last executing test programs:

11.282099595s ago: executing program 3 (id=1008):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
close(0xffffffffffffffff)
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x585f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x23, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"})
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})

11.049813142s ago: executing program 3 (id=1012):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92211, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e", 0x88}], 0x1}, 0xff0f000020000080)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507", 0x8}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4122, 0x101a}], 0x1}, 0x42)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

9.462050922s ago: executing program 1 (id=1017):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x230}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x90, &(0x7f00000001c0)=""/144, 0x41100, 0x20}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000580)="1bf91073b76dc5c6fcba66812f23c0c60ec892ae3009f81865b169f3f9e54f4884f8bca28c9587e2a9e4239e36326c738674d8a2cc7159647a1636e2c73b54c2b0b0dd55062858c57cd91226357f09a224cf495f59e59aded86fd8fd3e042dd171826db071e97e30edf732b6d39d0cd0d1f21ed13ff7f7623214d236198c1c7baed808936a26e808c83887cbab9f06edd61869469ca5da9f668375c0cac9537f211ecf4a57f2c15ef2d5b02d946a36c9153ac575b4c532d06b62ee2fa20c89e09b3c70a048d0da6472508814cd61e1d712ef3b33aeec8ca6e36c9a1ff8e315baa97ec5af82cece395c0e40fc3fdfb2e084b987ad", 0x800, r2}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r2}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB], 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000007000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000100800008500", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, 0x0, &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48)

8.5813777s ago: executing program 2 (id=1018):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94)

8.488014943s ago: executing program 2 (id=1019):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

7.918469611s ago: executing program 2 (id=1020):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0)
close(r0)
close(0xffffffffffffffff)
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x23, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"})
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})

7.435164686s ago: executing program 1 (id=1021):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000680)={0x3, 0x80, 0x9, 0x0, 0x7f, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x1, 0x80000001, 0x90ef, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x10000})
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r3, r2}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)

7.417283357s ago: executing program 0 (id=1022):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000680)={0x3, 0x80, 0x9, 0x0, 0x7f, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x1, 0x80000001, 0x90ef, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x10000})
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r9}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r8, r5}, 0xc)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)

7.380026998s ago: executing program 2 (id=1023):
close(0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd63cfc2f72caad1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x7749, 0x1}, 0x0, 0x1, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x20000000000001fc, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
close(0x3)

7.30250844s ago: executing program 3 (id=1024):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4200, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x3c, &(0x7f0000000040), 0xcf)
recvmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e9ffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xfffffffffffffdc9, &(0x7f0000000000), 0x1}, 0x81)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)

6.663354081s ago: executing program 0 (id=1025):
close(0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd63cfc2f72caad1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x7749, 0x1}, 0x0, 0x1, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x20000000000001fc, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)
sendmsg$inet(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000100)}, 0x10)
close(0x3)

6.662953551s ago: executing program 1 (id=1026):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4200, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x3c, &(0x7f0000000040), 0xcf)
recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e9ffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffdc9, &(0x7f0000000000), 0x1}, 0x81)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)

5.939183894s ago: executing program 3 (id=1027):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94)

5.803754947s ago: executing program 3 (id=1028):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.794422378s ago: executing program 2 (id=1029):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f4ffffffffffffb0a9ff00"/30], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r0 = socket$kcm(0xa, 0x3, 0x73)
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.262182664s ago: executing program 1 (id=1030):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f8"], 0x230}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x90, &(0x7f00000001c0)=""/144, 0x41100, 0x20}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000580)="1bf91073b76dc5c6fcba66812f23c0c60ec892ae3009f81865b169f3f9e54f4884f8bca28c9587e2a9e4239e36326c738674d8a2cc7159647a1636e2c73b54c2b0b0dd55062858c57cd91226357f09a224cf495f59e59aded86fd8fd3e042dd171826db071e97e30edf732b6d39d0cd0d1f21ed13ff7f7623214d236198c1c7baed808936a26e808c83887cbab9f06edd61869469ca5da9f668375c0cac9537f211ecf4a57f2c15ef2d5b02d946a36c9153ac575b4c532d06b62ee2fa20c89e09b3c70a048d0da6472508814cd61e1d712ef3b33aeec8ca6e36c9a1ff8e315baa97ec5af82cece395c0e40fc3fdfb2e084b987ad", 0x800, r2}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r2}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB], 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000007000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000100800008500", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48)

4.786191839s ago: executing program 0 (id=1031):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/17, @ANYRES32], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))

4.545347067s ago: executing program 3 (id=1032):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92211, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e", 0x88}], 0x1}, 0xff0f000020000080)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507", 0x8}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4122, 0x101a}], 0x1}, 0x42)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

4.267050506s ago: executing program 0 (id=1033):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000680)={0x3, 0x80, 0x9, 0x0, 0x7f, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x1, 0x80000001, 0x90ef, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x10000})
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r9}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r8, r5}, 0xc)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)

1.516333143s ago: executing program 1 (id=1034):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x0, 0x4c}]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x22, 0x1}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x401}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000082000000090000000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f00000001c0)="e02742e868000000f6e8090000", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/16], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x29, 0xa, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000001580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0xc000}, 0x4b1c1a0c5af29ba2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)

231.807613ms ago: executing program 0 (id=1035):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0)
close(r0)
close(0xffffffffffffffff)
socket$kcm(0x23, 0x2, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
socket$kcm(0x23, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"})
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})

189.496845ms ago: executing program 2 (id=1036):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000680)={0x3, 0x80, 0x9, 0x0, 0x7f, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x1, 0x80000001, 0x90ef, 0x0, 0x0, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x10000})
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r3, r2}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)

92.345087ms ago: executing program 0 (id=1037):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94)

0s ago: executing program 1 (id=1038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4200, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x3c, &(0x7f0000000040), 0xcf)
recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e9ffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffdc9, &(0x7f0000000000), 0x1}, 0x81)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts.
[   72.220740][ T5763] cgroup: Unknown subsys name 'net'
[   72.362471][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.981100][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.517684][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.522261][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.525995][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.541753][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.542373][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.549633][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.564289][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.573094][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.581466][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.589048][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.596659][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.605469][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.613500][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.615275][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.625668][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.628928][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.635635][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.643287][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.651361][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.657970][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.663175][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.670258][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.677668][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.690991][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.184273][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   76.269213][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   76.284048][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   76.295015][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   76.338363][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.345758][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.353100][ T5778] bridge_slave_0: entered allmulticast mode
[   76.360324][ T5778] bridge_slave_0: entered promiscuous mode
[   76.374294][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.381605][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.388796][ T5778] bridge_slave_1: entered allmulticast mode
[   76.398374][ T5778] bridge_slave_1: entered promiscuous mode
[   76.521830][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.536140][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.543389][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.550920][ T5775] bridge_slave_0: entered allmulticast mode
[   76.558422][ T5775] bridge_slave_0: entered promiscuous mode
[   76.573719][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.604723][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.612046][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.619565][ T5775] bridge_slave_1: entered allmulticast mode
[   76.627760][ T5775] bridge_slave_1: entered promiscuous mode
[   76.677847][ T5778] team0: Port device team_slave_0 added
[   76.702991][ T5778] team0: Port device team_slave_1 added
[   76.712715][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.720088][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.727444][ T5777] bridge_slave_0: entered allmulticast mode
[   76.734176][ T5777] bridge_slave_0: entered promiscuous mode
[   76.751523][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.758745][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.766017][ T5777] bridge_slave_1: entered allmulticast mode
[   76.773157][ T5777] bridge_slave_1: entered promiscuous mode
[   76.796074][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.803386][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.810781][ T5776] bridge_slave_0: entered allmulticast mode
[   76.819075][ T5776] bridge_slave_0: entered promiscuous mode
[   76.862992][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.876167][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.885573][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.892696][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.900235][ T5776] bridge_slave_1: entered allmulticast mode
[   76.907729][ T5776] bridge_slave_1: entered promiscuous mode
[   76.934253][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.946565][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.972749][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.995012][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.002069][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.028282][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.063440][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.075154][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.127904][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.149966][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.172771][ T5775] team0: Port device team_slave_0 added
[   77.183945][ T5778] hsr_slave_0: entered promiscuous mode
[   77.191449][ T5778] hsr_slave_1: entered promiscuous mode
[   77.223479][ T5776] team0: Port device team_slave_0 added
[   77.232450][ T5775] team0: Port device team_slave_1 added
[   77.268293][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.275376][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.301384][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.316290][ T5777] team0: Port device team_slave_0 added
[   77.324303][ T5776] team0: Port device team_slave_1 added
[   77.331742][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.339367][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.365593][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.385814][ T5777] team0: Port device team_slave_1 added
[   77.483372][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.490748][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.517077][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.530468][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.538396][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.564444][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.576892][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.583864][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.610294][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.628472][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.635881][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.662308][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.679451][ T5775] hsr_slave_0: entered promiscuous mode
[   77.686307][ T5775] hsr_slave_1: entered promiscuous mode
[   77.692551][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.700385][ T5775] Cannot create hsr debugfs directory
[   77.726381][ T5779] Bluetooth: hci0: command tx timeout
[   77.732210][ T5779] Bluetooth: hci3: command tx timeout
[   77.738305][ T5087] Bluetooth: hci1: command tx timeout
[   77.744251][ T5786] Bluetooth: hci2: command tx timeout
[   77.823225][ T5776] hsr_slave_0: entered promiscuous mode
[   77.830264][ T5776] hsr_slave_1: entered promiscuous mode
[   77.836662][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.844222][ T5776] Cannot create hsr debugfs directory
[   77.918885][ T5777] hsr_slave_0: entered promiscuous mode
[   77.927689][ T5777] hsr_slave_1: entered promiscuous mode
[   77.934247][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.942033][ T5777] Cannot create hsr debugfs directory
[   78.192455][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.205525][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.216013][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.230874][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.368176][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.390248][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.400008][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.412875][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.503966][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.526029][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.550249][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.560354][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.629450][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.661842][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.674199][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.684658][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.709504][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.749268][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   78.790699][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.798001][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.815121][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.822356][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.877779][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.905117][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.938771][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   78.969380][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.976540][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.988191][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.995423][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.082377][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   79.113867][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.121071][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.150689][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.168219][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.175468][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.262188][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   79.289712][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.296969][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.331547][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.338695][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.662244][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.782526][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.817604][ T5786] Bluetooth: hci2: command tx timeout
[   79.823089][ T5786] Bluetooth: hci3: command tx timeout
[   79.829734][ T5779] Bluetooth: hci1: command tx timeout
[   79.835804][ T5781] Bluetooth: hci0: command tx timeout
[   79.863244][ T5778] veth0_vlan: entered promiscuous mode
[   79.890289][ T5778] veth1_vlan: entered promiscuous mode
[   79.944472][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.978524][ T5778] veth0_macvtap: entered promiscuous mode
[   79.993820][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.003200][ T5775] veth0_vlan: entered promiscuous mode
[   80.019718][ T5778] veth1_macvtap: entered promiscuous mode
[   80.051846][ T5775] veth1_vlan: entered promiscuous mode
[   80.092412][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.128563][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.147412][ T5776] veth0_vlan: entered promiscuous mode
[   80.189720][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.200199][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.210808][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.219741][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.240615][ T5776] veth1_vlan: entered promiscuous mode
[   80.250179][ T5777] veth0_vlan: entered promiscuous mode
[   80.274239][ T5775] veth0_macvtap: entered promiscuous mode
[   80.283850][ T5777] veth1_vlan: entered promiscuous mode
[   80.312863][ T5775] veth1_macvtap: entered promiscuous mode
[   80.442399][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.453820][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.466480][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.476622][ T5776] veth0_macvtap: entered promiscuous mode
[   80.492671][ T5777] veth0_macvtap: entered promiscuous mode
[   80.507010][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.518047][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.529940][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.540535][ T5776] veth1_macvtap: entered promiscuous mode
[   80.551168][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.567642][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.591179][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.600408][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.609667][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.618665][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.631089][ T5777] veth1_macvtap: entered promiscuous mode
[   80.663795][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.672723][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.683727][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.686847][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.697434][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.711796][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.724047][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.751519][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.762258][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.773988][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.784575][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.796984][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.810104][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.819120][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.829456][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.838291][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.854128][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.866657][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.877057][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.887925][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.898276][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.908946][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.922444][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.996780][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.025406][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.045543][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.056137][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.066361][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.077508][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.093516][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.105145][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.114284][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.127574][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.136626][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.282441][ T5839] netlink: 'syz.2.3': attribute type 21 has an invalid length.
[   81.291778][ T5839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'.
[   81.381576][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.410277][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.481205][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.490499][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.529993][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.549168][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.579758][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.597497][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.664097][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.668508][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.694918][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.702239][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.879261][    C0] hrtimer: interrupt took 65948 ns
[   81.899567][ T5786] Bluetooth: hci3: command tx timeout
[   81.905071][ T5786] Bluetooth: hci1: command tx timeout
[   81.910964][ T5087] Bluetooth: hci0: command tx timeout
[   81.918129][ T5779] Bluetooth: hci2: command tx timeout
[   82.876036][ T5850] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   82.913954][ T5850] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   82.949391][ T5850] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2'.
[   82.990805][ T5850] openvswitch: netlink: Message has 4 unknown bytes.
[   83.936325][ T5854] netlink: 'syz.3.4': attribute type 4 has an invalid length.
[   83.945887][ T5854] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'.
[   83.966147][ T5087] Bluetooth: hci0: command tx timeout
[   83.971623][ T5087] Bluetooth: hci2: command tx timeout
[   83.979237][ T5781] Bluetooth: hci3: command tx timeout
[   83.984735][ T5786] Bluetooth: hci1: command tx timeout
[   84.041353][ T5854] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   84.503093][ T5868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'.
[   84.746541][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   86.518206][ T5882] netlink: 'syz.2.12': attribute type 10 has an invalid length.
[   86.615810][ T5882] netlink: 'syz.2.12': attribute type 10 has an invalid length.
[   86.624800][ T5882] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.12'.
[   86.703110][ T5882] openvswitch: netlink: Message has 4 unknown bytes.
[   87.008846][  T966] cfg80211: failed to load regulatory.db
[   87.432145][ T5892] netlink: 'syz.0.16': attribute type 4 has an invalid length.
[   87.462193][ T5892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16'.
[   87.933360][ T5892] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   91.307875][ T5913] netlink: 'syz.3.20': attribute type 10 has an invalid length.
[   91.364069][ T5913] netlink: 'syz.3.20': attribute type 10 has an invalid length.
[   91.373843][ T5913] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.20'.
[   91.385750][ T5913] openvswitch: netlink: Message has 4 unknown bytes.
[   91.579079][ T5915] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   91.671627][ T5915] syz_tun: entered promiscuous mode
[   91.798912][ T5919] netlink: 'syz.3.23': attribute type 10 has an invalid length.
[   91.820172][ T5919] netlink: 'syz.3.23': attribute type 10 has an invalid length.
[   91.830238][ T5919] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.23'.
[   91.847033][ T5919] openvswitch: netlink: Message has 4 unknown bytes.
[   91.962921][ T5915] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   92.206194][ T5915] syz.0.21 (5915) used greatest stack depth: 18920 bytes left
[   92.410563][ T5927] netlink: 'syz.0.25': attribute type 10 has an invalid length.
[   92.444977][ T5927] netlink: 'syz.0.25': attribute type 10 has an invalid length.
[   92.463603][ T5927] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.25'.
[   92.474784][ T5927] openvswitch: netlink: Message has 4 unknown bytes.
[   93.379257][ T5936] netlink: 'syz.0.27': attribute type 27 has an invalid length.
[   93.387408][ T5936] netlink: 164 bytes leftover after parsing attributes in process `syz.0.27'.
[   93.873667][ T5945] netlink: 'syz.1.29': attribute type 29 has an invalid length.
[   93.928657][ T5945] netlink: 'syz.1.29': attribute type 29 has an invalid length.
[   93.937999][ T5950] netlink: 'syz.1.29': attribute type 29 has an invalid length.
[   93.966352][ T5945] netlink: 'syz.1.29': attribute type 29 has an invalid length.
[   94.936601][ T5958] syzkaller0: entered promiscuous mode
[   94.944713][ T5958] syzkaller0: entered allmulticast mode
[   95.044386][ T5965] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.33'.
[   95.120812][ T5968] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   95.127840][ T5968] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  100.443540][ T5990] warning: `syz.2.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.646155][ T5990] netlink: 'syz.2.38': attribute type 4 has an invalid length.
[  100.762871][ T5990] netlink: 152 bytes leftover after parsing attributes in process `syz.2.38'.
[  100.837859][ T5990] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  101.804748][ T6001] netlink: 'syz.0.42': attribute type 9 has an invalid length.
[  101.823970][ T6001] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.42'.
[  107.801203][ T6039] netlink: 'syz.3.52': attribute type 4 has an invalid length.
[  107.811716][ T6039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.52'.
[  107.824480][ T6039] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  108.043847][ T6044] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  108.161875][ T6043] syzkaller0: entered promiscuous mode
[  108.171194][ T6043] syzkaller0: entered allmulticast mode
[  112.398818][ T6063] netlink: 'syz.3.59': attribute type 9 has an invalid length.
[  112.466451][ T6063] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.59'.
[  115.833815][ T6078] netlink: 'syz.0.62': attribute type 4 has an invalid length.
[  115.869020][ T6078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.62'.
[  115.881825][ T6078] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  116.303074][ T6091] syzkaller0: entered promiscuous mode
[  116.309230][ T6091] syzkaller0: entered allmulticast mode
[  118.852783][ T6101] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.67'.
[  118.934980][ T6104] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  118.941550][ T6104] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  119.751959][ T6109] syzkaller0: entered promiscuous mode
[  119.757588][ T6109] syzkaller0: entered allmulticast mode
[  124.602146][ T6144] netlink: 'syz.2.75': attribute type 4 has an invalid length.
[  124.645794][ T6144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.75'.
[  124.697814][ T6144] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  124.885944][ T6152] netlink: 'syz.3.77': attribute type 27 has an invalid length.
[  124.918566][ T6152] netlink: 164 bytes leftover after parsing attributes in process `syz.3.77'.
[  126.756284][ T6175] netlink: 'syz.2.83': attribute type 10 has an invalid length.
[  127.467953][ T6175] syz_tun: entered promiscuous mode
[  127.499600][ T6175] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  127.603192][ T6178] syzkaller0: entered promiscuous mode
[  127.612659][ T6178] syzkaller0: entered allmulticast mode
[  127.971790][ T6184] netlink: 'syz.2.86': attribute type 10 has an invalid length.
[  128.020017][ T6184] netlink: 'syz.2.86': attribute type 10 has an invalid length.
[  128.036480][ T6184] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.86'.
[  128.058107][ T6184] openvswitch: netlink: Message has 4 unknown bytes.
[  130.530973][ T6197] netlink: 'syz.2.88': attribute type 4 has an invalid length.
[  130.538762][ T6197] netlink: 152 bytes leftover after parsing attributes in process `syz.2.88'.
[  130.548579][ T6197] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  130.848340][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'.
[  130.918934][ T6202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.91'.
[  132.611308][ T6215] netlink: 'syz.3.95': attribute type 10 has an invalid length.
[  132.630564][ T6215] syz_tun: entered promiscuous mode
[  132.649577][ T6215] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  132.932003][ T6224] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[  132.948528][ T6224] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[  132.960719][ T6224] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.97'.
[  132.991008][ T6224] openvswitch: netlink: Message has 4 unknown bytes.
[  133.464048][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.472268][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.661833][ T6230] syzkaller0: entered promiscuous mode
[  133.672762][ T6230] syzkaller0: entered allmulticast mode
[  136.405656][ T6256] netlink: 'syz.1.104': attribute type 4 has an invalid length.
[  136.413392][ T6256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.104'.
[  136.426892][ T6256] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  137.971609][ T6267] syzkaller0: entered promiscuous mode
[  138.049234][ T6267] syzkaller0: entered allmulticast mode
[  141.502124][ T6283] netlink: 'syz.1.111': attribute type 10 has an invalid length.
[  141.566139][ T6283] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.111'.
[  141.637035][ T6283] openvswitch: netlink: Flow key attr not present in new flow.
[  141.712443][ T6285] syzkaller0: entered promiscuous mode
[  141.720625][ T6285] syzkaller0: entered allmulticast mode
[  141.926803][ T6287] bridge_slave_1: left allmulticast mode
[  141.932687][ T6287] bridge_slave_1: left promiscuous mode
[  141.943257][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.014821][ T6287] bridge_slave_0: left allmulticast mode
[  142.149308][ T6287] bridge_slave_0: left promiscuous mode
[  142.155295][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.209975][ T6299] netlink: 'syz.0.116': attribute type 21 has an invalid length.
[  148.218985][ T6299] netlink: 156 bytes leftover after parsing attributes in process `syz.0.116'.
[  148.373848][ T6300] syzkaller0: entered promiscuous mode
[  148.381844][ T6300] syzkaller0: entered allmulticast mode
[  150.493153][ T6310] netlink: 'syz.3.120': attribute type 4 has an invalid length.
[  150.535570][ T6310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.120'.
[  150.587948][ T6310] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  151.846584][ T6318] netlink: 'syz.2.122': attribute type 4 has an invalid length.
[  151.855002][ T6318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.122'.
[  151.882889][ T6318] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  155.464043][ T6340] Zero length message leads to an empty skb
[  155.878411][ T6343] syzkaller0: entered promiscuous mode
[  155.884032][ T6343] syzkaller0: entered allmulticast mode
[  159.668747][ T6357] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.132'.
[  159.823921][ T6351] syzkaller0: entered promiscuous mode
[  159.831084][ T6351] syzkaller0: entered allmulticast mode
[  159.847437][ T6355] bridge_slave_1: left allmulticast mode
[  159.853154][ T6355] bridge_slave_1: left promiscuous mode
[  159.859563][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.869000][ T6355] bridge_slave_0: left allmulticast mode
[  159.874669][ T6355] bridge_slave_0: left promiscuous mode
[  159.882443][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.433679][ T6357] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.132'.
[  162.493901][ T6370] syzkaller0: entered promiscuous mode
[  162.501409][ T6370] syzkaller0: entered allmulticast mode
[  165.363659][ T6389] netlink: 'syz.2.137': attribute type 4 has an invalid length.
[  165.376364][ T6389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.137'.
[  165.392700][ T6389] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  165.908369][ T6402] bridge_slave_1: left allmulticast mode
[  165.914545][ T6402] bridge_slave_1: left promiscuous mode
[  165.926321][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.939403][ T6402] bridge_slave_0: left allmulticast mode
[  165.956745][ T6402] bridge_slave_0: left promiscuous mode
[  165.964333][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.083928][ T6405] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.143'.
[  166.240868][ T6405] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.143'.
[  168.360038][ T6428] syzkaller0: entered promiscuous mode
[  168.366465][ T6428] syzkaller0: entered allmulticast mode
[  168.397967][ T6426] syzkaller0: entered promiscuous mode
[  168.403796][ T6426] syzkaller0: entered allmulticast mode
[  176.316297][ T6503] netlink: 'syz.0.169': attribute type 4 has an invalid length.
[  176.342769][ T6503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.169'.
[  176.433497][ T6503] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  180.355558][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[  181.361985][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[  181.892257][ T6569] syzkaller0: entered promiscuous mode
[  181.898990][ T6569] syzkaller0: entered allmulticast mode
[  184.928158][ T6587] netlink: 'syz.3.190': attribute type 4 has an invalid length.
[  184.960657][ T6587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.190'.
[  185.018073][ T6587] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  185.562317][ T6596] netlink: 'syz.2.201': attribute type 4 has an invalid length.
[  185.597397][ T6596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.201'.
[  185.635977][ T6596] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  188.483143][ T6632] netlink: 'syz.3.204': attribute type 4 has an invalid length.
[  188.516039][ T6632] netlink: 152 bytes leftover after parsing attributes in process `syz.3.204'.
[  188.535721][ T6632] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  191.747405][ T6680] FAULT_INJECTION: forcing a failure.
[  191.747405][ T6680] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  191.761252][ T6680] CPU: 1 PID: 6680 Comm: syz.3.216 Not tainted syzkaller #0
[  191.766296][ T6675] netlink: 'syz.0.215': attribute type 4 has an invalid length.
[  191.768568][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  191.768584][ T6680] Call Trace:
[  191.768593][ T6680]  <TASK>
[  191.768603][ T6680]  dump_stack_lvl+0x18c/0x250
[  191.768644][ T6680]  ? show_regs_print_info+0x20/0x20
[  191.781146][ T6675] netlink: 152 bytes leftover after parsing attributes in process `syz.0.215'.
[  191.786358][ T6680]  ? load_image+0x420/0x420
[  191.786396][ T6680]  ? __might_fault+0xaa/0x120
[  191.786418][ T6680]  ? __lock_acquire+0x7d40/0x7d40
[  191.786440][ T6680]  ? __local_bh_enable_ip+0x13a/0x1c0
[  191.786460][ T6680]  ? _local_bh_enable+0xa0/0xa0
[  191.786483][ T6680]  should_fail_ex+0x39d/0x4d0
[  191.786518][ T6680]  copy_fpstate_to_sigframe+0xa05/0xc60
[  191.786547][ T6680]  ? kmem_cache_free+0xf8/0x270
[  191.786572][ T6680]  ? __dequeue_signal+0x52b/0x680
[  191.786598][ T6680]  ? dequeue_signal+0xe9/0x4b0
[  191.786628][ T6680]  ? copy_fpstate_to_sigframe+0x191/0xc60
[  191.793116][ T6675] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  191.797552][ T6680]  ? fpregs_set+0x370/0x370
[  191.797612][ T6680]  ? fpu__alloc_mathframe+0xa7/0x120
[  191.797644][ T6680]  get_sigframe+0x5e2/0x7d0
[  191.797693][ T6680]  ? load_gs_index+0x1a0/0x1a0
[  191.797726][ T6680]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  191.797749][ T6680]  ? get_signal+0x11f5/0x13f0
[  191.797774][ T6680]  x64_setup_rt_frame+0x15e/0xc40
[  191.917877][ T6680]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.923099][ T6680]  ? lockdep_hardirqs_on+0x98/0x150
[  191.928311][ T6680]  ? perf_trace_preemptirq_template+0xac/0x330
[  191.934482][ T6680]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  191.940475][ T6680]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  191.946045][ T6680]  ? arch_do_signal_or_restart+0x3b1/0x800
[  191.951873][ T6680]  arch_do_signal_or_restart+0x42c/0x800
[  191.957532][ T6680]  ? get_sigframe_size+0x20/0x20
[  191.962497][ T6680]  ? ksys_write+0x1fb/0x260
[  191.967021][ T6680]  ? exit_to_user_mode_loop+0x3b/0x110
[  191.972586][ T6680]  exit_to_user_mode_loop+0x70/0x110
[  191.977913][ T6680]  exit_to_user_mode_prepare+0xee/0x180
[  191.983504][ T6680]  syscall_exit_to_user_mode+0x1a/0x50
[  191.988990][ T6680]  do_syscall_64+0x61/0xa0
[  191.993422][ T6680]  ? clear_bhb_loop+0x40/0x90
[  191.998112][ T6680]  ? clear_bhb_loop+0x40/0x90
[  192.002813][ T6680]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.008731][ T6680] RIP: 0033:0x7f257635d68e
[  192.013158][ T6680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  192.032785][ T6680] RSP: 002b:00007f257717dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  192.041224][ T6680] RAX: 0000000000000001 RBX: 00007f257717e6c0 RCX: 00007f257635d68e
[  192.049211][ T6680] RDX: 0000000000000001 RSI: 00007f257717e090 RDI: 0000000000000007
[  192.057196][ T6680] RBP: 00007f257717e090 R08: 0000000000000000 R09: 0000000000000000
[  192.065184][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.073175][ T6680] R13: 00007f2576616128 R14: 00007f2576616090 R15: 00007ffe29f82fc8
[  192.081174][ T6680]  </TASK>
[  192.144136][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[  193.442257][ T6696] netlink: 'syz.3.222': attribute type 39 has an invalid length.
[  194.432902][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'.
[  194.453656][ T6725] netlink: 'syz.0.228': attribute type 4 has an invalid length.
[  194.463539][ T6725] netlink: 152 bytes leftover after parsing attributes in process `syz.0.228'.
[  194.474301][ T6725] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  194.534191][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.544349][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  196.136620][ T6753] FAULT_INJECTION: forcing a failure.
[  196.136620][ T6753] name failslab, interval 1, probability 0, space 0, times 1
[  196.206064][ T6754] netlink: 'syz.3.239': attribute type 21 has an invalid length.
[  196.236736][ T6753] CPU: 0 PID: 6753 Comm: syz.2.238 Not tainted syzkaller #0
[  196.244145][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  196.254279][ T6753] Call Trace:
[  196.257623][ T6753]  <TASK>
[  196.260625][ T6753]  dump_stack_lvl+0x18c/0x250
[  196.265413][ T6753]  ? show_regs_print_info+0x20/0x20
[  196.270707][ T6753]  ? load_image+0x420/0x420
[  196.275329][ T6753]  ? trace_event_raw_event_lock+0x250/0x250
[  196.281304][ T6753]  should_fail_ex+0x39d/0x4d0
[  196.286072][ T6753]  should_failslab+0x9/0x20
[  196.290623][ T6753]  slab_pre_alloc_hook+0x59/0x310
[  196.295735][ T6753]  kmem_cache_alloc_node+0x60/0x320
[  196.300978][ T6753]  ? __alloc_skb+0x103/0x2c0
[  196.305655][ T6753]  __alloc_skb+0x103/0x2c0
[  196.310119][ T6753]  tipc_msg_create+0x4f/0x4d0
[  196.314832][ T6753]  ? tipc_own_addr+0x45/0x2a0
[  196.319565][ T6753]  tipc_group_proto_xmit+0xce/0x790
[  196.324827][ T6753]  tipc_group_delete+0x15f/0x4c0
[  196.329921][ T6753]  ? slab_free_freelist_hook+0x130/0x1a0
[  196.335623][ T6753]  ? __tipc_shutdown+0x119c/0x1530
[  196.340805][ T6753]  ? tipc_group_update_member+0x3c0/0x3c0
[  196.346615][ T6753]  ? tipc_group_self+0x26/0x1c0
[  196.351514][ T6753]  tipc_sk_leave+0x146/0x4e0
[  196.356189][ T6753]  ? __tipc_shutdown+0x1530/0x1530
[  196.361344][ T6753]  ? _local_bh_enable+0xa0/0xa0
[  196.366269][ T6753]  tipc_release+0x328/0x2160
[  196.370907][ T6753]  ? ima_get_current_hash_algo+0x10/0x10
[  196.376600][ T6753]  ? tipc_sock_destruct+0x180/0x180
[  196.381833][ T6753]  ? down_write+0x16e/0x200
[  196.386371][ T6753]  ? down_read_killable+0x340/0x340
[  196.391636][ T6753]  sock_close+0xbd/0x230
[  196.395927][ T6753]  ? sock_mmap+0xa0/0xa0
[  196.400206][ T6753]  __fput+0x234/0x970
[  196.404259][ T6753]  __se_sys_close+0x15f/0x220
[  196.409073][ T6753]  do_syscall_64+0x55/0xa0
[  196.413519][ T6753]  ? clear_bhb_loop+0x40/0x90
[  196.418236][ T6753]  ? clear_bhb_loop+0x40/0x90
[  196.422957][ T6753]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.428895][ T6753] RIP: 0033:0x7f57c799ce59
[  196.433348][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.452989][ T6753] RSP: 002b:00007f57c882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  196.461454][ T6753] RAX: ffffffffffffffda RBX: 00007f57c7c15fa0 RCX: 00007f57c799ce59
[  196.469463][ T6753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  196.477466][ T6753] RBP: 00007f57c882b090 R08: 0000000000000000 R09: 0000000000000000
[  196.485480][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.493477][ T6753] R13: 00007f57c7c16038 R14: 00007f57c7c15fa0 R15: 00007ffefd36a7b8
[  196.501542][ T6753]  </TASK>
[  196.791907][ T6756] netlink: 'syz.1.240': attribute type 4 has an invalid length.
[  196.815889][ T6756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.240'.
[  196.829946][ T6756] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  196.902944][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'.
[  196.911184][ T6766] FAULT_INJECTION: forcing a failure.
[  196.911184][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.927237][ T6763] netlink: 'syz.3.245': attribute type 4 has an invalid length.
[  196.930368][ T6766] CPU: 0 PID: 6766 Comm: syz.0.244 Not tainted syzkaller #0
[  196.942271][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  196.952343][ T6766] Call Trace:
[  196.955636][ T6766]  <TASK>
[  196.958581][ T6766]  dump_stack_lvl+0x18c/0x250
[  196.963375][ T6766]  ? show_regs_print_info+0x20/0x20
[  196.968599][ T6766]  ? load_image+0x420/0x420
[  196.973123][ T6766]  ? __might_fault+0xaa/0x120
[  196.977819][ T6766]  ? __lock_acquire+0x7d40/0x7d40
[  196.982863][ T6766]  should_fail_ex+0x39d/0x4d0
[  196.987567][ T6766]  _copy_from_iter+0x1d9/0x12e0
[  196.992435][ T6766]  ? __might_fault+0xaa/0x120
[  196.997126][ T6766]  ? _copy_from_iter+0x24e/0x12e0
[  197.002170][ T6766]  ? __virt_addr_valid+0x18c/0x540
[  197.007327][ T6766]  ? __lock_acquire+0x7d40/0x7d40
[  197.012405][ T6766]  ? copyout_mc+0x70/0x70
[  197.016771][ T6766]  ? copyout_mc+0x70/0x70
[  197.021128][ T6766]  ? __virt_addr_valid+0x18c/0x540
[  197.026265][ T6766]  ? page_copy_sane+0x16a/0x270
[  197.031164][ T6766]  copy_page_from_iter+0x7b/0x100
[  197.036215][ T6766]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  197.042050][ T6766]  tun_get_user+0x15db/0x3ca0
[  197.046752][ T6766]  ? aa_file_perm+0x11b/0xee0
[  197.051453][ T6766]  ? rcu_read_unlock+0xa0/0xa0
[  197.056246][ T6766]  ? tun_get+0x1c/0x2e0
[  197.060419][ T6766]  ? __lock_acquire+0x7d40/0x7d40
[  197.065467][ T6766]  ? tun_get+0x1c/0x2e0
[  197.069644][ T6766]  tun_chr_write_iter+0x119/0x200
[  197.074698][ T6766]  vfs_write+0x46c/0x990
[  197.078971][ T6766]  ? file_end_write+0x250/0x250
[  197.083841][ T6766]  ? __fget_files+0x43d/0x4b0
[  197.088543][ T6766]  ? __fdget_pos+0x1d8/0x330
[  197.093152][ T6766]  ? ksys_write+0x75/0x260
[  197.097590][ T6766]  ksys_write+0x150/0x260
[  197.101944][ T6766]  ? __ia32_sys_read+0x90/0x90
[  197.106753][ T6766]  ? lockdep_hardirqs_on+0x98/0x150
[  197.111971][ T6766]  do_syscall_64+0x55/0xa0
[  197.116395][ T6766]  ? clear_bhb_loop+0x40/0x90
[  197.121113][ T6766]  ? clear_bhb_loop+0x40/0x90
[  197.125808][ T6766]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.131713][ T6766] RIP: 0033:0x7f3c5319ce59
[  197.136144][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.155761][ T6766] RSP: 002b:00007f3c513f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  197.164215][ T6766] RAX: ffffffffffffffda RBX: 00007f3c53415fa0 RCX: 00007f3c5319ce59
[  197.172216][ T6766] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8
[  197.180205][ T6766] RBP: 00007f3c513f6090 R08: 0000000000000000 R09: 0000000000000000
[  197.188191][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.196172][ T6766] R13: 00007f3c53416038 R14: 00007f3c53415fa0 R15: 00007ffe66211088
[  197.204165][ T6766]  </TASK>
[  197.215471][ T6763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.245'.
[  197.270916][ T6763] .`: renamed from bond0 (while UP)
[  197.562576][ T6775] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[  199.109342][ T6824] netlink: 'syz.0.255': attribute type 4 has an invalid length.
[  199.118022][ T6824] netlink: 152 bytes leftover after parsing attributes in process `syz.0.255'.
[  199.140817][ T6824] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  199.163368][ T6823] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.256'.
[  199.303402][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[  200.063091][ T6844] FAULT_INJECTION: forcing a failure.
[  200.063091][ T6844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.081465][ T6844] CPU: 0 PID: 6844 Comm: syz.3.264 Not tainted syzkaller #0
[  200.088828][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.098926][ T6844] Call Trace:
[  200.102239][ T6844]  <TASK>
[  200.105201][ T6844]  dump_stack_lvl+0x18c/0x250
[  200.109938][ T6844]  ? show_regs_print_info+0x20/0x20
[  200.115178][ T6844]  ? load_image+0x420/0x420
[  200.119726][ T6844]  ? __might_fault+0xaa/0x120
[  200.124435][ T6844]  should_fail_ex+0x39d/0x4d0
[  200.129172][ T6844]  copyin+0x1a/0x90
[  200.133024][ T6844]  _copy_from_iter+0x54f/0x12e0
[  200.137919][ T6844]  ? __virt_addr_valid+0x18c/0x540
[  200.143074][ T6844]  ? copyout_mc+0x70/0x70
[  200.147439][ T6844]  ? __virt_addr_valid+0x18c/0x540
[  200.152613][ T6844]  ? __virt_addr_valid+0x18c/0x540
[  200.157935][ T6844]  ? __virt_addr_valid+0x469/0x540
[  200.163080][ T6844]  ? __check_object_size+0x506/0xa20
[  200.168422][ T6844]  skb_copy_datagram_from_iter+0xf4/0x6e0
[  200.174287][ T6844]  ? dev_get_by_index+0x22/0x2d0
[  200.179269][ T6844]  ? skb_put+0x11b/0x210
[  200.183551][ T6844]  packet_sendmsg+0x33ff/0x4c30
[  200.188469][ T6844]  ? __might_sleep+0xe0/0xe0
[  200.193101][ T6844]  ? mark_lock+0x94/0x320
[  200.197470][ T6844]  ? __lock_acquire+0x1273/0x7d40
[  200.202535][ T6844]  ? verify_lock_unused+0x140/0x140
[  200.207771][ T6844]  ? aa_sk_perm+0x83c/0x970
[  200.212313][ T6844]  ? packet_getsockopt+0xad0/0xad0
[  200.217478][ T6844]  ? tomoyo_gc_thread+0x7d3/0x1410
[  200.222624][ T6844]  ? aa_sock_msg_perm+0x94/0x150
[  200.227631][ T6844]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  200.232946][ T6844]  ? security_socket_sendmsg+0x80/0xa0
[  200.238434][ T6844]  ? packet_getsockopt+0xad0/0xad0
[  200.243621][ T6844]  ____sys_sendmsg+0x5ba/0x960
[  200.248417][ T6844]  ? __lock_acquire+0x7d40/0x7d40
[  200.253495][ T6844]  ? __asan_memset+0x22/0x40
[  200.258118][ T6844]  ? __sys_sendmsg_sock+0x30/0x30
[  200.263177][ T6844]  ? __import_iovec+0x3fa/0x850
[  200.268066][ T6844]  ? import_iovec+0x73/0xa0
[  200.272603][ T6844]  ___sys_sendmsg+0x2a6/0x360
[  200.277311][ T6844]  ? get_pid_task+0x20/0x1e0
[  200.281938][ T6844]  ? __sys_sendmsg+0x2a0/0x2a0
[  200.286760][ T6844]  ? __lock_acquire+0x7d40/0x7d40
[  200.291854][ T6844]  __se_sys_sendmsg+0x1c2/0x2b0
[  200.296751][ T6844]  ? __x64_sys_sendmsg+0x80/0x80
[  200.301742][ T6844]  ? lockdep_hardirqs_on+0x98/0x150
[  200.306976][ T6844]  do_syscall_64+0x55/0xa0
[  200.311417][ T6844]  ? clear_bhb_loop+0x40/0x90
[  200.316124][ T6844]  ? clear_bhb_loop+0x40/0x90
[  200.320843][ T6844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.326777][ T6844] RIP: 0033:0x7f257639ce59
[  200.331216][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.350856][ T6844] RSP: 002b:00007f257719f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.359313][ T6844] RAX: ffffffffffffffda RBX: 00007f2576615fa0 RCX: 00007f257639ce59
[  200.367305][ T6844] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  200.375289][ T6844] RBP: 00007f257719f090 R08: 0000000000000000 R09: 0000000000000000
[  200.383285][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.391257][ T6844] R13: 00007f2576616038 R14: 00007f2576615fa0 R15: 00007ffe29f82fc8
[  200.399265][ T6844]  </TASK>
[  200.679052][ T6847] netlink: 'syz.0.265': attribute type 4 has an invalid length.
[  200.688271][ T6847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.265'.
[  200.702689][ T6847] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  200.794029][ T6853] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.268'.
[  201.336269][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'.
[  201.725358][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  201.725532][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[  201.731656][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  201.737738][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  201.897872][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[  202.683597][ T6885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.277'.
[  203.290199][ T6903] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.282'.
[  204.142487][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  204.187122][ T6919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  206.895349][ T6950] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.296'.
[  206.925381][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[  207.113682][ T6959] FAULT_INJECTION: forcing a failure.
[  207.113682][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.201838][ T6959] CPU: 1 PID: 6959 Comm: syz.1.300 Not tainted syzkaller #0
[  207.209219][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  207.219313][ T6959] Call Trace:
[  207.222630][ T6959]  <TASK>
[  207.225591][ T6959]  dump_stack_lvl+0x18c/0x250
[  207.230321][ T6959]  ? show_regs_print_info+0x20/0x20
[  207.235560][ T6959]  ? load_image+0x420/0x420
[  207.240104][ T6959]  ? __might_fault+0xaa/0x120
[  207.244825][ T6959]  ? __lock_acquire+0x7d40/0x7d40
[  207.249894][ T6959]  should_fail_ex+0x39d/0x4d0
[  207.254625][ T6959]  _copy_from_user+0x2f/0xe0
[  207.259270][ T6959]  kstrtouint_from_user+0xde/0x170
[  207.264436][ T6959]  ? kstrtol_from_user+0x190/0x190
[  207.269637][ T6959]  proc_fail_nth_write+0x8f/0x250
[  207.274724][ T6959]  ? proc_fail_nth_read+0x260/0x260
[  207.279978][ T6959]  ? proc_fail_nth_read+0x260/0x260
[  207.285226][ T6959]  vfs_write+0x296/0x990
[  207.289521][ T6959]  ? file_end_write+0x250/0x250
[  207.294416][ T6959]  ? __fget_files+0x28/0x4b0
[  207.299059][ T6959]  ? __fget_files+0x28/0x4b0
[  207.303728][ T6959]  ? __fget_files+0x43d/0x4b0
[  207.308475][ T6959]  ? __fdget_pos+0x2a3/0x330
[  207.313107][ T6959]  ? ksys_write+0x75/0x260
[  207.317555][ T6959]  ksys_write+0x150/0x260
[  207.322014][ T6959]  ? __ia32_sys_read+0x90/0x90
[  207.326813][ T6959]  ? lockdep_hardirqs_on+0x98/0x150
[  207.332041][ T6959]  do_syscall_64+0x55/0xa0
[  207.336478][ T6959]  ? clear_bhb_loop+0x40/0x90
[  207.341170][ T6959]  ? clear_bhb_loop+0x40/0x90
[  207.345871][ T6959]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.351781][ T6959] RIP: 0033:0x7faf0595d68e
[  207.356211][ T6959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  207.375827][ T6959] RSP: 002b:00007faf067f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  207.384253][ T6959] RAX: ffffffffffffffda RBX: 00007faf067fa6c0 RCX: 00007faf0595d68e
[  207.392237][ T6959] RDX: 0000000000000001 RSI: 00007faf067fa0a0 RDI: 0000000000000004
[  207.400222][ T6959] RBP: 00007faf067fa090 R08: 0000000000000000 R09: 0000000000000000
[  207.408204][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  207.416183][ T6959] R13: 00007faf05c16038 R14: 00007faf05c15fa0 R15: 00007ffee0af7428
[  207.424180][ T6959]  </TASK>
[  208.503049][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[  209.404236][ T6996] FAULT_INJECTION: forcing a failure.
[  209.404236][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.824166][ T6996] CPU: 1 PID: 6996 Comm: syz.3.314 Not tainted syzkaller #0
[  209.831533][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  209.841619][ T6996] Call Trace:
[  209.844928][ T6996]  <TASK>
[  209.847892][ T6996]  dump_stack_lvl+0x18c/0x250
[  209.852615][ T6996]  ? show_regs_print_info+0x20/0x20
[  209.857859][ T6996]  ? load_image+0x420/0x420
[  209.862413][ T6996]  ? __lock_acquire+0x7d40/0x7d40
[  209.867478][ T6996]  ? snprintf+0xe9/0x140
[  209.871769][ T6996]  should_fail_ex+0x39d/0x4d0
[  209.876504][ T6996]  _copy_to_user+0x2f/0xa0
[  209.880968][ T6996]  simple_read_from_buffer+0xe7/0x150
[  209.886392][ T6996]  proc_fail_nth_read+0x1e8/0x260
[  209.891457][ T6996]  ? proc_fault_inject_write+0x360/0x360
[  209.897129][ T6996]  ? fsnotify_perm+0x271/0x5e0
[  209.901933][ T6996]  ? proc_fault_inject_write+0x360/0x360
[  209.907607][ T6996]  vfs_read+0x28b/0x970
[  209.911811][ T6996]  ? kernel_read+0x1e0/0x1e0
[  209.916441][ T6996]  ? __fget_files+0x28/0x4b0
[  209.921064][ T6996]  ? __fget_files+0x28/0x4b0
[  209.925746][ T6996]  ? __fget_files+0x43d/0x4b0
[  209.930474][ T6996]  ? __fdget_pos+0x2a3/0x330
[  209.935100][ T6996]  ? ksys_read+0x75/0x260
[  209.939472][ T6996]  ksys_read+0x150/0x260
[  209.943760][ T6996]  ? vfs_write+0x990/0x990
[  209.948219][ T6996]  ? lockdep_hardirqs_on+0x98/0x150
[  209.953461][ T6996]  do_syscall_64+0x55/0xa0
[  209.957923][ T6996]  ? clear_bhb_loop+0x40/0x90
[  209.962673][ T6996]  ? clear_bhb_loop+0x40/0x90
[  209.967409][ T6996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.973343][ T6996] RIP: 0033:0x7f257635d68e
[  209.977789][ T6996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  209.997433][ T6996] RSP: 002b:00007f257717dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  210.005889][ T6996] RAX: ffffffffffffffda RBX: 00007f257717e6c0 RCX: 00007f257635d68e
[  210.013890][ T6996] RDX: 000000000000000f RSI: 00007f257717e0a0 RDI: 0000000000000008
[  210.021890][ T6996] RBP: 00007f257717e090 R08: 0000000000000000 R09: 0000000000000000
[  210.029905][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.037909][ T6996] R13: 00007f2576616128 R14: 00007f2576616090 R15: 00007ffe29f82fc8
[  210.045935][ T6996]  </TASK>
[  210.121378][ T6992] FAULT_INJECTION: forcing a failure.
[  210.121378][ T6992] name failslab, interval 1, probability 0, space 0, times 0
[  210.171004][ T6992] CPU: 1 PID: 6992 Comm: syz.1.313 Not tainted syzkaller #0
[  210.178382][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  210.188465][ T6992] Call Trace:
[  210.191774][ T6992]  <TASK>
[  210.194732][ T6992]  dump_stack_lvl+0x18c/0x250
[  210.199455][ T6992]  ? show_regs_print_info+0x20/0x20
[  210.204694][ T6992]  ? load_image+0x420/0x420
[  210.209235][ T6992]  ? __might_sleep+0xe0/0xe0
[  210.213861][ T6992]  ? __lock_acquire+0x7d40/0x7d40
[  210.219045][ T6992]  should_fail_ex+0x39d/0x4d0
[  210.223808][ T6992]  should_failslab+0x9/0x20
[  210.228366][ T6992]  slab_pre_alloc_hook+0x59/0x310
[  210.233442][ T6992]  kmem_cache_alloc_lru+0x4d/0x2d0
[  210.238592][ T6992]  ? __d_alloc+0x31/0x730
[  210.242986][ T6992]  __d_alloc+0x31/0x730
[  210.247197][ T6992]  d_alloc_pseudo+0x1d/0x70
[  210.251735][ T6992]  alloc_file_pseudo+0xe4/0x210
[  210.256598][ T6992]  ? alloc_empty_backing_file+0xe0/0xe0
[  210.262157][ T6992]  ? __lock_acquire+0x7d40/0x7d40
[  210.267269][ T6992]  ? __local_bh_enable_ip+0x13a/0x1c0
[  210.272647][ T6992]  ? _local_bh_enable+0xa0/0xa0
[  210.277522][ T6992]  anon_inode_getfile+0xc5/0x1a0
[  210.282521][ T6992]  bpf_link_prime+0xa6/0x1d0
[  210.287163][ T6992]  bpf_xdp_link_attach+0x260/0x730
[  210.292315][ T6992]  ? dev_xdp_prog+0x100/0x100
[  210.296997][ T6992]  ? __lock_acquire+0x7d40/0x7d40
[  210.302027][ T6992]  ? __fget_files+0x43d/0x4b0
[  210.306713][ T6992]  ? attach_type_to_prog_type+0x330/0x3a0
[  210.312429][ T6992]  ? bpf_prog_attach_check_attach_type+0x2d8/0x440
[  210.318932][ T6992]  link_create+0x3ff/0x720
[  210.323352][ T6992]  __sys_bpf+0x4d7/0x890
[  210.327634][ T6992]  ? bpf_link_show_fdinfo+0x390/0x390
[  210.333077][ T6992]  ? lock_chain_count+0x20/0x20
[  210.337987][ T6992]  __x64_sys_bpf+0x7c/0x90
[  210.342450][ T6992]  do_syscall_64+0x55/0xa0
[  210.346883][ T6992]  ? clear_bhb_loop+0x40/0x90
[  210.351577][ T6992]  ? clear_bhb_loop+0x40/0x90
[  210.356271][ T6992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  210.362527][ T6992] RIP: 0033:0x7faf0599ce59
[  210.366962][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.386591][ T6992] RSP: 002b:00007faf067fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  210.395037][ T6992] RAX: ffffffffffffffda RBX: 00007faf05c15fa0 RCX: 00007faf0599ce59
[  210.403028][ T6992] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[  210.411014][ T6992] RBP: 00007faf067fa090 R08: 0000000000000000 R09: 0000000000000000
[  210.418996][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.426985][ T6992] R13: 00007faf05c16038 R14: 00007faf05c15fa0 R15: 00007ffee0af7428
[  210.434989][ T6992]  </TASK>
[  210.934054][ T7010] netlink: 'syz.2.315': attribute type 4 has an invalid length.
[  210.968986][ T7010] netlink: 152 bytes leftover after parsing attributes in process `syz.2.315'.
[  211.095613][ T7010] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  211.409635][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'.
[  212.786617][ T7023] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.323'.
[  214.257581][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  214.465894][ T7054] netlink: 'syz.3.330': attribute type 4 has an invalid length.
[  214.536206][ T7054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.330'.
[  214.590116][ T7054] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  221.791587][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'.
[  222.221252][ T7096] FAULT_INJECTION: forcing a failure.
[  222.221252][ T7096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.315507][ T7096] CPU: 1 PID: 7096 Comm: syz.1.346 Not tainted syzkaller #0
[  222.322892][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  222.332987][ T7096] Call Trace:
[  222.336290][ T7096]  <TASK>
[  222.339240][ T7096]  dump_stack_lvl+0x18c/0x250
[  222.343959][ T7096]  ? show_regs_print_info+0x20/0x20
[  222.349207][ T7096]  ? load_image+0x420/0x420
[  222.353741][ T7096]  ? __might_fault+0xaa/0x120
[  222.358439][ T7096]  ? __lock_acquire+0x7d40/0x7d40
[  222.363506][ T7096]  should_fail_ex+0x39d/0x4d0
[  222.368225][ T7096]  _copy_from_user+0x2f/0xe0
[  222.372838][ T7096]  bpf_prog_test_run_skb+0x266/0x12b0
[  222.378228][ T7096]  ? __fget_files+0x28/0x4b0
[  222.382845][ T7096]  ? __fget_files+0x28/0x4b0
[  222.387452][ T7096]  ? __fget_files+0x43d/0x4b0
[  222.392159][ T7096]  ? cpu_online+0x60/0x60
[  222.396504][ T7096]  bpf_prog_test_run+0x321/0x390
[  222.401478][ T7096]  __sys_bpf+0x49d/0x890
[  222.405741][ T7096]  ? bpf_link_show_fdinfo+0x390/0x390
[  222.411141][ T7096]  ? lock_chain_count+0x20/0x20
[  222.416035][ T7096]  __x64_sys_bpf+0x7c/0x90
[  222.420465][ T7096]  do_syscall_64+0x55/0xa0
[  222.424889][ T7096]  ? clear_bhb_loop+0x40/0x90
[  222.429582][ T7096]  ? clear_bhb_loop+0x40/0x90
[  222.434278][ T7096]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.440189][ T7096] RIP: 0033:0x7faf0599ce59
[  222.444622][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.464262][ T7096] RSP: 002b:00007faf067fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  222.472693][ T7096] RAX: ffffffffffffffda RBX: 00007faf05c15fa0 RCX: 00007faf0599ce59
[  222.480680][ T7096] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  222.488667][ T7096] RBP: 00007faf067fa090 R08: 0000000000000000 R09: 0000000000000000
[  222.496653][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.504727][ T7096] R13: 00007faf05c16038 R14: 00007faf05c15fa0 R15: 00007ffee0af7428
[  222.512725][ T7096]  </TASK>
[  223.385374][ T7105] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  223.833290][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[  224.024998][ T7121] FAULT_INJECTION: forcing a failure.
[  224.024998][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.045050][ T7121] CPU: 1 PID: 7121 Comm: syz.3.354 Not tainted syzkaller #0
[  224.052409][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  224.062508][ T7121] Call Trace:
[  224.065880][ T7121]  <TASK>
[  224.068857][ T7121]  dump_stack_lvl+0x18c/0x250
[  224.073587][ T7121]  ? show_regs_print_info+0x20/0x20
[  224.078798][ T7121]  ? load_image+0x420/0x420
[  224.083319][ T7121]  ? __lock_acquire+0x7d40/0x7d40
[  224.088357][ T7121]  ? snprintf+0xe9/0x140
[  224.092602][ T7121]  should_fail_ex+0x39d/0x4d0
[  224.097293][ T7121]  _copy_to_user+0x2f/0xa0
[  224.101713][ T7121]  simple_read_from_buffer+0xe7/0x150
[  224.107095][ T7121]  proc_fail_nth_read+0x1e8/0x260
[  224.112123][ T7121]  ? proc_fault_inject_write+0x360/0x360
[  224.117758][ T7121]  ? fsnotify_perm+0x271/0x5e0
[  224.122522][ T7121]  ? proc_fault_inject_write+0x360/0x360
[  224.128154][ T7121]  vfs_read+0x28b/0x970
[  224.132317][ T7121]  ? kernel_read+0x1e0/0x1e0
[  224.136909][ T7121]  ? __fget_files+0x28/0x4b0
[  224.141503][ T7121]  ? __fget_files+0x28/0x4b0
[  224.146116][ T7121]  ? __fget_files+0x43d/0x4b0
[  224.150911][ T7121]  ? __fdget_pos+0x2a3/0x330
[  224.155501][ T7121]  ? ksys_read+0x75/0x260
[  224.159844][ T7121]  ksys_read+0x150/0x260
[  224.164192][ T7121]  ? vfs_write+0x990/0x990
[  224.168650][ T7121]  ? lockdep_hardirqs_on+0x98/0x150
[  224.173874][ T7121]  do_syscall_64+0x55/0xa0
[  224.178299][ T7121]  ? clear_bhb_loop+0x40/0x90
[  224.182980][ T7121]  ? clear_bhb_loop+0x40/0x90
[  224.187661][ T7121]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.193557][ T7121] RIP: 0033:0x7f257635d68e
[  224.197978][ T7121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  224.217593][ T7121] RSP: 002b:00007f257719efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  224.226008][ T7121] RAX: ffffffffffffffda RBX: 00007f257719f6c0 RCX: 00007f257635d68e
[  224.233981][ T7121] RDX: 000000000000000f RSI: 00007f257719f0a0 RDI: 0000000000000005
[  224.241949][ T7121] RBP: 00007f257719f090 R08: 0000000000000000 R09: 0000000000000000
[  224.249959][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.257947][ T7121] R13: 00007f2576616038 R14: 00007f2576615fa0 R15: 00007ffe29f82fc8
[  224.265939][ T7121]  </TASK>
[  226.130253][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  226.161656][ T7123] syzkaller0: entered promiscuous mode
[  226.175067][ T7123] syzkaller0: entered allmulticast mode
[  227.823853][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'.
[  228.076153][ T7157] FAULT_INJECTION: forcing a failure.
[  228.076153][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  228.105486][ T7157] CPU: 0 PID: 7157 Comm: syz.2.365 Not tainted syzkaller #0
[  228.112842][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  228.122930][ T7157] Call Trace:
[  228.126251][ T7157]  <TASK>
[  228.129208][ T7157]  dump_stack_lvl+0x18c/0x250
[  228.133954][ T7157]  ? show_regs_print_info+0x20/0x20
[  228.139223][ T7157]  ? load_image+0x420/0x420
[  228.143777][ T7157]  ? __might_fault+0xaa/0x120
[  228.148501][ T7157]  ? __lock_acquire+0x7d40/0x7d40
[  228.153564][ T7157]  ? __virt_addr_valid+0x18c/0x540
[  228.158721][ T7157]  should_fail_ex+0x39d/0x4d0
[  228.163436][ T7157]  _copy_from_user+0x2f/0xe0
[  228.168045][ T7157]  ___bpf_copy_key+0xb0/0x100
[  228.172736][ T7157]  map_update_elem+0x260/0x700
[  228.177518][ T7157]  __sys_bpf+0x6b5/0x890
[  228.181775][ T7157]  ? bpf_link_show_fdinfo+0x390/0x390
[  228.187172][ T7157]  ? lock_chain_count+0x20/0x20
[  228.192046][ T7157]  __x64_sys_bpf+0x7c/0x90
[  228.196480][ T7157]  do_syscall_64+0x55/0xa0
[  228.200912][ T7157]  ? clear_bhb_loop+0x40/0x90
[  228.205604][ T7157]  ? clear_bhb_loop+0x40/0x90
[  228.210301][ T7157]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.216206][ T7157] RIP: 0033:0x7f57c799ce59
[  228.220636][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.240254][ T7157] RSP: 002b:00007f57c882b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  228.248687][ T7157] RAX: ffffffffffffffda RBX: 00007f57c7c15fa0 RCX: 00007f57c799ce59
[  228.256667][ T7157] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002
[  228.264651][ T7157] RBP: 00007f57c882b090 R08: 0000000000000000 R09: 0000000000000000
[  228.272645][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.280634][ T7157] R13: 00007f57c7c16038 R14: 00007f57c7c15fa0 R15: 00007ffefd36a7b8
[  228.288632][ T7157]  </TASK>
[  228.863953][ T7167] FAULT_INJECTION: forcing a failure.
[  228.863953][ T7167] name failslab, interval 1, probability 0, space 0, times 0
[  228.898728][ T7167] CPU: 1 PID: 7167 Comm: syz.3.371 Not tainted syzkaller #0
[  228.906094][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  228.916611][ T7167] Call Trace:
[  228.919904][ T7167]  <TASK>
[  228.922857][ T7167]  dump_stack_lvl+0x18c/0x250
[  228.927568][ T7167]  ? show_regs_print_info+0x20/0x20
[  228.932788][ T7167]  ? load_image+0x420/0x420
[  228.937313][ T7167]  ? __lock_acquire+0x7d40/0x7d40
[  228.942355][ T7167]  should_fail_ex+0x39d/0x4d0
[  228.947061][ T7167]  should_failslab+0x9/0x20
[  228.951621][ T7167]  slab_pre_alloc_hook+0x59/0x310
[  228.956692][ T7167]  ? kernel_clone+0x24b/0x8a0
[  228.961413][ T7167]  ? __x64_sys_clone+0x1b7/0x230
[  228.966399][ T7167]  ? do_syscall_64+0x55/0xa0
[  228.971015][ T7167]  kmem_cache_alloc_node+0x60/0x320
[  228.976238][ T7167]  ? alloc_vmap_area+0x1b4/0x1e30
[  228.981286][ T7167]  alloc_vmap_area+0x1b4/0x1e30
[  228.986169][ T7167]  ? vm_map_ram+0xcb0/0xcb0
[  228.990702][ T7167]  ? rcu_is_watching+0x15/0xb0
[  228.995488][ T7167]  __get_vm_area_node+0x162/0x370
[  229.000535][ T7167]  __vmalloc_node_range+0x36e/0x1330
[  229.005846][ T7167]  ? copy_process+0x586/0x3d80
[  229.010630][ T7167]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.016804][ T7167]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.022980][ T7167]  ? arch_dup_task_struct+0x57/0xd0
[  229.028201][ T7167]  ? free_vm_area+0x50/0x50
[  229.032722][ T7167]  ? arch_dup_task_struct+0x57/0xd0
[  229.037942][ T7167]  ? __asan_memcpy+0x40/0x70
[  229.042560][ T7167]  dup_task_struct+0x3d0/0x7c0
[  229.047348][ T7167]  ? copy_process+0x586/0x3d80
[  229.052127][ T7167]  ? lockdep_hardirqs_on+0x98/0x150
[  229.057345][ T7167]  copy_process+0x586/0x3d80
[  229.061949][ T7167]  ? perf_trace_buf_alloc+0x290/0x290
[  229.067353][ T7167]  ? perf_tp_event+0x13d7/0x1520
[  229.072317][ T7167]  ? __pidfd_prepare+0x140/0x140
[  229.077363][ T7167]  kernel_clone+0x24b/0x8a0
[  229.081883][ T7167]  ? create_io_thread+0x190/0x190
[  229.086933][ T7167]  __x64_sys_clone+0x1b7/0x230
[  229.091716][ T7167]  ? __ia32_sys_vfork+0x140/0x140
[  229.096764][ T7167]  ? lock_chain_count+0x20/0x20
[  229.101626][ T7167]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  229.107627][ T7167]  ? lockdep_hardirqs_on+0x98/0x150
[  229.112846][ T7167]  do_syscall_64+0x55/0xa0
[  229.117271][ T7167]  ? clear_bhb_loop+0x40/0x90
[  229.121977][ T7167]  ? clear_bhb_loop+0x40/0x90
[  229.126694][ T7167]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.132608][ T7167] RIP: 0033:0x7f257639ce59
[  229.137036][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.156835][ T7167] RSP: 002b:00007f257719efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  229.165507][ T7167] RAX: ffffffffffffffda RBX: 00007f2576615fa0 RCX: 00007f257639ce59
[  229.173498][ T7167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045004400
[  229.181490][ T7167] RBP: 00007f257719f090 R08: 0000000000000000 R09: 0000000000000000
[  229.189470][ T7167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  229.197453][ T7167] R13: 00007f2576616038 R14: 00007f2576615fa0 R15: 00007ffe29f82fc8
[  229.205452][ T7167]  </TASK>
[  229.218049][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  229.306254][ T7167] syz.3.371: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  229.368011][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[  229.375546][ T7167] CPU: 0 PID: 7167 Comm: syz.3.371 Not tainted syzkaller #0
[  229.384150][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.394234][ T7167] Call Trace:
[  229.397528][ T7167]  <TASK>
[  229.400472][ T7167]  dump_stack_lvl+0x18c/0x250
[  229.405191][ T7167]  ? show_regs_print_info+0x20/0x20
[  229.410413][ T7167]  ? load_image+0x420/0x420
[  229.414939][ T7167]  ? __rcu_read_unlock+0x7c/0xd0
[  229.419893][ T7167]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  229.426327][ T7167]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  229.432847][ T7167]  warn_alloc+0x246/0x340
[  229.437202][ T7167]  ? zone_watermark_ok_safe+0x230/0x230
[  229.442766][ T7167]  ? lockdep_hardirqs_on+0x98/0x150
[  229.447982][ T7167]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.454161][ T7167]  __vmalloc_node_range+0x393/0x1330
[  229.459466][ T7167]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.465653][ T7167]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.471827][ T7167]  ? arch_dup_task_struct+0x57/0xd0
[  229.477045][ T7167]  ? free_vm_area+0x50/0x50
[  229.481564][ T7167]  ? arch_dup_task_struct+0x57/0xd0
[  229.486785][ T7167]  ? __asan_memcpy+0x40/0x70
[  229.491400][ T7167]  dup_task_struct+0x3d0/0x7c0
[  229.496190][ T7167]  ? copy_process+0x586/0x3d80
[  229.500968][ T7167]  ? lockdep_hardirqs_on+0x98/0x150
[  229.506190][ T7167]  copy_process+0x586/0x3d80
[  229.510793][ T7167]  ? perf_trace_buf_alloc+0x290/0x290
[  229.516198][ T7167]  ? perf_tp_event+0x13d7/0x1520
[  229.521153][ T7167]  ? __pidfd_prepare+0x140/0x140
[  229.526116][ T7167]  kernel_clone+0x24b/0x8a0
[  229.530638][ T7167]  ? create_io_thread+0x190/0x190
[  229.535693][ T7167]  __x64_sys_clone+0x1b7/0x230
[  229.540477][ T7167]  ? __ia32_sys_vfork+0x140/0x140
[  229.545528][ T7167]  ? lock_chain_count+0x20/0x20
[  229.550413][ T7167]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  229.556413][ T7167]  ? lockdep_hardirqs_on+0x98/0x150
[  229.561630][ T7167]  do_syscall_64+0x55/0xa0
[  229.566055][ T7167]  ? clear_bhb_loop+0x40/0x90
[  229.570749][ T7167]  ? clear_bhb_loop+0x40/0x90
[  229.575446][ T7167]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.581352][ T7167] RIP: 0033:0x7f257639ce59
[  229.585782][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.605402][ T7167] RSP: 002b:00007f257719efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  229.613836][ T7167] RAX: ffffffffffffffda RBX: 00007f2576615fa0 RCX: 00007f257639ce59
[  229.621818][ T7167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045004400
[  229.629810][ T7167] RBP: 00007f257719f090 R08: 0000000000000000 R09: 0000000000000000
[  229.637791][ T7167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  229.645772][ T7167] R13: 00007f2576616038 R14: 00007f2576615fa0 R15: 00007ffe29f82fc8
[  229.653773][ T7167]  </TASK>
[  229.722247][ T7167] Mem-Info:
[  229.735202][ T7167] active_anon:5291 inactive_anon:0 isolated_anon:0
[  229.735202][ T7167]  active_file:1563 inactive_file:40008 isolated_file:0
[  229.735202][ T7167]  unevictable:768 dirty:318 writeback:0
[  229.735202][ T7167]  slab_reclaimable:9875 slab_unreclaimable:92075
[  229.735202][ T7167]  mapped:24448 shmem:1361 pagetables:564
[  229.735202][ T7167]  sec_pagetables:0 bounce:0
[  229.735202][ T7167]  kernel_misc_reclaimable:0
[  229.735202][ T7167]  free:1361245 free_pcp:13298 free_cma:0
[  229.815217][ T7167] Node 0 active_anon:21264kB inactive_anon:0kB active_file:6252kB inactive_file:159832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97892kB dirty:1272kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no
[  229.857320][ T7167] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  229.888429][ T7167] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  229.926124][ T7167] lowmem_reserve[]: 0 2521 2522 2522 2522
[  229.931967][ T7167] Node 0 DMA32 free:1531704kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21224kB inactive_anon:0kB active_file:6252kB inactive_file:159004kB unevictable:1536kB writepending:1272kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:36712kB local_pcp:15620kB free_cma:0kB
[  229.963768][ T7167] lowmem_reserve[]: 0 0 0 0 0
[  229.972575][ T7167] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  230.016974][ T7167] lowmem_reserve[]: 0 0 0 0 0
[  230.036899][ T7167] Node 1 Normal free:3897788kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:8800kB free_cma:0kB
[  230.072543][ T7167] lowmem_reserve[]: 0 0 0 0 0
[  230.077868][ T7167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  230.092398][ T7167] Node 0 DMA32: 2*4kB (UM) 0*8kB 173*16kB (UME) 367*32kB (UME) 109*64kB (UME) 20*128kB (UME) 3*256kB (M) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 366*4096kB (M) = 1531640kB
[  230.110934][ T7167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  230.152564][ T7167] Node 1 Normal: 189*4kB (UME) 55*8kB (UME) 41*16kB (UME) 90*32kB (UME) 29*64kB (UME) 12*128kB (UME) 2*256kB (ME) 0*512kB 0*1024kB 1*2048kB (E) 949*4096kB (UM) = 3897788kB
[  230.264051][ T7167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  230.294560][ T7167] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.306136][ T7167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  230.317532][ T7167] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.327460][ T7167] 42932 total pagecache pages
[  230.333550][ T7167] 0 pages in swap cache
[  230.345217][ T7167] Free swap  = 124996kB
[  230.352035][ T7167] Total swap = 124996kB
[  230.361134][ T7167] 2097051 pages RAM
[  230.367303][ T7167] 0 pages HighMem/MovableOnly
[  230.375648][ T7167] 416927 pages reserved
[  230.383254][ T7167] 0 pages cma reserved
[  231.219585][ T7176] syzkaller0: entered promiscuous mode
[  231.227229][ T7176] syzkaller0: entered allmulticast mode
[  233.086704][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  233.695363][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[  234.126620][ T6809] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  243.771905][ T7248] syz.0.391 uses obsolete (PF_INET,SOCK_PACKET)
[  243.808327][ T7246] netlink: 'syz.2.392': attribute type 4 has an invalid length.
[  243.825399][ T7246] netlink: 152 bytes leftover after parsing attributes in process `syz.2.392'.
[  243.835084][ T7246] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  243.941856][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[  246.354899][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  256.440815][ T6808] wlan1: Creating new IBSS network, BSSID 62:3f:89:f3:6c:6b
[  256.451088][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  256.458974][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  256.806201][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'.
[  257.290870][ T7290] netlink: 'syz.2.403': attribute type 4 has an invalid length.
[  257.313837][ T7290] netlink: 152 bytes leftover after parsing attributes in process `syz.2.403'.
[  257.405893][ T7290] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  259.280879][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'.
[  259.294782][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'.
[  259.335616][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'.
[  259.357268][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'.
[  259.590539][ T7326] tap0: tun_chr_ioctl cmd 1074025675
[  259.605636][ T7326] tap0: persist enabled
[  259.662487][ T7329] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[  259.692595][ T7331] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  259.774849][ T7322] tap0: tun_chr_ioctl cmd 21731
[  259.810240][ T7322] tap0: tun_chr_ioctl cmd 1074025675
[  259.817453][ T7322] tap0: persist enabled
[  259.881070][ T7323] tap0: tun_chr_ioctl cmd 2147767521
[  260.032328][ T7334] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  260.485549][ T7341] syzkaller1: tun_chr_ioctl cmd 2147767507
[  260.541462][ T7342] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.418'.
[  260.635421][ T7345] netlink: 'syz.0.420': attribute type 39 has an invalid length.
[  260.784172][ T7345] hsr_slave_1 (unregistering): left promiscuous mode
[  260.892803][ T7338] syzkaller1: tun_chr_ioctl cmd 1074025677
[  260.903557][ T7338] syzkaller1: linktype set to 786
[  261.012465][ T7350] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  261.527323][ T7359] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  262.079639][ T7376] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[  262.132091][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  262.544019][ T7388] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.431'.
[  262.643793][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'.
[  262.793284][ T7386] tap0: tun_chr_ioctl cmd 1074025675
[  262.798977][ T7386] tap0: persist enabled
[  262.812544][ T7382] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  262.858524][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'.
[  262.872829][ T7394] tap0: tun_chr_ioctl cmd 21731
[  262.893249][ T7393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'.
[  262.903402][ T7380] tap0: tun_chr_ioctl cmd 1074025675
[  262.911668][ T7380] tap0: persist enabled
[  262.934627][ T7395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'.
[  262.954966][ T7380] tap0: tun_chr_ioctl cmd 2147767521
[  264.135409][ T6808] wlan1: Trigger new scan to find an IBSS to join
[  264.142076][ T6808] wlan1: Trigger new scan to find an IBSS to join
[  265.168083][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  265.239910][ T7431] netlink: 'syz.3.441': attribute type 1 has an invalid length.
[  265.587175][ T7429] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  265.629987][ T7437] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.442'.
[  267.165666][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  267.242513][ T7444] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  267.325065][ T7440] netlink: 'syz.3.444': attribute type 4 has an invalid length.
[  267.343594][ T7440] netlink: 152 bytes leftover after parsing attributes in process `syz.3.444'.
[  267.466601][ T7440] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  268.536019][ T7447] syzkaller0: entered promiscuous mode
[  268.542325][ T7447] syzkaller0: entered allmulticast mode
[  268.554126][ T7452] tap0: tun_chr_ioctl cmd 1074025675
[  268.561291][ T7452] tap0: persist enabled
[  268.569228][ T7448] tap0: tun_chr_ioctl cmd 21731
[  268.574595][ T7460] tap0: tun_chr_ioctl cmd 1074025675
[  268.580036][ T7460] tap0: persist enabled
[  268.591725][ T7461] tap0: tun_chr_ioctl cmd 2147767521
[  269.086619][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  269.166053][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  270.024044][ T6798] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  270.070077][ T3509] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  270.129739][ T3509] wlan1: Creating new IBSS network, BSSID be:f4:48:8f:1a:48
[  270.889693][ T7475] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  271.086893][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  271.566654][ T7482] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[  271.599342][ T7477] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.456'.
[  272.274576][ T7485] syzkaller1: tun_chr_ioctl cmd 2147767507
[  272.290956][ T7487] syzkaller1: tun_chr_ioctl cmd 1074025677
[  272.311150][ T7487] syzkaller1: linktype set to 786
[  272.375602][ T7484] syzkaller0: entered promiscuous mode
[  272.381151][ T7484] syzkaller0: entered allmulticast mode
[  273.095550][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  274.130436][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  274.289418][ T7500] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[  274.297364][ T7500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.458'.
[  274.912367][ T7505] tap0: tun_chr_ioctl cmd 21731
[  274.942333][ T7505] tap0: tun_chr_ioctl cmd 1074025675
[  274.955541][ T7505] tap0: persist enabled
[  275.018532][ T7514] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  275.062999][ T7505] tap0: tun_chr_ioctl cmd 2147767521
[  275.363298][ T7525] netlink: 'syz.3.467': attribute type 4 has an invalid length.
[  275.382357][ T7525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.467'.
[  275.393215][ T7525] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  275.461423][ T7524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  275.469295][ T7524] IPv6: NLM_F_CREATE should be set when creating new route
[  275.477492][ T7524] IPv6: NLM_F_CREATE should be set when creating new route
[  275.485122][ T7524] IPv6: NLM_F_CREATE should be set when creating new route
[  275.543782][ T7531] syzkaller1: tun_chr_ioctl cmd 2147767507
[  275.583367][ T7528] syzkaller1: tun_chr_ioctl cmd 1074025677
[  275.605412][ T7528] syzkaller1: linktype set to 786
[  275.756984][ T7529] netlink: 'syz.1.470': attribute type 4 has an invalid length.
[  275.773579][ T7529] netlink: 152 bytes leftover after parsing attributes in process `syz.1.470'.
[  275.815500][ T7529] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  277.101179][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  277.141579][ T7558] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  277.630250][ T7572] netlink: 'syz.3.482': attribute type 4 has an invalid length.
[  277.649229][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.482'.
[  277.783207][ T7582] netlink: 'syz.1.481': attribute type 4 has an invalid length.
[  277.825257][ T7582] netlink: 152 bytes leftover after parsing attributes in process `syz.1.481'.
[  277.848013][ T7582] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  278.137420][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  278.138095][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  278.457663][ T7583] syzkaller0: entered promiscuous mode
[  278.463220][ T7583] syzkaller0: entered allmulticast mode
[  278.472522][ T7591] netlink: 'syz.2.484': attribute type 4 has an invalid length.
[  278.481194][ T7591] netlink: 152 bytes leftover after parsing attributes in process `syz.2.484'.
[  278.492870][ T7591] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  280.469108][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[  280.478232][ T7601] netlink: 'syz.3.489': attribute type 39 has an invalid length.
[  280.569877][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'.
[  280.623841][ T7601] hsr_slave_1 (unregistering): left promiscuous mode
[  280.692605][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'.
[  280.706044][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'.
[  280.723069][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.491'.
[  281.195723][ T3509] wlan1: Trigger new scan to find an IBSS to join
[  281.202416][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  281.666412][ T7623] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  282.160022][ T7626] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  282.471635][ T6809] wlan1: Creating new IBSS network, BSSID c6:12:e9:fb:f7:41
[  282.670909][ T7640] syzkaller0: entered promiscuous mode
[  282.703928][ T7640] syzkaller0: entered allmulticast mode
[  282.715624][ T7633] netlink: 'syz.3.498': attribute type 4 has an invalid length.
[  282.723693][ T7633] netlink: 152 bytes leftover after parsing attributes in process `syz.3.498'.
[  282.734717][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[  285.169154][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  285.175962][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  285.732189][ T7668] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  285.945922][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'.
[  286.174567][ T6808] wlan1: Trigger new scan to find an IBSS to join
[  286.441137][ T7681] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  286.536228][ T7687] netlink: 'syz.3.515': attribute type 4 has an invalid length.
[  286.544459][ T7687] netlink: 152 bytes leftover after parsing attributes in process `syz.3.515'.
[  289.085485][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  289.292445][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'.
[  290.156084][ T6810] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  290.164907][ T6810] wlan1: Trigger new scan to find an IBSS to join
[  290.175288][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  290.389439][ T7720] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  291.092245][ T7727] netlink: 'syz.0.527': attribute type 4 has an invalid length.
[  291.105554][ T7727] netlink: 152 bytes leftover after parsing attributes in process `syz.0.527'.
[  291.329073][ T3509] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  293.327551][ T6810] wlan1: Trigger new scan to find an IBSS to join
[  293.636875][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'.
[  293.753628][ T7742] syzkaller0: entered promiscuous mode
[  293.794243][ T7742] syzkaller0: entered allmulticast mode
[  294.129113][ T3509] wlan1: Trigger new scan to find an IBSS to join
[  295.144563][ T1318] wlan1: Creating new IBSS network, BSSID 56:fd:dc:1b:a0:a4
[  296.300441][ T7755] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  296.909830][ T7765] syzkaller0: entered promiscuous mode
[  296.924949][ T7765] syzkaller0: entered allmulticast mode
[  296.934961][ T7763] netlink: 'syz.3.537': attribute type 4 has an invalid length.
[  296.946253][ T7763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.537'.
[  297.193618][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  298.362276][ T6799] wlan1: Creating new IBSS network, BSSID b6:d0:f7:2e:94:17
[  299.694613][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'.
[  300.098440][ T7796] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  300.128039][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  300.320681][ T7799] netlink: 'syz.2.549': attribute type 4 has an invalid length.
[  300.348857][ T7799] netlink: 152 bytes leftover after parsing attributes in process `syz.2.549'.
[  300.375590][ T7799] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  300.955038][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  303.125568][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  303.223541][ T7825] syzkaller0: entered promiscuous mode
[  303.234248][ T7825] syzkaller0: entered allmulticast mode
[  303.284154][ T7832] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  305.182098][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'.
[  305.207126][ T7855] netlink: 'syz.0.562': attribute type 4 has an invalid length.
[  305.214850][ T7855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.562'.
[  306.132707][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  306.924809][ T7877] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  307.438175][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[  308.142893][ T3509] wlan1: Trigger new scan to find an IBSS to join
[  314.016186][ T3509] wlan1: Creating new IBSS network, BSSID ae:ae:d0:a2:63:fc
[  316.328180][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  316.628080][ T7892] netlink: 'syz.1.575': attribute type 4 has an invalid length.
[  316.642980][ T7892] netlink: 152 bytes leftover after parsing attributes in process `syz.1.575'.
[  316.652569][ T7892] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  317.553835][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.560316][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  318.142416][ T7916] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  318.613977][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[  319.434263][ T7929] netlink: 'syz.0.585': attribute type 4 has an invalid length.
[  319.448370][ T7929] netlink: 152 bytes leftover after parsing attributes in process `syz.0.585'.
[  320.748361][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'.
[  321.092123][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  321.475573][ T7967] netlink: 'syz.0.598': attribute type 4 has an invalid length.
[  321.545036][ T7967] netlink: 152 bytes leftover after parsing attributes in process `syz.0.598'.
[  322.003249][ T7973] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  322.615618][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[  323.825810][ T8006] netlink: 'syz.3.610': attribute type 4 has an invalid length.
[  323.839778][ T8006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.610'.
[  325.212366][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  325.223282][ T6808] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  326.135858][ T3509] wlan1: Trigger new scan to find an IBSS to join
[  327.085686][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  327.095280][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  327.194108][ T8028] syzkaller0: entered promiscuous mode
[  327.205361][ T8028] syzkaller0: entered allmulticast mode
[  329.300650][ T8047] netlink: 'syz.1.622': attribute type 4 has an invalid length.
[  329.308713][ T8047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.622'.
[  329.318088][ T8047] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  330.135652][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  330.142336][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  331.519287][ T3509] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  331.529832][ T6794] wlan1: Creating new IBSS network, BSSID 2e:32:2e:e2:03:89
[  332.342618][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  332.873751][ T8101] netlink: 'syz.0.636': attribute type 4 has an invalid length.
[  332.881672][ T8101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.636'.
[  335.794490][ T8133] syzkaller0: entered promiscuous mode
[  335.805614][ T8133] syzkaller0: entered allmulticast mode
[  335.846969][ T8131] netlink: 'syz.0.646': attribute type 4 has an invalid length.
[  335.854706][ T8131] netlink: 152 bytes leftover after parsing attributes in process `syz.0.646'.
[  337.165425][   T49] wlan1: Trigger new scan to find an IBSS to join
[  337.172036][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  339.199718][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  339.740203][ T8173] netlink: 'syz.1.659': attribute type 4 has an invalid length.
[  339.751801][ T8173] netlink: 152 bytes leftover after parsing attributes in process `syz.1.659'.
[  339.762335][ T8173] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  341.340239][ T8203] netlink: 'syz.0.671': attribute type 4 has an invalid length.
[  341.372393][ T8203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.671'.
[  342.208219][ T6809] wlan1: Creating new IBSS network, BSSID ca:f6:2e:34:c9:ce
[  343.268760][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  343.282943][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  344.270614][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  345.810314][ T6799] wlan1: Creating new IBSS network, BSSID b2:f7:50:9a:62:63
[  346.049556][ T8242] netlink: 'syz.3.682': attribute type 4 has an invalid length.
[  346.105577][ T8242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.682'.
[  349.463268][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  351.138490][ T8280] netlink: 'syz.3.694': attribute type 4 has an invalid length.
[  351.149636][ T8280] netlink: 152 bytes leftover after parsing attributes in process `syz.3.694'.
[  351.774924][ T6807] wlan1: Creating new IBSS network, BSSID 3e:af:d8:7d:2d:31
[  352.449532][ T6810] wlan1: Trigger new scan to find an IBSS to join
[  353.560060][ T8313] syzkaller0: entered promiscuous mode
[  353.565721][ T8313] syzkaller0: entered allmulticast mode
[  353.674374][ T8319] netlink: 'syz.0.707': attribute type 4 has an invalid length.
[  353.710983][ T8319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.707'.
[  356.130356][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  358.243055][ T6809] wlan1: Creating new IBSS network, BSSID 46:59:fb:89:58:a5
[  358.263221][ T8366] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  358.304173][ T8366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.720'.
[  358.322334][ T8366] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  359.089758][ T8369] syzkaller0: entered promiscuous mode
[  359.101899][ T8369] syzkaller0: entered allmulticast mode
[  360.125392][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  362.497662][ T8405] netlink: 'syz.0.732': attribute type 4 has an invalid length.
[  362.506818][ T8405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.732'.
[  363.118031][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  363.687281][ T8433] syzkaller0: entered promiscuous mode
[  363.692972][ T8433] syzkaller0: entered allmulticast mode
[  364.273005][ T6811] wlan1: Creating new IBSS network, BSSID d6:c8:a5:be:94:1b
[  365.087909][ T6810] wlan1: Trigger new scan to find an IBSS to join
[  365.963777][ T8457] netlink: 'syz.2.749': attribute type 4 has an invalid length.
[  365.977987][ T8457] netlink: 152 bytes leftover after parsing attributes in process `syz.2.749'.
[  365.991869][ T8457] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  366.171058][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  367.604498][ T8495] netlink: 'syz.2.762': attribute type 4 has an invalid length.
[  367.630848][ T8495] netlink: 152 bytes leftover after parsing attributes in process `syz.2.762'.
[  367.658640][ T8495] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  368.067769][ T8496] syzkaller0: entered promiscuous mode
[  368.116348][ T8496] syzkaller0: entered allmulticast mode
[  368.126973][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  369.085535][   T49] wlan1: Trigger new scan to find an IBSS to join
[  370.897849][ T8536] netlink: 'syz.2.775': attribute type 4 has an invalid length.
[  370.917252][ T8536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.775'.
[  370.938539][ T8536] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  371.166235][   T49] wlan1: Trigger new scan to find an IBSS to join
[  372.125433][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  372.128394][ T6798] wlan1: Trigger new scan to find an IBSS to join
[  373.268686][ T6798] wlan1: Creating new IBSS network, BSSID 9e:00:80:da:d7:33
[  373.761287][ T8583] netlink: 'syz.0.789': attribute type 4 has an invalid length.
[  373.782819][ T8583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.789'.
[  374.135391][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  375.085960][ T1318] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  376.177659][ T8625] netlink: 'syz.0.802': attribute type 4 has an invalid length.
[  376.199405][ T8625] netlink: 152 bytes leftover after parsing attributes in process `syz.0.802'.
[  377.202224][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  378.130320][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  378.864950][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.875175][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  378.940973][ T8679] netlink: 'syz.3.817': attribute type 4 has an invalid length.
[  378.950121][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.3.817'.
[  379.205749][ T6807] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  379.817434][ T8696] syzkaller0: entered promiscuous mode
[  379.823000][ T8696] syzkaller0: entered allmulticast mode
[  381.085443][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  381.168770][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  381.648931][ T8709] netlink: 'syz.2.826': attribute type 39 has an invalid length.
[  381.688727][ T8709] hsr_slave_1 (unregistering): left promiscuous mode
[  382.117442][ T8719] netlink: 'syz.2.830': attribute type 4 has an invalid length.
[  382.141322][   T49] wlan1: Creating new IBSS network, BSSID ca:94:04:0c:50:bf
[  382.156387][ T8719] netlink: 152 bytes leftover after parsing attributes in process `syz.2.830'.
[  382.913021][ T8735] syzkaller0: entered promiscuous mode
[  382.945626][ T8735] syzkaller0: entered allmulticast mode
[  384.128407][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  384.128624][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  384.134953][   T49] wlan1: Trigger new scan to find an IBSS to join
[  385.299153][ T8759] netlink: 'syz.1.841': attribute type 4 has an invalid length.
[  385.322300][ T8759] netlink: 152 bytes leftover after parsing attributes in process `syz.1.841'.
[  385.344109][ T8759] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  387.176239][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  387.182998][   T49] wlan1: Trigger new scan to find an IBSS to join
[  387.362637][ T8801] netlink: 'syz.3.855': attribute type 4 has an invalid length.
[  387.380725][ T8801] netlink: 152 bytes leftover after parsing attributes in process `syz.3.855'.
[  387.547632][ T8793] syzkaller0: entered promiscuous mode
[  387.553274][ T8793] syzkaller0: entered allmulticast mode
[  389.165842][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  390.137651][   T49] wlan1: Creating new IBSS network, BSSID a6:88:d1:14:1c:86
[  390.138471][ T6809] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  390.476389][ T8828] netlink: 'syz.3.866': attribute type 4 has an invalid length.
[  390.501610][ T8828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.866'.
[  391.519001][ T8839] syzkaller0: entered promiscuous mode
[  391.529724][ T8839] syzkaller0: entered allmulticast mode
[  393.089287][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  393.170115][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  394.139927][   T49] wlan1: Trigger new scan to find an IBSS to join
[  394.418408][ T8867] netlink: 'syz.1.877': attribute type 4 has an invalid length.
[  394.457981][ T8867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.877'.
[  394.474399][ T8867] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  394.661912][ T8877] netlink: 'syz.0.881': attribute type 4 has an invalid length.
[  394.678177][ T8877] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'.
[  395.387028][ T1318] wlan1: Creating new IBSS network, BSSID e2:66:f9:0c:0b:16
[  396.047292][ T8912] netlink: 'syz.0.893': attribute type 4 has an invalid length.
[  396.065989][ T8912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.893'.
[  396.466054][ T8920] netlink: 'syz.0.903': attribute type 4 has an invalid length.
[  396.495574][ T8920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.903'.
[  396.681268][ T8921] netlink: 'syz.2.895': attribute type 4 has an invalid length.
[  396.714320][ T8921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.895'.
[  397.085422][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  397.216928][ T8934] syzkaller0: entered promiscuous mode
[  397.222494][ T8934] syzkaller0: entered allmulticast mode
[  399.691555][ T8956] netlink: 'syz.3.907': attribute type 4 has an invalid length.
[  399.699417][ T8956] netlink: 152 bytes leftover after parsing attributes in process `syz.3.907'.
[  400.858966][ T8982] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.917'.
[  401.049035][ T8983] netlink: 'syz.1.918': attribute type 4 has an invalid length.
[  401.072609][ T8983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.918'.
[  401.084022][ T8983] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  401.773592][ T8990] syzkaller0: entered promiscuous mode
[  401.779609][ T8990] syzkaller0: entered allmulticast mode
[  402.135416][   T49] wlan1: Trigger new scan to find an IBSS to join
[  404.125512][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  404.204571][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  404.479825][ T9022] netlink: 'syz.3.930': attribute type 4 has an invalid length.
[  404.503529][ T9022] netlink: 152 bytes leftover after parsing attributes in process `syz.3.930'.
[  406.012787][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'.
[  406.490138][ T9064] netlink: 'syz.0.943': attribute type 4 has an invalid length.
[  406.499359][ T9064] netlink: 152 bytes leftover after parsing attributes in process `syz.0.943'.
[  407.084032][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  407.168615][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  408.118911][ T9101] netlink: 'syz.3.957': attribute type 4 has an invalid length.
[  408.150260][ T9101] netlink: 152 bytes leftover after parsing attributes in process `syz.3.957'.
[  408.308947][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'.
[  409.096771][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  409.168921][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  410.314548][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'.
[  410.345141][ T9150] netlink: 'syz.3.968': attribute type 4 has an invalid length.
[  410.352864][ T9150] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'.
[  412.147576][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  412.519424][ T9187] syzkaller0: entered promiscuous mode
[  412.531129][ T9187] syzkaller0: entered allmulticast mode
[  412.544425][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'.
[  414.128765][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  414.135657][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  414.136314][ T1318] wlan1: Trigger new scan to find an IBSS to join
[  414.220128][ T9190] netlink: 'syz.1.982': attribute type 4 has an invalid length.
[  414.229767][ T9190] netlink: 152 bytes leftover after parsing attributes in process `syz.1.982'.
[  414.240046][ T9190] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  414.527483][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'.
[  415.175699][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'.
[  415.242406][   T49] wlan1: Creating new IBSS network, BSSID 2a:f9:4e:34:d3:31
[  415.251972][ T1318] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  416.188758][ T9233] netlink: 'syz.1.995': attribute type 4 has an invalid length.
[  416.198678][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.1.995'.
[  416.208727][ T9233] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  416.330454][ T9228] syzkaller0: entered promiscuous mode
[  416.348746][ T9228] syzkaller0: entered allmulticast mode
[  416.399920][ T9241] netlink: 'syz.2.999': attribute type 4 has an invalid length.
[  416.415246][ T9241] netlink: 152 bytes leftover after parsing attributes in process `syz.2.999'.
[  417.168468][ T6799] wlan1: Trigger new scan to find an IBSS to join
[  418.180432][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  419.085575][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  420.054494][ T6809] wlan1: Creating new IBSS network, BSSID 6a:47:9c:6e:52:68
[  420.125404][ T6810] wlan1: Trigger new scan to find an IBSS to join
[  420.135198][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  420.219543][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'.
[  420.391713][ T9278] netlink: 'syz.1.1009': attribute type 4 has an invalid length.
[  420.410101][ T9278] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1009'.
[  420.424264][ T9278] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  420.919879][ T9288] syzkaller0: entered promiscuous mode
[  420.930683][ T9288] syzkaller0: entered allmulticast mode
[  421.577711][ T6807] wlan1: Creating new IBSS network, BSSID 5a:40:6f:90:05:81
[  422.136809][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  424.144881][ T6807] wlan1: Trigger new scan to find an IBSS to join
[  424.189322][ T9313] netlink: 'syz.0.1022': attribute type 4 has an invalid length.
[  424.221175][ T9313] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1022'.
[  425.085555][ T6809] wlan1: Trigger new scan to find an IBSS to join
[  426.129655][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  428.135298][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  428.246710][ T9354] netlink: 'syz.0.1033': attribute type 4 has an invalid length.
[  428.466180][ T9354] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1033'.
[  429.141792][ T6794] wlan1: Trigger new scan to find an IBSS to join
[  429.883874][ T6799] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00
[  430.165552][ T6811] wlan1: Trigger new scan to find an IBSS to join
[  431.027647][ T6799] wlan1: Creating new IBSS network, BSSID 4e:5b:3b:ea:6f:7e
[  431.353767][ T1318] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  431.378576][ T6807] ------------[ cut here ]------------
[  431.384382][ T6807] WARNING: CPU: 1 PID: 6807 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440
[  431.394669][ T6807] Modules linked in:
[  431.398692][ T6807] CPU: 1 PID: 6807 Comm: kworker/u4:29 Not tainted syzkaller #0
[  431.406488][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  431.416866][ T6807] Workqueue: cfg80211 cfg80211_event_work
[  431.422650][ T6807] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  431.428946][ T6807] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 98 a0 f7 0f 0b eb bb e8 de 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 d0 98 a0 f7 0f 0b e9 e0 fd ff ff e8
[  431.448782][ T6807] RSP: 0018:ffffc90003b87a20 EFLAGS: 00010293
[  431.454894][ T6807] RAX: ffffffff89e68922 RBX: dffffc0000000000 RCX: ffff88807a691e00
[  431.463287][ T6807] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0
[  431.471750][ T6807] RBP: ffffc90003b87af8 R08: ffffffff911c656f R09: 1ffffffff2238cad
[  431.479901][ T6807] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805e0d0c90
[  431.488097][ T6807] R13: 1ffff92000770f4c R14: ffff88801cbc35b8 R15: 000000000000001f
[  431.496174][ T6807] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  431.505216][ T6807] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.511864][ T6807] CR2: 0000001b2db23ffc CR3: 000000001cb88000 CR4: 00000000003506e0
[  431.519973][ T6807] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  431.528068][ T6807] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  431.536140][ T6807] Call Trace:
[  431.539454][ T6807]  <TASK>
[  431.542426][ T6807]  ? mutex_lock_nested+0x20/0x20
[  431.547533][ T6807]  ? trace_rdev_return_void+0x1c0/0x1c0
[  431.553163][ T6807]  cfg80211_process_wdev_events+0x3bc/0x550
[  431.559178][ T6807]  cfg80211_process_rdev_events+0xa1/0x110
[  431.565030][ T6807]  cfg80211_event_work+0x2f/0x40
[  431.570523][ T6807]  ? process_scheduled_works+0x96f/0x15d0
[  431.576434][ T6807]  process_scheduled_works+0xa5d/0x15d0
[  431.582038][ T6807]  ? worker_attach_to_pool+0x380/0x380
[  431.587597][ T6807]  ? assign_work+0x3d2/0x5d0
[  431.592222][ T6807]  worker_thread+0xa55/0xfc0
[  431.596936][ T6807]  kthread+0x2fa/0x390
[  431.601035][ T6807]  ? pr_cont_work+0x560/0x560
[  431.605820][ T6807]  ? kthread_blkcg+0xd0/0xd0
[  431.610436][ T6807]  ret_from_fork+0x48/0x80
[  431.614854][ T6807]  ? kthread_blkcg+0xd0/0xd0
[  431.619517][ T6807]  ret_from_fork_asm+0x11/0x20
[  431.624327][ T6807]  </TASK>
[  431.627447][ T6807] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  431.634745][ T6807] CPU: 1 PID: 6807 Comm: kworker/u4:29 Not tainted syzkaller #0
[  431.642378][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  431.652440][ T6807] Workqueue: cfg80211 cfg80211_event_work
[  431.658170][ T6807] Call Trace:
[  431.661449][ T6807]  <TASK>
[  431.664383][ T6807]  dump_stack_lvl+0x18c/0x250
[  431.669083][ T6807]  ? show_regs_print_info+0x20/0x20
[  431.674316][ T6807]  ? load_image+0x420/0x420
[  431.678829][ T6807]  panic+0x2dc/0x730
[  431.682744][ T6807]  ? bpf_jit_dump+0xd0/0xd0
[  431.687285][ T6807]  ? ret_from_fork_asm+0x11/0x20
[  431.692256][ T6807]  __warn+0x2e0/0x470
[  431.696257][ T6807]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  431.701820][ T6807]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  431.707383][ T6807]  report_bug+0x2be/0x4f0
[  431.711725][ T6807]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  431.717284][ T6807]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  431.722932][ T6807]  ? __cfg80211_ibss_joined+0x3d4/0x440
[  431.728504][ T6807]  handle_bug+0xcf/0x120
[  431.732758][ T6807]  exc_invalid_op+0x1a/0x50
[  431.737275][ T6807]  asm_exc_invalid_op+0x1a/0x20
[  431.742144][ T6807] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  431.748315][ T6807] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 98 a0 f7 0f 0b eb bb e8 de 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 d0 98 a0 f7 0f 0b e9 e0 fd ff ff e8
[  431.767935][ T6807] RSP: 0018:ffffc90003b87a20 EFLAGS: 00010293
[  431.774017][ T6807] RAX: ffffffff89e68922 RBX: dffffc0000000000 RCX: ffff88807a691e00
[  431.782002][ T6807] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0
[  431.789983][ T6807] RBP: ffffc90003b87af8 R08: ffffffff911c656f R09: 1ffffffff2238cad
[  431.797964][ T6807] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805e0d0c90
[  431.806028][ T6807] R13: 1ffff92000770f4c R14: ffff88801cbc35b8 R15: 000000000000001f
[  431.814036][ T6807]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  431.819606][ T6807]  ? mutex_lock_nested+0x20/0x20
[  431.824571][ T6807]  ? trace_rdev_return_void+0x1c0/0x1c0
[  431.830142][ T6807]  cfg80211_process_wdev_events+0x3bc/0x550
[  431.836057][ T6807]  cfg80211_process_rdev_events+0xa1/0x110
[  431.841879][ T6807]  cfg80211_event_work+0x2f/0x40
[  431.846823][ T6807]  ? process_scheduled_works+0x96f/0x15d0
[  431.852554][ T6807]  process_scheduled_works+0xa5d/0x15d0
[  431.858139][ T6807]  ? worker_attach_to_pool+0x380/0x380
[  431.863617][ T6807]  ? assign_work+0x3d2/0x5d0
[  431.868228][ T6807]  worker_thread+0xa55/0xfc0
[  431.872865][ T6807]  kthread+0x2fa/0x390
[  431.876945][ T6807]  ? pr_cont_work+0x560/0x560
[  431.881634][ T6807]  ? kthread_blkcg+0xd0/0xd0
[  431.886246][ T6807]  ret_from_fork+0x48/0x80
[  431.890670][ T6807]  ? kthread_blkcg+0xd0/0xd0
[  431.895304][ T6807]  ret_from_fork_asm+0x11/0x20
[  431.900092][ T6807]  </TASK>
[  431.903469][ T6807] Kernel Offset: disabled
[  431.907851][ T6807] Rebooting in 86400 seconds..