last executing test programs: 2.576621831s ago: executing program 1 (id=1255): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="008d230c1100"}) 2.39589428s ago: executing program 1 (id=1256): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000002d40)={&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)="6bae37a826f7024e01866ec687a90448b8839f29f9355bb7122814ad932db53e7b77bd6e0cbaea7430a0fbf21909f0dada6698c4ce0a4ce27e113a63d1b1a249aa6f20414d9438b0631a3c63994d", 0x4e}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="66b2e2b551841e3062d43c1c28aa9279e882eb7b6f237022889ab69cfdf21cb807581f2749eec3e46ca9a647331c604bd978f48c5ce4e6e1f1d0c5153effe9ddc425d6f703a1a131acbad022b9c152ca32f26b2c0d3259f424a83feee80c3ccda62623e429d1149daa4755458c2a390efc1b62e9a758f7706b4dfa0d52d0f9c97d5643ff91453b9cb9d16e6fa9a805d62f2f2f78c71e6ee60097cf18dda936573673c7e4e59101e280d272c3c3579d2c7194ca910b48d6ee33816e7b2c793fca2cc24fa6ad3b3ebc8ece39a4945ec146c24c7c6e81ac881c8d790fc109d179981389985d", 0xe4}], 0x3, &(0x7f0000001b80)}, 0x4004042) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000500)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 1.9885768s ago: executing program 2 (id=1263): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="e471ef779ffe9e06618c78c6f2d555494b37d70901b5af79bdac74fa2a721bdf0b128dcb92efa9c7ad08fbe7e202be07888dbf3e6864bca8c9cc9dd45a8768559e7a463c7c02c711c85dcd10b856"], 0x12) 1.919975867s ago: executing program 3 (id=1264): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="008d230c1100"}) 1.840569815s ago: executing program 2 (id=1265): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x24208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9a, 0x2, 0x2, 0xfffff271, 0x8000, 0x0, 0x2000, 0x0, 0x20}, 0x0, 0xb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000e00)='GPL\x00', 0x4}, 0x94) perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x96d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000010c0), 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000001100)={&(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f00000011c0)="10", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000001200), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000001240), 0x45) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="170000000000000007000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000400000000000000000800000000bcd000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r5}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.728479667s ago: executing program 3 (id=1266): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x400c804) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0x20044011) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8902, &(0x7f00000001c0)) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ff", 0x1}], 0x1}, 0x400100f) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23afff) 1.570176932s ago: executing program 2 (id=1268): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x1, 0xe802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x4}, 0x4030, 0xc8, 0x1000004, 0x4, 0x0, 0x5, 0xfffd, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x120) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81020311080000000000000000ff000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 1.49533926s ago: executing program 3 (id=1269): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0xc0f0, 0x0, 0x0, 0x3, 0x1000000000007f, 0x1fe, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000480), 0xe) r1 = perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x6, 0x86, 0x11, 0x0, 0x4, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xa7, 0x7fff}, 0x20, 0x7, 0x3, 0x1, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, r1, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ec0)={r2, &(0x7f0000000f00), &(0x7f0000000f40)=""/154}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32], 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200dfff030000000800000001d9700000008000cfd860463fda3532c5d2970d08b35a6235da240bf9e7d3324ed7189b26fccef71ca81dfd7e1c7179ffb6029dc8fa161c4858127a4f0a8b2971721772431597346cd806afe7827166234a5571efdacc858b3c44e3684960ed42bc0fba8a33e4b9e074d5f8f7e3f1a4e2f1c02b3e6ef4b82f9d3860014c2595ca3a362b05cd5963c33f14aac922156e94194fdb2187a8cf7d16d28471155e7fd4c83c85f7a8033613d95d756fe78841335cf781d56d11086898849fb4d6ee0ecf2e962d8ed6bade6b43f2905fbe282f2c1524cbcac06f4022b7e6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0xfffc, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a040) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000009400000094000000070000000800000000000010100000000000000000000003000000000300000005000000090000000b3ff7c1e500000e03000000010000001000000000000010020000000f000000020000040a0000000400000004000000050000000600000003000000ff0f0000020000000000000700000000080000000100008408000000000000000500000059000000060000000000000b03000000002e005f5f0000"], &(0x7f0000000c40)=""/125, 0xb3, 0x7d, 0x0, 0x4, 0x10000}, 0x28) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000cc0)) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="04", 0x1}], 0x1}, 0x8054) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@ethernet={0x184, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="8a9d70fb3bb3d22342b1e4f72280deef2383be047946cf00b398f8b40cec6c6546c59f920d2115b36efe5a792bd26030a722512b5868d8fcd1c5c2f392195759da684352cc833a30", 0x48}, {&(0x7f0000000240)="d45541dc245bdfe003caf93659a0fdf963112136932469f8da41a413607fc785976d2e85abb1baff86edbf38452bd9512c877ee540f48a215d979bbd14210519ded6a7eff651c75202a251e2553b74a348afc194cee1fc2ffe9538792456cd210f5d313be6706f24161da1aec0fcbb1a43141beaa88e43d3c9c7d6fd6a9cd2ee063ea6fe61dc29decc1450", 0x8b}, {&(0x7f0000000300)="c514969b04a5d0131aa8af5450b5db02e5eab5301f79a54be3f7caecc61ab0539cc7bd6eb46b534240a338c6cf01af199d30abb49920e12e55374d1013763ce89ed2f73f16cbce34e9b089e350e40ee8a88fd45ad58572e1c0828feed2ae7c72416741ebef95839b68b3ae4c6c96592b41c36dde4db81ce96160", 0x7a}], 0x4}, 0x800) 1.458345274s ago: executing program 1 (id=1271): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6178, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000380)="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", &(0x7f0000000500)=""/96, &(0x7f0000000580)="be3575ef5a04a56310cd94c03a122d0592e0e4c0785665e527396c22a72f72d404ec60be9f948ab653def588f66c5bd7964f38dd2f17eeb351fde40830242a797b37c53d123a11d7fb71a712371202bdf8c3ebb95f6232addae5e4965c20f2f5306ff86bfaa391a6036389efd24b038f39e6aebb7d93dce850e0d998a0c57b008253e97f19824e0a094c4c68f110af20f742e85f969ae565886b06f98bfc6a08c54a4ec5af4e0508aa22a294a5e48a07e372dedc9b09b6cf43e4e750103dd95cf94c72f564a99ab6069f4a", &(0x7f0000000680)="c1e1395b4f68945edc81eb9f8b5840bce9fb36225077", 0xffff1d72, r3, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="3504000041000511d25a80648c63940d0324fc60040035400c000200020000203715", 0x22}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4020940d, &(0x7f00000001c0)={'\x00', @link_local}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000280)="1d", &(0x7f00000002c0)=""/173}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0xfe33) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f00000007c0)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0xd, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x11a5a446f47be9b8, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) r7 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.417696928s ago: executing program 2 (id=1272): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x24208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9a, 0x2, 0x2, 0xfffff271, 0x8000, 0x0, 0x2000, 0x0, 0x20}, 0x0, 0xb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000e00)='GPL\x00', 0x4}, 0x94) perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x96d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000010c0), 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000001100)={&(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f00000011c0)="10", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000001200), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000001240), 0x45) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="170000000000000007000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000400000000000000000800000000bcd000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r5}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.236808816s ago: executing program 3 (id=1274): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="008d230c1100"}) 1.09641968s ago: executing program 2 (id=1275): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f0000010000000000001100000000000000000000000100000000ebffffffffffff130001"], 0xf8}, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r1, 0x2e0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000fc0)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) 1.051374175s ago: executing program 1 (id=1276): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x7f, 0x8, 0xba, 0x8, 0x0, 0x2, 0x21, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}, 0x4404, 0x9, 0x9, 0x3, 0x2, 0x7, 0x6, 0x0, 0xd18, 0x0, 0x389}) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0xd18c9b25, &(0x7f0000000a40)=[{&(0x7f0000000a80)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) close(0x3) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000007118b6000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x10, 0x10, &(0x7f0000000900)="0000000005000000", &(0x7f0000000940)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00449cc3c714906e08dfee3d99e0139560133b9b52f6b1fc8ee247390f62fa6fa2075cee426c4667c484e1b9f396f840cf065a51d68d849465675069467aac7b5af9c2dc7e66"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, 0x0, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) 1.027980337s ago: executing program 3 (id=1277): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x24208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9a, 0x2, 0x2, 0xfffff271, 0x8000, 0x0, 0x2000, 0x0, 0x20}, 0x0, 0xb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000e00)='GPL\x00', 0x4}, 0x94) perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x96d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000010c0), 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000001100)={&(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f00000011c0)="10", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000001200), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000001240), 0x45) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="170000000000000007000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000400000000000000000800000000bcd000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r5}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 848.431535ms ago: executing program 0 (id=1278): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000ac0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="188ec09ddfa4f4ea10f44a7a541ca1579f739b0142a6ceb9d8ec126d1f1fefdea9e02be09fc4250a18f475b2f1d852", @ANYRES32=r1, @ANYBLOB="00000000000000e9b60300010000a4d0b810ac4fbb0000030080000c000000b70000010000008000"], &(0x7f0000000a40)='GPL\x00', 0x0, 0xffffff61, 0x0, 0x0, 0x2c, '\x00', r2, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a80)={r1, &(0x7f0000000ac0)}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/208, 0xd0}], 0xa}, 0x40010100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) getpid() recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 655.301294ms ago: executing program 3 (id=1279): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000002d40)={&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)="6bae37a826f7024e01866ec687a90448b8839f29f9355bb7122814ad932db53e7b77bd6e0cbaea7430a0fbf21909f0dada6698c4ce0a4ce27e113a63d1b1a249aa6f20414d9438b0631a3c63994d", 0x4e}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="66b2e2b551841e3062d43c1c28aa9279e882eb7b6f237022889ab69cfdf21cb807581f2749eec3e46ca9a647331c604bd978f48c5ce4e6e1f1d0c5153effe9ddc425d6f703a1a131acbad022b9c152ca32f26b2c0d3259f424a83feee80c3ccda62623e429d1149daa4755458c2a390efc1b62e9a758f7706b4dfa0d52d0f9c97d5643ff91453b9cb9d16e6fa9a805d62f2f2f78c71e6ee60097cf18dda936573673c7e4e59101e280d272c3c3579d2c7194ca910b48d6ee33816e7b2c793fca2cc24fa6ad3b3ebc8ece39a4945ec146c24c7c6e81ac881c8d790fc109d179981389985d", 0xe4}], 0x3, &(0x7f0000001b80)}, 0x4004042) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000500)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 599.55602ms ago: executing program 0 (id=1280): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x1, 0xe802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x4}, 0x4030, 0xc8, 0x1000004, 0x4, 0x0, 0x5, 0xfffd, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x120) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81020311080000000000000000ff000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 513.899598ms ago: executing program 0 (id=1281): r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x105101, 0x4, 0x0, 0x8, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r3, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000015c0)={r4, &(0x7f0000001600), 0x0}, 0x20) 426.852147ms ago: executing program 1 (id=1282): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0xc0f0, 0x0, 0x0, 0x3, 0x1000000000007f, 0x1fe, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000480), 0xe) r1 = perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3, 0x6, 0x86, 0x11, 0x0, 0x4, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xa7, 0x7fff}, 0x20, 0x7, 0x3, 0x1, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x7, r1, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000ec0)={r2, &(0x7f0000000f00), &(0x7f0000000f40)=""/154}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32], 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200dfff030000000800000001d9700000008000cfd860463fda3532c5d2970d08b35a6235da240bf9e7d3324ed7189b26fccef71ca81dfd7e1c7179ffb6029dc8fa161c4858127a4f0a8b2971721772431597346cd806afe7827166234a5571efdacc858b3c44e3684960ed42bc0fba8a33e4b9e074d5f8f7e3f1a4e2f1c02b3e6ef4b82f9d3860014c2595ca3a362b05cd5963c33f14aac922156e94194fdb2187a8cf7d16d28471155e7fd4c83c85f7a8033613d95d756fe78841335cf781d56d11086898849fb4d6ee0ecf2e962d8ed6bade6b43f2905fbe282f2c1524cbcac06f4022b7e6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0xfffc, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708000b0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a040) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)}, 0x0) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000009400000094000000070000000800000000000010100000000000000000000003000000000300000005000000090000000b3ff7c1e500000e03000000010000001000000000000010020000000f000000020000040a0000000400000004000000050000000600000003000000ff0f0000020000000000000700000000080000000100008408000000000000000500000059000000060000000000000b03000000002e005f5f0000"], &(0x7f0000000c40)=""/125, 0xb3, 0x7d, 0x0, 0x4, 0x10000}, 0x28) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000cc0)) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="04", 0x1}], 0x1}, 0x8054) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@ethernet={0x184, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="8a9d70fb3bb3d22342b1e4f72280deef2383be047946cf00b398f8b40cec6c6546c59f920d2115b36efe5a792bd26030a722512b5868d8fcd1c5c2f392195759da684352cc833a30", 0x48}, {&(0x7f0000000240)="d45541dc245bdfe003caf93659a0fdf963112136932469f8da41a413607fc785976d2e85abb1baff86edbf38452bd9512c877ee540f48a215d979bbd14210519ded6a7eff651c75202a251e2553b74a348afc194cee1fc2ffe9538792456cd210f5d313be6706f24161da1aec0fcbb1a43141beaa88e43d3c9c7d6fd6a9cd2ee063ea6fe61dc29decc1450", 0x8b}, {&(0x7f0000000300)="c514969b04a5d0131aa8af5450b5db02e5eab5301f79a54be3f7caecc61ab0539cc7bd6eb46b534240a338c6cf01af199d30abb49920e12e55374d1013763ce89ed2f73f16cbce34e9b089e350e40ee8a88fd45ad58572e1c0828feed2ae7c72416741ebef95839b68b3ae4c6c96592b41c36dde4db81ce96160", 0x7a}], 0x4}, 0x800) 347.250535ms ago: executing program 0 (id=1283): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x24208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9a, 0x2, 0x2, 0xfffff271, 0x8000, 0x0, 0x2000, 0x0, 0x20}, 0x0, 0xb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000e00)='GPL\x00', 0x4}, 0x94) perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x96d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000010c0), 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000001100)={&(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f00000011c0)="10", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000001200), 0xe) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000001240), 0x45) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="170000000000000007000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000400000000000000000800000000bcd000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r5}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 259.787814ms ago: executing program 1 (id=1284): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x16, &(0x7f0000001840)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x7, 0x6, 0x6, 0xfffffffffffffffe, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x10, 0x400, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0d, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94b4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x7, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f000200060003c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r5 = perf_event_open(&(0x7f0000001b80)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000001c00), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000001c40)='ns/ipc\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0xd, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="260a000000006111b400000000009c131c0000000000"], &(0x7f0000001680)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001700)=@phonet={0x23, 0x8, 0x2, 0x31}, 0x80, 0x0}, 0x480c1) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='syzkaller\x00'}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x1}]}, {0x0, [0x5f, 0x2e, 0x0, 0x5f, 0x0, 0x30, 0x30, 0x2e, 0x61]}}, &(0x7f0000001900)=""/217, 0x2f, 0xd9, 0x0, 0x1b5}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r9, 0x5, 0x3100, 0x3100, &(0x7f0000001480), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r6, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000001200)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r1, &(0x7f0000001240)=ANY=[], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18030000feffffff0000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000025000000000000001800000071b5c1c7684700000000000000000000000095000000000000005703000000000000950000000000000072528b6dc7e92d6715c915be710b225ed22e21e6ce2e653d15cc3210e1a3be"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) 227.372767ms ago: executing program 0 (id=1286): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="008d230c1100"}) 145.635146ms ago: executing program 2 (id=1287): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="e471ef779ffe9e06618c78c6f2d555494b37d70901b5af79bdac74fa2a721bdf0b128dcb92efa9c7ad08fbe7e202be07888dbf3e6864bca8c9cc9dd45a8768559e7a463c7c02c711c85dcd10b856"], 0x12) 0s ago: executing program 0 (id=1288): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1120"}) kernel console output (not intermixed with test programs): +0x80/0xa0 [ 201.548676][ T7678] ? packet_getsockopt+0xad0/0xad0 [ 201.554000][ T7678] ____sys_sendmsg+0x61b/0x980 [ 201.558817][ T7678] ? __asan_memset+0x22/0x40 [ 201.563453][ T7678] ? __sys_sendmsg_sock+0x30/0x30 [ 201.568513][ T7678] ? __import_iovec+0x5f2/0x850 [ 201.573411][ T7678] ? import_iovec+0x73/0xa0 [ 201.577952][ T7678] ___sys_sendmsg+0x2a6/0x360 [ 201.582669][ T7678] ? get_pid_task+0x20/0x1e0 [ 201.587298][ T7678] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.592111][ T7678] ? __lock_acquire+0x7eb0/0x7eb0 [ 201.597273][ T7678] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.602437][ T7678] ? __x64_sys_sendmsg+0x80/0x80 [ 201.607417][ T7678] ? lockdep_hardirqs_on+0x98/0x150 [ 201.612772][ T7678] do_syscall_64+0x55/0xb0 [ 201.617327][ T7678] ? clear_bhb_loop+0x40/0x90 [ 201.622138][ T7678] ? clear_bhb_loop+0x40/0x90 [ 201.626941][ T7678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.632873][ T7678] RIP: 0033:0x7f2abc5a8f19 [ 201.637318][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.657135][ T7678] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.665760][ T7678] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 201.673892][ T7678] RDX: 00000000000480c1 RSI: 0000200000000680 RDI: 0000000000000003 [ 201.681897][ T7678] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 201.690067][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.698439][ T7678] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 201.706469][ T7678] [ 202.116700][ T7697] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.605'. [ 202.234843][ T7700] netlink: 'syz.1.606': attribute type 21 has an invalid length. [ 202.421352][ T7706] netlink: 'syz.1.609': attribute type 29 has an invalid length. [ 202.437528][ T12] wlan1: Creating new IBSS network, BSSID 72:31:0e:ec:b2:10 [ 202.478478][ T7705] FAULT_INJECTION: forcing a failure. [ 202.478478][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.536837][ T7706] netlink: 'syz.1.609': attribute type 29 has an invalid length. [ 202.563414][ T7707] netlink: 'syz.1.609': attribute type 29 has an invalid length. [ 202.594350][ T7705] CPU: 1 PID: 7705 Comm: syz.0.608 Not tainted syzkaller #0 [ 202.601717][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.611828][ T7705] Call Trace: [ 202.615186][ T7705] [ 202.618173][ T7705] dump_stack_lvl+0x18c/0x250 [ 202.622925][ T7705] ? show_regs_print_info+0x20/0x20 [ 202.628188][ T7705] ? load_image+0x420/0x420 [ 202.633368][ T7705] ? __might_fault+0xaa/0x120 [ 202.638104][ T7705] ? __lock_acquire+0x7eb0/0x7eb0 [ 202.643186][ T7705] ? mark_lock+0x94/0x320 [ 202.647622][ T7705] should_fail_ex+0x394/0x4c0 [ 202.652364][ T7705] _copy_from_user+0x2f/0xe0 [ 202.657004][ T7705] kstrtouint_from_user+0xde/0x170 [ 202.662187][ T7705] ? kstrtol_from_user+0x190/0x190 [ 202.667377][ T7705] proc_fail_nth_write+0x8f/0x250 [ 202.672465][ T7705] ? proc_fail_nth_read+0x260/0x260 [ 202.677726][ T7705] ? proc_fail_nth_read+0x260/0x260 [ 202.682986][ T7705] vfs_write+0x299/0x9a0 [ 202.687330][ T7705] ? file_end_write+0x250/0x250 [ 202.692252][ T7705] ? __fget_files+0x28/0x460 [ 202.696994][ T7705] ? __fget_files+0x3fc/0x460 [ 202.701738][ T7705] ? __fdget_pos+0x2a3/0x330 [ 202.706383][ T7705] ? ksys_write+0x74/0x260 [ 202.710867][ T7705] ksys_write+0x151/0x260 [ 202.715266][ T7705] ? __ia32_sys_read+0x90/0x90 [ 202.720119][ T7705] ? syscall_enter_from_user_mode+0x2e/0x80 [ 202.726065][ T7705] do_syscall_64+0x55/0xb0 [ 202.730537][ T7705] ? clear_bhb_loop+0x40/0x90 [ 202.735287][ T7705] ? clear_bhb_loop+0x40/0x90 [ 202.740509][ T7705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.746467][ T7705] RIP: 0033:0x7f2abc56974e [ 202.750942][ T7705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.770693][ T7705] RSP: 002b:00007f2abd554fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.779172][ T7705] RAX: ffffffffffffffda RBX: 00007f2abd5556c0 RCX: 00007f2abc56974e [ 202.787199][ T7705] RDX: 0000000000000001 RSI: 00007f2abd5550a0 RDI: 0000000000000007 [ 202.795230][ T7705] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 202.803270][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.811303][ T7705] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 202.819358][ T7705] [ 202.836665][ T7706] netlink: 'syz.1.609': attribute type 29 has an invalid length. [ 202.919567][ T7713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.610'. [ 203.030499][ T7712] delete_channel: no stack [ 203.428315][ T7724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.613'. [ 203.515772][ T7726] netlink: 144 bytes leftover after parsing attributes in process `syz.3.614'. [ 203.626432][ T7726] team0: Port device team_slave_0 removed [ 203.643076][ T7726] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 203.662394][ T7727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.615'. [ 203.925971][ T7737] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.618'. [ 204.402522][ T7741] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.619'. [ 204.511345][ T7744] FAULT_INJECTION: forcing a failure. [ 204.511345][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.525763][ T7744] CPU: 0 PID: 7744 Comm: syz.2.621 Not tainted syzkaller #0 [ 204.533128][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.543278][ T7744] Call Trace: [ 204.546604][ T7744] [ 204.549569][ T7744] dump_stack_lvl+0x18c/0x250 [ 204.554314][ T7744] ? show_regs_print_info+0x20/0x20 [ 204.560574][ T7744] ? load_image+0x420/0x420 [ 204.565122][ T7744] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.570191][ T7744] ? snprintf+0xe9/0x140 [ 204.574465][ T7744] should_fail_ex+0x394/0x4c0 [ 204.579350][ T7744] _copy_to_user+0x2f/0xa0 [ 204.583993][ T7744] simple_read_from_buffer+0xe7/0x150 [ 204.589441][ T7744] proc_fail_nth_read+0x1e8/0x260 [ 204.594512][ T7744] ? proc_fault_inject_write+0x360/0x360 [ 204.600279][ T7744] ? fsnotify_perm+0x271/0x5e0 [ 204.605076][ T7744] ? proc_fault_inject_write+0x360/0x360 [ 204.610754][ T7744] vfs_read+0x298/0x990 [ 204.614955][ T7744] ? kernel_read+0x1e0/0x1e0 [ 204.619613][ T7744] ? __fget_files+0x28/0x460 [ 204.624254][ T7744] ? __fget_files+0x3fc/0x460 [ 204.628987][ T7744] ? __fdget_pos+0x2a3/0x330 [ 204.633618][ T7744] ? ksys_read+0x74/0x260 [ 204.638104][ T7744] ksys_read+0x151/0x260 [ 204.642390][ T7744] ? vfs_write+0x9a0/0x9a0 [ 204.646850][ T7744] ? lockdep_hardirqs_on+0x98/0x150 [ 204.652182][ T7744] do_syscall_64+0x55/0xb0 [ 204.656833][ T7744] ? clear_bhb_loop+0x40/0x90 [ 204.661556][ T7744] ? clear_bhb_loop+0x40/0x90 [ 204.666837][ T7744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.672821][ T7744] RIP: 0033:0x7fb1c6f6974e [ 204.677563][ T7744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.697384][ T7744] RSP: 002b:00007fb1c7f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.706201][ T7744] RAX: ffffffffffffffda RBX: 00007fb1c7f1e6c0 RCX: 00007fb1c6f6974e [ 204.714246][ T7744] RDX: 000000000000000f RSI: 00007fb1c7f1e0a0 RDI: 0000000000000006 [ 204.722262][ T7744] RBP: 00007fb1c7f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.730264][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.738273][ T7744] R13: 00007fb1c7226038 R14: 00007fb1c7225fa0 R15: 00007ffdfc03e568 [ 204.746298][ T7744] [ 204.948548][ T7752] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 204.957923][ T7752] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 204.974965][ T7752] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 204.992780][ T7752] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 205.279468][ T7760] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 205.313078][ T7760] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 205.432976][ T7765] __nla_validate_parse: 2 callbacks suppressed [ 205.433019][ T7765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.629'. [ 205.599289][ T7768] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 205.608263][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 206.293682][ T7778] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.632'. [ 206.336489][ T7779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.640'. [ 206.478710][ T7780] netlink: 144 bytes leftover after parsing attributes in process `syz.1.633'. [ 206.617029][ T7780] team0: Port device C removed [ 206.630764][ T7780] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.679975][ T7789] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 207.454015][ T7801] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 207.563455][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.644'. [ 207.630933][ T7809] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 207.638953][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.646'. [ 207.958872][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'. [ 208.437186][ T7834] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.653'. [ 208.907911][ T7840] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 208.916716][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.656'. [ 209.018433][ T7845] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.154170][ T7851] netlink: 'syz.2.661': attribute type 25 has an invalid length. [ 209.179961][ T7851] FAULT_INJECTION: forcing a failure. [ 209.179961][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 209.193187][ T7851] CPU: 0 PID: 7851 Comm: syz.2.661 Not tainted syzkaller #0 [ 209.200545][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 209.210737][ T7851] Call Trace: [ 209.214064][ T7851] [ 209.217039][ T7851] dump_stack_lvl+0x18c/0x250 [ 209.221811][ T7851] ? show_regs_print_info+0x20/0x20 [ 209.227076][ T7851] ? load_image+0x420/0x420 [ 209.231629][ T7851] ? __wake_up+0x132/0x1a0 [ 209.236107][ T7851] ? __wake_up_bit+0x210/0x210 [ 209.240926][ T7851] should_fail_ex+0x394/0x4c0 [ 209.245662][ T7851] should_failslab+0x9/0x20 [ 209.250206][ T7851] slab_pre_alloc_hook+0x59/0x300 [ 209.255284][ T7851] ? consume_skb+0xc5/0x110 [ 209.259834][ T7851] ? switchdev_deferred_enqueue+0x2d/0x240 [ 209.265697][ T7851] ? switchdev_deferred_enqueue+0x2d/0x240 [ 209.271564][ T7851] __kmem_cache_alloc_node+0x53/0x260 [ 209.276992][ T7851] ? switchdev_deferred_enqueue+0x2d/0x240 [ 209.282884][ T7851] ? switchdev_deferred_enqueue+0x240/0x240 [ 209.288840][ T7851] __kmalloc+0xa7/0x240 [ 209.293071][ T7851] switchdev_deferred_enqueue+0x2d/0x240 [ 209.298877][ T7851] switchdev_port_attr_set+0xff/0x2e0 [ 209.304408][ T7851] ? switchdev_deferred_process+0x290/0x290 [ 209.310374][ T7851] ? br_mdb_notify+0x970/0x970 [ 209.315207][ T7851] ? mark_lock+0x94/0x320 [ 209.319965][ T7851] br_multicast_add_router+0x563/0x5d0 [ 209.325506][ T7851] ? in_dev_get+0x280/0x280 [ 209.330092][ T7851] ? mark_lock+0x94/0x320 [ 209.334494][ T7851] br_multicast_mark_router+0x3ab/0x590 [ 209.340111][ T7851] ? br_multicast_add_router+0x5d0/0x5d0 [ 209.345809][ T7851] ? do_raw_spin_lock+0x11f/0x2b0 [ 209.350898][ T7851] ? __rwlock_init+0x150/0x150 [ 209.355726][ T7851] ? rcu_is_watching+0x15/0xb0 [ 209.360553][ T7851] ? br_multicast_set_port_router+0x17d/0xcf0 [ 209.367610][ T7851] br_multicast_set_port_router+0x3d7/0xcf0 [ 209.373584][ T7851] ? br_multicast_set_router+0x3c0/0x3c0 [ 209.379449][ T7851] ? br_port_flags_change+0x19b/0x1f0 [ 209.384894][ T7851] br_setport+0xe7a/0x1680 [ 209.389378][ T7851] ? br_setlink+0x860/0x860 [ 209.394429][ T7851] ? __rwlock_init+0x150/0x150 [ 209.399543][ T7851] ? br_setlink+0x4df/0x860 [ 209.404099][ T7851] br_setlink+0x4f1/0x860 [ 209.408491][ T7851] ? br_vlan_info+0x460/0x460 [ 209.413304][ T7851] ? trace_contention_end+0x39/0xe0 [ 209.418560][ T7851] ? __mutex_lock+0x30d/0xce0 [ 209.423297][ T7851] ? mutex_is_locked+0x12/0x40 [ 209.428157][ T7851] rtnl_bridge_setlink+0x5b2/0x7d0 [ 209.433439][ T7851] ? mutex_lock_nested+0x20/0x20 [ 209.438435][ T7851] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 209.443790][ T7851] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 209.449158][ T7851] rtnetlink_rcv_msg+0x843/0xf90 [ 209.454202][ T7851] ? rtnetlink_rcv_msg+0x220/0xf90 [ 209.459483][ T7851] ? rtnetlink_bind+0x80/0x80 [ 209.464326][ T7851] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 209.470217][ T7851] ? perf_trace_preemptirq_template+0x269/0x330 [ 209.476551][ T7851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 209.482862][ T7851] ? lock_chain_count+0x20/0x20 [ 209.487810][ T7851] ? __local_bh_enable_ip+0x13a/0x1c0 [ 209.493501][ T7851] ? lockdep_hardirqs_on+0x98/0x150 [ 209.499057][ T7851] ? __local_bh_enable_ip+0x13a/0x1c0 [ 209.504582][ T7851] ? _local_bh_enable+0xa0/0xa0 [ 209.509500][ T7851] ? __dev_queue_xmit+0x1481/0x3a30 [ 209.514774][ T7851] ? __dev_queue_xmit+0x6d1/0x3a30 [ 209.520345][ T7851] ? ref_tracker_free+0x686/0x830 [ 209.525837][ T7851] netlink_rcv_skb+0x235/0x4c0 [ 209.530682][ T7851] ? rtnetlink_bind+0x80/0x80 [ 209.535448][ T7851] ? netlink_ack+0x1160/0x1160 [ 209.540389][ T7851] ? __lock_acquire+0x7eb0/0x7eb0 [ 209.545561][ T7851] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.551014][ T7851] netlink_unicast+0x856/0x9e0 [ 209.555876][ T7851] netlink_sendmsg+0x8d0/0xbf0 [ 209.560708][ T7851] ? netlink_getsockopt+0x590/0x590 [ 209.566046][ T7851] ? apparmor_socket_sendmsg+0x8e/0x330 [ 209.571663][ T7851] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.577012][ T7851] ? security_socket_sendmsg+0x80/0xa0 [ 209.582528][ T7851] ? netlink_getsockopt+0x590/0x590 [ 209.587789][ T7851] ____sys_sendmsg+0x61b/0x980 [ 209.592623][ T7851] ? __asan_memset+0x22/0x40 [ 209.597278][ T7851] ? __sys_sendmsg_sock+0x30/0x30 [ 209.602364][ T7851] ? __import_iovec+0x5f2/0x850 [ 209.607293][ T7851] ? import_iovec+0x73/0xa0 [ 209.611867][ T7851] ___sys_sendmsg+0x2a6/0x360 [ 209.616610][ T7851] ? __sys_sendmsg+0x2b0/0x2b0 [ 209.621459][ T7851] ? trace_call_bpf+0xc3/0x6c0 [ 209.626312][ T7851] __se_sys_sendmsg+0x1d0/0x2c0 [ 209.631229][ T7851] ? perf_trace_preemptirq_template+0x269/0x330 [ 209.637567][ T7851] ? __x64_sys_sendmsg+0x80/0x80 [ 209.642579][ T7851] ? lockdep_hardirqs_on+0x98/0x150 [ 209.647837][ T7851] do_syscall_64+0x55/0xb0 [ 209.652350][ T7851] ? clear_bhb_loop+0x40/0x90 [ 209.657093][ T7851] ? clear_bhb_loop+0x40/0x90 [ 209.661839][ T7851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.667799][ T7851] RIP: 0033:0x7fb1c6fa8f19 [ 209.672271][ T7851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.691948][ T7851] RSP: 002b:00007fb1c7f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.700515][ T7851] RAX: ffffffffffffffda RBX: 00007fb1c7225fa0 RCX: 00007fb1c6fa8f19 [ 209.708566][ T7851] RDX: 0000000000098010 RSI: 0000200000000500 RDI: 0000000000000007 [ 209.716775][ T7851] RBP: 00007fb1c7f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 209.724802][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.732836][ T7851] R13: 00007fb1c7226038 R14: 00007fb1c7225fa0 R15: 00007ffdfc03e568 [ 209.741015][ T7851] [ 210.249424][ T7872] validate_nla: 2 callbacks suppressed [ 210.249442][ T7872] netlink: 'syz.3.668': attribute type 10 has an invalid length. [ 210.472946][ T7877] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 210.950549][ T7887] netlink: 'syz.1.674': attribute type 29 has an invalid length. [ 210.959645][ T7887] netlink: 'syz.1.674': attribute type 29 has an invalid length. [ 210.974238][ T7887] netlink: 'syz.1.674': attribute type 29 has an invalid length. [ 210.989628][ T7887] netlink: 'syz.1.674': attribute type 29 has an invalid length. [ 211.017909][ T7887] FAULT_INJECTION: forcing a failure. [ 211.017909][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 211.061402][ T7887] CPU: 1 PID: 7887 Comm: syz.1.674 Not tainted syzkaller #0 [ 211.068777][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 211.078894][ T7887] Call Trace: [ 211.082225][ T7887] [ 211.085199][ T7887] dump_stack_lvl+0x18c/0x250 [ 211.089947][ T7887] ? show_regs_print_info+0x20/0x20 [ 211.095211][ T7887] ? load_image+0x420/0x420 [ 211.099820][ T7887] should_fail_ex+0x394/0x4c0 [ 211.104558][ T7887] should_failslab+0x9/0x20 [ 211.109126][ T7887] slab_pre_alloc_hook+0x59/0x300 [ 211.114213][ T7887] kmem_cache_alloc+0x5a/0x2d0 [ 211.119030][ T7887] ? skb_clone+0x1eb/0x370 [ 211.123509][ T7887] skb_clone+0x1eb/0x370 [ 211.127840][ T7887] __netlink_deliver_tap+0x411/0x7f0 [ 211.133187][ T7887] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.138433][ T7887] netlink_deliver_tap+0x19c/0x1b0 [ 211.143595][ T7887] netlink_dump+0x95b/0xec0 [ 211.148162][ T7887] ? lock_chain_count+0x20/0x20 [ 211.153106][ T7887] ? netlink_lookup+0x200/0x200 [ 211.158026][ T7887] ? slab_free_freelist_hook+0x154/0x240 [ 211.163772][ T7887] ? netlink_recvmsg+0x5e7/0xe60 [ 211.168768][ T7887] ? kmem_cache_free+0xf8/0x290 [ 211.173997][ T7887] netlink_recvmsg+0x693/0xe60 [ 211.179005][ T7887] ? netlink_sendmsg+0xbf0/0xbf0 [ 211.183985][ T7887] ? aa_sk_perm+0x7bb/0x8e0 [ 211.188539][ T7887] ? aa_af_perm+0x330/0x330 [ 211.193075][ T7887] ? __lock_acquire+0x135d/0x7eb0 [ 211.198315][ T7887] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 211.203630][ T7887] ? security_socket_recvmsg+0x89/0xb0 [ 211.209325][ T7887] ? netlink_sendmsg+0xbf0/0xbf0 [ 211.214318][ T7887] ____sys_recvmsg+0x2bd/0x5d0 [ 211.219173][ T7887] ? __sys_recvmsg_sock+0x50/0x50 [ 211.224295][ T7887] ? import_iovec+0x73/0xa0 [ 211.228872][ T7887] ___sys_recvmsg+0x214/0x590 [ 211.233622][ T7887] ? __sys_recvmsg+0x2a0/0x2a0 [ 211.238428][ T7887] ? ksys_write+0x1d2/0x260 [ 211.242998][ T7887] ? __fget_files+0x3fc/0x460 [ 211.247753][ T7887] __x64_sys_recvmsg+0x21e/0x2f0 [ 211.252730][ T7887] ? ___sys_recvmsg+0x590/0x590 [ 211.257633][ T7887] ? lockdep_hardirqs_on+0x98/0x150 [ 211.262887][ T7887] do_syscall_64+0x55/0xb0 [ 211.267341][ T7887] ? clear_bhb_loop+0x40/0x90 [ 211.272053][ T7887] ? clear_bhb_loop+0x40/0x90 [ 211.276775][ T7887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.282751][ T7887] RIP: 0033:0x7fb5d71a8f19 [ 211.287228][ T7887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.306891][ T7887] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 211.315351][ T7887] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 211.323536][ T7887] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 211.331675][ T7887] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.339710][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.347730][ T7887] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 211.356546][ T7887] [ 211.360348][ T60] wlan1: Trigger new scan to find an IBSS to join [ 211.486157][ T7894] netlink: 'syz.2.675': attribute type 10 has an invalid length. [ 211.508835][ T7894] __nla_validate_parse: 4 callbacks suppressed [ 211.508854][ T7894] netlink: 2 bytes leftover after parsing attributes in process `syz.2.675'. [ 211.557698][ T7894] hsr0: entered promiscuous mode [ 211.580332][ T7894] bridge0: port 4(hsr0) entered blocking state [ 211.586770][ T7894] bridge0: port 4(hsr0) entered disabled state [ 211.618690][ T7894] hsr0: entered allmulticast mode [ 211.624578][ T7894] hsr_slave_0: entered allmulticast mode [ 211.634371][ T7894] hsr_slave_1: entered allmulticast mode [ 211.644009][ T7894] bridge0: port 4(hsr0) entered blocking state [ 211.650503][ T7894] bridge0: port 4(hsr0) entered forwarding state [ 211.772466][ T7899] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 211.780420][ T7899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'. [ 211.985229][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 211.991472][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 211.997518][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 212.003750][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 212.121020][ T7904] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.172897][ T7907] netlink: 'syz.0.688': attribute type 10 has an invalid length. [ 212.190606][ T7907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.688'. [ 212.396722][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 212.472155][ T7922] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.182278][ T7931] netlink: 2 bytes leftover after parsing attributes in process `syz.1.689'. [ 213.271758][ T7935] FAULT_INJECTION: forcing a failure. [ 213.271758][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.300056][ T7935] CPU: 1 PID: 7935 Comm: syz.3.691 Not tainted syzkaller #0 [ 213.307430][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 213.317545][ T7935] Call Trace: [ 213.320877][ T7935] [ 213.323850][ T7935] dump_stack_lvl+0x18c/0x250 [ 213.328585][ T7935] ? show_regs_print_info+0x20/0x20 [ 213.333840][ T7935] ? load_image+0x420/0x420 [ 213.338406][ T7935] ? __might_fault+0xaa/0x120 [ 213.343154][ T7935] ? __lock_acquire+0x7eb0/0x7eb0 [ 213.348241][ T7935] should_fail_ex+0x394/0x4c0 [ 213.353007][ T7935] _copy_from_user+0x2f/0xe0 [ 213.357755][ T7935] ___sys_sendmsg+0x1c7/0x360 [ 213.362513][ T7935] ? get_pid_task+0x20/0x1e0 [ 213.367166][ T7935] ? __sys_sendmsg+0x2b0/0x2b0 [ 213.372045][ T7935] ? __lock_acquire+0x7eb0/0x7eb0 [ 213.377154][ T7935] __se_sys_sendmsg+0x1d0/0x2c0 [ 213.382099][ T7935] ? __x64_sys_sendmsg+0x80/0x80 [ 213.387122][ T7935] ? lockdep_hardirqs_on+0x98/0x150 [ 213.392368][ T7935] do_syscall_64+0x55/0xb0 [ 213.396823][ T7935] ? clear_bhb_loop+0x40/0x90 [ 213.401621][ T7935] ? clear_bhb_loop+0x40/0x90 [ 213.406903][ T7935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.412846][ T7935] RIP: 0033:0x7f6b783a8f19 [ 213.417474][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.437162][ T7935] RSP: 002b:00007f6b792aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.445652][ T7935] RAX: ffffffffffffffda RBX: 00007f6b78625fa0 RCX: 00007f6b783a8f19 [ 213.453657][ T7935] RDX: 0000000004000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 213.461665][ T7935] RBP: 00007f6b792aa090 R08: 0000000000000000 R09: 0000000000000000 [ 213.469700][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.477701][ T7935] R13: 00007f6b78626038 R14: 00007f6b78625fa0 R15: 00007ffc796ced48 [ 213.486087][ T7935] [ 213.667662][ T7939] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 213.676326][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'. [ 213.693747][ T7939] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.153522][ T11] wlan1: Trigger new scan to find an IBSS to join [ 214.484822][ T7953] netlink: 'syz.3.698': attribute type 29 has an invalid length. [ 214.885194][ T7960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.699'. [ 215.077416][ T7966] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 215.101801][ T146] wlan1: Trigger new scan to find an IBSS to join [ 215.432210][ T7974] validate_nla: 1 callbacks suppressed [ 215.432247][ T7974] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 215.462663][ T7974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.704'. [ 215.486175][ T7974] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 215.777088][ T7986] netlink: 'syz.2.709': attribute type 29 has an invalid length. [ 215.831316][ T7989] FAULT_INJECTION: forcing a failure. [ 215.831316][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.848011][ T7989] CPU: 0 PID: 7989 Comm: syz.0.710 Not tainted syzkaller #0 [ 215.855378][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 215.865479][ T7989] Call Trace: [ 215.868800][ T7989] [ 215.871766][ T7989] dump_stack_lvl+0x18c/0x250 [ 215.876504][ T7989] ? show_regs_print_info+0x20/0x20 [ 215.881751][ T7989] ? load_image+0x420/0x420 [ 215.886320][ T7989] ? __might_fault+0xaa/0x120 [ 215.891046][ T7989] ? __lock_acquire+0x7eb0/0x7eb0 [ 215.896126][ T7989] should_fail_ex+0x394/0x4c0 [ 215.900884][ T7989] _copy_from_user+0x2f/0xe0 [ 215.905612][ T7989] ___sys_sendmsg+0x1c7/0x360 [ 215.910364][ T7989] ? get_pid_task+0x20/0x1e0 [ 215.915098][ T7989] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.919925][ T7989] ? __lock_acquire+0x7eb0/0x7eb0 [ 215.925034][ T7989] __se_sys_sendmsg+0x1d0/0x2c0 [ 215.929945][ T7989] ? __x64_sys_sendmsg+0x80/0x80 [ 215.934947][ T7989] ? lockdep_hardirqs_on+0x98/0x150 [ 215.940194][ T7989] do_syscall_64+0x55/0xb0 [ 215.944666][ T7989] ? clear_bhb_loop+0x40/0x90 [ 215.949742][ T7989] ? clear_bhb_loop+0x40/0x90 [ 215.954478][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.960424][ T7989] RIP: 0033:0x7f2abc5a8f19 [ 215.964891][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.984556][ T7989] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.993039][ T7989] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 216.001061][ T7989] RDX: 0000000000000890 RSI: 0000200000000480 RDI: 0000000000000003 [ 216.009087][ T7989] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 216.017110][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.025220][ T7989] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 216.033257][ T7989] [ 216.080330][ T7986] netlink: 'syz.2.709': attribute type 29 has an invalid length. [ 216.088696][ T7979] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 216.315080][ T11] wlan1: Creating new IBSS network, BSSID 6a:78:18:f1:cc:aa [ 216.735001][ T7994] netlink: 'syz.3.712': attribute type 6 has an invalid length. [ 216.813835][ T7994] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.712'. [ 217.127184][ T8008] netlink: 'syz.1.716': attribute type 29 has an invalid length. [ 217.178137][ T8008] netlink: 'syz.1.716': attribute type 29 has an invalid length. [ 217.198363][ T8006] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.567184][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.718'. [ 217.628098][ T8016] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.719'. [ 217.706822][ T8019] netlink: 'syz.3.719': attribute type 21 has an invalid length. [ 217.844877][ T8012] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 217.871910][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'. [ 217.994657][ T8027] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 218.121127][ T8028] delete_channel: no stack [ 218.344900][ T8038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.727'. [ 218.639155][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 219.363023][ T8067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.737'. [ 220.447919][ T8087] netlink: 2 bytes leftover after parsing attributes in process `syz.2.743'. [ 220.576382][ T8091] validate_nla: 4 callbacks suppressed [ 220.576402][ T8091] netlink: 'syz.3.745': attribute type 29 has an invalid length. [ 220.629178][ T8091] netlink: 'syz.3.745': attribute type 29 has an invalid length. [ 220.702591][ T8085] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 220.719457][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.742'. [ 221.150657][ T8107] netlink: 'syz.3.750': attribute type 22 has an invalid length. [ 221.160198][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 221.188904][ T1147] wlan1: Trigger new scan to find an IBSS to join [ 221.353597][ T8115] netlink: 'syz.1.749': attribute type 10 has an invalid length. [ 222.584571][ T8135] netlink: 'syz.0.758': attribute type 29 has an invalid length. [ 222.615358][ T8135] netlink: 'syz.0.758': attribute type 29 has an invalid length. [ 222.684557][ T8137] __nla_validate_parse: 2 callbacks suppressed [ 222.684600][ T8137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.759'. [ 223.544001][ T8151] FAULT_INJECTION: forcing a failure. [ 223.544001][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 223.596019][ T8151] CPU: 0 PID: 8151 Comm: syz.1.763 Not tainted syzkaller #0 [ 223.603424][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 223.613601][ T8151] Call Trace: [ 223.616970][ T8151] [ 223.620149][ T8151] dump_stack_lvl+0x18c/0x250 [ 223.624951][ T8151] ? show_regs_print_info+0x20/0x20 [ 223.630249][ T8151] ? load_image+0x420/0x420 [ 223.634852][ T8151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 223.641169][ T8151] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 223.648569][ T8151] ? lock_chain_count+0x20/0x20 [ 223.653530][ T8151] ? perf_trace_lock_acquire+0x105/0x400 [ 223.659376][ T8151] should_fail_ex+0x394/0x4c0 [ 223.664178][ T8151] should_failslab+0x9/0x20 [ 223.668777][ T8151] slab_pre_alloc_hook+0x59/0x300 [ 223.673917][ T8151] kmem_cache_alloc+0x5a/0x2d0 [ 223.678766][ T8151] ? skb_clone+0x1eb/0x370 [ 223.683335][ T8151] skb_clone+0x1eb/0x370 [ 223.686388][ T8156] delete_channel: no stack [ 223.687769][ T8151] __netlink_deliver_tap+0x411/0x7f0 [ 223.687929][ T8151] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.702953][ T8151] netlink_deliver_tap+0x19c/0x1b0 [ 223.708190][ T8151] netlink_unicast+0x82f/0x9e0 [ 223.713131][ T8151] netlink_sendmsg+0x8d0/0xbf0 [ 223.718083][ T8151] ? netlink_getsockopt+0x590/0x590 [ 223.723396][ T8151] ? apparmor_socket_sendmsg+0x8e/0x330 [ 223.729065][ T8151] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.734445][ T8151] ? security_socket_sendmsg+0x80/0xa0 [ 223.740006][ T8151] ? netlink_getsockopt+0x590/0x590 [ 223.745517][ T8151] ____sys_sendmsg+0x61b/0x980 [ 223.750392][ T8151] ? __asan_memset+0x22/0x40 [ 223.755051][ T8151] ? __sys_sendmsg_sock+0x30/0x30 [ 223.760146][ T8151] ? __import_iovec+0x5f2/0x850 [ 223.765095][ T8151] ? import_iovec+0x73/0xa0 [ 223.769844][ T8151] ___sys_sendmsg+0x2a6/0x360 [ 223.774615][ T8151] ? __sys_sendmsg+0x2b0/0x2b0 [ 223.779511][ T8151] ? __lock_acquire+0x7eb0/0x7eb0 [ 223.784662][ T8151] __se_sys_sendmsg+0x1d0/0x2c0 [ 223.789587][ T8151] ? __x64_sys_sendmsg+0x80/0x80 [ 223.794720][ T8151] ? syscall_enter_from_user_mode+0x2e/0x80 [ 223.800692][ T8151] do_syscall_64+0x55/0xb0 [ 223.805168][ T8151] ? clear_bhb_loop+0x40/0x90 [ 223.809907][ T8151] ? clear_bhb_loop+0x40/0x90 [ 223.814658][ T8151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.820616][ T8151] RIP: 0033:0x7fb5d71a8f19 [ 223.825174][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.845008][ T8151] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.854151][ T8151] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 223.862466][ T8151] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 223.870495][ T8151] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.878517][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.886561][ T8151] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 223.894667][ T8151] [ 224.033607][ T8151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.763'. [ 224.058551][ T8136] delete_channel: no stack [ 224.145713][ T11] wlan1: Trigger new scan to find an IBSS to join [ 224.671182][ T8168] FAULT_INJECTION: forcing a failure. [ 224.671182][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.708946][ T8168] CPU: 0 PID: 8168 Comm: syz.0.769 Not tainted syzkaller #0 [ 224.716325][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 224.726559][ T8168] Call Trace: [ 224.729891][ T8168] [ 224.732900][ T8168] dump_stack_lvl+0x18c/0x250 [ 224.737644][ T8168] ? show_regs_print_info+0x20/0x20 [ 224.742910][ T8168] ? load_image+0x420/0x420 [ 224.747476][ T8168] ? __might_fault+0xaa/0x120 [ 224.752236][ T8168] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.757329][ T8168] should_fail_ex+0x394/0x4c0 [ 224.762070][ T8168] _copy_to_user+0x2f/0xa0 [ 224.766550][ T8168] generic_map_delete_batch+0x5b7/0x6d0 [ 224.772169][ T8168] ? bpf_map_inc_not_zero+0x110/0x110 [ 224.778208][ T8168] ? __fdget+0x180/0x210 [ 224.782519][ T8168] ? bpf_map_inc_not_zero+0x110/0x110 [ 224.788025][ T8168] bpf_map_do_batch+0x48c/0x600 [ 224.792942][ T8168] ? bpf_lsm_xfrm_decode_session+0x10/0x10 [ 224.798839][ T8168] __sys_bpf+0x69e/0x890 [ 224.803151][ T8168] ? bpf_link_show_fdinfo+0x560/0x560 [ 224.808604][ T8168] ? lock_chain_count+0x20/0x20 [ 224.813559][ T8168] __x64_sys_bpf+0x7c/0x90 [ 224.818037][ T8168] do_syscall_64+0x55/0xb0 [ 224.822534][ T8168] ? clear_bhb_loop+0x40/0x90 [ 224.827299][ T8168] ? clear_bhb_loop+0x40/0x90 [ 224.832056][ T8168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.838039][ T8168] RIP: 0033:0x7f2abc5a8f19 [ 224.842513][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.862374][ T8168] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.871033][ T8168] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 224.876825][ T8169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.768'. [ 224.879036][ T8168] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 000000000000001b [ 224.879056][ T8168] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 224.879072][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.879086][ T8168] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 224.879124][ T8168] [ 225.030364][ T8172] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 225.038735][ T8172] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 225.312406][ T1147] wlan1: Creating new IBSS network, BSSID 8e:e8:ed:99:85:92 [ 225.494211][ T8175] netlink: 'syz.0.771': attribute type 21 has an invalid length. [ 225.538152][ T8175] netlink: 156 bytes leftover after parsing attributes in process `syz.0.771'. [ 225.570971][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.671871][ T8180] netlink: 2 bytes leftover after parsing attributes in process `syz.0.771'. [ 226.203204][ T8193] netlink: 'syz.3.779': attribute type 33 has an invalid length. [ 226.230351][ T8193] netlink: 152 bytes leftover after parsing attributes in process `syz.3.779'. [ 226.509532][ T8199] netlink: 'syz.1.781': attribute type 153 has an invalid length. [ 226.550456][ T8199] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.781'. [ 228.086531][ T8220] netlink: 'syz.0.785': attribute type 21 has an invalid length. [ 228.099155][ T8220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.785'. [ 228.116481][ T8220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.137564][ T8220] netlink: 2 bytes leftover after parsing attributes in process `syz.0.785'. [ 228.567436][ T8230] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.790'. [ 229.374483][ T8237] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.792'. [ 229.593050][ T8248] netlink: 'syz.0.795': attribute type 21 has an invalid length. [ 229.612675][ T8248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.795'. [ 229.644561][ T8248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.694301][ T8252] netlink: 'syz.1.796': attribute type 3 has an invalid length. [ 229.714521][ T8249] netlink: 2 bytes leftover after parsing attributes in process `syz.0.795'. [ 229.721170][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.528943][ T8274] netlink: 10 bytes leftover after parsing attributes in process `syz.3.802'. [ 230.902100][ T5791] Bluetooth: hci2: unexpected event for opcode 0x000b [ 231.154056][ T8284] netlink: 'syz.0.807': attribute type 21 has an invalid length. [ 231.167940][ T8284] netlink: 156 bytes leftover after parsing attributes in process `syz.0.807'. [ 231.210952][ T8284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.280610][ T8284] netlink: 2 bytes leftover after parsing attributes in process `syz.0.807'. [ 231.516506][ T8297] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.579842][ T8293] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 231.603597][ T8293] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.795708][ T8300] netlink: 'syz.0.812': attribute type 10 has an invalid length. [ 231.843924][ T8300] syz_tun: left allmulticast mode [ 231.866823][ T8300] bridge0: port 3(syz_tun) entered disabled state [ 232.180291][ T8302] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 233.004006][ T8324] sit0: left promiscuous mode [ 233.197755][ T8325] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 233.340136][ T8325] macvlan1: entered allmulticast mode [ 233.391512][ T8331] netlink: 'syz.1.821': attribute type 21 has an invalid length. [ 233.428184][ T8331] __nla_validate_parse: 3 callbacks suppressed [ 233.428224][ T8331] netlink: 156 bytes leftover after parsing attributes in process `syz.1.821'. [ 233.482405][ T8332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.520964][ T8331] netlink: 2 bytes leftover after parsing attributes in process `syz.1.821'. [ 233.729620][ T8339] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 233.760589][ T8339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.824'. [ 233.796771][ T8339] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 233.890375][ T8346] netlink: 'syz.1.826': attribute type 10 has an invalid length. [ 233.915615][ T8346] netlink: 55 bytes leftover after parsing attributes in process `syz.1.826'. [ 233.941517][ T8346] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 234.141348][ T146] wlan1: Trigger new scan to find an IBSS to join [ 234.188092][ T8346] batman_adv: batadv0: Removing interface: virt_wifi0 [ 234.343628][ T8341] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 234.357765][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.825'. [ 234.758003][ T8365] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.894911][ T8371] netlink: 'syz.1.834': attribute type 21 has an invalid length. [ 234.919372][ T8371] netlink: 156 bytes leftover after parsing attributes in process `syz.1.834'. [ 234.942735][ T8371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.962874][ T8371] netlink: 2 bytes leftover after parsing attributes in process `syz.1.834'. [ 235.150847][ T8376] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.837'. [ 235.248983][ T8374] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 235.286453][ T8374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.836'. [ 235.773688][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'. [ 236.354777][ T8406] veth1_macvtap: left promiscuous mode [ 236.673946][ T8411] sit0: left promiscuous mode [ 236.767179][ T8414] validate_nla: 2 callbacks suppressed [ 236.767200][ T8414] netlink: 'syz.1.846': attribute type 21 has an invalid length. [ 236.804640][ T8416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.824479][ T8415] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 236.989652][ T8415] macvlan1: entered allmulticast mode [ 237.025988][ T8415] veth1_vlan: entered allmulticast mode [ 237.085099][ T8415] team0: Port device macvlan1 added [ 237.424154][ T8434] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 238.348461][ T8450] netlink: 'syz.1.858': attribute type 10 has an invalid length. [ 238.357313][ T8450] syz_tun: entered promiscuous mode [ 238.418144][ T8452] netlink: 'syz.3.859': attribute type 21 has an invalid length. [ 238.458395][ T8452] __nla_validate_parse: 5 callbacks suppressed [ 238.458418][ T8452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.859'. [ 238.511073][ T8456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.586521][ T8452] netlink: 2 bytes leftover after parsing attributes in process `syz.3.859'. [ 238.654043][ T8458] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.861'. [ 238.739614][ T8458] FAULT_INJECTION: forcing a failure. [ 238.739614][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 238.758451][ T8458] CPU: 1 PID: 8458 Comm: syz.0.861 Not tainted syzkaller #0 [ 238.767750][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 238.778649][ T8458] Call Trace: [ 238.781983][ T8458] [ 238.784966][ T8458] dump_stack_lvl+0x18c/0x250 [ 238.789977][ T8458] ? sctp_sendmsg+0x1519/0x27b0 [ 238.795277][ T8458] ? ___sys_sendmsg+0x2a6/0x360 [ 238.801169][ T8458] ? show_regs_print_info+0x20/0x20 [ 238.806667][ T8458] ? load_image+0x420/0x420 [ 238.811766][ T8458] ? mark_lock+0x94/0x320 [ 238.816272][ T8458] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 238.822344][ T8458] should_fail_ex+0x394/0x4c0 [ 238.827267][ T8458] should_failslab+0x9/0x20 [ 238.831847][ T8458] slab_pre_alloc_hook+0x59/0x300 [ 238.836933][ T8458] ? sctp_add_bind_addr+0x8c/0x360 [ 238.842548][ T8458] __kmem_cache_alloc_node+0x53/0x260 [ 238.848903][ T8458] ? sctp_add_bind_addr+0x8c/0x360 [ 238.855664][ T8458] kmalloc_trace+0x2a/0xe0 [ 238.860165][ T8458] sctp_add_bind_addr+0x8c/0x360 [ 238.866320][ T8458] sctp_copy_local_addr_list+0x31b/0x4e0 [ 238.872139][ T8458] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 238.878043][ T8458] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 238.884664][ T8458] ? sctp_v4_is_any+0x35/0x60 [ 238.889724][ T8458] ? sctp_copy_one_addr+0x8c/0x350 [ 238.895219][ T8458] sctp_bind_addr_copy+0xb3/0x3c0 [ 238.900450][ T8458] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 238.906916][ T8458] sctp_connect_new_asoc+0x2f9/0x6a0 [ 238.912979][ T8458] ? __sctp_connect+0xd80/0xd80 [ 238.918860][ T8458] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.924296][ T8458] ? _local_bh_enable+0xa0/0xa0 [ 238.929239][ T8458] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 238.935113][ T8458] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 238.941086][ T8458] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 238.947053][ T8458] ? security_sctp_bind_connect+0x89/0xb0 [ 238.952876][ T8458] sctp_sendmsg+0x1519/0x27b0 [ 238.958197][ T8458] ? sctp_getsockopt+0xb60/0xb60 [ 238.963207][ T8458] ? aa_sk_perm+0x7bb/0x8e0 [ 238.967819][ T8458] ? aa_af_perm+0x330/0x330 [ 238.972597][ T8458] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 238.979269][ T8458] ? sock_rps_record_flow+0x19/0x3f0 [ 238.984642][ T8458] ? inet_sendmsg+0x7e/0x2a0 [ 238.989319][ T8458] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.995814][ T8458] ? inet_send_prepare+0x250/0x250 [ 239.001933][ T8458] ____sys_sendmsg+0x61b/0x980 [ 239.006789][ T8458] ? __asan_memset+0x22/0x40 [ 239.012513][ T8458] ? __sys_sendmsg_sock+0x30/0x30 [ 239.017716][ T8458] ? __import_iovec+0x5f2/0x850 [ 239.023179][ T8458] ? import_iovec+0x73/0xa0 [ 239.027951][ T8458] ___sys_sendmsg+0x2a6/0x360 [ 239.031757][ T8461] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.862'. [ 239.035130][ T8458] ? __sys_sendmsg+0x2b0/0x2b0 [ 239.035231][ T8458] ? ktime_get+0x7f/0x280 [ 239.056749][ T8458] __se_sys_sendmsg+0x1d0/0x2c0 [ 239.061855][ T8458] ? __x64_sys_sendmsg+0x80/0x80 [ 239.066881][ T8458] ? syscall_enter_from_user_mode+0x2e/0x80 [ 239.073034][ T8458] do_syscall_64+0x55/0xb0 [ 239.077789][ T8458] ? clear_bhb_loop+0x40/0x90 [ 239.082895][ T8458] ? clear_bhb_loop+0x40/0x90 [ 239.087741][ T8458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.093731][ T8458] RIP: 0033:0x7f2abc5a8f19 [ 239.098202][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.118509][ T8458] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.127800][ T8458] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 239.136288][ T8458] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000009 [ 239.145131][ T8458] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 239.155223][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.163260][ T8458] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 239.171396][ T8458] [ 239.197240][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 239.255156][ T8463] netlink: 'syz.2.870': attribute type 21 has an invalid length. [ 239.290864][ T8463] netlink: 156 bytes leftover after parsing attributes in process `syz.2.870'. [ 239.368967][ T8463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.414331][ T8467] netlink: 2 bytes leftover after parsing attributes in process `syz.2.870'. [ 239.820337][ T8481] sctp: [Deprecated]: syz.3.868 (pid 8481) Use of int in maxseg socket option. [ 239.820337][ T8481] Use struct sctp_assoc_value instead [ 239.871758][ T8483] netlink: 'syz.0.869': attribute type 5 has an invalid length. [ 240.153659][ T8491] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 240.161877][ T8491] netlink: 55 bytes leftover after parsing attributes in process `syz.3.872'. [ 240.179082][ T8491] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 240.228183][ T50] wlan1: Creating new IBSS network, BSSID 8a:0e:a6:86:f8:d6 [ 240.270915][ T8491] batman_adv: batadv0: Removing interface: virt_wifi0 [ 240.822919][ T8499] netlink: 'syz.2.874': attribute type 21 has an invalid length. [ 240.831643][ T8499] netlink: 156 bytes leftover after parsing attributes in process `syz.2.874'. [ 240.845531][ T8499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.867825][ T8499] netlink: 2 bytes leftover after parsing attributes in process `syz.2.874'. [ 240.900748][ T8503] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.876'. [ 241.204511][ T8508] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 241.672108][ T8528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.809676][ T8530] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.108785][ T8534] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 242.381487][ T8543] FAULT_INJECTION: forcing a failure. [ 242.381487][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 242.451017][ T8543] CPU: 1 PID: 8543 Comm: syz.1.893 Not tainted syzkaller #0 [ 242.458955][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 242.471116][ T8543] Call Trace: [ 242.474458][ T8543] [ 242.477448][ T8543] dump_stack_lvl+0x18c/0x250 [ 242.482218][ T8543] ? show_regs_print_info+0x20/0x20 [ 242.487508][ T8543] ? load_image+0x420/0x420 [ 242.492596][ T8543] ? __might_sleep+0xe0/0xe0 [ 242.497463][ T8543] ? __lock_acquire+0x7eb0/0x7eb0 [ 242.502589][ T8543] should_fail_ex+0x394/0x4c0 [ 242.507366][ T8543] should_failslab+0x9/0x20 [ 242.512417][ T8543] slab_pre_alloc_hook+0x59/0x300 [ 242.519841][ T8543] kmem_cache_alloc+0x5a/0x2d0 [ 242.525136][ T8543] ? radix_tree_node_alloc+0x7e/0x3a0 [ 242.530622][ T8543] radix_tree_node_alloc+0x7e/0x3a0 [ 242.536018][ T8543] idr_get_free+0x28f/0xa10 [ 242.540830][ T8543] idr_alloc+0x19d/0x2e0 [ 242.545147][ T8543] ? ppp_dev_configure+0x5f4/0xad0 [ 242.550346][ T8543] ? __lock_acquire+0x7eb0/0x7eb0 [ 242.555980][ T8543] ? idr_alloc_u32+0x330/0x330 [ 242.560854][ T8543] ? net_generic+0x1e/0x240 [ 242.565832][ T8543] ? net_generic+0x1e/0x240 [ 242.570499][ T8543] ? radix_tree_lookup+0x267/0x280 [ 242.575701][ T8543] ppp_dev_configure+0x77a/0xad0 [ 242.580732][ T8543] ppp_ioctl+0xafb/0x1bc0 [ 242.585628][ T8543] ? ppp_poll+0x250/0x250 [ 242.590049][ T8543] ? __fget_files+0x28/0x460 [ 242.595897][ T8543] ? bpf_lsm_file_ioctl+0x9/0x10 [ 242.600998][ T8543] ? security_file_ioctl+0x80/0xa0 [ 242.606193][ T8543] ? ppp_poll+0x250/0x250 [ 242.611046][ T8543] __se_sys_ioctl+0xfd/0x170 [ 242.615823][ T8543] do_syscall_64+0x55/0xb0 [ 242.620561][ T8543] ? clear_bhb_loop+0x40/0x90 [ 242.626029][ T8543] ? clear_bhb_loop+0x40/0x90 [ 242.630844][ T8543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.637447][ T8543] RIP: 0033:0x7fb5d71a8f19 [ 242.641951][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.666857][ T8543] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.675442][ T8543] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 242.683952][ T8543] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 242.694221][ T8543] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.702424][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.710838][ T8543] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 242.719304][ T8543] [ 242.870554][ T8551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.953687][ T8552] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 243.208043][ T8556] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 244.150894][ T50] wlan1: Trigger new scan to find an IBSS to join [ 244.249124][ T8575] delete_channel: no stack [ 244.382717][ T8580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.444217][ T8580] __nla_validate_parse: 6 callbacks suppressed [ 244.444238][ T8580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.906'. [ 244.846954][ T8582] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.878851][ T8592] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 244.925411][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.962548][ T8592] bond0: (slave team0): Enslaving as an active interface with an up link [ 245.144749][ T8599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.910'. [ 245.538252][ T8605] delete_channel: no stack [ 245.603580][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.913'. [ 245.821425][ T8615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.843425][ T8615] netlink: 2 bytes leftover after parsing attributes in process `syz.1.917'. [ 246.290126][ T8626] netlink: 'syz.1.922': attribute type 10 has an invalid length. [ 246.325858][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 246.326020][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.922'. [ 246.345685][ T8626] batman_adv: batadv0: Adding interface: vlan1 [ 246.351975][ T8626] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.378196][ T8626] batman_adv: batadv0: Interface activated: vlan1 [ 246.390140][ T5791] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 246.485657][ T8630] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 246.500167][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.923'. [ 247.057673][ T8630] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 247.083580][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.923'. [ 247.180545][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 247.287266][ T8641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.415159][ T8643] netlink: 2 bytes leftover after parsing attributes in process `syz.0.926'. [ 247.508777][ T8651] FAULT_INJECTION: forcing a failure. [ 247.508777][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 247.533658][ T8651] CPU: 1 PID: 8651 Comm: syz.1.931 Not tainted syzkaller #0 [ 247.541489][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 247.552097][ T8651] Call Trace: [ 247.555426][ T8651] [ 247.558505][ T8651] dump_stack_lvl+0x18c/0x250 [ 247.563346][ T8651] ? show_regs_print_info+0x20/0x20 [ 247.568619][ T8651] ? load_image+0x420/0x420 [ 247.573195][ T8651] ? __might_sleep+0xe0/0xe0 [ 247.577907][ T8651] ? __lock_acquire+0x7eb0/0x7eb0 [ 247.583395][ T8651] should_fail_ex+0x394/0x4c0 [ 247.588250][ T8651] should_failslab+0x9/0x20 [ 247.593053][ T8651] slab_pre_alloc_hook+0x59/0x300 [ 247.598191][ T8651] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 247.603985][ T8651] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 247.609774][ T8651] __kmem_cache_alloc_node+0x53/0x260 [ 247.615232][ T8651] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 247.621102][ T8651] __kmalloc+0xa7/0x240 [ 247.625458][ T8651] tomoyo_realpath_from_path+0xe6/0x5c0 [ 247.631075][ T8651] ? tomoyo_domain+0xd6/0x120 [ 247.635829][ T8651] tomoyo_path_number_perm+0x248/0x5e0 [ 247.636527][ T8649] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 247.641337][ T8651] ? tomoyo_path_number_perm+0x217/0x5e0 [ 247.641399][ T8651] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 247.641431][ T8651] ? ksys_write+0x1d2/0x260 [ 247.641502][ T8651] ? __fget_files+0x28/0x460 [ 247.641548][ T8651] security_file_ioctl+0x70/0xa0 [ 247.641581][ T8651] __se_sys_ioctl+0x48/0x170 [ 247.641616][ T8651] do_syscall_64+0x55/0xb0 [ 247.641645][ T8651] ? clear_bhb_loop+0x40/0x90 [ 247.641675][ T8651] ? clear_bhb_loop+0x40/0x90 [ 247.641709][ T8651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.670543][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.930'. [ 247.674834][ T8651] RIP: 0033:0x7fb5d71a8f19 [ 247.674864][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.674884][ T8651] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.674908][ T8651] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 247.674926][ T8651] RDX: 0000000000000000 RSI: 0000000080044943 RDI: 0000000000000003 [ 247.674940][ T8651] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.674955][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.674969][ T8651] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 247.781065][ T8651] [ 247.797994][ T8651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.848279][ T8650] delete_channel: no stack [ 247.923270][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 248.080828][ T8664] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 248.133884][ T8664] netlink: 55 bytes leftover after parsing attributes in process `syz.1.935'. [ 248.173953][ T8667] delete_channel: no stack [ 248.346699][ T8660] delete_channel: no stack [ 248.533044][ T8677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.620785][ T8679] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 248.866991][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 249.197272][ T146] wlan1: Trigger new scan to find an IBSS to join [ 249.271283][ T8700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.322801][ T8702] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 249.535162][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 249.576645][ T8713] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 249.593560][ T8713] __nla_validate_parse: 5 callbacks suppressed [ 249.593576][ T8713] netlink: 55 bytes leftover after parsing attributes in process `syz.3.955'. [ 249.834391][ T8717] FAULT_INJECTION: forcing a failure. [ 249.834391][ T8717] name failslab, interval 1, probability 0, space 0, times 0 [ 249.853476][ T8717] CPU: 1 PID: 8717 Comm: syz.1.959 Not tainted syzkaller #0 [ 249.860901][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 249.871012][ T8717] Call Trace: [ 249.874329][ T8717] [ 249.877278][ T8717] dump_stack_lvl+0x18c/0x250 [ 249.882029][ T8717] ? show_regs_print_info+0x20/0x20 [ 249.887275][ T8717] ? load_image+0x420/0x420 [ 249.891854][ T8717] ? __might_sleep+0xe0/0xe0 [ 249.896617][ T8717] ? __lock_acquire+0x7eb0/0x7eb0 [ 249.901728][ T8717] should_fail_ex+0x394/0x4c0 [ 249.906481][ T8717] should_failslab+0x9/0x20 [ 249.911046][ T8717] slab_pre_alloc_hook+0x59/0x300 [ 249.916124][ T8717] ? __lock_acquire+0x7eb0/0x7eb0 [ 249.921221][ T8717] kmem_cache_alloc_node+0x5e/0x320 [ 249.926469][ T8717] ? __alloc_skb+0x103/0x2c0 [ 249.931103][ T8717] __alloc_skb+0x103/0x2c0 [ 249.935557][ T8717] netlink_sendmsg+0x66a/0xbf0 [ 249.940359][ T8717] ? netlink_getsockopt+0x590/0x590 [ 249.945678][ T8717] ? apparmor_socket_sendmsg+0x8e/0x330 [ 249.951636][ T8717] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.956986][ T8717] ? security_socket_sendmsg+0x80/0xa0 [ 249.962501][ T8717] ? netlink_getsockopt+0x590/0x590 [ 249.967746][ T8717] ____sys_sendmsg+0x61b/0x980 [ 249.972557][ T8717] ? __asan_memset+0x22/0x40 [ 249.977199][ T8717] ? __sys_sendmsg_sock+0x30/0x30 [ 249.982347][ T8717] ? __import_iovec+0x5f2/0x850 [ 249.987250][ T8717] ? import_iovec+0x73/0xa0 [ 249.991816][ T8717] ___sys_sendmsg+0x2a6/0x360 [ 249.996541][ T8717] ? get_pid_task+0x20/0x1e0 [ 250.001184][ T8717] ? __sys_sendmsg+0x2b0/0x2b0 [ 250.006573][ T8717] __se_sys_sendmsg+0x1d0/0x2c0 [ 250.011481][ T8717] ? perf_trace_preemptirq_template+0x269/0x330 [ 250.017785][ T8717] ? __x64_sys_sendmsg+0x80/0x80 [ 250.022778][ T8717] ? lockdep_hardirqs_on+0x98/0x150 [ 250.028063][ T8717] do_syscall_64+0x55/0xb0 [ 250.032961][ T8717] ? clear_bhb_loop+0x40/0x90 [ 250.037843][ T8717] ? clear_bhb_loop+0x40/0x90 [ 250.042568][ T8717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.049197][ T8717] RIP: 0033:0x7fb5d71a8f19 [ 250.053651][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.073478][ T8717] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.081936][ T8717] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 250.089942][ T8717] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 000000000000000c [ 250.098903][ T8717] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.106911][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.115016][ T8717] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 250.123038][ T8717] [ 250.284894][ T8721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.960'. [ 250.438043][ T8723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.507536][ T8726] netlink: 2 bytes leftover after parsing attributes in process `syz.0.962'. [ 250.525872][ T50] wlan1: Creating new IBSS network, BSSID c6:3b:b8:f2:f4:46 [ 250.565855][ T8729] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 250.588216][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.963'. [ 250.738690][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 250.944429][ T8741] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 250.961449][ T8741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 250.972424][ T8741] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 250.980463][ T8741] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.007551][ T8741] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 251.147941][ T8746] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.971'. [ 251.173345][ T8746] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 251.191284][ T42] wlan1: Trigger new scan to find an IBSS to join [ 251.474706][ T8756] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 251.489845][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.975'. [ 251.825453][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.978'. [ 251.891643][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 252.203744][ T11] wlan1: Creating new IBSS network, BSSID 9a:35:44:d5:ae:07 [ 252.402287][ T8780] netlink: 'syz.2.981': attribute type 9 has an invalid length. [ 252.410388][ T8780] netlink: 423 bytes leftover after parsing attributes in process `syz.2.981'. [ 253.055492][ T8792] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 253.063862][ T8792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 253.386126][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 253.688498][ T8812] netlink: 'syz.1.992': attribute type 21 has an invalid length. [ 253.710006][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 253.957897][ T8821] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 254.065126][ T8823] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 254.233702][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 254.745659][ T8838] netlink: 'syz.0.1001': attribute type 12 has an invalid length. [ 254.774662][ T8838] netlink: 'syz.0.1001': attribute type 11 has an invalid length. [ 254.820472][ T8838] __nla_validate_parse: 5 callbacks suppressed [ 254.820511][ T8838] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.1001'. [ 255.094107][ T8840] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1003'. [ 255.301974][ T8845] FAULT_INJECTION: forcing a failure. [ 255.301974][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.384431][ T8845] CPU: 1 PID: 8845 Comm: syz.3.1004 Not tainted syzkaller #0 [ 255.391985][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 255.402096][ T8845] Call Trace: [ 255.405451][ T8845] [ 255.408432][ T8845] dump_stack_lvl+0x18c/0x250 [ 255.413182][ T8845] ? show_regs_print_info+0x20/0x20 [ 255.418445][ T8845] ? load_image+0x420/0x420 [ 255.423003][ T8845] ? __might_fault+0xaa/0x120 [ 255.427738][ T8845] ? __lock_acquire+0x7eb0/0x7eb0 [ 255.432831][ T8845] should_fail_ex+0x394/0x4c0 [ 255.437572][ T8845] _copy_from_user+0x2f/0xe0 [ 255.442213][ T8845] ___sys_sendmsg+0x1c7/0x360 [ 255.446960][ T8845] ? get_pid_task+0x20/0x1e0 [ 255.451640][ T8845] ? __sys_sendmsg+0x2b0/0x2b0 [ 255.456479][ T8845] ? __lock_acquire+0x7eb0/0x7eb0 [ 255.461612][ T8845] __se_sys_sendmsg+0x1d0/0x2c0 [ 255.466519][ T8845] ? __x64_sys_sendmsg+0x80/0x80 [ 255.471533][ T8845] ? lockdep_hardirqs_on+0x98/0x150 [ 255.476783][ T8845] do_syscall_64+0x55/0xb0 [ 255.481249][ T8845] ? clear_bhb_loop+0x40/0x90 [ 255.485996][ T8845] ? clear_bhb_loop+0x40/0x90 [ 255.490737][ T8845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.496687][ T8845] RIP: 0033:0x7f6b783a8f19 [ 255.501146][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.520897][ T8845] RSP: 002b:00007f6b792aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.529374][ T8845] RAX: ffffffffffffffda RBX: 00007f6b78625fa0 RCX: 00007f6b783a8f19 [ 255.537423][ T8845] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 255.545451][ T8845] RBP: 00007f6b792aa090 R08: 0000000000000000 R09: 0000000000000000 [ 255.553482][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.561501][ T8845] R13: 00007f6b78626038 R14: 00007f6b78625fa0 R15: 00007ffc796ced48 [ 255.569629][ T8845] [ 256.010734][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.017269][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.219318][ T8849] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 256.260099][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1006'. [ 256.310978][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 256.862631][ T8870] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1011'. [ 257.163745][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'. [ 257.191357][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'. [ 257.243526][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'. [ 257.288525][ T8870] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'. [ 257.590776][ T8885] FAULT_INJECTION: forcing a failure. [ 257.590776][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 257.621148][ T8885] CPU: 1 PID: 8885 Comm: syz.3.1016 Not tainted syzkaller #0 [ 257.628618][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 257.638736][ T8885] Call Trace: [ 257.642064][ T8885] [ 257.645052][ T8885] dump_stack_lvl+0x18c/0x250 [ 257.649830][ T8885] ? show_regs_print_info+0x20/0x20 [ 257.655099][ T8885] ? load_image+0x420/0x420 [ 257.659661][ T8885] ? __might_sleep+0xe0/0xe0 [ 257.664331][ T8885] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.669426][ T8885] should_fail_ex+0x394/0x4c0 [ 257.674214][ T8885] should_failslab+0x9/0x20 [ 257.678776][ T8885] slab_pre_alloc_hook+0x59/0x300 [ 257.683866][ T8885] kmem_cache_alloc+0x5a/0x2d0 [ 257.688698][ T8885] ? __kernfs_new_node+0xe5/0x7f0 [ 257.693804][ T8885] __kernfs_new_node+0xe5/0x7f0 [ 257.698732][ T8885] ? kernfs_new_node+0x260/0x260 [ 257.703753][ T8885] ? up_write+0x1be/0x410 [ 257.708147][ T8885] kernfs_new_node+0x14c/0x260 [ 257.712989][ T8885] __kernfs_create_file+0x4b/0x2e0 [ 257.718251][ T8885] sysfs_add_file_mode_ns+0x237/0x2f0 [ 257.723786][ T8885] internal_create_group+0x431/0xd10 [ 257.729146][ T8885] ? kernfs_add_one+0x149/0x6b0 [ 257.734095][ T8885] ? sysfs_create_group+0x20/0x20 [ 257.739193][ T8885] ? up_write+0x1be/0x410 [ 257.743587][ T8885] sysfs_create_groups+0x59/0x120 [ 257.749208][ T8885] device_add_attrs+0xdf/0x830 [ 257.754381][ T8885] ? device_add_class_symlinks+0x240/0x240 [ 257.761135][ T8885] ? device_add_class_symlinks+0x21f/0x240 [ 257.767447][ T8885] device_add+0x51a/0xc40 [ 257.771851][ T8885] netdev_register_kobject+0x188/0x320 [ 257.777400][ T8885] register_netdevice+0x12aa/0x1ba0 [ 257.782859][ T8885] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 257.788565][ T8885] ? netif_stacked_transfer_operstate+0x210/0x210 [ 257.795054][ T8885] ? mutex_unlock+0x10/0x10 [ 257.799621][ T8885] ? vscnprintf+0x80/0x80 [ 257.804018][ T8885] ? net_generic+0x1e/0x240 [ 257.808578][ T8885] ? radix_tree_lookup+0x267/0x280 [ 257.813763][ T8885] ppp_dev_configure+0x850/0xad0 [ 257.818770][ T8885] ppp_ioctl+0xafb/0x1bc0 [ 257.823194][ T8885] ? ppp_poll+0x250/0x250 [ 257.827581][ T8885] ? __fget_files+0x28/0x460 [ 257.832266][ T8885] ? bpf_lsm_file_ioctl+0x9/0x10 [ 257.837262][ T8885] ? security_file_ioctl+0x80/0xa0 [ 257.842434][ T8885] ? ppp_poll+0x250/0x250 [ 257.846915][ T8885] __se_sys_ioctl+0xfd/0x170 [ 257.851692][ T8885] do_syscall_64+0x55/0xb0 [ 257.856179][ T8885] ? clear_bhb_loop+0x40/0x90 [ 257.861023][ T8885] ? clear_bhb_loop+0x40/0x90 [ 257.865889][ T8885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.871860][ T8885] RIP: 0033:0x7f6b783a8f19 [ 257.876330][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.896693][ T8885] RSP: 002b:00007f6b792aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.905184][ T8885] RAX: ffffffffffffffda RBX: 00007f6b78625fa0 RCX: 00007f6b783a8f19 [ 257.913327][ T8885] RDX: 000000110c23afff RSI: 00000000c004743e RDI: 0000000000000003 [ 257.921357][ T8885] RBP: 00007f6b792aa090 R08: 0000000000000000 R09: 0000000000000000 [ 257.929674][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.937708][ T8885] R13: 00007f6b78626038 R14: 00007f6b78625fa0 R15: 00007ffc796ced48 [ 257.945773][ T8885] [ 257.977908][ T8889] netlink: 'syz.1.1018': attribute type 49 has an invalid length. [ 258.160062][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 258.215361][ T8892] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 258.251645][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1019'. [ 258.589538][ T8904] netlink: 'syz.2.1024': attribute type 12 has an invalid length. [ 258.611721][ T8904] netlink: 'syz.2.1024': attribute type 11 has an invalid length. [ 258.630573][ T8904] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.1024'. [ 258.857423][ T8906] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 259.160394][ T8925] FAULT_INJECTION: forcing a failure. [ 259.160394][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.175063][ T8925] CPU: 0 PID: 8925 Comm: syz.0.1029 Not tainted syzkaller #0 [ 259.182573][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 259.192806][ T8925] Call Trace: [ 259.196169][ T8925] [ 259.199535][ T8925] dump_stack_lvl+0x18c/0x250 [ 259.204319][ T8925] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 259.209897][ T8925] ? show_regs_print_info+0x20/0x20 [ 259.215190][ T8925] ? load_image+0x420/0x420 [ 259.219785][ T8925] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 259.225750][ T8925] ? __lock_acquire+0x7eb0/0x7eb0 [ 259.230861][ T8925] ? __rwlock_init+0x150/0x150 [ 259.235723][ T8925] should_fail_ex+0x394/0x4c0 [ 259.240714][ T8925] copy_page_from_iter_atomic+0x29e/0x13d0 [ 259.246624][ T8925] ? shmem_get_folio_gfp+0x2780/0x2b40 [ 259.252229][ T8925] ? iov_iter_zero+0x1160/0x1160 [ 259.257270][ T8925] ? shmem_write_begin+0x1cf/0x430 [ 259.262497][ T8925] generic_perform_write+0x353/0x5c0 [ 259.267927][ T8925] ? generic_file_direct_write+0x3e0/0x3e0 [ 259.273860][ T8925] ? file_update_time+0x192/0x1a0 [ 259.278966][ T8925] shmem_file_write_iter+0xfb/0x120 [ 259.284247][ T8925] vfs_write+0x474/0x9a0 [ 259.288579][ T8925] ? file_end_write+0x250/0x250 [ 259.293512][ T8925] ? __fget_files+0x3fc/0x460 [ 259.298317][ T8925] ? __fdget_pos+0x2a3/0x330 [ 259.303007][ T8925] ? ksys_write+0x74/0x260 [ 259.307535][ T8925] ksys_write+0x151/0x260 [ 259.311954][ T8925] ? __ia32_sys_read+0x90/0x90 [ 259.317217][ T8925] ? lockdep_hardirqs_on+0x98/0x150 [ 259.322500][ T8925] do_syscall_64+0x55/0xb0 [ 259.326985][ T8925] ? clear_bhb_loop+0x40/0x90 [ 259.332000][ T8925] ? clear_bhb_loop+0x40/0x90 [ 259.337421][ T8925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.343412][ T8925] RIP: 0033:0x7f2abc5a8f19 [ 259.348809][ T8925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.371037][ T8925] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.379617][ T8925] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 259.387825][ T8925] RDX: 00000000002a979d RSI: 0000200000000480 RDI: 0000000000000005 [ 259.397100][ T8925] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 259.405140][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.413174][ T8925] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 259.421249][ T8925] [ 259.810522][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 260.346360][ T8942] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 260.394956][ T8942] __nla_validate_parse: 1 callbacks suppressed [ 260.395020][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1036'. [ 260.535956][ T8948] FAULT_INJECTION: forcing a failure. [ 260.535956][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.556322][ T8948] CPU: 1 PID: 8948 Comm: syz.1.1038 Not tainted syzkaller #0 [ 260.563822][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 260.574804][ T8948] Call Trace: [ 260.578260][ T8948] [ 260.581245][ T8948] dump_stack_lvl+0x18c/0x250 [ 260.585997][ T8948] ? show_regs_print_info+0x20/0x20 [ 260.591268][ T8948] ? load_image+0x420/0x420 [ 260.595865][ T8948] ? __might_fault+0xaa/0x120 [ 260.600972][ T8948] ? __lock_acquire+0x7eb0/0x7eb0 [ 260.606058][ T8948] ? __mutex_trylock_common+0x160/0x270 [ 260.611667][ T8948] should_fail_ex+0x394/0x4c0 [ 260.616503][ T8948] _copy_from_user+0x2f/0xe0 [ 260.621532][ T8948] do_tcp_setsockopt+0x58d/0x1c50 [ 260.626652][ T8948] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 260.632124][ T8948] ? mutex_lock_nested+0x20/0x20 [ 260.637139][ T8948] ? sock_common_setsockopt+0x36/0xc0 [ 260.642581][ T8948] ? tcp_setsockopt+0x3d/0xe0 [ 260.647329][ T8948] ? tcp_enable_tx_delay+0x70/0x70 [ 260.652618][ T8948] ? sock_common_recvmsg+0x190/0x190 [ 260.658078][ T8948] smc_setsockopt+0x22d/0xb00 [ 260.662929][ T8948] ? smc_shutdown+0x9a0/0x9a0 [ 260.667893][ T8948] ? __fget_files+0x28/0x460 [ 260.672831][ T8948] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 260.678460][ T8948] ? security_socket_setsockopt+0x7e/0xa0 [ 260.684257][ T8948] ? smc_shutdown+0x9a0/0x9a0 [ 260.688993][ T8948] do_sock_setsockopt+0x175/0x1a0 [ 260.694081][ T8948] ? __fdget+0x180/0x210 [ 260.698386][ T8948] __x64_sys_setsockopt+0x182/0x200 [ 260.704297][ T8948] do_syscall_64+0x55/0xb0 [ 260.708958][ T8948] ? clear_bhb_loop+0x40/0x90 [ 260.713714][ T8948] ? clear_bhb_loop+0x40/0x90 [ 260.718473][ T8948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.724422][ T8948] RIP: 0033:0x7fb5d71a8f19 [ 260.728888][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.748781][ T8948] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.757259][ T8948] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 260.765330][ T8948] RDX: 0000000000000024 RSI: 0000000000000006 RDI: 0000000000000004 [ 260.773794][ T8948] RBP: 00007fb5d53f6090 R08: 0000000000000004 R09: 0000000000000000 [ 260.781834][ T8948] R10: 0000200000002bc0 R11: 0000000000000246 R12: 0000000000000001 [ 260.789965][ T8948] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 260.798014][ T8948] [ 261.312220][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 261.472791][ T5791] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 261.618015][ T8970] netlink: 'syz.3.1045': attribute type 12 has an invalid length. [ 261.635397][ T8970] netlink: 'syz.3.1045': attribute type 11 has an invalid length. [ 261.643706][ T8970] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.1045'. [ 261.668806][ T8973] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 261.676995][ T8973] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1055'. [ 261.687799][ T8973] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 261.743831][ T8973] batman_adv: batadv0: Removing interface: virt_wifi0 [ 262.024198][ T8984] netlink: 'syz.2.1050': attribute type 7 has an invalid length. [ 262.098639][ T8983] FAULT_INJECTION: forcing a failure. [ 262.098639][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.115845][ T8983] CPU: 1 PID: 8983 Comm: syz.3.1052 Not tainted syzkaller #0 [ 262.123319][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 262.135024][ T8983] Call Trace: [ 262.138369][ T8983] [ 262.141374][ T8983] dump_stack_lvl+0x18c/0x250 [ 262.146606][ T8983] ? show_regs_print_info+0x20/0x20 [ 262.151934][ T8983] ? load_image+0x420/0x420 [ 262.156512][ T8983] ? __might_fault+0xaa/0x120 [ 262.161265][ T8983] ? __lock_acquire+0x7eb0/0x7eb0 [ 262.166869][ T8983] ? bpf_percpu_array_update+0xec/0x490 [ 262.172654][ T8983] ? __virt_addr_valid+0x10c/0x380 [ 262.177840][ T8983] should_fail_ex+0x394/0x4c0 [ 262.182613][ T8983] _copy_from_user+0x2f/0xe0 [ 262.187666][ T8983] generic_map_update_batch+0x58c/0x800 [ 262.193329][ T8983] ? rcu_read_unlock+0xa0/0xa0 [ 262.198458][ T8983] ? __fdget+0x180/0x210 [ 262.202792][ T8983] ? rcu_read_unlock+0xa0/0xa0 [ 262.207638][ T8983] bpf_map_do_batch+0x3f2/0x600 [ 262.212589][ T8983] ? bpf_lsm_xfrm_decode_session+0x10/0x10 [ 262.218499][ T8983] __sys_bpf+0x381/0x890 [ 262.222819][ T8983] ? bpf_link_show_fdinfo+0x560/0x560 [ 262.228307][ T8983] ? lock_chain_count+0x20/0x20 [ 262.233257][ T8983] __x64_sys_bpf+0x7c/0x90 [ 262.237748][ T8983] do_syscall_64+0x55/0xb0 [ 262.242232][ T8983] ? clear_bhb_loop+0x40/0x90 [ 262.246974][ T8983] ? clear_bhb_loop+0x40/0x90 [ 262.251723][ T8983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.257698][ T8983] RIP: 0033:0x7f6b783a8f19 [ 262.262173][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.281861][ T8983] RSP: 002b:00007f6b792aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.290343][ T8983] RAX: ffffffffffffffda RBX: 00007f6b78625fa0 RCX: 00007f6b783a8f19 [ 262.298371][ T8983] RDX: 0000000000000038 RSI: 0000200000000cc0 RDI: 000000000000001a [ 262.306566][ T8983] RBP: 00007f6b792aa090 R08: 0000000000000000 R09: 0000000000000000 [ 262.314610][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.322706][ T8983] R13: 00007f6b78626038 R14: 00007f6b78625fa0 R15: 00007ffc796ced48 [ 262.330786][ T8983] [ 262.884189][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 263.103432][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 263.222186][ T9000] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.366496][ T9018] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.680903][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 264.795865][ T9034] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.273865][ T9054] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 266.282752][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1076'. [ 266.572146][ T9058] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 266.594064][ T9058] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1085'. [ 266.640644][ T9060] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.833099][ T9064] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.894149][ T9063] netlink: 'syz.1.1078': attribute type 10 has an invalid length. [ 266.912942][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1078'. [ 267.083771][ T9072] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 267.102822][ T50] wlan1: Trigger new scan to find an IBSS to join [ 267.175535][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1084'. [ 267.186184][ T9077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1084'. [ 267.646869][ T9081] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 267.879810][ T9094] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 267.888330][ T9094] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1090'. [ 268.054544][ T9098] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 268.441460][ T9103] netlink: 'syz.3.1093': attribute type 10 has an invalid length. [ 268.449500][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'. [ 268.463217][ T9107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.483950][ T9107] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1096'. [ 269.113472][ T9115] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.190465][ T146] wlan1: Trigger new scan to find an IBSS to join [ 269.232401][ T9118] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 269.255597][ T9118] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1100'. [ 269.435361][ T9125] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.581967][ T9134] FAULT_INJECTION: forcing a failure. [ 269.581967][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 269.642309][ T9134] CPU: 1 PID: 9134 Comm: syz.3.1105 Not tainted syzkaller #0 [ 269.649902][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 269.660010][ T9134] Call Trace: [ 269.663317][ T9134] [ 269.666273][ T9134] dump_stack_lvl+0x18c/0x250 [ 269.671975][ T9134] ? show_regs_print_info+0x20/0x20 [ 269.677506][ T9134] ? load_image+0x420/0x420 [ 269.682045][ T9134] ? __might_sleep+0xe0/0xe0 [ 269.686677][ T9134] ? __lock_acquire+0x7eb0/0x7eb0 [ 269.691787][ T9134] should_fail_ex+0x394/0x4c0 [ 269.696707][ T9134] should_failslab+0x9/0x20 [ 269.701246][ T9134] slab_pre_alloc_hook+0x59/0x300 [ 269.706305][ T9134] ? __get_vm_area_node+0x125/0x370 [ 269.711548][ T9134] __kmem_cache_alloc_node+0x53/0x260 [ 269.716955][ T9134] ? __get_vm_area_node+0x125/0x370 [ 269.722196][ T9134] kmalloc_node_trace+0x26/0xe0 [ 269.727092][ T9134] __get_vm_area_node+0x125/0x370 [ 269.732177][ T9134] __vmalloc_node_range+0x36f/0x1320 [ 269.737500][ T9134] ? netlink_sendmsg+0x602/0xbf0 [ 269.742648][ T9134] ? netlink_insert+0x10d0/0x13e0 [ 269.747735][ T9134] ? free_vm_area+0x50/0x50 [ 269.752280][ T9134] ? netlink_sendmsg+0x602/0xbf0 [ 269.757311][ T9134] vmalloc+0x79/0x90 [ 269.761266][ T9134] ? netlink_sendmsg+0x602/0xbf0 [ 269.766255][ T9134] netlink_sendmsg+0x602/0xbf0 [ 269.771099][ T9134] ? netlink_getsockopt+0x590/0x590 [ 269.776343][ T9134] ? apparmor_socket_sendmsg+0x8e/0x330 [ 269.781947][ T9134] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 269.787292][ T9134] ? security_socket_sendmsg+0x80/0xa0 [ 269.792790][ T9134] ? netlink_getsockopt+0x590/0x590 [ 269.798024][ T9134] ____sys_sendmsg+0x61b/0x980 [ 269.802837][ T9134] ? __asan_memset+0x22/0x40 [ 269.807468][ T9134] ? __sys_sendmsg_sock+0x30/0x30 [ 269.812521][ T9134] ? __import_iovec+0x5f2/0x850 [ 269.817410][ T9134] ? import_iovec+0x73/0xa0 [ 269.821981][ T9134] ___sys_sendmsg+0x2a6/0x360 [ 269.826691][ T9134] ? get_pid_task+0x20/0x1e0 [ 269.831349][ T9134] ? __sys_sendmsg+0x2b0/0x2b0 [ 269.836161][ T9134] ? __lock_acquire+0x7eb0/0x7eb0 [ 269.841253][ T9134] __se_sys_sendmsg+0x1d0/0x2c0 [ 269.846165][ T9134] ? __x64_sys_sendmsg+0x80/0x80 [ 269.851145][ T9134] ? lockdep_hardirqs_on+0x98/0x150 [ 269.856372][ T9134] do_syscall_64+0x55/0xb0 [ 269.860825][ T9134] ? clear_bhb_loop+0x40/0x90 [ 269.865538][ T9134] ? clear_bhb_loop+0x40/0x90 [ 269.870254][ T9134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.876193][ T9134] RIP: 0033:0x7f6b783a8f19 [ 269.880636][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.900283][ T9134] RSP: 002b:00007f6b79289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.908758][ T9134] RAX: ffffffffffffffda RBX: 00007f6b78626090 RCX: 00007f6b783a8f19 [ 269.916775][ T9134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 269.924779][ T9134] RBP: 00007f6b79289090 R08: 0000000000000000 R09: 0000000000000000 [ 269.932784][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.940804][ T9134] R13: 00007f6b78626128 R14: 00007f6b78626090 R15: 00007ffc796ced48 [ 269.948821][ T9134] [ 269.960832][ T9134] syz.3.1105: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 269.980033][ T9134] CPU: 1 PID: 9134 Comm: syz.3.1105 Not tainted syzkaller #0 [ 269.987485][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 269.992840][ T9137] FAULT_INJECTION: forcing a failure. [ 269.992840][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.997565][ T9134] Call Trace: [ 269.997577][ T9134] [ 270.016912][ T9134] dump_stack_lvl+0x18c/0x250 [ 270.021654][ T9134] ? show_regs_print_info+0x20/0x20 [ 270.026919][ T9134] ? load_image+0x420/0x420 [ 270.031993][ T9134] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 270.038449][ T9134] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 270.044999][ T9134] warn_alloc+0x246/0x340 [ 270.049377][ T9134] ? __get_vm_area_node+0x125/0x370 [ 270.054640][ T9134] ? zone_watermark_ok_safe+0x230/0x230 [ 270.060230][ T9134] ? rcu_is_watching+0x15/0xb0 [ 270.065334][ T9134] ? __get_vm_area_node+0x356/0x370 [ 270.070605][ T9134] __vmalloc_node_range+0x394/0x1320 [ 270.075951][ T9134] ? netlink_insert+0x10d0/0x13e0 [ 270.081056][ T9134] ? free_vm_area+0x50/0x50 [ 270.085620][ T9134] ? netlink_sendmsg+0x602/0xbf0 [ 270.090697][ T9134] vmalloc+0x79/0x90 [ 270.094711][ T9134] ? netlink_sendmsg+0x602/0xbf0 [ 270.099711][ T9134] netlink_sendmsg+0x602/0xbf0 [ 270.104549][ T9134] ? netlink_getsockopt+0x590/0x590 [ 270.109801][ T9134] ? apparmor_socket_sendmsg+0x8e/0x330 [ 270.115415][ T9134] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.120757][ T9134] ? security_socket_sendmsg+0x80/0xa0 [ 270.127134][ T9134] ? netlink_getsockopt+0x590/0x590 [ 270.132398][ T9134] ____sys_sendmsg+0x61b/0x980 [ 270.137259][ T9134] ? __asan_memset+0x22/0x40 [ 270.141905][ T9134] ? __sys_sendmsg_sock+0x30/0x30 [ 270.146982][ T9134] ? __import_iovec+0x5f2/0x850 [ 270.151916][ T9134] ? import_iovec+0x73/0xa0 [ 270.156479][ T9134] ___sys_sendmsg+0x2a6/0x360 [ 270.161316][ T9134] ? get_pid_task+0x20/0x1e0 [ 270.166235][ T9134] ? __sys_sendmsg+0x2b0/0x2b0 [ 270.171071][ T9134] ? __lock_acquire+0x7eb0/0x7eb0 [ 270.176605][ T9134] __se_sys_sendmsg+0x1d0/0x2c0 [ 270.181603][ T9134] ? __x64_sys_sendmsg+0x80/0x80 [ 270.186791][ T9134] ? lockdep_hardirqs_on+0x98/0x150 [ 270.192040][ T9134] do_syscall_64+0x55/0xb0 [ 270.196533][ T9134] ? clear_bhb_loop+0x40/0x90 [ 270.201276][ T9134] ? clear_bhb_loop+0x40/0x90 [ 270.206134][ T9134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.213328][ T9134] RIP: 0033:0x7f6b783a8f19 [ 270.217795][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.237448][ T9134] RSP: 002b:00007f6b79289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.246283][ T9134] RAX: ffffffffffffffda RBX: 00007f6b78626090 RCX: 00007f6b783a8f19 [ 270.254319][ T9134] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 270.262521][ T9134] RBP: 00007f6b79289090 R08: 0000000000000000 R09: 0000000000000000 [ 270.271015][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.279806][ T9134] R13: 00007f6b78626128 R14: 00007f6b78626090 R15: 00007ffc796ced48 [ 270.287829][ T9134] [ 270.290881][ T9137] CPU: 0 PID: 9137 Comm: syz.1.1108 Not tainted syzkaller #0 [ 270.298346][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 270.308938][ T9137] Call Trace: [ 270.312534][ T9137] [ 270.316115][ T9137] dump_stack_lvl+0x18c/0x250 [ 270.320840][ T9137] ? show_regs_print_info+0x20/0x20 [ 270.326262][ T9137] ? load_image+0x420/0x420 [ 270.330802][ T9137] ? __might_fault+0xaa/0x120 [ 270.335514][ T9137] ? __lock_acquire+0x7eb0/0x7eb0 [ 270.340600][ T9137] ? __lock_acquire+0x1431/0x7eb0 [ 270.345653][ T9137] ? __virt_addr_valid+0x10c/0x380 [ 270.350815][ T9137] should_fail_ex+0x394/0x4c0 [ 270.355557][ T9137] _copy_from_user+0x2f/0xe0 [ 270.360196][ T9137] csum_and_copy_from_iter+0x660/0x1480 [ 270.365797][ T9137] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 270.371471][ T9137] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 270.377403][ T9137] ? mark_lock+0x94/0x320 [ 270.381772][ T9137] ? __lock_acquire+0x1431/0x7eb0 [ 270.386840][ T9137] ip_generic_getfrag+0x163/0x2f0 [ 270.392253][ T9137] ? ip_skb_dst_mtu+0xb70/0xb70 [ 270.397134][ T9137] ? raw_getfrag+0x11d/0x390 [ 270.401759][ T9137] ? skb_put+0x112/0x210 [ 270.406466][ T9137] __ip_append_data+0x1fc5/0x3bf0 [ 270.411531][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 270.416771][ T9137] ? ip_route_output_key_hash+0x13d/0x330 [ 270.422534][ T9137] ? raw_send_hdrinc+0x1150/0x1150 [ 270.427698][ T9137] ? ip_setup_cork+0x840/0x840 [ 270.432510][ T9137] ? __local_bh_enable_ip+0x13a/0x1c0 [ 270.438018][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 270.443351][ T9137] ip_append_data+0x10d/0x180 [ 270.448360][ T9137] ? raw_send_hdrinc+0x1150/0x1150 [ 270.453514][ T9137] raw_sendmsg+0x155e/0x1ba0 [ 270.458195][ T9137] ? compat_raw_ioctl+0x70/0x70 [ 270.463118][ T9137] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 270.469562][ T9137] ? aa_sock_msg_perm+0x94/0x150 [ 270.474528][ T9137] ? sock_rps_record_flow+0x19/0x3f0 [ 270.479876][ T9137] ? inet_sendmsg+0x7e/0x2a0 [ 270.484620][ T9137] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.489948][ T9137] ? inet_send_prepare+0x250/0x250 [ 270.495104][ T9137] ____sys_sendmsg+0x61b/0x980 [ 270.500017][ T9137] ? __sys_sendmsg_sock+0x30/0x30 [ 270.505176][ T9137] ? __import_iovec+0x3fa/0x850 [ 270.510103][ T9137] ? import_iovec+0x73/0xa0 [ 270.514652][ T9137] ___sys_sendmsg+0x2a6/0x360 [ 270.519382][ T9137] ? get_pid_task+0x20/0x1e0 [ 270.524033][ T9137] ? __sys_sendmsg+0x2b0/0x2b0 [ 270.529228][ T9137] ? __lock_acquire+0x7eb0/0x7eb0 [ 270.534315][ T9137] __se_sys_sendmsg+0x1d0/0x2c0 [ 270.539292][ T9137] ? __x64_sys_sendmsg+0x80/0x80 [ 270.544276][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 270.549508][ T9137] do_syscall_64+0x55/0xb0 [ 270.553963][ T9137] ? clear_bhb_loop+0x40/0x90 [ 270.558672][ T9137] ? clear_bhb_loop+0x40/0x90 [ 270.563470][ T9137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.569398][ T9137] RIP: 0033:0x7fb5d71a8f19 [ 270.573845][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.593487][ T9137] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.602042][ T9137] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 270.610133][ T9137] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 270.618222][ T9137] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.626249][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.634854][ T9137] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 270.642872][ T9137] [ 270.649022][ T9134] Mem-Info: [ 270.656174][ T9134] active_anon:8518 inactive_anon:0 isolated_anon:0 [ 270.656174][ T9134] active_file:16811 inactive_file:40034 isolated_file:0 [ 270.656174][ T9134] unevictable:768 dirty:617 writeback:0 [ 270.656174][ T9134] slab_reclaimable:10764 slab_unreclaimable:94125 [ 270.656174][ T9134] mapped:25192 shmem:1364 pagetables:557 [ 270.656174][ T9134] sec_pagetables:0 bounce:0 [ 270.656174][ T9134] kernel_misc_reclaimable:0 [ 270.656174][ T9134] free:1336572 free_pcp:9693 free_cma:0 [ 270.704194][ T9134] Node 0 active_anon:34072kB inactive_anon:0kB active_file:67244kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100768kB dirty:2464kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:2228kB sec_pagetables:0kB all_unreclaimable? no [ 270.741484][ T9134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 270.805559][ T9134] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.838831][ T9134] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 270.844954][ T9134] Node 0 DMA32 free:1431224kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:33736kB inactive_anon:0kB active_file:67244kB inactive_file:159104kB unevictable:1536kB writepending:2464kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:21984kB local_pcp:13204kB free_cma:0kB [ 270.886642][ T9134] lowmem_reserve[]: 0 0 0 0 0 [ 270.895580][ T9134] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.980438][ T9134] lowmem_reserve[]: 0 0 0 0 0 [ 270.985389][ T9134] Node 1 Normal free:3899124kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18208kB local_pcp:7328kB free_cma:0kB [ 271.037471][ T9134] lowmem_reserve[]: 0 0 0 0 0 [ 271.051453][ T9134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.069404][ T9134] Node 0 DMA32: 1514*4kB (UME) 1566*8kB (UME) 1554*16kB (UME) 780*32kB (UME) 335*64kB (UME) 126*128kB (UME) 91*256kB (UM) 61*512kB (UME) 37*1024kB (UM) 4*2048kB (UM) 299*4096kB (UM) = 1431288kB [ 271.095306][ T9134] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 271.108542][ T9134] Node 1 Normal: 153*4kB (UME) 56*8kB (UME) 47*16kB (UME) 117*32kB (UME) 21*64kB (UM) 10*128kB (UME) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3899124kB [ 271.157787][ T9134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.167668][ T9134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.177088][ T9134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.187129][ T9134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.196539][ T9134] 58209 total pagecache pages [ 271.201359][ T9134] 0 pages in swap cache [ 271.205580][ T9134] Free swap = 124996kB [ 271.209786][ T9134] Total swap = 124996kB [ 271.214184][ T9134] 2097051 pages RAM [ 271.218028][ T9134] 0 pages HighMem/MovableOnly [ 271.222925][ T9134] 421729 pages reserved [ 271.227131][ T9134] 0 pages cma reserved [ 271.428065][ T9153] netlink: 'syz.3.1115': attribute type 21 has an invalid length. [ 271.438647][ T9153] netlink: 'syz.3.1115': attribute type 6 has an invalid length. [ 271.452045][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1115'. [ 271.467257][ T9152] netlink: 'syz.0.1116': attribute type 21 has an invalid length. [ 271.490748][ T9152] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1116'. [ 271.655439][ T9155] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.684451][ T9157] netlink: 'syz.1.1118': attribute type 2 has an invalid length. [ 271.700066][ T9157] netlink: 'syz.1.1118': attribute type 11 has an invalid length. [ 271.708282][ T9157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1118'. [ 272.151588][ T42] wlan1: Trigger new scan to find an IBSS to join [ 272.895513][ T9168] netlink: 'syz.3.1123': attribute type 11 has an invalid length. [ 273.014841][ T9173] FAULT_INJECTION: forcing a failure. [ 273.014841][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 273.040036][ T9173] CPU: 0 PID: 9173 Comm: syz.2.1122 Not tainted syzkaller #0 [ 273.047494][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 273.057704][ T9173] Call Trace: [ 273.061043][ T9173] [ 273.064025][ T9173] dump_stack_lvl+0x18c/0x250 [ 273.068959][ T9173] ? show_regs_print_info+0x20/0x20 [ 273.074223][ T9173] ? load_image+0x420/0x420 [ 273.078794][ T9173] ? __might_sleep+0xe0/0xe0 [ 273.083453][ T9173] ? __lock_acquire+0x7eb0/0x7eb0 [ 273.088549][ T9173] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 273.094336][ T9173] should_fail_ex+0x394/0x4c0 [ 273.099073][ T9173] should_failslab+0x9/0x20 [ 273.103629][ T9173] slab_pre_alloc_hook+0x59/0x300 [ 273.108747][ T9173] kmem_cache_alloc_node+0x5e/0x320 [ 273.114002][ T9173] ? __alloc_skb+0x103/0x2c0 [ 273.118652][ T9173] __alloc_skb+0x103/0x2c0 [ 273.123129][ T9173] __ip_append_data+0x2acf/0x3bf0 [ 273.128214][ T9173] ? perf_trace_preemptirq_template+0x269/0x330 [ 273.134553][ T9173] ? ip_skb_dst_mtu+0xb70/0xb70 [ 273.139475][ T9173] ? ip_setup_cork+0x840/0x840 [ 273.144319][ T9173] ? ipv4_mtu+0x564/0x670 [ 273.148718][ T9173] ? ip_setup_cork+0x527/0x840 [ 273.153539][ T9173] ip_make_skb+0x22b/0x440 [ 273.158020][ T9173] ? ip_skb_dst_mtu+0xb70/0xb70 [ 273.162915][ T9173] ? ip_flush_pending_frames+0x250/0x250 [ 273.168623][ T9173] udp_sendmsg+0x1ae1/0x23d0 [ 273.173285][ T9173] ? ip_skb_dst_mtu+0xb70/0xb70 [ 273.178180][ T9173] ? udp_cmsg_send+0x350/0x350 [ 273.183019][ T9173] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 273.189190][ T9173] ? lock_chain_count+0x20/0x20 [ 273.194106][ T9173] ? inet_sendmsg+0x10d/0x2a0 [ 273.198940][ T9173] ? __local_bh_enable_ip+0x13a/0x1c0 [ 273.204378][ T9173] ? _local_bh_enable+0xa0/0xa0 [ 273.209339][ T9173] ? inet_sendmsg+0x10d/0x2a0 [ 273.214186][ T9173] ? inet_sendmsg+0x10d/0x2a0 [ 273.218944][ T9173] ? inet_send_prepare+0x250/0x250 [ 273.224130][ T9173] ____sys_sendmsg+0x61b/0x980 [ 273.228959][ T9173] ? __sys_sendmsg_sock+0x30/0x30 [ 273.234048][ T9173] ? __import_iovec+0x5f2/0x850 [ 273.238968][ T9173] ? import_iovec+0x73/0xa0 [ 273.243533][ T9173] ___sys_sendmsg+0x2a6/0x360 [ 273.248271][ T9173] ? __sys_sendmsg+0x2b0/0x2b0 [ 273.253104][ T9173] ? trace_call_bpf+0xc3/0x6c0 [ 273.257995][ T9173] __se_sys_sendmsg+0x1d0/0x2c0 [ 273.262916][ T9173] ? perf_trace_preemptirq_template+0x269/0x330 [ 273.269259][ T9173] ? __x64_sys_sendmsg+0x80/0x80 [ 273.274272][ T9173] ? lockdep_hardirqs_on+0x98/0x150 [ 273.279607][ T9173] do_syscall_64+0x55/0xb0 [ 273.284094][ T9173] ? clear_bhb_loop+0x40/0x90 [ 273.288834][ T9173] ? clear_bhb_loop+0x40/0x90 [ 273.293649][ T9173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.299605][ T9173] RIP: 0033:0x7fb1c6fa8f19 [ 273.304078][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.323743][ T9173] RSP: 002b:00007fb1c7efd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.332279][ T9173] RAX: ffffffffffffffda RBX: 00007fb1c7226090 RCX: 00007fb1c6fa8f19 [ 273.340301][ T9173] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 273.348413][ T9173] RBP: 00007fb1c7efd090 R08: 0000000000000000 R09: 0000000000000000 [ 273.356442][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.364473][ T9173] R13: 00007fb1c7226128 R14: 00007fb1c7226090 R15: 00007ffdfc03e568 [ 273.372518][ T9173] [ 273.384031][ T146] wlan1: Trigger new scan to find an IBSS to join [ 273.489192][ T9179] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 273.527621][ T9179] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1125'. [ 273.902857][ T9187] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 274.100831][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 274.428278][ T9201] netlink: 'syz.3.1134': attribute type 2 has an invalid length. [ 274.448158][ T9201] netlink: 'syz.3.1134': attribute type 11 has an invalid length. [ 274.456278][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1134'. [ 274.606346][ T9204] FAULT_INJECTION: forcing a failure. [ 274.606346][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 274.621715][ T9204] CPU: 0 PID: 9204 Comm: syz.1.1135 Not tainted syzkaller #0 [ 274.629172][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 274.639283][ T9204] Call Trace: [ 274.642611][ T9204] [ 274.645589][ T9204] dump_stack_lvl+0x18c/0x250 [ 274.650338][ T9204] ? show_regs_print_info+0x20/0x20 [ 274.655585][ T9204] ? load_image+0x420/0x420 [ 274.660139][ T9204] ? __might_sleep+0xe0/0xe0 [ 274.664784][ T9204] ? __lock_acquire+0x7eb0/0x7eb0 [ 274.669850][ T9204] should_fail_ex+0x394/0x4c0 [ 274.674571][ T9204] should_failslab+0x9/0x20 [ 274.679099][ T9204] slab_pre_alloc_hook+0x59/0x300 [ 274.684212][ T9204] ? __lock_acquire+0x7eb0/0x7eb0 [ 274.689325][ T9204] kmem_cache_alloc_node+0x5e/0x320 [ 274.694582][ T9204] ? __alloc_skb+0x103/0x2c0 [ 274.699247][ T9204] __alloc_skb+0x103/0x2c0 [ 274.703774][ T9204] netlink_sendmsg+0x66a/0xbf0 [ 274.708584][ T9204] ? netlink_getsockopt+0x590/0x590 [ 274.713819][ T9204] ? apparmor_socket_sendmsg+0x8e/0x330 [ 274.719447][ T9204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.724787][ T9204] ? security_socket_sendmsg+0x80/0xa0 [ 274.730302][ T9204] ? netlink_getsockopt+0x590/0x590 [ 274.735547][ T9204] ____sys_sendmsg+0x61b/0x980 [ 274.740370][ T9204] ? __asan_memset+0x22/0x40 [ 274.745059][ T9204] ? __sys_sendmsg_sock+0x30/0x30 [ 274.750127][ T9204] ? __import_iovec+0x5f2/0x850 [ 274.755295][ T9204] ? import_iovec+0x73/0xa0 [ 274.759839][ T9204] ___sys_sendmsg+0x2a6/0x360 [ 274.764574][ T9204] ? __sys_sendmsg+0x2b0/0x2b0 [ 274.769703][ T9204] ? trace_call_bpf+0xc3/0x6c0 [ 274.774625][ T9204] __se_sys_sendmsg+0x1d0/0x2c0 [ 274.779558][ T9204] ? perf_trace_preemptirq_template+0x269/0x330 [ 274.785872][ T9204] ? __x64_sys_sendmsg+0x80/0x80 [ 274.791302][ T9204] ? lockdep_hardirqs_on+0x98/0x150 [ 274.797446][ T9204] do_syscall_64+0x55/0xb0 [ 274.802722][ T9204] ? clear_bhb_loop+0x40/0x90 [ 274.807527][ T9204] ? clear_bhb_loop+0x40/0x90 [ 274.812286][ T9204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.819360][ T9204] RIP: 0033:0x7fb5d71a8f19 [ 274.825106][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.844773][ T9204] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.853498][ T9204] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 274.861511][ T9204] RDX: 0000000000000000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 274.869545][ T9204] RBP: 00007fb5d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.877654][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.885936][ T9204] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 274.893967][ T9204] [ 275.109465][ T9207] netlink: 'syz.0.1136': attribute type 5 has an invalid length. [ 275.416576][ T9218] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 275.467319][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 277.101350][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 278.140970][ T146] wlan1: Trigger new scan to find an IBSS to join [ 278.982084][ T9246] FAULT_INJECTION: forcing a failure. [ 278.982084][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 278.995218][ T9246] CPU: 1 PID: 9246 Comm: syz.2.1149 Not tainted syzkaller #0 [ 279.002661][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 279.012775][ T9246] Call Trace: [ 279.016198][ T9246] [ 279.019174][ T9246] dump_stack_lvl+0x18c/0x250 [ 279.023954][ T9246] ? sctp_sendmsg+0x1519/0x27b0 [ 279.028871][ T9246] ? ___sys_sendmsg+0x2a6/0x360 [ 279.033777][ T9246] ? show_regs_print_info+0x20/0x20 [ 279.039039][ T9246] ? load_image+0x420/0x420 [ 279.043629][ T9246] should_fail_ex+0x394/0x4c0 [ 279.048370][ T9246] should_failslab+0x9/0x20 [ 279.052923][ T9246] slab_pre_alloc_hook+0x59/0x300 [ 279.058014][ T9246] ? sctp_add_bind_addr+0x8c/0x360 [ 279.063188][ T9246] __kmem_cache_alloc_node+0x53/0x260 [ 279.068628][ T9246] ? sctp_add_bind_addr+0x8c/0x360 [ 279.074005][ T9246] kmalloc_trace+0x2a/0xe0 [ 279.078516][ T9246] sctp_add_bind_addr+0x8c/0x360 [ 279.083528][ T9246] sctp_copy_local_addr_list+0x31b/0x4e0 [ 279.089235][ T9246] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 279.095027][ T9246] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 279.101172][ T9246] ? sctp_v4_is_any+0x35/0x60 [ 279.105918][ T9246] ? sctp_copy_one_addr+0x8c/0x350 [ 279.111096][ T9246] sctp_bind_addr_copy+0xb3/0x3c0 [ 279.116186][ T9246] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 279.122589][ T9246] sctp_connect_new_asoc+0x2f9/0x6a0 [ 279.127944][ T9246] ? __sctp_connect+0xd80/0xd80 [ 279.132852][ T9246] ? __local_bh_enable_ip+0x13a/0x1c0 [ 279.138306][ T9246] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 279.143953][ T9246] ? security_sctp_bind_connect+0x89/0xb0 [ 279.149811][ T9246] sctp_sendmsg+0x1519/0x27b0 [ 279.154708][ T9246] ? sctp_getsockopt+0xb60/0xb60 [ 279.159710][ T9246] ? aa_sk_perm+0x7bb/0x8e0 [ 279.164281][ T9246] ? aa_af_perm+0x330/0x330 [ 279.169036][ T9246] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 279.175532][ T9246] ? sock_rps_record_flow+0x19/0x3f0 [ 279.180986][ T9246] ? inet_sendmsg+0xce/0x2a0 [ 279.185750][ T9246] ? inet_send_prepare+0x250/0x250 [ 279.190995][ T9246] ____sys_sendmsg+0x61b/0x980 [ 279.195795][ T9246] ? __asan_memset+0x22/0x40 [ 279.200436][ T9246] ? __sys_sendmsg_sock+0x30/0x30 [ 279.205607][ T9246] ? __import_iovec+0x5f2/0x850 [ 279.210536][ T9246] ? import_iovec+0x73/0xa0 [ 279.215091][ T9246] ___sys_sendmsg+0x2a6/0x360 [ 279.220082][ T9246] ? get_pid_task+0x20/0x1e0 [ 279.224750][ T9246] ? __sys_sendmsg+0x2b0/0x2b0 [ 279.229600][ T9246] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.234853][ T9246] __se_sys_sendmsg+0x1d0/0x2c0 [ 279.239854][ T9246] ? __x64_sys_sendmsg+0x80/0x80 [ 279.244866][ T9246] ? lockdep_hardirqs_on+0x98/0x150 [ 279.250126][ T9246] do_syscall_64+0x55/0xb0 [ 279.254595][ T9246] ? clear_bhb_loop+0x40/0x90 [ 279.259310][ T9246] ? clear_bhb_loop+0x40/0x90 [ 279.264027][ T9246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.269985][ T9246] RIP: 0033:0x7fb1c6fa8f19 [ 279.274515][ T9246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.294527][ T9246] RSP: 002b:00007fb1c7f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.303025][ T9246] RAX: ffffffffffffffda RBX: 00007fb1c7225fa0 RCX: 00007fb1c6fa8f19 [ 279.312711][ T9246] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 279.320749][ T9246] RBP: 00007fb1c7f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 279.328754][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.338541][ T9246] R13: 00007fb1c7226038 R14: 00007fb1c7225fa0 R15: 00007ffdfc03e568 [ 279.346615][ T9246] [ 279.441838][ T9252] netlink: 'syz.2.1150': attribute type 2 has an invalid length. [ 279.451912][ T9252] netlink: 'syz.2.1150': attribute type 11 has an invalid length. [ 279.460200][ T9252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1150'. [ 279.766557][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 281.189508][ T146] wlan1: Trigger new scan to find an IBSS to join [ 281.338059][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 282.144875][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 282.181975][ T42] wlan1: Creating new IBSS network, BSSID 5e:a2:39:7d:3a:4b [ 282.742266][ T9312] netlink: 'syz.2.1173': attribute type 29 has an invalid length. [ 282.753752][ T9312] netlink: 'syz.2.1173': attribute type 29 has an invalid length. [ 282.762808][ T9312] netlink: 'syz.2.1173': attribute type 29 has an invalid length. [ 282.772274][ T9312] netlink: 'syz.2.1173': attribute type 29 has an invalid length. [ 282.790568][ T9312] FAULT_INJECTION: forcing a failure. [ 282.790568][ T9312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.840119][ T9312] CPU: 0 PID: 9312 Comm: syz.2.1173 Not tainted syzkaller #0 [ 282.847625][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 282.858099][ T9312] Call Trace: [ 282.861437][ T9312] [ 282.864425][ T9312] dump_stack_lvl+0x18c/0x250 [ 282.869180][ T9312] ? show_regs_print_info+0x20/0x20 [ 282.874593][ T9312] ? load_image+0x420/0x420 [ 282.879174][ T9312] ? __lock_acquire+0x7eb0/0x7eb0 [ 282.884270][ T9312] ? snprintf+0xe9/0x140 [ 282.888561][ T9312] should_fail_ex+0x394/0x4c0 [ 282.893287][ T9312] _copy_to_user+0x2f/0xa0 [ 282.897747][ T9312] simple_read_from_buffer+0xe7/0x150 [ 282.903536][ T9312] proc_fail_nth_read+0x1e8/0x260 [ 282.908615][ T9312] ? proc_fault_inject_write+0x360/0x360 [ 282.914303][ T9312] ? fsnotify_perm+0x271/0x5e0 [ 282.919418][ T9312] ? proc_fault_inject_write+0x360/0x360 [ 282.925105][ T9312] vfs_read+0x298/0x990 [ 282.929333][ T9312] ? kernel_read+0x1e0/0x1e0 [ 282.934180][ T9312] ? __fget_files+0x28/0x460 [ 282.938821][ T9312] ? __fget_files+0x3fc/0x460 [ 282.943573][ T9312] ? __fdget_pos+0x2a3/0x330 [ 282.948235][ T9312] ? ksys_read+0x74/0x260 [ 282.953346][ T9312] ksys_read+0x151/0x260 [ 282.957680][ T9312] ? vfs_write+0x9a0/0x9a0 [ 282.962150][ T9312] ? lockdep_hardirqs_on+0x98/0x150 [ 282.967458][ T9312] do_syscall_64+0x55/0xb0 [ 282.972155][ T9312] ? clear_bhb_loop+0x40/0x90 [ 282.977012][ T9312] ? clear_bhb_loop+0x40/0x90 [ 282.982703][ T9312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.988854][ T9312] RIP: 0033:0x7fb1c6f6974e [ 282.993428][ T9312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.014435][ T9312] RSP: 002b:00007fb1c7f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.023773][ T9312] RAX: ffffffffffffffda RBX: 00007fb1c7f1e6c0 RCX: 00007fb1c6f6974e [ 283.031884][ T9312] RDX: 000000000000000f RSI: 00007fb1c7f1e0a0 RDI: 0000000000000004 [ 283.040092][ T9312] RBP: 00007fb1c7f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 283.048477][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.056645][ T9312] R13: 00007fb1c7226038 R14: 00007fb1c7225fa0 R15: 00007ffdfc03e568 [ 283.065036][ T9312] [ 283.141448][ T9314] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.278951][ T11] wlan1: Creating new IBSS network, BSSID a2:34:8c:d5:0a:8d [ 283.499554][ T9334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.507170][ T9334] IPv6: NLM_F_CREATE should be set when creating new route [ 283.514565][ T9334] IPv6: NLM_F_CREATE should be set when creating new route [ 283.522697][ T9334] IPv6: NLM_F_CREATE should be set when creating new route [ 284.888495][ T9351] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 284.896994][ T9345] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 284.907555][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'. [ 284.923199][ T9349] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.943920][ T9351] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 284.992359][ T9351] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 285.008534][ T9351] netlink: 'syz.1.1179': attribute type 29 has an invalid length. [ 285.180854][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 285.336974][ T9360] netlink: 'syz.3.1183': attribute type 29 has an invalid length. [ 285.357245][ T9360] netlink: 'syz.3.1183': attribute type 29 has an invalid length. [ 285.368339][ T9360] netlink: 'syz.3.1183': attribute type 29 has an invalid length. [ 285.377666][ T9360] netlink: 'syz.3.1183': attribute type 29 has an invalid length. [ 286.096315][ T9375] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 287.090379][ T9383] netlink: 'syz.3.1193': attribute type 21 has an invalid length. [ 287.410228][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 287.858659][ T9389] netlink: 13183 bytes leftover after parsing attributes in process `syz.3.1194'. [ 288.306406][ T3530] wlan1: Trigger new scan to find an IBSS to join [ 289.311998][ T9408] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.660465][ T9413] sit0: entered allmulticast mode [ 289.710951][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 289.713702][ T9410] sit0: entered promiscuous mode [ 290.338176][ T9428] validate_nla: 2 callbacks suppressed [ 290.338195][ T9428] netlink: 'syz.0.1209': attribute type 5 has an invalid length. [ 290.361071][ T9415] netlink: 'syz.3.1204': attribute type 21 has an invalid length. [ 290.371405][ T9415] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1204'. [ 290.656134][ T9418] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1204'. [ 291.605625][ T9438] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.221771][ T11] wlan1: Trigger new scan to find an IBSS to join [ 292.938421][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 293.581280][ T9463] netlink: 'syz.2.1221': attribute type 21 has an invalid length. [ 293.602270][ T9463] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1221'. [ 293.647935][ T9463] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1221'. [ 293.686652][ T9469] FAULT_INJECTION: forcing a failure. [ 293.686652][ T9469] name failslab, interval 1, probability 0, space 0, times 0 [ 293.695914][ T9466] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.708831][ T9469] CPU: 0 PID: 9469 Comm: syz.0.1224 Not tainted syzkaller #0 [ 293.708928][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 293.726448][ T9469] Call Trace: [ 293.729770][ T9469] [ 293.732835][ T9469] dump_stack_lvl+0x18c/0x250 [ 293.737595][ T9469] ? sctp_sendmsg+0x1519/0x27b0 [ 293.742601][ T9469] ? ___sys_sendmsg+0x2a6/0x360 [ 293.748032][ T9469] ? show_regs_print_info+0x20/0x20 [ 293.753404][ T9469] ? load_image+0x420/0x420 [ 293.758088][ T9469] should_fail_ex+0x394/0x4c0 [ 293.762842][ T9469] should_failslab+0x9/0x20 [ 293.767428][ T9469] slab_pre_alloc_hook+0x59/0x300 [ 293.772521][ T9469] ? sctp_add_bind_addr+0x8c/0x360 [ 293.777740][ T9469] __kmem_cache_alloc_node+0x53/0x260 [ 293.783263][ T9469] ? sctp_add_bind_addr+0x8c/0x360 [ 293.788647][ T9469] kmalloc_trace+0x2a/0xe0 [ 293.793139][ T9469] sctp_add_bind_addr+0x8c/0x360 [ 293.798244][ T9469] sctp_copy_local_addr_list+0x31b/0x4e0 [ 293.804225][ T9469] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 293.810211][ T9469] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 293.816706][ T9469] ? sctp_v6_is_any+0x64/0x70 [ 293.821459][ T9469] ? sctp_copy_one_addr+0x8c/0x350 [ 293.826823][ T9469] sctp_bind_addr_copy+0xb3/0x3c0 [ 293.832181][ T9469] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 293.838711][ T9469] sctp_connect_new_asoc+0x2f9/0x6a0 [ 293.844795][ T9469] ? __sctp_connect+0xd80/0xd80 [ 293.849900][ T9469] ? __local_bh_enable_ip+0x13a/0x1c0 [ 293.855454][ T9469] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 293.861169][ T9469] ? security_sctp_bind_connect+0x89/0xb0 [ 293.866947][ T9469] sctp_sendmsg+0x1519/0x27b0 [ 293.871739][ T9469] ? sctp_getsockopt+0xb60/0xb60 [ 293.877106][ T9469] ? aa_sk_perm+0x7bb/0x8e0 [ 293.881835][ T9469] ? aa_af_perm+0x330/0x330 [ 293.886555][ T9469] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 293.893018][ T9469] ? sock_rps_record_flow+0x19/0x3f0 [ 293.898347][ T9469] ? inet_sendmsg+0xce/0x2a0 [ 293.903067][ T9469] ? inet_send_prepare+0x250/0x250 [ 293.908226][ T9469] ____sys_sendmsg+0x61b/0x980 [ 293.913208][ T9469] ? __sys_sendmsg_sock+0x30/0x30 [ 293.918264][ T9469] ? __import_iovec+0x5f2/0x850 [ 293.923173][ T9469] ? import_iovec+0x73/0xa0 [ 293.927717][ T9469] ___sys_sendmsg+0x2a6/0x360 [ 293.932607][ T9469] ? get_pid_task+0x20/0x1e0 [ 293.937239][ T9469] ? __sys_sendmsg+0x2b0/0x2b0 [ 293.942084][ T9469] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.947276][ T9469] __se_sys_sendmsg+0x1d0/0x2c0 [ 293.952254][ T9469] ? __x64_sys_sendmsg+0x80/0x80 [ 293.957256][ T9469] ? lockdep_hardirqs_on+0x98/0x150 [ 293.962764][ T9469] do_syscall_64+0x55/0xb0 [ 293.967282][ T9469] ? clear_bhb_loop+0x40/0x90 [ 293.972090][ T9469] ? clear_bhb_loop+0x40/0x90 [ 293.976899][ T9469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.982840][ T9469] RIP: 0033:0x7f2abc5a8f19 [ 293.987305][ T9469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.007223][ T9469] RSP: 002b:00007f2abd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.015696][ T9469] RAX: ffffffffffffffda RBX: 00007f2abc825fa0 RCX: 00007f2abc5a8f19 [ 294.024401][ T9469] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 294.032405][ T9469] RBP: 00007f2abd555090 R08: 0000000000000000 R09: 0000000000000000 [ 294.040408][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.048414][ T9469] R13: 00007f2abc826038 R14: 00007f2abc825fa0 R15: 00007fff4bc49778 [ 294.056925][ T9469] [ 294.061923][ T9464] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 294.069973][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1218'. [ 294.123402][ T60] wlan1: Creating new IBSS network, BSSID a6:d4:ce:7e:99:2b [ 294.315520][ T5791] Bluetooth: hci3: SCO packet for unknown connection handle 1024 [ 294.441248][ T9476] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 294.472934][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 295.811272][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.819610][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.846639][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.857096][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.891457][ T9498] netlink: 'syz.2.1233': attribute type 21 has an invalid length. [ 295.901885][ T9498] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1233'. [ 295.920243][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.933472][ T9498] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1233'. [ 295.946754][ T9496] netlink: 'syz.0.1232': attribute type 29 has an invalid length. [ 295.980684][ T9501] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.261617][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 296.307590][ T9506] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.437223][ T9513] netlink: 'syz.0.1240': attribute type 10 has an invalid length. [ 296.451655][ T9513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1240'. [ 296.573977][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 296.601378][ T9516] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 296.621542][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1241'. [ 296.831544][ T9522] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1243'. [ 296.885899][ T9524] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.948040][ T9522] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1243'. [ 296.989557][ T9522] hsr_slave_0: left promiscuous mode [ 297.020364][ T9522] hsr_slave_1: left promiscuous mode [ 297.243497][ T9529] netlink: 'syz.2.1246': attribute type 21 has an invalid length. [ 297.252150][ T9529] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1246'. [ 297.263371][ T9532] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1246'. [ 297.368279][ T9535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1247'. [ 297.816365][ T9542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1251'. [ 298.237975][ T5791] Bluetooth: hci1: SCO packet for unknown connection handle 1024 [ 298.470844][ T9552] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.034186][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 299.099225][ T9573] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.758014][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 299.787181][ T9593] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.965275][ T5791] Bluetooth: hci0: SCO packet for unknown connection handle 1024 [ 300.811325][ T9621] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.886730][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 300.931323][ C0] [ 300.931333][ C0] ================================ [ 300.931339][ C0] WARNING: inconsistent lock state [ 300.931361][ C0] syzkaller #0 Not tainted [ 300.931372][ C0] -------------------------------- [ 300.931377][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 300.931385][ C0] syz.1.1284/9619 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 300.931405][ C0] ffffffff8e297dd8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 300.931468][ C0] {INITIAL USE} state was registered at: [ 300.931475][ C0] lock_acquire+0x19e/0x420 [ 300.931496][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 300.931517][ C0] kernfs_rename_ns+0x5e4/0x830 [ 300.931533][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 300.931553][ C0] device_rename+0x110/0x1e0 [ 300.931574][ C0] dev_change_name+0x308/0x8e0 [ 300.931594][ C0] do_setlink+0x9b6/0x3f00 [ 300.931614][ C0] rtnl_newlink+0x1848/0x2170 [ 300.931632][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 300.931652][ C0] netlink_rcv_skb+0x235/0x4c0 [ 300.931668][ C0] netlink_unicast+0x856/0x9e0 [ 300.931694][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 300.931710][ C0] __sys_sendto+0x4a9/0x6b0 [ 300.931727][ C0] __x64_sys_sendto+0xde/0xf0 [ 300.931744][ C0] do_syscall_64+0x55/0xb0 [ 300.931767][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.931800][ C0] irq event stamp: 17976 [ 300.931807][ C0] hardirqs last enabled at (17975): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.931842][ C0] hardirqs last disabled at (17976): [] exc_debug+0x73/0x140 [ 300.931873][ C0] softirqs last enabled at (17790): [] bpf_prog_load+0x1204/0x1610 [ 300.931900][ C0] softirqs last disabled at (17786): [] bpf_ksym_add+0x2c/0x330 [ 300.931928][ C0] [ 300.931928][ C0] other info that might help us debug this: [ 300.931934][ C0] Possible unsafe locking scenario: [ 300.931934][ C0] [ 300.931938][ C0] CPU0 [ 300.931941][ C0] ---- [ 300.931944][ C0] lock(kernfs_rename_lock); [ 300.931958][ C0] [ 300.931961][ C0] lock(kernfs_rename_lock); [ 300.931978][ C0] [ 300.931978][ C0] *** DEADLOCK *** [ 300.931978][ C0] [ 300.931982][ C0] no locks held by syz.1.1284/9619. [ 300.931991][ C0] [ 300.931991][ C0] stack backtrace: [ 300.931996][ C0] CPU: 0 PID: 9619 Comm: syz.1.1284 Not tainted syzkaller #0 [ 300.932015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 300.932027][ C0] Call Trace: [ 300.932035][ C0] <#DB> [ 300.932043][ C0] dump_stack_lvl+0x18c/0x250 [ 300.932072][ C0] ? show_regs_print_info+0x20/0x20 [ 300.932103][ C0] ? print_usage_bug+0x43d/0x6a0 [ 300.932128][ C0] ? verify_lock_unused+0x15/0x140 [ 300.932153][ C0] lock_acquire+0x2c2/0x420 [ 300.932179][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 300.932210][ C0] ? read_lock_is_recursive+0x20/0x20 [ 300.932234][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 300.932256][ C0] ? look_up_lock_class+0x75/0x140 [ 300.932278][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 300.932301][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 300.932330][ C0] ? _raw_read_lock+0x50/0x50 [ 300.932350][ C0] ? rcu_is_watching+0x15/0xb0 [ 300.932384][ C0] ? lock_release+0xb5/0x8c0 [ 300.932407][ C0] ? percpu_ref_tryget+0x15/0x180 [ 300.932435][ C0] kernfs_path_from_node+0x88/0xbd0 [ 300.932467][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.932489][ C0] ? verify_lock_unused+0x15/0x140 [ 300.932514][ C0] ? look_up_lock_class+0x75/0x140 [ 300.932535][ C0] ? kernfs_name+0x140/0x140 [ 300.932563][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 300.932587][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 300.932612][ C0] get_mm_memcg_path+0xb9/0x360 [ 300.932644][ C0] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 300.932678][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 300.932729][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 300.932758][ C0] ? _raw_spin_unlock+0x28/0x40 [ 300.932782][ C0] stack_map_get_build_id_offset+0x661/0x810 [ 300.932814][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 300.932842][ C0] ? __pcpu_freelist_pop+0x810/0x810 [ 300.932870][ C0] ? __bpf_get_stackid+0x980/0x980 [ 300.932897][ C0] ? get_perf_callchain+0x3f8/0x510 [ 300.932925][ C0] __bpf_get_stackid+0x5ac/0x980 [ 300.932959][ C0] bpf_get_stackid+0x131/0x1f0 [ 300.932994][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 300.933015][ C0] bpf_overflow_handler+0x1fc/0x510 [ 300.933049][ C0] ? bpf_overflow_handler+0xde/0x510 [ 300.933078][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 300.933113][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 300.933141][ C0] __perf_event_overflow+0x461/0x660 [ 300.933170][ C0] perf_swevent_event+0x319/0x570 [ 300.933198][ C0] ? perf_tp_event+0x1550/0x1550 [ 300.933230][ C0] perf_bp_event+0x319/0x430 [ 300.933258][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 300.933305][ C0] ? lock_acquire+0x2c2/0x420 [ 300.933335][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 300.933366][ C0] notifier_call_chain+0x18f/0x380 [ 300.933395][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 300.933424][ C0] atomic_notifier_call_chain+0xda/0x180 [ 300.933452][ C0] notify_die+0x145/0x1a0 [ 300.933479][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 300.933508][ C0] ? rcu_is_watching+0x15/0xb0 [ 300.933538][ C0] notify_debug+0x2e/0x50 [ 300.933557][ C0] exc_debug+0xde/0x140 [ 300.933587][ C0] asm_exc_debug+0x1e/0x40 [ 300.933613][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 300.933643][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 300.933661][ C0] RSP: 0018:ffffc900033efb48 EFLAGS: 00050202 [ 300.933678][ C0] RAX: ffffffff842f2a01 RBX: 0000000000000dc0 RCX: 0000000000000600 [ 300.933692][ C0] RDX: 0000000000000001 RSI: 0000200000001c40 RDI: ffff88807b45a8c0 [ 300.933705][ C0] RBP: 0000000000000100 R08: ffff88807b45aebf R09: 1ffff1100f68b5d7 [ 300.933719][ C0] R10: dffffc0000000000 R11: ffffed100f68b5d8 R12: 0000200000002240 [ 300.933734][ C0] R13: 0000000000000dc0 R14: ffff88807b45a100 R15: 0000200000001480 [ 300.933753][ C0] ? rcuref_put_slowpath+0x131/0x150 [ 300.933779][ C0] [ 300.933784][ C0] [ 300.933790][ C0] _copy_from_user+0x8b/0xe0 [ 300.933809][ C0] bpf_test_init+0xde/0x140 [ 300.933836][ C0] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 300.933862][ C0] ? lock_chain_count+0x20/0x20 [ 300.933888][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.933917][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 300.933937][ C0] ? dev_put+0x80/0x80 [ 300.933963][ C0] ? fput+0x154/0x1a0 [ 300.933990][ C0] ? fput+0x165/0x1a0 [ 300.934009][ C0] ? dev_put+0x80/0x80 [ 300.934032][ C0] bpf_prog_test_run+0x31f/0x390 [ 300.934057][ C0] __sys_bpf+0x49d/0x890 [ 300.934081][ C0] ? bpf_link_show_fdinfo+0x560/0x560 [ 300.934115][ C0] ? lock_chain_count+0x20/0x20 [ 300.934135][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 300.934166][ C0] __x64_sys_bpf+0x7c/0x90 [ 300.934188][ C0] do_syscall_64+0x55/0xb0 [ 300.934212][ C0] ? clear_bhb_loop+0x40/0x90 [ 300.934239][ C0] ? clear_bhb_loop+0x40/0x90 [ 300.934268][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.934294][ C0] RIP: 0033:0x7fb5d71a8f19 [ 300.934311][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.934327][ C0] RSP: 002b:00007fb5d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.934347][ C0] RAX: ffffffffffffffda RBX: 00007fb5d7425fa0 RCX: 00007fb5d71a8f19 [ 300.934361][ C0] RDX: 0000000000000050 RSI: 0000200000001400 RDI: 000000000000000a [ 300.934373][ C0] RBP: 00007fb5d7237f6d R08: 0000000000000000 R09: 0000000000000000 [ 300.934385][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.934396][ C0] R13: 00007fb5d7426038 R14: 00007fb5d7425fa0 R15: 00007ffea23f9248 [ 300.934421][ C0] [ 301.747381][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 306.140051][ T3530] wlan1: Trigger new scan to find an IBSS to join [ 307.040610][ T3530] wlan1: Creating new IBSS network, BSSID ae:2b:20:15:11:59