][T24762]  ? clear_bhb_loop+0x40/0x90
[  962.241578][T24762]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.247477][T24762] RIP: 0033:0x7fc79b39e0d9
[  962.251910][T24762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  962.271512][T24762] RSP: 002b:00007fc79c2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  962.279929][T24762] RAX: ffffffffffffffda RBX: 00007fc79b625fa0 RCX: 00007fc79b39e0d9
[  962.287911][T24762] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  962.295899][T24762] RBP: 00007fc79c2ee090 R08: 0000000000000000 R09: 0000000000000000
[  962.303872][T24762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  962.311837][T24762] R13: 00007fc79b626038 R14: 00007fc79b625fa0 R15: 00007ffc1da554b8
[  962.319823][T24762]  </TASK>
[  962.623265][T24769] netlink: 'syz.1.6448': attribute type 10 has an invalid length.
[  962.702620][T24779] netlink: 'syz.0.6452': attribute type 10 has an invalid length.
[  962.711013][T24779] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6452'.
[  962.885484][T24786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6454'.
[  962.904931][T24785] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6454'.
[  962.965536][T24786] netlink: 'syz.3.6454': attribute type 10 has an invalid length.
[  963.012097][T24785] netlink: 'syz.3.6454': attribute type 10 has an invalid length.
[  963.336552][T24804] netlink: 'syz.0.6461': attribute type 10 has an invalid length.
[  963.359546][T24804] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6461'.
[  963.484162][T24808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6462'.
[  963.670751][T24815] netlink: 'syz.2.6464': attribute type 27 has an invalid length.
[  963.760391][T24815] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.6464'.
[  964.288399][T24820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  964.353382][T24820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  964.446798][T24820] bond0 (unregistering): Released all slaves
[  964.717947][T24829] netlink: 'syz.3.6471': attribute type 10 has an invalid length.
[  964.801078][T24836] netlink: 'syz.0.6474': attribute type 10 has an invalid length.
[  966.418707][T24899] validate_nla: 2 callbacks suppressed
[  966.418726][T24899] netlink: 'syz.3.6498': attribute type 10 has an invalid length.
[  966.612419][T24907] __nla_validate_parse: 6 callbacks suppressed
[  966.612440][T24907] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6502'.
[  966.634843][T24907] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.6502'.
[  966.663903][T24909] netlink: 'syz.2.6503': attribute type 10 has an invalid length.
[  966.682185][T24909] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6503'.
[  966.848353][T24919] sctp: [Deprecated]: syz.1.6505 (pid 24919) Use of int in maxseg socket option.
[  966.848353][T24919] Use struct sctp_assoc_value instead
[  967.826436][T24935] netlink: 'syz.2.6510': attribute type 10 has an invalid length.
[  967.853333][T24935] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6510'.
[  968.195741][T24950] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6514'.
[  968.746453][T24966] netlink: 'syz.1.6522': attribute type 10 has an invalid length.
[  968.769884][T24966] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6522'.
[  968.832527][T24968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  968.919040][T24970] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6525'.
[  969.071203][T24974] netlink: 'syz.2.6527': attribute type 40 has an invalid length.
[  969.676355][T24980] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6529'.
[  970.144972][T24996] netlink: 'syz.0.6534': attribute type 10 has an invalid length.
[  970.184519][T24996] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6534'.
[  970.334643][T25000] netlink: 'syz.2.6535': attribute type 10 has an invalid length.
[  970.785735][T25017] netlink: 'syz.1.6540': attribute type 10 has an invalid length.
[  970.793624][T25017] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6540'.
[  971.285970][T25030] mac80211_hwsim hwsim88 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  971.314320][T25024] netlink: 'syz.3.6545': attribute type 10 has an invalid length.
[  971.662490][T25035] __nla_validate_parse: 1 callbacks suppressed
[  971.662512][T25035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6549'.
[  972.102736][T25051] FAULT_INJECTION: forcing a failure.
[  972.102736][T25051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  972.182250][T25051] CPU: 1 PID: 25051 Comm: syz.3.6554 Not tainted syzkaller #0
[  972.189775][T25051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  972.199853][T25051] Call Trace:
[  972.203160][T25051]  <TASK>
[  972.206111][T25051]  dump_stack_lvl+0x18c/0x250
[  972.210825][T25051]  ? show_regs_print_info+0x20/0x20
[  972.216062][T25051]  ? load_image+0x420/0x420
[  972.220586][T25051]  ? __might_fault+0xaa/0x120
[  972.225287][T25051]  ? __lock_acquire+0x7d80/0x7d80
[  972.230343][T25051]  ? __virt_addr_valid+0x10c/0x380
[  972.235482][T25051]  should_fail_ex+0x394/0x4c0
[  972.240188][T25051]  _copy_from_user+0x2f/0xe0
[  972.244828][T25051]  generic_map_update_batch+0x53e/0x800
[  972.250397][T25051]  ? rcu_read_unlock+0xa0/0xa0
[  972.255183][T25051]  ? __fdget+0x180/0x210
[  972.259434][T25051]  ? rcu_read_unlock+0xa0/0xa0
[  972.264197][T25051]  bpf_map_do_batch+0x3f2/0x600
[  972.269056][T25051]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  972.274646][T25051]  __sys_bpf+0x381/0x890
[  972.278914][T25051]  ? bpf_link_show_fdinfo+0x390/0x390
[  972.284301][T25051]  ? lock_chain_count+0x20/0x20
[  972.289156][T25051]  __x64_sys_bpf+0x7c/0x90
[  972.293571][T25051]  do_syscall_64+0x55/0xb0
[  972.298015][T25051]  ? clear_bhb_loop+0x40/0x90
[  972.302707][T25051]  ? clear_bhb_loop+0x40/0x90
[  972.307386][T25051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.313297][T25051] RIP: 0033:0x7fc300f9e0d9
[  972.317826][T25051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.337435][T25051] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  972.345855][T25051] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  972.353824][T25051] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  972.361797][T25051] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  972.369766][T25051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  972.377754][T25051] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  972.385738][T25051]  </TASK>
[  972.413863][T25057] netlink: 'syz.0.6559': attribute type 10 has an invalid length.
[  972.448089][T25057] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6559'.
[  972.552496][T25060] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6560'.
[  972.682528][T25069] netlink: 'syz.0.6563': attribute type 10 has an invalid length.
[  972.763059][T25069] 8021q: adding VLAN 0 to HW filter on device bond0
[  972.792647][T25069] team0: Port device bond0 added
[  972.814558][T25071] netlink: 'syz.3.6561': attribute type 4 has an invalid length.
[  973.170600][T25080] syzkaller0: entered promiscuous mode
[  973.184939][T25080] syzkaller0: entered allmulticast mode
[  973.225003][T25086] netlink: 668 bytes leftover after parsing attributes in process `syz.0.6570'.
[  973.234295][T25086] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  973.242734][T25086] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  973.364351][T25089] netlink: 'syz.0.6571': attribute type 10 has an invalid length.
[  973.408198][T25089] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6571'.
[  973.506491][T25093] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6573'.
[  973.526491][T25093] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  973.677158][T25101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6576'.
[  973.827793][T25107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6578'.
[  973.849045][T25107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6578'.
[  974.025262][ T9431] wlan1: Trigger new scan to find an IBSS to join
[  974.228408][T25120] netlink: 'syz.0.6584': attribute type 10 has an invalid length.
[  974.258113][T25120] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6584'.
[  974.828778][T25138] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  974.854943][T25138] CPU: 1 PID: 25138 Comm: syz.2.6588 Not tainted syzkaller #0
[  974.862561][T25138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  974.872644][T25138] Call Trace:
[  974.875949][T25138]  <TASK>
[  974.878888][T25138]  dump_stack_lvl+0x18c/0x250
[  974.883588][T25138]  ? show_regs_print_info+0x20/0x20
[  974.888805][T25138]  ? load_image+0x420/0x420
[  974.893321][T25138]  sysfs_warn_dup+0x8e/0xa0
[  974.897830][T25138]  sysfs_do_create_link_sd+0xc0/0x110
[  974.903203][T25138]  device_add_class_symlinks+0x1cf/0x240
[  974.908848][T25138]  device_add+0x4f9/0xc40
[  974.913214][T25138]  wiphy_register+0x1d99/0x2ac0
[  974.918098][T25138]  ? cfg80211_event_work+0x40/0x40
[  974.923221][T25138]  ? minstrel_ht_alloc+0x88a/0x990
[  974.928345][T25138]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  974.934436][T25138]  ieee80211_register_hw+0x2dd8/0x3b30
[  974.939915][T25138]  ? ieee80211_register_hw+0xf71/0x3b30
[  974.945479][T25138]  ? ieee80211_tasklet_handler+0x20/0x20
[  974.951116][T25138]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  974.957018][T25138]  ? __debug_object_init+0xec/0x450
[  974.962228][T25138]  ? __asan_memset+0x22/0x40
[  974.966827][T25138]  ? __hrtimer_init+0x189/0x270
[  974.971682][T25138]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  974.977431][T25138]  ? mac80211_hwsim_free+0x220/0x220
[  974.982720][T25138]  ? rcu_is_watching+0x15/0xb0
[  974.987496][T25138]  ? kstrndup+0xbd/0x140
[  974.991779][T25138]  hwsim_new_radio_nl+0xdad/0x1a70
[  974.996947][T25138]  ? __nla_validate+0x50/0x50
[  975.001653][T25138]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  975.008020][T25138]  ? __nla_parse+0x40/0x50
[  975.012467][T25138]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  975.018820][T25138]  genl_family_rcv_msg_doit+0x21a/0x310
[  975.024407][T25138]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  975.030327][T25138]  ? bpf_lsm_capable+0x9/0x10
[  975.035019][T25138]  ? security_capable+0x89/0xb0
[  975.039880][T25138]  genl_rcv_msg+0x611/0x7a0
[  975.044394][T25138]  ? genl_bind+0x360/0x360
[  975.048821][T25138]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  975.055167][T25138]  netlink_rcv_skb+0x235/0x4c0
[  975.059931][T25138]  ? genl_bind+0x360/0x360
[  975.064356][T25138]  ? netlink_ack+0x1160/0x1160
[  975.069137][T25138]  ? __lock_acquire+0x7d80/0x7d80
[  975.074183][T25138]  ? down_read+0x1ac/0x2e0
[  975.078612][T25138]  genl_rcv+0x28/0x40
[  975.082600][T25138]  netlink_unicast+0x7b1/0x930
[  975.087378][T25138]  netlink_sendmsg+0x8d0/0xbf0
[  975.092151][T25138]  ? netlink_getsockopt+0x590/0x590
[  975.097378][T25138]  ? apparmor_socket_sendmsg+0x8e/0x330
[  975.102931][T25138]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  975.108250][T25138]  ? security_socket_sendmsg+0x80/0xa0
[  975.113798][T25138]  ? netlink_getsockopt+0x590/0x590
[  975.119002][T25138]  ____sys_sendmsg+0x61b/0x980
[  975.123775][T25138]  ? __asan_memset+0x22/0x40
[  975.128379][T25138]  ? __sys_sendmsg_sock+0x30/0x30
[  975.133406][T25138]  ? __import_iovec+0x5f2/0x850
[  975.138299][T25138]  ? import_iovec+0x73/0xa0
[  975.142817][T25138]  ___sys_sendmsg+0x2a6/0x360
[  975.147497][T25138]  ? __lock_acquire+0x7d80/0x7d80
[  975.152527][T25138]  ? __sys_sendmsg+0x2b0/0x2b0
[  975.157339][T25138]  __se_sys_sendmsg+0x1d0/0x2c0
[  975.162198][T25138]  ? __x64_sys_sendmsg+0x80/0x80
[  975.167169][T25138]  ? lockdep_hardirqs_on+0x98/0x150
[  975.172399][T25138]  do_syscall_64+0x55/0xb0
[  975.176831][T25138]  ? clear_bhb_loop+0x40/0x90
[  975.181519][T25138]  ? clear_bhb_loop+0x40/0x90
[  975.186198][T25138]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  975.192117][T25138] RIP: 0033:0x7f2f2d39e0d9
[  975.196531][T25138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.216143][T25138] RSP: 002b:00007f2f2e2e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  975.224650][T25138] RAX: ffffffffffffffda RBX: 00007f2f2d626180 RCX: 00007f2f2d39e0d9
[  975.232626][T25138] RDX: 0700000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  975.240599][T25138] RBP: 00007f2f2d435024 R08: 0000000000000000 R09: 0000000000000000
[  975.248572][T25138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  975.256543][T25138] R13: 00007f2f2d626218 R14: 00007f2f2d626180 R15: 00007ffd457a67d8
[  975.264536][T25138]  </TASK>
[  975.414840][T25149] netlink: 'syz.1.6594': attribute type 10 has an invalid length.
[  975.523244][T25151] netlink: 'syz.0.6595': attribute type 39 has an invalid length.
[  975.999495][T25174] netlink: 'syz.0.6603': attribute type 1 has an invalid length.
[  976.133267][T25180] netlink: 'syz.0.6607': attribute type 10 has an invalid length.
[  976.613350][T25206] netlink: 'syz.1.6619': attribute type 10 has an invalid length.
[  976.752876][T25214] __nla_validate_parse: 6 callbacks suppressed
[  976.752913][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6621'.
[  976.762327][T25213] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6622'.
[  976.823870][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6621'.
[  977.229932][T25234] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6629'.
[  977.683033][T25249] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6635'.
[  977.802819][T25254] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6637'.
[  978.024588][ T9431] wlan1: Trigger new scan to find an IBSS to join
[  978.076157][T25266] validate_nla: 3 callbacks suppressed
[  978.076177][T25266] netlink: 'syz.1.6641': attribute type 10 has an invalid length.
[  978.104504][T25266] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6641'.
[  978.188798][T25270] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6642'.
[  978.220793][T25274] FAULT_INJECTION: forcing a failure.
[  978.220793][T25274] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  978.234595][T25274] CPU: 1 PID: 25274 Comm: syz.1.6644 Not tainted syzkaller #0
[  978.242102][T25274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  978.252185][T25274] Call Trace:
[  978.255505][T25274]  <TASK>
[  978.258456][T25274]  dump_stack_lvl+0x18c/0x250
[  978.263335][T25274]  ? show_regs_print_info+0x20/0x20
[  978.268555][T25274]  ? load_image+0x420/0x420
[  978.273126][T25274]  ? __might_fault+0xaa/0x120
[  978.277838][T25274]  ? __lock_acquire+0x7d80/0x7d80
[  978.282895][T25274]  ? __virt_addr_valid+0x10c/0x380
[  978.288041][T25274]  should_fail_ex+0x394/0x4c0
[  978.292749][T25274]  _copy_from_user+0x2f/0xe0
[  978.297365][T25274]  generic_map_update_batch+0x58c/0x800
[  978.302945][T25274]  ? rcu_read_unlock+0xa0/0xa0
[  978.307739][T25274]  ? __fdget+0x180/0x210
[  978.312013][T25274]  ? rcu_read_unlock+0xa0/0xa0
[  978.316814][T25274]  bpf_map_do_batch+0x3f2/0x600
[  978.321692][T25274]  ? bpf_lsm_audit_rule_match+0x10/0x10
[  978.327270][T25274]  __sys_bpf+0x381/0x890
[  978.331524][T25274]  ? bpf_link_show_fdinfo+0x390/0x390
[  978.336905][T25274]  ? lock_chain_count+0x20/0x20
[  978.341850][T25274]  __x64_sys_bpf+0x7c/0x90
[  978.346269][T25274]  do_syscall_64+0x55/0xb0
[  978.350688][T25274]  ? clear_bhb_loop+0x40/0x90
[  978.355364][T25274]  ? clear_bhb_loop+0x40/0x90
[  978.360040][T25274]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.365950][T25274] RIP: 0033:0x7fc79b39e0d9
[  978.370367][T25274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  978.389973][T25274] RSP: 002b:00007fc79c2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  978.398387][T25274] RAX: ffffffffffffffda RBX: 00007fc79b625fa0 RCX: 00007fc79b39e0d9
[  978.406359][T25274] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a
[  978.414332][T25274] RBP: 00007fc79c2ee090 R08: 0000000000000000 R09: 0000000000000000
[  978.422300][T25274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  978.430276][T25274] R13: 00007fc79b626038 R14: 00007fc79b625fa0 R15: 00007ffc1da554b8
[  978.438257][T25274]  </TASK>
[  978.724620][T25290] netlink: 'syz.0.6650': attribute type 10 has an invalid length.
[  978.954411][T25290] team0 (unregistering): Port device team_slave_0 removed
[  978.989546][T25290] team0 (unregistering): Port device team_slave_1 removed
[  979.037909][T25290] team0 (unregistering): Port device bond0 removed
[  979.736955][T25336] FAULT_INJECTION: forcing a failure.
[  979.736955][T25336] name failslab, interval 1, probability 0, space 0, times 0
[  979.773835][T25336] CPU: 1 PID: 25336 Comm: syz.2.6667 Not tainted syzkaller #0
[  979.781363][T25336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  979.791425][T25336] Call Trace:
[  979.794712][T25336]  <TASK>
[  979.797645][T25336]  dump_stack_lvl+0x18c/0x250
[  979.802328][T25336]  ? show_regs_print_info+0x20/0x20
[  979.807538][T25336]  ? load_image+0x420/0x420
[  979.812047][T25336]  should_fail_ex+0x394/0x4c0
[  979.816730][T25336]  should_failslab+0x9/0x20
[  979.821233][T25336]  slab_pre_alloc_hook+0x59/0x300
[  979.826277][T25336]  kmem_cache_alloc+0x5a/0x2c0
[  979.831043][T25336]  ? __nf_conntrack_alloc+0x93/0x370
[  979.836335][T25336]  __nf_conntrack_alloc+0x93/0x370
[  979.841470][T25336]  init_conntrack+0x166/0xe20
[  979.846150][T25336]  ? early_drop+0x7f0/0x7f0
[  979.850653][T25336]  ? nf_conntrack_find_get+0x670/0x670
[  979.856130][T25336]  ? __local_bh_enable_ip+0x13a/0x1c0
[  979.861504][T25336]  ? __siphash_unaligned+0x25c/0x3d0
[  979.866794][T25336]  nf_conntrack_in+0xc29/0x15b0
[  979.871670][T25336]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  979.877768][T25336]  ? nf_ct_pernet+0x270/0x270
[  979.882473][T25336]  ? ipt_do_table+0x2c5/0x15c0
[  979.887254][T25336]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  979.892716][T25336]  ? ipv4_conntrack_local+0x123/0x200
[  979.898089][T25336]  ? ipv4_conntrack_in+0x20/0x20
[  979.903028][T25336]  nf_hook_slow+0xbd/0x200
[  979.907452][T25336]  ? nf_hook+0x390/0x390
[  979.911699][T25336]  nf_hook+0x228/0x390
[  979.915769][T25336]  ? nf_hook+0xa2/0x390
[  979.919921][T25336]  ? __ip_local_out+0x5f0/0x5f0
[  979.924770][T25336]  ? nf_hook+0x390/0x390
[  979.929035][T25336]  ? ip_fast_csum+0x1ee/0x2b0
[  979.933720][T25336]  __ip_local_out+0x4db/0x5f0
[  979.938396][T25336]  ? nf_hook+0x390/0x390
[  979.942637][T25336]  ip_send_skb+0x4c/0x1d0
[  979.946969][T25336]  udp_send_skb+0xa7d/0x1440
[  979.951576][T25336]  udp_sendmsg+0x1b23/0x23d0
[  979.956184][T25336]  ? release_sock+0x2f/0x1c0
[  979.960782][T25336]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  979.965631][T25336]  ? udp_cmsg_send+0x350/0x350
[  979.970399][T25336]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  979.976379][T25336]  ? lock_chain_count+0x20/0x20
[  979.981313][T25336]  ? inet_sendmsg+0x10d/0x2a0
[  979.986023][T25336]  ? __local_bh_enable_ip+0x13a/0x1c0
[  979.991418][T25336]  ? _local_bh_enable+0xa0/0xa0
[  979.996274][T25336]  ? inet_sendmsg+0x10d/0x2a0
[  980.000959][T25336]  ? inet_sendmsg+0x10d/0x2a0
[  980.005636][T25336]  ? inet_send_prepare+0x250/0x250
[  980.010750][T25336]  ____sys_sendmsg+0x61b/0x980
[  980.015520][T25336]  ? __sys_sendmsg_sock+0x30/0x30
[  980.020542][T25336]  ? __import_iovec+0x3fa/0x850
[  980.025405][T25336]  ? import_iovec+0x73/0xa0
[  980.029911][T25336]  ___sys_sendmsg+0x2a6/0x360
[  980.034595][T25336]  ? get_pid_task+0x20/0x1e0
[  980.039191][T25336]  ? __sys_sendmsg+0x2b0/0x2b0
[  980.043967][T25336]  ? __lock_acquire+0x7d80/0x7d80
[  980.049013][T25336]  __se_sys_sendmsg+0x1d0/0x2c0
[  980.053869][T25336]  ? __x64_sys_sendmsg+0x80/0x80
[  980.058817][T25336]  ? lockdep_hardirqs_on+0x98/0x150
[  980.064023][T25336]  do_syscall_64+0x55/0xb0
[  980.068438][T25336]  ? clear_bhb_loop+0x40/0x90
[  980.073125][T25336]  ? clear_bhb_loop+0x40/0x90
[  980.077802][T25336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.083702][T25336] RIP: 0033:0x7f2f2d39e0d9
[  980.088134][T25336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  980.107764][T25336] RSP: 002b:00007f2f2e328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  980.116181][T25336] RAX: ffffffffffffffda RBX: 00007f2f2d625fa0 RCX: 00007f2f2d39e0d9
[  980.124149][T25336] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000007
[  980.132115][T25336] RBP: 00007f2f2e328090 R08: 0000000000000000 R09: 0000000000000000
[  980.140083][T25336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  980.148054][T25336] R13: 00007f2f2d626038 R14: 00007f2f2d625fa0 R15: 00007ffd457a67d8
[  980.156039][T25336]  </TASK>
[  980.175031][ T9431] wlan1: Trigger new scan to find an IBSS to join
[  980.217186][ T9431] wlan1: Creating new IBSS network, BSSID 52:4b:61:60:77:a2
[  980.343335][T25349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6671'.
[  980.511663][T25340] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6669'.
[  980.967822][T25374] netlink: 'syz.0.6681': attribute type 9 has an invalid length.
[  981.650081][T25400] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  981.953101][T25405] syzkaller0: entered promiscuous mode
[  981.964920][T25405] syzkaller0: entered allmulticast mode
[  982.016710][T25408] netlink: 'syz.3.6694': attribute type 10 has an invalid length.
[  982.980434][T25425] __nla_validate_parse: 4 callbacks suppressed
[  982.980456][T25425] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6700'.
[  985.834169][T25425] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.6700'.
[  986.082768][T25444] sctp: [Deprecated]: syz.2.6708 (pid 25444) Use of int in maxseg socket option.
[  986.082768][T25444] Use struct sctp_assoc_value instead
[  986.129338][T25439] mac80211_hwsim hwsim90 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  986.142001][T21205] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  986.154576][T21205] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  986.382677][T25448] FAULT_INJECTION: forcing a failure.
[  986.382677][T25448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.455509][T25448] CPU: 1 PID: 25448 Comm: syz.3.6709 Not tainted syzkaller #0
[  986.463056][T25448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  986.473174][T25448] Call Trace:
[  986.476506][T25448]  <TASK>
[  986.479652][T25448]  dump_stack_lvl+0x18c/0x250
[  986.484419][T25448]  ? show_regs_print_info+0x20/0x20
[  986.489667][T25448]  ? load_image+0x420/0x420
[  986.494228][T25448]  ? __might_fault+0xaa/0x120
[  986.498964][T25448]  ? __lock_acquire+0x7d80/0x7d80
[  986.504047][T25448]  should_fail_ex+0x394/0x4c0
[  986.508793][T25448]  _copy_from_user+0x2f/0xe0
[  986.513469][T25448]  __sys_bpf+0x23e/0x890
[  986.517766][T25448]  ? bpf_link_show_fdinfo+0x390/0x390
[  986.523227][T25448]  ? lock_chain_count+0x20/0x20
[  986.528168][T25448]  __x64_sys_bpf+0x7c/0x90
[  986.532630][T25448]  do_syscall_64+0x55/0xb0
[  986.537087][T25448]  ? clear_bhb_loop+0x40/0x90
[  986.541798][T25448]  ? clear_bhb_loop+0x40/0x90
[  986.546524][T25448]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  986.552478][T25448] RIP: 0033:0x7fc300f9e0d9
[  986.556937][T25448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  986.576702][T25448] RSP: 002b:00007fc301e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  986.585167][T25448] RAX: ffffffffffffffda RBX: 00007fc301225fa0 RCX: 00007fc300f9e0d9
[  986.593193][T25448] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  986.601253][T25448] RBP: 00007fc301e1a090 R08: 0000000000000000 R09: 0000000000000000
[  986.609272][T25448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  986.617282][T25448] R13: 00007fc301226038 R14: 00007fc301225fa0 R15: 00007ffcf2960398
[  986.625372][T25448]  </TASK>
[  987.132513][T25469] netlink: 668 bytes leftover after parsing attributes in process `syz.1.6719'.
[  987.143521][T25469] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  987.152729][T25469] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  987.249996][T25474] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6728'.
[  987.266880][T25472] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  987.295157][T21201] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  987.304304][T21201] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  987.445869][T25484] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.6724'.
[  987.481660][T25482] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.6724'.
[  987.513310][T25484] openvswitch: netlink: IP tunnel dst address not specified
[  987.537674][T25482] openvswitch: netlink: IP tunnel dst address not specified
[  987.591530][T25493] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6727'.
[  987.621105][T25491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  987.867894][T25501] netlink: 'syz.3.6731': attribute type 29 has an invalid length.
[  987.894793][T25501] netlink: 'syz.3.6731': attribute type 29 has an invalid length.
[  987.910924][T25501] netlink: 'syz.3.6731': attribute type 29 has an invalid length.
[  988.109715][T25511] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6736'.
[  988.967524][T25521] netlink: 'syz.2.6739': attribute type 10 has an invalid length.
[  990.963881][T25542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6746'.
[  990.982831][T25542] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  991.002888][T25542] CPU: 0 PID: 25542 Comm: syz.2.6746 Not tainted syzkaller #0
[  991.010413][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  991.020486][T25542] Call Trace:
[  991.023789][T25542]  <TASK>
[  991.026731][T25542]  dump_stack_lvl+0x18c/0x250
[  991.031441][T25542]  ? show_regs_print_info+0x20/0x20
[  991.036663][T25542]  ? load_image+0x420/0x420
[  991.041207][T25542]  sysfs_warn_dup+0x8e/0xa0
[  991.045751][T25542]  sysfs_do_create_link_sd+0xc0/0x110
[  991.051151][T25542]  device_add_class_symlinks+0x1cf/0x240
[  991.056819][T25542]  device_add+0x4f9/0xc40
[  991.061178][T25542]  wiphy_register+0x1d99/0x2ac0
[  991.066077][T25542]  ? cfg80211_event_work+0x40/0x40
[  991.071252][T25542]  ? minstrel_ht_alloc+0x88a/0x990
[  991.076393][T25542]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  991.082493][T25542]  ieee80211_register_hw+0x2dd8/0x3b30
[  991.087999][T25542]  ? ieee80211_register_hw+0xf71/0x3b30
[  991.093573][T25542]  ? ieee80211_tasklet_handler+0x20/0x20
[  991.099228][T25542]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  991.105152][T25542]  ? __debug_object_init+0xec/0x450
[  991.110382][T25542]  ? __asan_memset+0x22/0x40
[  991.114997][T25542]  ? __hrtimer_init+0x189/0x270
[  991.119871][T25542]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  991.125638][T25542]  ? mac80211_hwsim_free+0x220/0x220
[  991.130941][T25542]  ? rcu_is_watching+0x15/0xb0
[  991.135727][T25542]  ? kstrndup+0xbd/0x140
[  991.140004][T25542]  hwsim_new_radio_nl+0xdad/0x1a70
[  991.145175][T25542]  ? __nla_validate+0x50/0x50
[  991.149892][T25542]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  991.156264][T25542]  ? __nla_parse+0x40/0x50
[  991.160709][T25542]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  991.167073][T25542]  genl_family_rcv_msg_doit+0x21a/0x310
[  991.172654][T25542]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  991.178580][T25542]  ? bpf_lsm_capable+0x9/0x10
[  991.183286][T25542]  ? security_capable+0x89/0xb0
[  991.188171][T25542]  genl_rcv_msg+0x611/0x7a0
[  991.192703][T25542]  ? genl_bind+0x360/0x360
[  991.197144][T25542]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  991.203495][T25542]  ? ref_tracker_free+0x686/0x830
[  991.208538][T25542]  ? __kasan_kmalloc_large+0x8b/0xa0
[  991.213856][T25542]  netlink_rcv_skb+0x235/0x4c0
[  991.218640][T25542]  ? genl_bind+0x360/0x360
[  991.223079][T25542]  ? netlink_ack+0x1160/0x1160
[  991.227881][T25542]  ? __lock_acquire+0x7d80/0x7d80
[  991.232938][T25542]  ? down_read+0x1ac/0x2e0
[  991.237380][T25542]  genl_rcv+0x28/0x40
[  991.241393][T25542]  netlink_unicast+0x7b1/0x930
[  991.246185][T25542]  netlink_sendmsg+0x8d0/0xbf0
[  991.250977][T25542]  ? netlink_getsockopt+0x590/0x590
[  991.256206][T25542]  ? apparmor_socket_sendmsg+0x8e/0x330
[  991.261777][T25542]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  991.267097][T25542]  ? security_socket_sendmsg+0x80/0xa0
[  991.272592][T25542]  ? netlink_getsockopt+0x590/0x590
[  991.277828][T25542]  ____sys_sendmsg+0x61b/0x980
[  991.282631][T25542]  ? __asan_memset+0x22/0x40
[  991.287246][T25542]  ? __sys_sendmsg_sock+0x30/0x30
[  991.292289][T25542]  ? __import_iovec+0x5f2/0x850
[  991.297177][T25542]  ? import_iovec+0x73/0xa0
[  991.301710][T25542]  ___sys_sendmsg+0x2a6/0x360
[  991.306417][T25542]  ? __sys_sendmsg+0x2b0/0x2b0
[  991.311264][T25542]  __se_sys_sendmsg+0x1d0/0x2c0
[  991.316136][T25542]  ? __x64_sys_sendmsg+0x80/0x80
[  991.321112][T25542]  ? lockdep_hardirqs_on+0x98/0x150
[  991.326345][T25542]  do_syscall_64+0x55/0xb0
[  991.330797][T25542]  ? clear_bhb_loop+0x40/0x90
[  991.335510][T25542]  ? clear_bhb_loop+0x40/0x90
[  991.340216][T25542]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  991.346137][T25542] RIP: 0033:0x7f2f2d39e0d9
[  991.350571][T25542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  991.370203][T25542] RSP: 002b:00007f2f2e328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.378638][T25542] RAX: ffffffffffffffda RBX: 00007f2f2d625fa0 RCX: 00007f2f2d39e0d9
[  991.386631][T25542] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  991.394625][T25542] RBP: 00007f2f2d435024 R08: 0000000000000000 R09: 0000000000000000
[  991.402622][T25542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.410621][T25542] R13: 00007f2f2d626038 R14: 00007f2f2d625fa0 R15: 00007ffd457a67d8
[  991.418690][T25542]  </TASK>
[  994.942504][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  994.951707][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1005.251429][T22646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1005.261059][T22646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1005.269632][T22646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1005.277841][T22646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1005.286033][T22646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1005.294679][T22646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1005.640429][T25564] chnl_net:caif_netlink_parms(): no params data found
[ 1005.779986][T25564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.794765][T25564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.802103][T25564] bridge_slave_0: entered allmulticast mode
[ 1005.816036][T25564] bridge_slave_0: entered promiscuous mode
[ 1005.831429][T25564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.840231][T25564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.853724][T25564] bridge_slave_1: entered allmulticast mode
[ 1005.861532][T25564] bridge_slave_1: entered promiscuous mode
[ 1005.920892][T25564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1005.941340][T25564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1006.005523][T25564] team0: Port device team_slave_0 added
[ 1006.027626][T25564] team0: Port device team_slave_1 added
[ 1006.072220][T25564] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1006.085795][T25564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1006.114564][T25564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1006.137877][T25564] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1006.150667][T25564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1006.177301][T25564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1007.384666][T22646] Bluetooth: hci0: command tx timeout
[ 1009.225454][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1009.235541][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1009.243496][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1009.252097][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1009.259994][ T5787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1009.267905][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1009.432974][T22646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1009.442790][T22646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1009.451685][T22646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1009.461038][T22646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1009.468528][T22646] Bluetooth: hci0: command tx timeout
[ 1009.476062][T22646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1009.483464][T22646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1009.575857][T22646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1009.586534][T22646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1009.595081][T22646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1009.603286][T22646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1009.612491][T22646] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1009.620312][T22646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1011.384986][ T5787] Bluetooth: hci5: command tx timeout
[ 1011.544690][T22646] Bluetooth: hci0: command tx timeout
[ 1011.551311][ T5787] Bluetooth: hci6: command tx timeout
[ 1011.704693][ T5787] Bluetooth: hci7: command tx timeout
[ 1013.464841][ T5787] Bluetooth: hci5: command tx timeout
[ 1013.625972][T22646] Bluetooth: hci0: command tx timeout
[ 1013.631454][ T5787] Bluetooth: hci6: command tx timeout
[ 1013.784778][ T5787] Bluetooth: hci7: command tx timeout
[ 1015.550237][ T5787] Bluetooth: hci5: command tx timeout
[ 1015.704617][ T5787] Bluetooth: hci6: command tx timeout
[ 1015.864563][ T5787] Bluetooth: hci7: command tx timeout
[ 1017.629842][ T5787] Bluetooth: hci5: command tx timeout
[ 1017.784609][ T5787] Bluetooth: hci6: command tx timeout
[ 1017.944560][ T5787] Bluetooth: hci7: command tx timeout
[ 1056.809925][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1056.822605][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1066.452153][T22646] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1066.463220][T22646] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1066.471274][T22646] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1066.480258][T22646] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1066.487993][T22646] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1066.495498][T22646] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1068.584935][ T5787] Bluetooth: hci8: command tx timeout
[ 1070.152277][T22646] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1070.162221][T22646] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1070.170599][T22646] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1070.178748][T22646] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1070.187069][T22646] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1070.194470][T22646] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1070.327664][ T5787] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1070.342504][ T5787] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1070.352531][ T5787] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1070.366714][ T5787] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1070.374669][ T5787] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1070.382124][ T5787] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1070.462901][T22646] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1070.475018][T22646] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1070.483345][T22646] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1070.492904][T22646] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1070.500819][T22646] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1070.509747][T22646] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1070.664694][T22646] Bluetooth: hci8: command tx timeout
[ 1072.264901][T22646] Bluetooth: hci9: command tx timeout
[ 1072.424560][T22646] Bluetooth: hci10: command tx timeout
[ 1072.584610][T22646] Bluetooth: hci11: command tx timeout
[ 1072.744705][T22646] Bluetooth: hci8: command tx timeout
[ 1074.357172][T22646] Bluetooth: hci9: command tx timeout
[ 1074.504569][T22646] Bluetooth: hci10: command tx timeout
[ 1074.674890][T22646] Bluetooth: hci11: command tx timeout
[ 1074.824501][T22646] Bluetooth: hci8: command tx timeout
[ 1076.434812][T22646] Bluetooth: hci9: command tx timeout
[ 1076.590845][T22646] Bluetooth: hci10: command tx timeout
[ 1076.744518][T22646] Bluetooth: hci11: command tx timeout
[ 1078.505019][T22646] Bluetooth: hci9: command tx timeout
[ 1078.664586][T22646] Bluetooth: hci10: command tx timeout
[ 1078.824525][T22646] Bluetooth: hci11: command tx timeout
[ 1117.863822][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.870424][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[ 1126.505488][ T5787] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1126.515687][ T5787] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1126.523754][ T5787] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1126.532085][ T5787] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1126.544596][ T5787] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1126.552107][ T5787] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1132.478430][ T5787] Bluetooth: hci12: command tx timeout
[ 1134.524462][ T5787] Bluetooth: hci12: command tx timeout
[ 1135.035164][T22646] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1135.046123][T22646] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1135.054333][T22646] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1135.063797][T22646] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1135.072332][T22646] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 1135.080096][T22646] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1135.195553][ T5787] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1135.208964][ T5787] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1135.217786][ T5787] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1135.226476][ T5787] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1135.234458][ T5787] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1135.242322][ T5787] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1135.333642][T22646] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1135.350381][T22646] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1135.358920][T22646] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1135.374769][T22646] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1135.383828][T22646] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1135.394589][T22646] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1139.359831][ T5787] Bluetooth: hci12: command tx timeout
[ 1139.365464][ T5787] Bluetooth: hci13: command tx timeout
[ 1139.371530][ T5787] Bluetooth: hci14: command tx timeout
[ 1139.377887][ T5787] Bluetooth: hci15: command tx timeout
[ 1143.083513][T22646] Bluetooth: hci15: command tx timeout
[ 1143.089145][T22646] Bluetooth: hci14: command tx timeout
[ 1143.094745][T22646] Bluetooth: hci13: command tx timeout
[ 1143.100229][T22646] Bluetooth: hci12: command tx timeout
[ 1148.732384][ T5787] Bluetooth: hci13: command tx timeout
[ 1148.738013][ T5787] Bluetooth: hci14: command tx timeout
[ 1148.743589][ T5787] Bluetooth: hci15: command tx timeout
[ 1152.155574][T22646] Bluetooth: hci15: command tx timeout
[ 1152.161119][T22646] Bluetooth: hci14: command tx timeout
[ 1152.167839][ T5787] Bluetooth: hci13: command tx timeout
[ 1152.504605][   T29] INFO: task rcu_tasks_trace:15 blocked for more than 145 seconds.
[ 1152.512558][   T29]       Not tainted syzkaller #0
[ 1152.527841][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1152.539475][   T29] task:rcu_tasks_trace state:D stack:26224 pid:15    ppid:2      flags:0x00004000
[ 1152.552875][   T29] Call Trace:
[ 1152.559059][   T29]  <TASK>
[ 1152.562025][   T29]  __schedule+0x15ae/0x4660
[ 1152.570772][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1152.578887][   T29]  ? lock_chain_count+0x20/0x20
[ 1152.584349][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1152.594637][   T29]  ? asan.module_dtor+0x20/0x20
[ 1152.599580][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1152.611708][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1152.617058][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1152.622551][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1152.628711][   T29]  schedule+0xbd/0x170
[ 1152.632815][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1152.648990][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1152.657918][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1152.662806][   T29]  ? wake_bit_function+0x200/0x200
[ 1152.672209][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1152.677545][   T29]  ? __might_sleep+0xe0/0xe0
[ 1152.682191][   T29]  synchronize_rcu+0x142/0x3e0
[ 1152.693819][   T29]  ? __schedule_delayed_monitor_work+0x200/0x200
[ 1152.701440][   T29]  ? cpus_read_unlock+0xa6/0x130
[ 1152.712944][   T29]  ? rcu_tasks_trace_pregp_step+0xf49/0xfa0
[ 1152.719345][   T29]  ? trace_event_raw_event_lock+0x240/0x240
[ 1152.725688][   T29]  ? call_rcu_tasks_generic_timer+0x200/0x200
[ 1152.731791][   T29]  ? rcu_is_watching+0x15/0xb0
[ 1152.743163][   T29]  rcu_tasks_wait_gp+0x4a3/0xac0
[ 1152.751927][   T29]  ? lock_chain_count+0x20/0x20
[ 1152.763382][   T29]  ? rcu_tasks_one_gp+0xb11/0xdf0
[ 1152.768734][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1152.773713][   T29]  ? trace_raw_output_rcu_stall_warning+0xc0/0xc0
[ 1152.780763][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1152.793326][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1152.798563][   T29]  ? timer_delete_sync+0x20/0x20
[ 1152.803545][   T29]  rcu_tasks_one_gp+0xc2b/0xdf0
[ 1152.809049][   T29]  ? rcu_tasks_one_gp+0xeb/0xdf0
[ 1152.814047][   T29]  rcu_tasks_kthread+0x19c/0x1c0
[ 1152.826615][   T29]  kthread+0x2fa/0x390
[ 1152.830746][   T29]  ? tasks_rcu_exit_srcu_stall+0x100/0x100
[ 1152.840958][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1152.845940][   T29]  ret_from_fork+0x48/0x80
[ 1152.850387][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1152.865577][   T29]  ret_from_fork_asm+0x11/0x20
[ 1152.870419][   T29]  </TASK>
[ 1152.873551][   T29] INFO: task kworker/u4:1:19811 blocked for more than 145 seconds.
[ 1152.884437][   T29]       Not tainted syzkaller #0
[ 1152.889645][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1152.904115][   T29] task:kworker/u4:1    state:D stack:21960 pid:19811 ppid:2      flags:0x00004000
[ 1152.913715][   T29] Workqueue: events_unbound linkwatch_event
[ 1152.926248][   T29] Call Trace:
[ 1152.929594][   T29]  <TASK>
[ 1152.932550][   T29]  __schedule+0x15ae/0x4660
[ 1152.941682][   T29]  ? trace_event_raw_event_lock+0x240/0x240
[ 1152.950919][   T29]  ? asan.module_dtor+0x20/0x20
[ 1152.959978][   T29]  ? __mutex_lock+0x66e/0xc80
[ 1152.965153][   T29]  ? __mutex_trylock_common+0x8a/0x270
[ 1152.970642][   T29]  ? kthread_data+0x4f/0xc0
[ 1152.984793][   T29]  ? wq_worker_sleeping+0x63/0x240
[ 1152.989956][   T29]  schedule+0xbd/0x170
[ 1152.994302][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1153.005668][   T29]  __mutex_lock+0x673/0xc80
[ 1153.010219][   T29]  ? __mutex_lock+0x4d2/0xc80
[ 1153.020421][   T29]  ? linkwatch_event+0xe/0x60
[ 1153.025468][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1153.030458][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1153.042714][   T29]  ? process_scheduled_works+0x975/0x1600
[ 1153.048727][   T29]  ? process_scheduled_works+0x975/0x1600
[ 1153.061335][   T29]  linkwatch_event+0xe/0x60
[ 1153.066456][   T29]  process_scheduled_works+0xa60/0x1600
[ 1153.072069][   T29]  ? worker_attach_to_pool+0x370/0x370
[ 1153.084362][   T29]  ? assign_work+0x3cc/0x5d0
[ 1153.089262][   T29]  worker_thread+0xa5e/0xfe0
[ 1153.094143][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1153.104438][   T29]  ? __kthread_parkme+0x71/0x1c0
[ 1153.109427][   T29]  kthread+0x2fa/0x390
[ 1153.113514][   T29]  ? pr_cont_work+0x550/0x550
[ 1153.125741][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1153.130376][   T29]  ret_from_fork+0x48/0x80
[ 1153.141546][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1153.146752][   T29]  ret_from_fork_asm+0x11/0x20
[ 1153.151570][   T29]  </TASK>
[ 1153.164771][   T29] INFO: task syz.0.6751:25551 blocked for more than 145 seconds.
[ 1153.172517][   T29]       Not tainted syzkaller #0
[ 1153.183577][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1153.192672][   T29] task:syz.0.6751      state:D stack:27048 pid:25551 ppid:19830  flags:0x00004004
[ 1153.208773][   T29] Call Trace:
[ 1153.212086][   T29]  <TASK>
[ 1153.220702][   T29]  __schedule+0x15ae/0x4660
[ 1153.234766][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1153.239681][   T29]  ? asan.module_dtor+0x20/0x20
[ 1153.251704][   T29]  ? trace_event_raw_event_lock+0x240/0x240
[ 1153.257995][   T29]  schedule+0xbd/0x170
[ 1153.262104][   T29]  schedule_timeout+0xc1/0x2d0
[ 1153.273521][   T29]  ? console_conditional_schedule+0x40/0x40
[ 1153.279809][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1153.286412][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1153.291469][   T29]  ? lock_chain_count+0x20/0x20
[ 1153.303548][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1153.309005][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1153.321114][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1153.330192][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1153.342760][   T29]  ? wait_for_completion+0x273/0x5a0
[ 1153.348459][   T29]  wait_for_completion+0x2c6/0x5a0
[ 1153.353624][   T29]  ? io_schedule+0xd0/0xd0
[ 1153.358691][   T29]  ? __init_swait_queue_head+0xa8/0x140
[ 1153.364276][   T29]  __wait_rcu_gp+0x19d/0x260
[ 1153.375539][   T29]  synchronize_rcu_tasks_trace+0x160/0x230
[ 1153.381399][   T29]  ? call_rcu_tasks_trace+0x10/0x10
[ 1153.392139][   T29]  ? call_rcu_tasks_generic+0x5df/0x8c0
[ 1153.398184][   T29]  ? rcu_tasks_trace_qs_blkd+0x370/0x370
[ 1153.404107][   T29]  ? rcu_read_lock_any_held+0x140/0x140
[ 1153.416756][   T29]  ? call_rcu_tasks+0x10/0x10
[ 1153.421492][   T29]  ? bpf_prog_array_copy+0x176/0x370
[ 1153.431116][   T29]  perf_event_detach_bpf_prog+0x264/0x310
[ 1153.437370][   T29]  ? perf_event_attach_bpf_prog+0x390/0x390
[ 1153.443302][   T29]  ? irq_work_sync+0x287/0x380
[ 1153.458309][   T29]  _free_event+0xb84/0xfb0
[ 1153.462792][   T29]  perf_event_release_kernel+0x7c8/0x850
[ 1153.471545][   T29]  ? __might_sleep+0xe0/0xe0
[ 1153.476533][   T29]  ? calc_timer_values+0x400/0x400
[ 1153.481685][   T29]  ? perf_mmap+0x15e0/0x15e0
[ 1153.492939][   T29]  perf_release+0x3b/0x40
[ 1153.497585][   T29]  __fput+0x221/0x940
[ 1153.501606][   T29]  task_work_run+0x1d4/0x260
[ 1153.513719][   T29]  ? task_work_cancel+0x220/0x220
[ 1153.519168][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1153.531469][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1153.537347][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1153.543019][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1153.554869][   T29]  do_syscall_64+0x61/0xb0
[ 1153.559346][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1153.564049][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1153.579492][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1153.588360][   T29] RIP: 0033:0x7f72f559e0d9
[ 1153.592828][   T29] RSP: 002b:00007ffeec866cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1153.604934][   T29] RAX: 0000000000000000 RBX: 00007f72f5827da0 RCX: 00007f72f559e0d9
[ 1153.613210][   T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1153.627388][   T29] RBP: 00007f72f5827da0 R08: 00007f72f5826038 R09: 0000000000000000
[ 1153.638313][   T29] R10: 00000000003ffd6c R11: 0000000000000246 R12: 00000000000f26b6
[ 1153.650763][   T29] R13: 00007f72f582609c R14: 00000000000f23f1 R15: 00007f72f5826090
[ 1153.661728][   T29]  </TASK>
[ 1153.668943][   T29] INFO: task syz.2.6752:25560 blocked for more than 146 seconds.
[ 1153.677198][   T29]       Not tainted syzkaller #0
[ 1153.682187][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1153.701378][   T29] task:syz.2.6752      state:D stack:27144 pid:25560 ppid:20613  flags:0x00004002
[ 1153.713463][   T29] Call Trace:
[ 1153.722153][   T29]  <TASK>
[ 1153.727197][   T29]  __schedule+0x15ae/0x4660
[ 1153.731755][   T29]  ? trace_event_raw_event_lock+0x240/0x240
[ 1153.738373][   T29]  ? asan.module_dtor+0x20/0x20
[ 1153.743283][   T29]  ? __mutex_lock+0x66e/0xc80
[ 1153.754828][   T29]  ? __mutex_trylock_common+0x8a/0x270
[ 1153.760434][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1153.767411][   T29]  schedule+0xbd/0x170
[ 1153.771516][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1153.783823][   T29]  __mutex_lock+0x673/0xc80
[ 1153.794723][   T29]  ? __mutex_lock+0x4d2/0xc80
[ 1153.799465][   T29]  ? perf_event_detach_bpf_prog+0x8b/0x310
[ 1153.818728][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1153.823734][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1153.829354][   T29]  ? trace_contention_end+0x39/0xe0
[ 1153.841056][   T29]  ? __might_sleep+0xe0/0xe0
[ 1153.846117][   T29]  ? __mutex_lock+0x30d/0xc80
[ 1153.850837][   T29]  perf_event_detach_bpf_prog+0x8b/0x310
[ 1153.857085][   T29]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1153.862780][   T29]  ? perf_event_attach_bpf_prog+0x390/0x390
[ 1153.881064][   T29]  ? irq_work_sync+0x287/0x380
[ 1153.891517][   T29]  _free_event+0xb84/0xfb0
[ 1153.897775][   T29]  perf_event_release_kernel+0x7c8/0x850
[ 1153.903448][   T29]  ? __might_sleep+0xe0/0xe0
[ 1153.913961][   T29]  ? calc_timer_values+0x400/0x400
[ 1153.925378][   T29]  ? perf_mmap+0x15e0/0x15e0
[ 1153.930047][   T29]  perf_release+0x3b/0x40
[ 1153.941192][   T29]  __fput+0x221/0x940
[ 1153.945515][   T29]  task_work_run+0x1d4/0x260
[ 1153.950140][   T29]  ? task_work_cancel+0x220/0x220
[ 1153.955849][   T29]  do_exit+0x986/0x2530
[ 1153.960052][   T29]  ? put_task_struct+0xc0/0xc0
[ 1153.971377][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1153.977733][   T29]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 1153.991488][   T29]  ? lock_chain_count+0x20/0x20
[ 1153.996744][   T29]  do_group_exit+0x22d/0x2f0
[ 1154.001371][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1154.007114][   T29]  get_signal+0x12a6/0x1390
[ 1154.011756][   T29]  ? fd_install+0x60/0x4e0
[ 1154.023407][   T29]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1154.032915][   T29]  ? get_sigframe_size+0x20/0x20
[ 1154.044478][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1154.050702][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1154.062837][   T29]  exit_to_user_mode_loop+0x70/0x110
[ 1154.068581][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1154.074172][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1154.080273][   T29]  do_syscall_64+0x61/0xb0
[ 1154.091042][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1154.096096][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1154.100809][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1154.107269][   T29] RIP: 0033:0x7f2f2d39e0d9
[ 1154.111709][   T29] RSP: 002b:00007f2f2e3070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1154.127437][   T29] RAX: 0000000000000001 RBX: 00007f2f2d626098 RCX: 00007f2f2d39e0d9
[ 1154.143684][   T29] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f2d62609c
[ 1154.155349][   T29] RBP: 00007f2f2d626090 R08: 0000000000745ac3 R09: 0000000000000000
[ 1154.163363][   T29] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 1154.174432][   T29] R13: 00007f2f2d626128 R14: 00007ffd457a66f0 R15: 00007ffd457a67d8
[ 1154.182460][   T29]  </TASK>
[ 1154.191224][   T29] INFO: task syz.3.6753:25555 blocked for more than 146 seconds.
[ 1154.199493][   T29]       Not tainted syzkaller #0
[ 1154.210982][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1154.220198][   T29] task:syz.3.6753      state:D stack:27048 pid:25555 ppid:20898  flags:0x00004004
[ 1154.229946][   T29] Call Trace:
[ 1154.233251][   T29]  <TASK>
[ 1154.243260][   T29]  __schedule+0x15ae/0x4660
[ 1154.252188][   T29]  ? trace_event_raw_event_lock+0x240/0x240
[ 1154.264454][   T29]  ? asan.module_dtor+0x20/0x20
[ 1154.269360][   T29]  ? __mutex_lock+0x66e/0xc80
[ 1154.274069][   T29]  ? __mutex_trylock_common+0x8a/0x270
[ 1154.291797][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1154.299788][   T29]  schedule+0xbd/0x170
[ 1154.303906][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1154.314438][   T29]  __mutex_lock+0x673/0xc80
[ 1154.319005][   T29]  ? __mutex_lock+0x4d2/0xc80
[ 1154.323963][   T29]  ? perf_event_detach_bpf_prog+0x8b/0x310
[ 1154.336016][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1154.341011][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1154.351675][   T29]  ? trace_contention_end+0x39/0xe0
[ 1154.363588][   T29]  ? __might_sleep+0xe0/0xe0
[ 1154.373555][   T29]  ? __mutex_lock+0x30d/0xc80
[ 1154.378381][   T29]  perf_event_detach_bpf_prog+0x8b/0x310
[ 1154.384043][   T29]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1154.396555][   T29]  ? perf_event_attach_bpf_prog+0x390/0x390
[ 1154.402508][   T29]  ? irq_work_sync+0x287/0x380
[ 1154.411659][   T29]  _free_event+0xb84/0xfb0
[ 1154.419022][   T29]  perf_event_release_kernel+0x7c8/0x850
[ 1154.434463][   T29]  ? __might_sleep+0xe0/0xe0
[ 1154.439131][   T29]  ? calc_timer_values+0x400/0x400
[ 1154.450386][   T29]  ? perf_mmap+0x15e0/0x15e0
[ 1154.455686][   T29]  perf_release+0x3b/0x40
[ 1154.460052][   T29]  __fput+0x221/0x940
[ 1154.464068][   T29]  task_work_run+0x1d4/0x260
[ 1154.469440][   T29]  ? task_work_cancel+0x220/0x220
[ 1154.484824][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1154.490349][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1154.502404][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1154.508292][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1154.513799][   T29]  do_syscall_64+0x61/0xb0
[ 1154.524457][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1154.529440][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1154.534146][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1154.546284][   T29] RIP: 0033:0x7fc300f9e0d9
[ 1154.550739][   T29] RSP: 002b:00007ffcf29604f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1154.563687][   T29] RAX: 0000000000000000 RBX: 00007fc301227da0 RCX: 00007fc300f9e0d9
[ 1154.572061][   T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1154.586825][   T29] RBP: 00007fc301227da0 R08: 00007fc301226038 R09: 0000000000000000
[ 1154.603130][   T29] R10: 00000000003ffba4 R11: 0000000000000246 R12: 00000000000f293d
[ 1154.614978][   T29] R13: 00007fc30122609c R14: 00000000000f26b3 R15: 00007fc301226090
[ 1154.623019][   T29]  </TASK>
[ 1154.633172][   T29] INFO: task syz-executor:25564 blocked for more than 147 seconds.
[ 1154.641438][   T29]       Not tainted syzkaller #0
[ 1154.652931][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1154.661973][   T29] task:syz-executor    state:D stack:22312 pid:25564 ppid:1      flags:0x00004004
[ 1154.671719][   T29] Call Trace:
[ 1154.675297][   T29]  <TASK>
[ 1154.678261][   T29]  __schedule+0x15ae/0x4660
[ 1154.682806][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1154.694618][   T29]  ? lock_chain_count+0x20/0x20
[ 1154.699523][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1154.715015][   T29]  ? asan.module_dtor+0x20/0x20
[ 1154.719944][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1154.730389][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1154.735905][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1154.741408][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1154.754208][   T29]  schedule+0xbd/0x170
[ 1154.758664][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1154.771577][   T29]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1154.778109][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1154.784139][   T29]  ? wake_bit_function+0x200/0x200
[ 1154.789962][   T29]  ? stack_trace_save+0x100/0x100
[ 1154.801639][   T29]  ? arch_stack_walk+0x160/0x190
[ 1154.807060][   T29]  ? kasan_set_track+0x5f/0x70
[ 1154.811861][   T29]  ? __might_sleep+0xe0/0xe0
[ 1154.817112][   T29]  ? hsr_dev_finalize+0x390/0x800
[ 1154.822295][   T29]  ? hsr_newlink+0x63b/0x6f0
[ 1154.838820][   T29]  ? rtnl_newlink+0x15a0/0x2170
[ 1154.843729][   T29]  ? rtnetlink_rcv_msg+0x843/0xf90
[ 1154.852011][   T29]  ? netlink_rcv_skb+0x235/0x4c0
[ 1154.860987][   T29]  ? netlink_unicast+0x7b1/0x930
[ 1154.866399][   T29]  ? netlink_sendmsg+0x8d0/0xbf0
[ 1154.871366][   T29]  ? __sys_sendto+0x4a9/0x6b0
[ 1154.882642][   T29]  synchronize_rcu+0x142/0x3e0
[ 1154.887782][   T29]  ? __schedule_delayed_monitor_work+0x200/0x200
[ 1154.894181][   T29]  hsr_add_port+0x3b7/0x750
[ 1154.904448][   T29]  hsr_dev_finalize+0x390/0x800
[ 1154.909356][   T29]  hsr_newlink+0x63b/0x6f0
[ 1154.913796][   T29]  ? hsr_get_node_list+0xa00/0xa00
[ 1154.925551][   T29]  ? rtnl_create_link+0x9d1/0xd00
[ 1154.930619][   T29]  ? hsr_get_node_list+0xa00/0xa00
[ 1154.945305][   T29]  rtnl_newlink+0x15a0/0x2170
[ 1154.950050][   T29]  ? rtnl_newlink+0x571/0x2170
[ 1154.960766][   T29]  ? rtnl_setlink+0x4e0/0x4e0
[ 1154.965798][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1154.972029][   T29]  ? rtnl_setlink+0x4e0/0x4e0
[ 1154.984458][   T29]  rtnetlink_rcv_msg+0x843/0xf90
[ 1154.989461][   T29]  ? rtnetlink_rcv_msg+0x220/0xf90
[ 1155.000204][   T29]  ? rtnetlink_bind+0x80/0x80
[ 1155.005220][   T29]  ? mark_lock+0x94/0x320
[ 1155.009588][   T29]  ? __lock_acquire+0x1262/0x7d80
[ 1155.021428][   T29]  ? mark_lock+0x94/0x320
[ 1155.026128][   T29]  ? mark_lock+0x94/0x320
[ 1155.030494][   T29]  ? __lock_acquire+0x1262/0x7d80
[ 1155.036137][   T29]  ? verify_lock_unused+0x140/0x140
[ 1155.041620][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1155.056616][   T29]  ? verify_lock_unused+0x140/0x140
[ 1155.061869][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1155.071558][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1155.079482][   T29]  netlink_rcv_skb+0x235/0x4c0
[ 1155.084302][   T29]  ? rtnetlink_bind+0x80/0x80
[ 1155.093478][   T29]  ? netlink_ack+0x1160/0x1160
[ 1155.098695][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1155.103754][   T29]  ? net_generic+0x1e/0x240
[ 1155.114970][   T29]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1155.120215][   T29]  netlink_unicast+0x7b1/0x930
[ 1155.130494][   T29]  netlink_sendmsg+0x8d0/0xbf0
[ 1155.135638][   T29]  ? netlink_getsockopt+0x590/0x590
[ 1155.140870][   T29]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1155.153308][   T29]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1155.159025][   T29]  ? security_socket_sendmsg+0x80/0xa0
[ 1155.175721][   T29]  __sys_sendto+0x4a9/0x6b0
[ 1155.180277][   T29]  ? __ia32_sys_getpeername+0x90/0x90
[ 1155.191888][   T29]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1155.197835][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1155.203989][   T29]  ? __fput+0x67e/0x940
[ 1155.215080][   T29]  ? lock_chain_count+0x20/0x20
[ 1155.219981][   T29]  __x64_sys_sendto+0xde/0xf0
[ 1155.230489][   T29]  do_syscall_64+0x55/0xb0
[ 1155.236527][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1155.241238][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1155.251674][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1155.258050][   T29] RIP: 0033:0x7fe120f5e90e
[ 1155.262530][   T29] RSP: 002b:00007ffd3ab92ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1155.278120][   T29] RAX: ffffffffffffffda RBX: 000055555ae14500 RCX: 00007fe120f5e90e
[ 1155.292641][   T29] RDX: 0000000000000058 RSI: 00007fe121d54670 RDI: 0000000000000003
[ 1155.302622][   T29] RBP: 0000000000000001 R08: 00007ffd3ab92d64 R09: 000000000000000c
[ 1155.322554][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1155.334834][   T29] R13: 0000000000000000 R14: 00007fe121d54670 R15: 0000000000000000
[ 1155.342874][   T29]  </TASK>
[ 1155.351631][   T29] INFO: task dhcpcd:25576 blocked for more than 148 seconds.
[ 1155.359415][   T29]       Not tainted syzkaller #0
[ 1155.364367][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1155.379754][   T29] task:dhcpcd          state:D stack:25032 pid:25576 ppid:5436   flags:0x00004002
[ 1155.389367][   T29] Call Trace:
[ 1155.392672][   T29]  <TASK>
[ 1155.405786][   T29]  __schedule+0x15ae/0x4660
[ 1155.410367][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1155.421087][   T29]  ? lock_chain_count+0x20/0x20
[ 1155.426784][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1155.432718][   T29]  ? asan.module_dtor+0x20/0x20
[ 1155.444462][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1155.449621][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1155.461411][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1155.467220][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1155.472714][   T29]  schedule+0xbd/0x170
[ 1155.477411][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1155.483085][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1155.495695][   T29]  ? wake_bit_function+0x200/0x200
[ 1155.500850][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1155.514720][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.519552][   T29]  ? __might_sleep+0xe0/0xe0
[ 1155.524166][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1155.536280][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.541092][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.546654][   T29]  __unregister_prot_hook+0x413/0x580
[ 1155.556470][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.561275][   T29]  packet_do_bind+0x570/0xd40
[ 1155.570186][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.575344][   T29]  ? security_socket_bind+0x80/0xa0
[ 1155.580589][   T29]  __sys_bind+0x2f0/0x3f0
[ 1155.591652][   T29]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1155.597272][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1155.603484][   T29]  __x64_sys_bind+0x7a/0x90
[ 1155.614445][   T29]  do_syscall_64+0x55/0xb0
[ 1155.618911][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1155.623611][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1155.639236][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1155.648111][   T29] RIP: 0033:0x7f545831f2d7
[ 1155.652562][   T29] RSP: 002b:00007ffcc7f7c598 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
[ 1155.665852][   T29] RAX: ffffffffffffffda RBX: 0000562c0a864310 RCX: 00007f545831f2d7
[ 1155.673865][   T29] RDX: 0000000000000014 RSI: 00007ffcc7f7c5b0 RDI: 0000000000000003
[ 1155.686410][   T29] RBP: 0000562bea5124b0 R08: 00007f54583eeac0 R09: 0000000000000000
[ 1155.698521][   T29] R10: 0000000000000003 R11: 0000000000000213 R12: 0000000000000000
[ 1155.706897][   T29] R13: 0000562c0a863b20 R14: 0000000000000000 R15: 0000562bea527ac0
[ 1155.721501][   T29]  </TASK>
[ 1155.724839][   T29] INFO: task dhcpcd:25577 blocked for more than 148 seconds.
[ 1155.732234][   T29]       Not tainted syzkaller #0
[ 1155.738073][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1155.754744][   T29] task:dhcpcd          state:D stack:25032 pid:25577 ppid:5436   flags:0x00004002
[ 1155.764262][   T29] Call Trace:
[ 1155.773837][   T29]  <TASK>
[ 1155.777632][   T29]  __schedule+0x15ae/0x4660
[ 1155.782195][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1155.794381][   T29]  ? lock_chain_count+0x20/0x20
[ 1155.799528][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1155.811992][   T29]  ? asan.module_dtor+0x20/0x20
[ 1155.817210][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1155.822094][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1155.827761][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1155.833255][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1155.845403][   T29]  schedule+0xbd/0x170
[ 1155.849516][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1155.865608][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1155.871681][   T29]  ? wake_bit_function+0x200/0x200
[ 1155.883695][   T29]  ? perf_trace_lock+0xfc/0x3b0
[ 1155.888893][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.893700][   T29]  ? __might_sleep+0xe0/0xe0
[ 1155.898937][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1155.904004][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.915675][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.920497][   T29]  __unregister_prot_hook+0x413/0x580
[ 1155.931409][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.937778][   T29]  packet_do_bind+0x570/0xd40
[ 1155.942531][   T29]  ? packet_do_bind+0x9d/0xd40
[ 1155.952876][   T29]  ? security_socket_bind+0x80/0xa0
[ 1155.958727][   T29]  __sys_bind+0x2f0/0x3f0
[ 1155.963345][   T29]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1155.978997][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1155.985686][   T29]  __x64_sys_bind+0x7a/0x90
[ 1155.990322][   T29]  do_syscall_64+0x55/0xb0
[ 1156.001386][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1156.006458][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1156.011191][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1156.023914][   T29] RIP: 0033:0x7f545831f2d7
[ 1156.028796][   T29] RSP: 002b:00007ffcc7f7c598 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
[ 1156.043955][   T29] RAX: ffffffffffffffda RBX: 0000562c0a864310 RCX: 00007f545831f2d7
[ 1156.052333][   T29] RDX: 0000000000000014 RSI: 00007ffcc7f7c5b0 RDI: 0000000000000003
[ 1156.067326][   T29] RBP: 0000562bea5124b0 R08: 00007f54583eeac0 R09: 0000000000000000
[ 1156.082071][   T29] R10: 0000000000000003 R11: 0000000000000213 R12: 0000000000000000
[ 1156.094434][   T29] R13: 0000562c0a85de10 R14: 0000000000000000 R15: 0000562bea527ac0
[ 1156.102466][   T29]  </TASK>
[ 1156.111814][   T29] 
[ 1156.111814][   T29] Showing all locks held in the system:
[ 1156.119972][   T29] 1 lock held by rcu_tasks_trace/15:
[ 1156.131779][   T29]  #0: ffffffff8d132ad0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xb11/0xdf0
[ 1156.143245][   T29] 2 locks held by kworker/1:1/27:
[ 1156.148789][   T29]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.166962][   T29]  #1: ffffc90000a2fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.183182][   T29] 1 lock held by khungtaskd/29:
[ 1156.194587][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1156.209889][   T29] 2 locks held by getty/5530:
[ 1156.214938][   T29]  #0: ffff8880315220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1156.225224][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 1156.241823][   T29] 3 locks held by kworker/1:4/5814:
[ 1156.247423][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.264433][   T29]  #1: ffffc9000481fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.282293][   T29]  #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 1156.293562][   T29] 3 locks held by kworker/u4:1/19811:
[ 1156.310250][   T29]  #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.322418][   T29]  #1: ffffc9000ccdfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.340025][   T29]  #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1156.354713][   T29] 3 locks held by kworker/0:4/20862:
[ 1156.360034][   T29]  #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.380993][   T29]  #1: ffffc90003357d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.392687][   T29]  #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[ 1156.409251][   T29] 3 locks held by kworker/u4:7/21205:
[ 1156.420899][   T29]  #0: ffff88802c1c3538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.437850][   T29]  #1: ffffc9000494fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1156.452035][   T29]  #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[ 1156.468043][   T29] 2 locks held by syz.1.6741/25525:
[ 1156.473561][   T29]  #0: ffff88805c85dc20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[ 1156.486929][   T29]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[ 1156.502139][   T29] 4 locks held by syz.1.6741/25526:
[ 1156.507753][   T29] 1 lock held by syz.0.6751/25551:
[ 1156.512985][   T29]  #0: ffffffff8d192288 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[ 1156.530707][   T29] 1 lock held by syz.2.6752/25560:
[ 1156.539888][   T29]  #0: ffffffff8d192288 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[ 1156.557111][   T29] 1 lock held by syz.3.6753/25555:
[ 1156.562263][   T29]  #0: ffffffff8d192288 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[ 1156.577442][   T29] 1 lock held by syz-executor/25564:
[ 1156.582773][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.596704][   T29] 1 lock held by dhcpcd/25576:
[ 1156.601512][   T29]  #0: ffff888024a5e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.615494][   T29] 1 lock held by dhcpcd/25577:
[ 1156.620296][   T29]  #0: ffff88807dece130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.634847][   T29] 1 lock held by dhcpcd/25578:
[ 1156.639654][   T29]  #0: ffff88801ef1c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.659821][   T29] 1 lock held by syz-executor/25582:
[ 1156.667547][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.682535][   T29] 1 lock held by syz-executor/25586:
[ 1156.689498][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.704179][   T29] 1 lock held by syz-executor/25589:
[ 1156.709852][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.726015][   T29] 1 lock held by dhcpcd/25591:
[ 1156.730806][   T29]  #0: ffff888061008130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.744869][   T29] 1 lock held by dhcpcd/25592:
[ 1156.749662][   T29]  #0: ffff888024782130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.770421][   T29] 1 lock held by dhcpcd/25593:
[ 1156.777055][   T29]  #0: ffff8880320ec130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[ 1156.793384][   T29] 1 lock held by syz-executor/25595:
[ 1156.799196][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.815692][   T29] 1 lock held by syz-executor/25602:
[ 1156.821013][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.836140][   T29] 1 lock held by syz-executor/25606:
[ 1156.841460][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.854826][   T29] 1 lock held by syz-executor/25608:
[ 1156.860142][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.879228][   T29] 1 lock held by syz-executor/25611:
[ 1156.888784][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.902515][   T29] 1 lock held by syz-executor/25620:
[ 1156.910744][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.924248][   T29] 1 lock held by syz-executor/25623:
[ 1156.932392][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.948631][   T29] 1 lock held by syz-executor/25628:
[ 1156.953952][   T29]  #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[ 1156.963911][   T29] 
[ 1156.972880][   T29] =============================================
[ 1156.972880][   T29] 
[ 1156.981933][   T29] NMI backtrace for cpu 1
[ 1156.986281][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1156.993491][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1157.003575][   T29] Call Trace:
[ 1157.006864][   T29]  <TASK>
[ 1157.009808][   T29]  dump_stack_lvl+0x18c/0x250
[ 1157.014519][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[ 1157.019649][   T29]  ? show_regs_print_info+0x20/0x20
[ 1157.024864][   T29]  ? load_image+0x420/0x420
[ 1157.029393][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1157.034357][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1157.040541][   T29]  ? load_image+0x420/0x420
[ 1157.045059][   T29]  ? wq_watchdog_touch+0xef/0x170
[ 1157.050105][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1157.056226][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1157.062323][   T29]  watchdog+0xf59/0xfa0
[ 1157.066502][   T29]  ? watchdog+0x1e1/0xfa0
[ 1157.070863][   T29]  kthread+0x2fa/0x390
[ 1157.074947][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1157.079991][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1157.084592][   T29]  ret_from_fork+0x48/0x80
[ 1157.089024][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1157.093632][   T29]  ret_from_fork_asm+0x11/0x20
[ 1157.098438][   T29]  </TASK>
[ 1157.102040][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1157.107313][    C0] NMI backtrace for cpu 0
[ 1157.107323][    C0] CPU: 0 PID: 25526 Comm: syz.1.6741 Not tainted syzkaller #0
[ 1157.107339][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1157.107347][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x60
[ 1157.107372][    C0] Code: 89 fb e8 13 00 00 00 48 8b 3d fc 0d 05 0d 48 89 de 5b e9 33 a8 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 45 7c 7e <65> 8b 15 c1 45 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[ 1157.107385][    C0] RSP: 0018:ffffc90000006ce8 EFLAGS: 00000097
[ 1157.107398][    C0] RAX: ffffffff813ba8b2 RBX: ffffffff8ed57704 RCX: ffff888018393c00
[ 1157.107409][    C0] RDX: 0000000000000100 RSI: ffffffff8640d3da RDI: ffffffff8640d32b
[ 1157.107420][    C0] RBP: ffffffff8ed576fc R08: ffff888018393c00 R09: 0000000000000003
[ 1157.107431][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8640d32b
[ 1157.107441][    C0] R13: ffffffff8ed57700 R14: ffffffff8640d3da R15: ffffffff8ed576fc
[ 1157.107452][    C0] FS:  00007fc79c2ee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1157.107466][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1157.107477][    C0] CR2: 00007f46a826c69b CR3: 000000006a3e4000 CR4: 00000000003506f0
[ 1157.107490][    C0] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000
[ 1157.107499][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1157.107509][    C0] Call Trace:
[ 1157.107515][    C0]  <IRQ>
[ 1157.107520][    C0]  unwind_next_frame+0x4e2/0x2990
[ 1157.107541][    C0]  ? mac80211_hwsim_beacon+0xba/0x1b0
[ 1157.107562][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1b0
[ 1157.107579][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1b0
[ 1157.107595][    C0]  perf_callchain_kernel+0x42e/0x690
[ 1157.107621][    C0]  ? arch_perf_update_userpage+0x3c0/0x3c0
[ 1157.107644][    C0]  ? mac80211_hwsim_beacon+0xbb/0x1b0
[ 1157.107664][    C0]  ? get_callchain_entry+0x185/0x3c0
[ 1157.107683][    C0]  get_perf_callchain+0x231/0x510
[ 1157.107700][    C0]  ? put_callchain_entry+0xb0/0xb0
[ 1157.107715][    C0]  ? mark_lock+0x94/0x320
[ 1157.107734][    C0]  ? kvm_guest_state+0xb7/0xf0
[ 1157.107754][    C0]  perf_prepare_sample+0x3c7/0x1db0
[ 1157.107775][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1157.107790][    C0]  ? __lock_acquire+0x1336/0x7d80
[ 1157.107806][    C0]  ? perf_callchain+0x220/0x220
[ 1157.107828][    C0]  perf_event_output_forward+0x187/0x3e0
[ 1157.107845][    C0]  ? perf_event_output_forward+0xb9/0x3e0
[ 1157.107861][    C0]  ? perf_prepare_header+0x1e0/0x1e0
[ 1157.107882][    C0]  ? mark_lock+0x94/0x320
[ 1157.107900][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1157.107919][    C0]  __perf_event_overflow+0x461/0x660
[ 1157.107940][    C0]  perf_swevent_overflow+0x274/0x340
[ 1157.108000][    C0]  ? perf_event_switch_output+0x790/0x790
[ 1157.108031][    C0]  perf_swevent_event+0x45c/0x570
[ 1157.108049][    C0]  ? perf_tp_event+0x1550/0x1550
[ 1157.108066][    C0]  ? perf_trace_buf_alloc+0x290/0x290
[ 1157.108083][    C0]  ? trace_event_raw_event_lock+0x240/0x240
[ 1157.108103][    C0]  perf_tp_event+0x620/0x1550
[ 1157.108122][    C0]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1157.108145][    C0]  ? trace_irq_enable+0xbb/0xe0
[ 1157.108179][    C0]  ? sched_clock+0x3f/0x60
[ 1157.108196][    C0]  ? sched_clock_cpu+0x75/0x430
[ 1157.108211][    C0]  ? read_tsc+0x9/0x20
[ 1157.108225][    C0]  ? ktime_get+0x24b/0x280
[ 1157.108245][    C0]  perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1157.108266][    C0]  perf_trace_preemptirq_template+0x269/0x330
[ 1157.108288][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.108307][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 1157.108327][    C0]  ? __irq_exit_rcu+0xdf/0x190
[ 1157.108341][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1157.108359][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.108377][    C0]  trace_irq_enable+0xbb/0xe0
[ 1157.108397][    C0]  trace_hardirqs_on+0x18/0x40
[ 1157.108414][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.108431][    C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0
[ 1157.108449][    C0] Code: 00 4d 85 e4 75 16 e8 05 ca 0f 00 eb 15 e8 fe c9 0f 00 e8 09 b2 17 09 4d 85 e4 74 ea e8 ef c9 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25
[ 1157.108461][    C0] RSP: 0018:ffffc90000007880 EFLAGS: 00000246
[ 1157.108473][    C0] RAX: ffffffff8177a881 RBX: 0000000000000000 RCX: ffff888018393c00
[ 1157.108484][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1157.108493][    C0] RBP: ffffc90000007938 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf
[ 1157.108504][    C0] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: 0000000000000200
[ 1157.108515][    C0] R13: 000001fb6d54cfe9 R14: 1ffff92000000f10 R15: dffffc0000000000
[ 1157.108530][    C0]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 1157.108553][    C0]  ? ktime_get_real_ts64+0x440/0x440
[ 1157.108578][    C0]  ktime_get_with_offset+0x94/0x330
[ 1157.108599][    C0]  mac80211_hwsim_tx_frame_no_nl+0x6fe/0x11e0
[ 1157.108621][    C0]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 1157.108639][    C0]  ? ktime_get_real_ts64+0x440/0x440
[ 1157.108658][    C0]  ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0
[ 1157.108681][    C0]  ? mac80211_hwsim_monitor_rx+0x1bf/0x810
[ 1157.108702][    C0]  mac80211_hwsim_tx_frame+0x1b5/0x200
[ 1157.108722][    C0]  mac80211_hwsim_beacon_tx+0x3df/0x770
[ 1157.108744][    C0]  __iterate_interfaces+0x225/0x4c0
[ 1157.108825][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[ 1157.108843][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 1157.108861][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[ 1157.108879][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 1157.108899][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[ 1157.108915][    C0]  ? hw_scan_work+0xf10/0xf10
[ 1157.108931][    C0]  __hrtimer_run_queues+0x525/0xc10
[ 1157.108958][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 1157.108974][    C0]  ? read_tsc+0x9/0x20
[ 1157.108995][    C0]  hrtimer_run_softirq+0x177/0x290
[ 1157.109019][    C0]  handle_softirqs+0x27d/0x820
[ 1157.109034][    C0]  ? read_tsc+0x9/0x20
[ 1157.109048][    C0]  ? ktime_get+0x24b/0x280
[ 1157.109066][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1157.109084][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1157.109102][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1157.109122][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1157.109137][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1157.109157][    C0]  irq_exit_rcu+0x9/0x20
[ 1157.109171][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1157.109191][    C0]  </IRQ>
[ 1157.109196][    C0]  <TASK>
[ 1157.109201][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.109218][    C0] RIP: 0010:finish_task_switch+0x267/0x8f0
[ 1157.109235][    C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 47 3b 09 e8 0e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 1157.109246][    C0] RSP: 0018:ffffc90003397760 EFLAGS: 00000286
[ 1157.109258][    C0] RAX: 264205f705139c00 RBX: 0000000000000000 RCX: 264205f705139c00
[ 1157.109268][    C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32a0
[ 1157.109279][    C0] RBP: ffffc900033977b0 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf
[ 1157.109290][    C0] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: ffff888018393c00
[ 1157.109300][    C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48
[ 1157.109326][    C0]  __schedule+0x15b6/0x4660
[ 1157.109356][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 1157.109378][    C0]  ? lock_chain_count+0x20/0x20
[ 1157.109394][    C0]  ? asan.module_dtor+0x20/0x20
[ 1157.109412][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.109429][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1157.109454][    C0]  ? preempt_schedule+0xc0/0xd0
[ 1157.109473][    C0]  preempt_schedule_common+0x82/0xc0
[ 1157.109491][    C0]  preempt_schedule+0xc0/0xd0
[ 1157.109508][    C0]  ? schedule_preempt_disabled+0x20/0x20
[ 1157.109526][    C0]  ? event_function+0x300/0x300
[ 1157.109543][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[ 1157.109563][    C0]  preempt_schedule_thunk+0x1a/0x30
[ 1157.109584][    C0]  ? smp_call_function_single+0x488/0x5a0
[ 1157.109602][    C0]  smp_call_function_single+0x48d/0x5a0
[ 1157.109620][    C0]  ? event_function+0x300/0x300
[ 1157.109637][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[ 1157.109655][    C0]  ? event_function+0x300/0x300
[ 1157.109681][    C0]  perf_install_in_context+0x5bb/0x920
[ 1157.109701][    C0]  ? alloc_file_pseudo+0x1ae/0x210
[ 1157.109718][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[ 1157.109736][    C0]  ? add_event_to_ctx+0x1170/0x1170
[ 1157.109763][    C0]  ? anon_inode_getfile+0x109/0x1a0
[ 1157.109783][    C0]  ? perf_event__header_size+0x165/0x220
[ 1157.109804][    C0]  __se_sys_perf_event_open+0x1841/0x1c60
[ 1157.109821][    C0]  ? __fget_files+0x28/0x460
[ 1157.109847][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1157.109872][    C0]  ? lock_chain_count+0x20/0x20
[ 1157.109892][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1157.109910][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1157.109930][    C0]  do_syscall_64+0x55/0xb0
[ 1157.109945][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1157.109961][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1157.109978][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1157.109995][    C0] RIP: 0033:0x7fc79b39e0d9
[ 1157.110014][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1157.110026][    C0] RSP: 002b:00007fc79c2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1157.110041][    C0] RAX: ffffffffffffffda RBX: 00007fc79b625fa0 RCX: 00007fc79b39e0d9
[ 1157.110051][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000001c0
[ 1157.110062][    C0] RBP: 00007fc79b435024 R08: 0000000000000000 R09: 0000000000000000
[ 1157.110072][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1157.110081][    C0] R13: 00007fc79b626038 R14: 00007fc79b625fa0 R15: 00007ffc1da554b8
[ 1157.110102][    C0]  </TASK>
[ 1158.067146][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1158.074021][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1158.081229][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1158.091294][   T29] Call Trace:
[ 1158.094583][   T29]  <TASK>
[ 1158.097527][   T29]  dump_stack_lvl+0x18c/0x250
[ 1158.102229][   T29]  ? show_regs_print_info+0x20/0x20
[ 1158.107452][   T29]  ? load_image+0x420/0x420
[ 1158.111989][   T29]  panic+0x2ca/0x720
[ 1158.115913][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1158.120455][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1158.126017][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[ 1158.131416][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1158.137591][   T29]  watchdog+0xf98/0xfa0
[ 1158.141777][   T29]  ? watchdog+0x1e1/0xfa0
[ 1158.146143][   T29]  kthread+0x2fa/0x390
[ 1158.150228][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1158.155295][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1158.159907][   T29]  ret_from_fork+0x48/0x80
[ 1158.164337][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1158.168935][   T29]  ret_from_fork_asm+0x11/0x20
[ 1158.173731][   T29]  </TASK>
[ 1158.176935][   T29] Kernel Offset: disabled
[ 1158.181280][   T29] Rebooting in 86400 seconds..