last executing test programs: 5.901723537s ago: executing program 1 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x800000009, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_config_ext={0x9, 0x101}, 0xc58, 0x200, 0x1, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000040)="92a33dbb5bf40ee37e6698b7bda70388c3524a40b68f8758febb90f01b100d730a4563b569093915cdfec165639fb806", &(0x7f00000001c0)=""/157}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 4.989828039s ago: executing program 3 (id=1325): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x4000}) 4.849648483s ago: executing program 1 (id=1327): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000740)=@tipc=@id, 0x80, &(0x7f0000003280)=[{&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000003340)=""/4101, 0x1005}, {&(0x7f0000003040)=""/114, 0x72}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000003180)=""/245, 0xf5}], 0x9, &(0x7f0000000b40)=""/114, 0x72}, 0x10140) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000200000000020000000000000802"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x37, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 4.658367227s ago: executing program 3 (id=1330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.600299079s ago: executing program 1 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 4.483146912s ago: executing program 3 (id=1332): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0xc9) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.213218588s ago: executing program 3 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 2.857810601s ago: executing program 4 (id=1345): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1f4e, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000830) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000012000000000000", @ANYRES64, @ANYBLOB="2bf3e371681e", @ANYRES64=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001200)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x5370, 0x0, 0x0, 0xffffffffffffff96, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae7, 0x80000001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000011c0)=@o_path={&(0x7f0000001140)='./file0\x00', r3, 0x4000, r1}, 0xfffffffffffffee9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000340)={0x3, 0x80, 0x7, 0x81, 0x4, 0x7f, 0x0, 0xad36, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0xfffffffffffffffd, 0x5, 0x7, 0x1, 0x8, 0x1, 0x0, 0x7, 0x0, 0xd4ae}) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socket$kcm(0xa, 0x2, 0x73) 2.615598207s ago: executing program 4 (id=1349): perf_event_open(&(0x7f0000000080)={0x0, 0xaf, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20113, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffe, 0xd}, 0x201, 0x6, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0)=r0, 0x4) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x35, &(0x7f0000000040), 0xcf) socket$kcm(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a875bb98222f90a00fc60", 0x14}], 0x1}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.561010748s ago: executing program 2 (id=1350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff000000000600000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x15, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006a30fcf30000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 2.429747691s ago: executing program 4 (id=1351): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x1f, 0x1, 0x4d, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x36ec97a5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="4555d09e", 0x4}], 0x1}, 0x4080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180)=r4, 0xfd31) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r2, 0xffffffffffffffff, 0x1b, 0x8, 0x0, @void, @value=r4, @void, @void, r1}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) perf_event_open(0x0, 0x0, 0x1, r6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3c2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40040) 1.64578633s ago: executing program 0 (id=1354): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000740)=@tipc=@id, 0x80, &(0x7f0000003280)=[{&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000003340)=""/4101, 0x1005}, {&(0x7f0000003040)=""/114, 0x72}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000003180)=""/245, 0xf5}], 0x9, &(0x7f0000000b40)=""/114, 0x72}, 0x10140) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000200000000020000000000000802"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x37, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.61572894s ago: executing program 2 (id=1355): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.540528773s ago: executing program 0 (id=1356): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x7, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES8=r6], 0x12) 1.483279534s ago: executing program 4 (id=1357): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.482359434s ago: executing program 1 (id=1358): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') close(0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000540)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20044818) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x4000}) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)}, 0x4000081) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x7, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x80000004, 0x7ffc}, 0x7602, 0x5, 0x0, 0x0, 0x5, 0x6, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) 1.345833707s ago: executing program 2 (id=1359): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0xc9) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c23d000004000000cd9600400b00000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.320196968s ago: executing program 4 (id=1360): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1f4e, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000830) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000012000000000000", @ANYRES64, @ANYBLOB="2bf3e371681e", @ANYRES64=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001200)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x5370, 0x0, 0x0, 0xffffffffffffff96, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae7, 0x80000001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000011c0)=@o_path={&(0x7f0000001140)='./file0\x00', r3, 0x4000, r1}, 0xfffffffffffffee9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000340)={0x3, 0x80, 0x7, 0x81, 0x4, 0x7f, 0x0, 0xad36, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0xfffffffffffffffd, 0x5, 0x7, 0x1, 0x8, 0x1, 0x0, 0x7, 0x0, 0xd4ae}) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socket$kcm(0xa, 0x2, 0x73) 1.273879209s ago: executing program 0 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000700000002000084ffffffff01000000050000000100000008000000050000000000000000612e001e5f2e612a"], &(0x7f0000000c40)=""/183, 0x46, 0xb7, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000b000000000000000071101900000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 1.104458683s ago: executing program 2 (id=1362): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, 0x0, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = perf_event_open(0x0, 0x0, 0x2000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8994, &(0x7f0000000080)) 1.010477755s ago: executing program 3 (id=1363): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d96e17aa0b3a00876c1d0040382019000800004460bc06000000a701251e6182949a360d04000000000000008037e7c7a0a03400ac327f4755094439ff745409c51c2688110000960300c57a4c5c91d9ea", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x90) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/4116, 0x1014}, {&(0x7f0000006c40)=""/4089, 0xff9}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000001980)=""/174, 0xae}], 0x4}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="85b0d1553f11cf41a8d25332e1665edf877791e1c1be532ebeb704604383c99246f8b74e2de2fbc11373d1e2e33cb49e2b60e2819023067bd72d9b8205ff79cf2304fb856dd5c19dab82d5ffadd7af35a314a6ec4c2b0e083ffdbb8baad8d75f60a26a51cabfb3beb5a6759ae78ddcba9902ba5e057308db912a752b4b012c401a4c9a9bb4be1c8be86814d1783d6807ad8e817840298d6bedd269f20c3c6ad07eed91fb960f84dddc09c2150ad16c75358dae6fc9003a63f8502f4d6e8b2210c662592cab615494d76084d1f806d977a3ba7912fd1249fb2189a8526d2e7255", 0xe0}], 0x1, &(0x7f00000005c0)=[{0x68, 0x10c, 0x3, "4c67cae5afed11c28ee4c275ecd7de766a825869439130babd69d7e1b283158ba76db13bc1294c406210b3a8beece5e0f2ea8e29dfe26c8d1e3b83f9ffe53da6c03e9a152e14ef22185d9c42c1d08724102a2a92a2c8e479"}], 0x68}, 0x20048010) 954.558087ms ago: executing program 4 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 811.27577ms ago: executing program 0 (id=1365): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 713.792013ms ago: executing program 3 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x9}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x500, &(0x7f0000000180)="c9f7b98600000005000000000000", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r8) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "80"}], 0x18}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10f483, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, 0x0) recvmsg$kcm(r10, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, 0x0) openat$cgroup(r9, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 711.169993ms ago: executing program 2 (id=1367): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000740)=@tipc=@id, 0x80, &(0x7f0000003280)=[{&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000003340)=""/4101, 0x1005}, {&(0x7f0000003040)=""/114, 0x72}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000003180)=""/245, 0xf5}], 0x9, &(0x7f0000000b40)=""/114, 0x72}, 0x10140) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200"/71], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000200"/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x37, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 625.925134ms ago: executing program 1 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d96e17aa0b3a00876c1d0040382019000800004460bc06000000a701251e6182949a360d04000000000000008037e7c7a0a03400ac327f4755094439ff745409c51c2688110000960300c57a4c5c91d9ea", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x90) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/4116, 0x1014}, {&(0x7f0000006c40)=""/4089, 0xff9}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000001980)=""/174, 0xae}], 0x4}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) (fail_nth: 3) 532.593607ms ago: executing program 1 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 522.119247ms ago: executing program 0 (id=1370): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 256.927073ms ago: executing program 2 (id=1371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 0 (id=1372): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0xc9) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c23d000004000000cd9600400b00000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): ocess `syz.0.267'. [ 136.618972][ T5145] netlink: 'syz.3.269': attribute type 21 has an invalid length. [ 136.628994][ T5145] netlink: 'syz.3.269': attribute type 7 has an invalid length. [ 136.683366][ T5143] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.005339][ T5149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.045173][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.274'. [ 137.239191][ T5158] IPv6: Can't replace route, no match found [ 137.330492][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 137.412548][ T4282] Bluetooth: hci4: unexpected event 0x01 length: 151 > 1 [ 137.486615][ T5170] netlink: 'syz.0.279': attribute type 3 has an invalid length. [ 137.508114][ T5170] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.279'. [ 137.821265][ T5170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.279'. [ 138.347333][ T5181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.283'. [ 138.393216][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.400131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.528031][ T5181] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.283'. [ 139.023828][ T5187] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.270660][ T5194] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 139.447479][ T5194] team0: Device vxcan1 is of different type [ 139.844396][ T5198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.289'. [ 140.680332][ T5226] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 140.736353][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 140.824257][ T5223] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 140.840436][ T5223] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.296'. [ 141.817887][ T5248] netlink: 152 bytes leftover after parsing attributes in process `syz.2.304'. [ 141.890965][ T5248] bond0: (slave bond_slave_0): Releasing backup interface [ 142.039740][ T5248] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 142.177968][ T5255] netlink: 'syz.3.307': attribute type 3 has an invalid length. [ 142.202982][ T5255] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.307'. [ 142.518901][ T5260] Â: renamed from pim6reg1 [ 142.782403][ T5278] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 142.809051][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 143.317946][ T5292] netlink: 'syz.4.318': attribute type 3 has an invalid length. [ 143.326807][ T5292] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.318'. [ 143.336781][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 143.578929][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.318'. [ 145.329925][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 145.452366][ T5318] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.471585][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 146.218196][ T5336] netlink: 172 bytes leftover after parsing attributes in process `syz.2.331'. [ 146.316751][ T5336] netlink: 'syz.2.331': attribute type 21 has an invalid length. [ 146.529760][ T5346] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.333'. [ 146.638331][ T5346] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 146.709920][ T5347] netlink: 'syz.1.333': attribute type 3 has an invalid length. [ 146.759722][ T5347] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.333'. [ 147.297625][ T5353] netlink: 152 bytes leftover after parsing attributes in process `syz.1.347'. [ 147.370204][ T5360] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 147.439170][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 147.746497][ T5372] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 147.959870][ T5372] team0: Device vxcan1 is of different type [ 149.060349][ T5387] netlink: 152 bytes leftover after parsing attributes in process `syz.3.345'. [ 149.153899][ T5391] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 149.195445][ T5391] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 149.255169][ T41] wlan1: Trigger new scan to find an IBSS to join [ 149.342424][ T5391] netlink: 'syz.2.346': attribute type 29 has an invalid length. [ 150.290562][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 150.882054][ T5429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.361'. [ 151.316765][ T5436] netlink: 172 bytes leftover after parsing attributes in process `syz.0.364'. [ 151.386213][ T5437] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 152.202808][ T5451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.378'. [ 152.238107][ T5452] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.368'. [ 152.266676][ T5452] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 152.342726][ T5452] netlink: 'syz.3.368': attribute type 3 has an invalid length. [ 152.378803][ T5454] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.369'. [ 152.390169][ T5452] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.368'. [ 152.550386][ T5460] netlink: 'syz.4.371': attribute type 27 has an invalid length. [ 153.025861][ T5462] netlink: 144 bytes leftover after parsing attributes in process `syz.4.371'. [ 153.080028][ T5474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.374'. [ 153.224254][ T5477] netlink: 'syz.0.376': attribute type 41 has an invalid length. [ 153.249764][ T4341] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 153.249777][ T46] wlan1: Trigger new scan to find an IBSS to join [ 153.586516][ T5485] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.379'. [ 153.676762][ T5491] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 154.061392][ T5499] netlink: 'syz.2.385': attribute type 29 has an invalid length. [ 154.184674][ T5501] netlink: 'syz.2.385': attribute type 29 has an invalid length. [ 154.275396][ T5499] netlink: 'syz.2.385': attribute type 29 has an invalid length. [ 154.343355][ T5504] FAULT_INJECTION: forcing a failure. [ 154.343355][ T5504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.399629][ T5504] CPU: 1 PID: 5504 Comm: syz.1.386 Not tainted syzkaller #0 [ 154.407031][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.417249][ T5504] Call Trace: [ 154.420577][ T5504] [ 154.423551][ T5504] dump_stack_lvl+0x188/0x24e [ 154.428299][ T5504] ? show_regs_print_info+0x12/0x12 [ 154.433572][ T5504] ? load_image+0x410/0x410 [ 154.438146][ T5504] ? __lock_acquire+0x7c40/0x7c40 [ 154.443237][ T5504] should_fail_ex+0x390/0x4c0 [ 154.447982][ T5504] _copy_from_user+0x2c/0x170 [ 154.452718][ T5504] iovec_from_user+0x143/0x360 [ 154.457548][ T5504] __import_iovec+0x6c/0x510 [ 154.462209][ T5504] import_iovec+0x6f/0xa0 [ 154.466607][ T5504] ___sys_sendmsg+0x252/0x360 [ 154.471367][ T5504] ? __sys_sendmsg+0x2a0/0x2a0 [ 154.476216][ T5504] ? __lock_acquire+0x7c40/0x7c40 [ 154.481332][ T5504] __se_sys_sendmsg+0x1c3/0x2b0 [ 154.486249][ T5504] ? __x64_sys_sendmsg+0x80/0x80 [ 154.491273][ T5504] ? lockdep_hardirqs_on+0x94/0x140 [ 154.496536][ T5504] do_syscall_64+0x4c/0xa0 [ 154.501105][ T5504] ? clear_bhb_loop+0x60/0xb0 [ 154.505838][ T5504] ? clear_bhb_loop+0x60/0xb0 [ 154.510575][ T5504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.516525][ T5504] RIP: 0033:0x7f88ed19de99 [ 154.520993][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.540653][ T5504] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.549108][ T5504] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 154.557283][ T5504] RDX: 0000000014040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.565287][ T5504] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.573287][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.581290][ T5504] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 154.589345][ T5504] [ 154.828534][ T5511] netlink: 'syz.0.388': attribute type 21 has an invalid length. [ 154.859726][ T5510] netlink: 'syz.0.388': attribute type 3 has an invalid length. [ 154.909422][ T5510] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.388'. [ 155.129616][ T5516] netlink: 152 bytes leftover after parsing attributes in process `syz.1.390'. [ 156.041064][ T5524] netlink: 144 bytes leftover after parsing attributes in process `syz.1.392'. [ 156.961516][ T5557] netlink: 830 bytes leftover after parsing attributes in process `syz.4.400'. [ 157.232151][ T5559] netlink: 172 bytes leftover after parsing attributes in process `syz.4.401'. [ 157.287573][ T5559] validate_nla: 1 callbacks suppressed [ 157.287596][ T5559] netlink: 'syz.4.401': attribute type 21 has an invalid length. [ 158.296496][ T5583] netlink: 'syz.3.408': attribute type 27 has an invalid length. [ 158.602522][ T5588] __nla_validate_parse: 1 callbacks suppressed [ 158.602546][ T5588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.408'. [ 158.949035][ T5598] netlink: 'syz.4.411': attribute type 11 has an invalid length. [ 158.989628][ T5598] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.411'. [ 159.024492][ T5598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.394763][ T5606] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 159.635687][ T5610] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.671090][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 161.177922][ T5652] netlink: 'syz.2.429': attribute type 3 has an invalid length. [ 161.230196][ T5652] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.429'. [ 161.250422][ T9] wlan1: Trigger new scan to find an IBSS to join [ 161.441821][ T5653] netlink: 'syz.2.429': attribute type 21 has an invalid length. [ 161.452221][ T5655] FAULT_INJECTION: forcing a failure. [ 161.452221][ T5655] name failslab, interval 1, probability 0, space 0, times 0 [ 161.569495][ T5655] CPU: 1 PID: 5655 Comm: syz.0.430 Not tainted syzkaller #0 [ 161.576976][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.587094][ T5655] Call Trace: [ 161.590434][ T5655] [ 161.593418][ T5655] dump_stack_lvl+0x188/0x24e [ 161.598186][ T5655] ? show_regs_print_info+0x12/0x12 [ 161.603454][ T5655] ? load_image+0x410/0x410 [ 161.608016][ T5655] ? __might_sleep+0xd0/0xd0 [ 161.612709][ T5655] ? __lock_acquire+0x7c40/0x7c40 [ 161.617798][ T5655] should_fail_ex+0x390/0x4c0 [ 161.622550][ T5655] should_failslab+0x5/0x20 [ 161.627114][ T5655] slab_pre_alloc_hook+0x59/0x300 [ 161.632211][ T5655] ? apparmor_sk_alloc_security+0x74/0x100 [ 161.638124][ T5655] __kmem_cache_alloc_node+0x4f/0x270 [ 161.643574][ T5655] ? apparmor_sk_alloc_security+0x74/0x100 [ 161.649453][ T5655] kmalloc_trace+0x26/0xe0 [ 161.654031][ T5655] apparmor_sk_alloc_security+0x74/0x100 [ 161.659740][ T5655] security_sk_alloc+0x6a/0xa0 [ 161.664577][ T5655] sk_prot_alloc+0x101/0x210 [ 161.669311][ T5655] ? sk_alloc+0x20/0x330 [ 161.673697][ T5655] sk_alloc+0x36/0x330 [ 161.677819][ T5655] ? bpf_ctx_init+0x154/0x190 [ 161.682642][ T5655] bpf_prog_test_run_skb+0x36d/0x18e0 [ 161.688508][ T5655] ? __fget_files+0x28/0x460 [ 161.693143][ T5655] ? __fget_files+0x3fc/0x460 [ 161.697960][ T5655] ? cpu_online+0xa0/0xa0 [ 161.702439][ T5655] bpf_prog_test_run+0x31c/0x390 [ 161.707414][ T5655] __sys_bpf+0x62b/0x780 [ 161.711693][ T5655] ? bpf_link_show_fdinfo+0x380/0x380 [ 161.717211][ T5655] ? lock_chain_count+0x20/0x20 [ 161.722104][ T5655] __x64_sys_bpf+0x78/0x90 [ 161.726561][ T5655] do_syscall_64+0x4c/0xa0 [ 161.731046][ T5655] ? clear_bhb_loop+0x60/0xb0 [ 161.735773][ T5655] ? clear_bhb_loop+0x60/0xb0 [ 161.740485][ T5655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.746413][ T5655] RIP: 0033:0x7f480739de99 [ 161.750871][ T5655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.770509][ T5655] RSP: 002b:00007f4808337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.778956][ T5655] RAX: ffffffffffffffda RBX: 00007f4807625fa0 RCX: 00007f480739de99 [ 161.787131][ T5655] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 161.795200][ T5655] RBP: 00007f4808337090 R08: 0000000000000000 R09: 0000000000000000 [ 161.803490][ T5655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.811501][ T5655] R13: 00007f4807626038 R14: 00007f4807625fa0 R15: 00007ffc59c48488 [ 161.819534][ T5655] [ 162.195213][ T5665] netlink: 'syz.2.433': attribute type 46 has an invalid length. [ 162.206700][ T5662] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 162.258263][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.433'. [ 162.702727][ T5684] netlink: 'syz.0.440': attribute type 11 has an invalid length. [ 162.712164][ T5684] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.440'. [ 162.731236][ T5684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.700213][ T5691] netlink: 152 bytes leftover after parsing attributes in process `syz.3.442'. [ 164.162810][ T5706] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 164.226248][ T5703] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 164.260515][ T5703] syzkaller0: linktype set to 8 [ 165.242968][ T5726] netlink: 152 bytes leftover after parsing attributes in process `syz.4.455'. [ 166.290455][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 166.558713][ T5744] netlink: 'syz.0.470': attribute type 27 has an invalid length. [ 167.345628][ T11] wlan1: Trigger new scan to find an IBSS to join [ 167.947295][ T5772] netlink: 'syz.1.469': attribute type 46 has an invalid length. [ 167.961253][ T5768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.468'. [ 167.999005][ T5772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.469'. [ 168.407214][ T5775] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.708187][ T5785] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.864923][ T5787] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.877890][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 168.959855][ T5789] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.979172][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 169.579890][ T5806] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 169.592569][ T5806] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 169.599017][ T5806] syzkaller0: linktype set to 8 [ 170.087541][ T5810] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.308936][ T5816] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.360342][ T5820] FAULT_INJECTION: forcing a failure. [ 170.360342][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.380635][ T5820] CPU: 0 PID: 5820 Comm: syz.0.491 Not tainted syzkaller #0 [ 170.388095][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.398258][ T5820] Call Trace: [ 170.401591][ T5820] [ 170.404579][ T5820] dump_stack_lvl+0x188/0x24e [ 170.409422][ T5820] ? show_regs_print_info+0x12/0x12 [ 170.414695][ T5820] ? load_image+0x410/0x410 [ 170.419268][ T5820] ? __lock_acquire+0x7c40/0x7c40 [ 170.424380][ T5820] ? tomoyo_path_number_perm+0x205/0x650 [ 170.430086][ T5820] should_fail_ex+0x390/0x4c0 [ 170.434920][ T5820] _copy_from_user+0x2c/0x170 [ 170.439650][ T5820] vlan_ioctl_handler+0xba/0x5c0 [ 170.444646][ T5820] ? sock_ioctl+0x21b/0x700 [ 170.449380][ T5820] ? net_generic+0x240/0x240 [ 170.454040][ T5820] ? net_generic+0x240/0x240 [ 170.458691][ T5820] sock_ioctl+0x23b/0x700 [ 170.463167][ T5820] ? sock_poll+0x420/0x420 [ 170.467639][ T5820] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.472678][ T5820] ? security_file_ioctl+0x7c/0xa0 [ 170.477928][ T5820] ? sock_poll+0x420/0x420 [ 170.482503][ T5820] __se_sys_ioctl+0xfa/0x170 [ 170.487165][ T5820] do_syscall_64+0x4c/0xa0 [ 170.491641][ T5820] ? clear_bhb_loop+0x60/0xb0 [ 170.496363][ T5820] ? clear_bhb_loop+0x60/0xb0 [ 170.501077][ T5820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.507030][ T5820] RIP: 0033:0x7f480739de99 [ 170.511502][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.531304][ T5820] RSP: 002b:00007f4808337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.539783][ T5820] RAX: ffffffffffffffda RBX: 00007f4807625fa0 RCX: 00007f480739de99 [ 170.547987][ T5820] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000006 [ 170.556145][ T5820] RBP: 00007f4808337090 R08: 0000000000000000 R09: 0000000000000000 [ 170.564342][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.572623][ T5820] R13: 00007f4807626038 R14: 00007f4807625fa0 R15: 00007ffc59c48488 [ 170.580757][ T5820] [ 170.604014][ T5822] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.613957][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 170.752127][ T5824] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.782640][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 170.944729][ T5828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.494'. [ 171.086088][ T5833] netlink: 'syz.0.496': attribute type 46 has an invalid length. [ 171.120913][ T5835] netlink: 'syz.3.497': attribute type 21 has an invalid length. [ 171.129095][ T5835] FAULT_INJECTION: forcing a failure. [ 171.129095][ T5835] name failslab, interval 1, probability 0, space 0, times 0 [ 171.157106][ T5835] CPU: 0 PID: 5835 Comm: syz.3.497 Not tainted syzkaller #0 [ 171.164498][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.174615][ T5835] Call Trace: [ 171.177948][ T5835] [ 171.180961][ T5835] dump_stack_lvl+0x188/0x24e [ 171.185795][ T5835] ? show_regs_print_info+0x12/0x12 [ 171.191097][ T5835] ? load_image+0x410/0x410 [ 171.195646][ T5835] ? verify_lock_unused+0x140/0x140 [ 171.200889][ T5835] ? perf_trace_lock+0xf8/0x390 [ 171.205790][ T5835] should_fail_ex+0x390/0x4c0 [ 171.210516][ T5835] should_failslab+0x5/0x20 [ 171.215057][ T5835] slab_pre_alloc_hook+0x59/0x300 [ 171.220130][ T5835] kmem_cache_alloc+0x56/0x2f0 [ 171.224927][ T5835] ? skb_clone+0x1e7/0x370 [ 171.229488][ T5835] skb_clone+0x1e7/0x370 [ 171.233778][ T5835] __netlink_deliver_tap+0x3e4/0x7e0 [ 171.239123][ T5835] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.244365][ T5835] netlink_deliver_tap+0x19c/0x1b0 [ 171.249559][ T5835] netlink_sendskb+0x64/0x130 [ 171.254283][ T5835] netlink_ack+0xcd1/0x1160 [ 171.259020][ T5835] ? netlink_dump+0xcd0/0xcd0 [ 171.263739][ T5835] ? __copy_skb_header+0x3ba/0x4f0 [ 171.268893][ T5835] ? __skb_clone+0x446/0x6c0 [ 171.273619][ T5835] netlink_rcv_skb+0x26d/0x440 [ 171.278431][ T5835] ? rtnetlink_bind+0x80/0x80 [ 171.283154][ T5835] ? netlink_ack+0x1160/0x1160 [ 171.288060][ T5835] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.293303][ T5835] netlink_unicast+0x7ad/0x920 [ 171.298120][ T5835] netlink_sendmsg+0x8ad/0xbd0 [ 171.302942][ T5835] ? netlink_getsockopt+0x550/0x550 [ 171.308190][ T5835] ? apparmor_socket_sendmsg+0x8a/0x330 [ 171.313988][ T5835] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.319499][ T5835] ? security_socket_sendmsg+0x7c/0xa0 [ 171.324998][ T5835] ? netlink_getsockopt+0x550/0x550 [ 171.330251][ T5835] ____sys_sendmsg+0x5ed/0x9a0 [ 171.335075][ T5835] ? __sys_sendmsg_sock+0x30/0x30 [ 171.340139][ T5835] ? __import_iovec+0x306/0x510 [ 171.345043][ T5835] ? import_iovec+0x6f/0xa0 [ 171.349611][ T5835] ___sys_sendmsg+0x2a2/0x360 [ 171.354346][ T5835] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.359351][ T5835] ? __lock_acquire+0x7c40/0x7c40 [ 171.364439][ T5835] __se_sys_sendmsg+0x1c3/0x2b0 [ 171.369334][ T5835] ? __x64_sys_sendmsg+0x80/0x80 [ 171.374333][ T5835] ? lockdep_hardirqs_on+0x94/0x140 [ 171.379658][ T5835] do_syscall_64+0x4c/0xa0 [ 171.384135][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 171.388910][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 171.393646][ T5835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.399600][ T5835] RIP: 0033:0x7f8f8ab9de99 [ 171.404067][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.423738][ T5835] RSP: 002b:00007f8f8bb08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.432320][ T5835] RAX: ffffffffffffffda RBX: 00007f8f8ae25fa0 RCX: 00007f8f8ab9de99 [ 171.440596][ T5835] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 171.448601][ T5835] RBP: 00007f8f8bb08090 R08: 0000000000000000 R09: 0000000000000000 [ 171.456692][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.464698][ T5835] R13: 00007f8f8ae26038 R14: 00007f8f8ae25fa0 R15: 00007fffec86db98 [ 171.472733][ T5835] [ 171.481750][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 171.531875][ T5833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.496'. [ 171.663461][ T5840] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 171.684014][ T5840] syzkaller0: linktype set to 8 [ 171.992989][ T5850] netlink: 'syz.1.503': attribute type 46 has an invalid length. [ 172.272170][ T5856] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.312426][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 172.561210][ T5861] netlink: 152 bytes leftover after parsing attributes in process `syz.1.507'. [ 172.586041][ T5866] netlink: 'syz.4.509': attribute type 21 has an invalid length. [ 172.766066][ T5868] netlink: 'syz.4.510': attribute type 46 has an invalid length. [ 172.966048][ T5872] netlink: 'syz.1.512': attribute type 27 has an invalid length. [ 173.249813][ T11] wlan1: Trigger new scan to find an IBSS to join [ 174.102238][ T5895] netlink: 'syz.4.520': attribute type 46 has an invalid length. [ 174.134051][ T5895] netlink: 132 bytes leftover after parsing attributes in process `syz.4.520'. [ 174.250169][ T5897] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 174.256347][ T5897] syzkaller0: linktype set to 8 [ 174.482469][ T5902] FAULT_INJECTION: forcing a failure. [ 174.482469][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.496753][ T5902] CPU: 1 PID: 5902 Comm: syz.1.523 Not tainted syzkaller #0 [ 174.504118][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 174.514330][ T5902] Call Trace: [ 174.517661][ T5902] [ 174.520728][ T5902] dump_stack_lvl+0x188/0x24e [ 174.525482][ T5902] ? show_regs_print_info+0x12/0x12 [ 174.530753][ T5902] ? load_image+0x410/0x410 [ 174.535326][ T5902] ? __lock_acquire+0x7c40/0x7c40 [ 174.540429][ T5902] should_fail_ex+0x390/0x4c0 [ 174.545270][ T5902] _copy_from_user+0x2c/0x170 [ 174.550097][ T5902] iovec_from_user+0x143/0x360 [ 174.554931][ T5902] __import_iovec+0x6c/0x510 [ 174.559604][ T5902] import_iovec+0x6f/0xa0 [ 174.564008][ T5902] ___sys_sendmsg+0x252/0x360 [ 174.568858][ T5902] ? __sys_sendmsg+0x2a0/0x2a0 [ 174.573718][ T5902] ? __lock_acquire+0x7c40/0x7c40 [ 174.578846][ T5902] __se_sys_sendmsg+0x1c3/0x2b0 [ 174.583788][ T5902] ? __x64_sys_sendmsg+0x80/0x80 [ 174.588837][ T5902] ? lockdep_hardirqs_on+0x94/0x140 [ 174.594116][ T5902] do_syscall_64+0x4c/0xa0 [ 174.598612][ T5902] ? clear_bhb_loop+0x60/0xb0 [ 174.603368][ T5902] ? clear_bhb_loop+0x60/0xb0 [ 174.608128][ T5902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.614166][ T5902] RIP: 0033:0x7f88ed19de99 [ 174.618630][ T5902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.638310][ T5902] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.646778][ T5902] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 174.654898][ T5902] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 174.662919][ T5902] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.670964][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.678979][ T5902] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 174.687008][ T5902] [ 175.125161][ T5912] netlink: 'syz.1.527': attribute type 27 has an invalid length. [ 175.743340][ T5922] netlink: 'syz.1.530': attribute type 46 has an invalid length. [ 175.796386][ T5920] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.886470][ T5927] netlink: 'syz.1.532': attribute type 46 has an invalid length. [ 175.946328][ T5927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.532'. [ 176.215425][ T5933] delete_channel: no stack [ 176.357993][ T5935] Illegal XDP return value 65535 on prog (id 194) dev N/A, expect packet loss! [ 176.496998][ T5941] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.534621][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 177.183428][ T5959] netlink: 'syz.1.544': attribute type 46 has an invalid length. [ 177.234407][ T5959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.544'. [ 177.249819][ T41] wlan1: Trigger new scan to find an IBSS to join [ 178.119557][ T5982] netlink: 152 bytes leftover after parsing attributes in process `syz.0.549'. [ 178.422839][ T5985] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.472358][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 178.554132][ T5996] delete_channel: no stack [ 179.251288][ T41] wlan1: Trigger new scan to find an IBSS to join [ 179.439716][ T6015] netlink: 'syz.2.562': attribute type 46 has an invalid length. [ 179.543168][ T6015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 179.631979][ T6020] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 179.658992][ T6020] netlink: 'syz.1.564': attribute type 19 has an invalid length. [ 179.674878][ T6020] netlink: 156 bytes leftover after parsing attributes in process `syz.1.564'. [ 179.688628][ T6013] netlink: 152 bytes leftover after parsing attributes in process `syz.4.563'. [ 180.236434][ T6033] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.281858][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 180.293993][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 180.477953][ T6039] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 180.549716][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.568040][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.606500][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.619013][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.134132][ T6051] sctp: [Deprecated]: syz.2.578 (pid 6051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.134132][ T6051] Use struct sctp_sack_info instead [ 181.326874][ T6054] netlink: 'syz.4.580': attribute type 27 has an invalid length. [ 182.441891][ T6078] netlink: 'syz.3.588': attribute type 46 has an invalid length. [ 182.551562][ T6078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.588'. [ 182.578686][ T6080] FAULT_INJECTION: forcing a failure. [ 182.578686][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.616628][ T6080] CPU: 0 PID: 6080 Comm: syz.0.589 Not tainted syzkaller #0 [ 182.624010][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.634125][ T6080] Call Trace: [ 182.637452][ T6080] [ 182.640433][ T6080] dump_stack_lvl+0x188/0x24e [ 182.645183][ T6080] ? show_regs_print_info+0x12/0x12 [ 182.650463][ T6080] ? load_image+0x410/0x410 [ 182.655072][ T6080] ? __lock_acquire+0x7c40/0x7c40 [ 182.660185][ T6080] should_fail_ex+0x390/0x4c0 [ 182.664923][ T6080] _copy_to_user+0x2c/0x130 [ 182.669480][ T6080] ethtool_get_one_feature+0x131/0x1a0 [ 182.675088][ T6080] ? ethtool_set_features+0x310/0x310 [ 182.680567][ T6080] ? full_name_hash+0x8e/0xe0 [ 182.685301][ T6080] dev_ethtool+0xd16/0x12f0 [ 182.689867][ T6080] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 182.696262][ T6080] ? __lock_acquire+0x7c40/0x7c40 [ 182.701347][ T6080] ? __kmem_cache_free+0xb6/0x200 [ 182.706434][ T6080] ? full_name_hash+0x8e/0xe0 [ 182.711178][ T6080] ? dev_load+0x1d/0x1e0 [ 182.715479][ T6080] ? dev_load+0x1d/0x1e0 [ 182.719828][ T6080] dev_ioctl+0x474/0xe80 [ 182.724229][ T6080] sock_do_ioctl+0x245/0x320 [ 182.729308][ T6080] ? sock_show_fdinfo+0xb0/0xb0 [ 182.734227][ T6080] sock_ioctl+0x48a/0x700 [ 182.738696][ T6080] ? sock_poll+0x420/0x420 [ 182.743169][ T6080] ? bpf_lsm_file_ioctl+0x5/0x10 [ 182.748159][ T6080] ? security_file_ioctl+0x7c/0xa0 [ 182.753323][ T6080] ? sock_poll+0x420/0x420 [ 182.757787][ T6080] __se_sys_ioctl+0xfa/0x170 [ 182.762440][ T6080] do_syscall_64+0x4c/0xa0 [ 182.766907][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 182.771640][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 182.776408][ T6080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.782368][ T6080] RIP: 0033:0x7f480739de99 [ 182.786828][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.806496][ T6080] RSP: 002b:00007f4808337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.814977][ T6080] RAX: ffffffffffffffda RBX: 00007f4807625fa0 RCX: 00007f480739de99 [ 182.823112][ T6080] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002c [ 182.831217][ T6080] RBP: 00007f4808337090 R08: 0000000000000000 R09: 0000000000000000 [ 182.839231][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.847344][ T6080] R13: 00007f4807626038 R14: 00007f4807625fa0 R15: 00007ffc59c48488 [ 182.855558][ T6080] [ 183.144638][ T6087] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.266379][ T6086] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 183.288199][ T6086] syzkaller0: linktype set to 8 [ 183.298542][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 183.319169][ T6094] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 183.709879][ T6102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.596'. [ 184.103451][ T6115] netlink: 'syz.4.603': attribute type 46 has an invalid length. [ 184.184761][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.603'. [ 184.290081][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 185.330847][ T46] wlan1: Trigger new scan to find an IBSS to join [ 187.421901][ T6135] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 187.554657][ T6139] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.597549][ T6135] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 187.626942][ T6135] syzkaller0: linktype set to 8 [ 187.651886][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 187.862532][ T6145] netlink: 152 bytes leftover after parsing attributes in process `syz.3.612'. [ 188.108472][ T6154] netlink: 'syz.1.616': attribute type 46 has an invalid length. [ 188.304764][ T6161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.616'. [ 188.355610][ T6160] netlink: 'syz.3.617': attribute type 46 has an invalid length. [ 188.402084][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 189.257844][ T11] wlan1: Trigger new scan to find an IBSS to join [ 189.420863][ T6181] netlink: 'syz.4.624': attribute type 27 has an invalid length. [ 189.636251][ T6183] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 189.649842][ T6183] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 189.668566][ T6183] syzkaller0: linktype set to 8 [ 189.694979][ T6185] netlink: 'syz.3.625': attribute type 46 has an invalid length. [ 189.775542][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.625'. [ 189.805147][ T6187] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.823905][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 190.033917][ T6196] netlink: 'syz.1.631': attribute type 46 has an invalid length. [ 190.102244][ T6198] FAULT_INJECTION: forcing a failure. [ 190.102244][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.123794][ T6198] CPU: 0 PID: 6198 Comm: syz.2.632 Not tainted syzkaller #0 [ 190.131199][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.141310][ T6198] Call Trace: [ 190.144659][ T6198] [ 190.147817][ T6198] dump_stack_lvl+0x188/0x24e [ 190.152569][ T6198] ? show_regs_print_info+0x12/0x12 [ 190.157933][ T6198] ? load_image+0x410/0x410 [ 190.162503][ T6198] ? __lock_acquire+0x7c40/0x7c40 [ 190.167624][ T6198] should_fail_ex+0x390/0x4c0 [ 190.172358][ T6198] _copy_from_user+0x2c/0x170 [ 190.177074][ T6198] __copy_msghdr+0x384/0x560 [ 190.181711][ T6198] ___sys_sendmsg+0x210/0x360 [ 190.186453][ T6198] ? __sys_sendmsg+0x2a0/0x2a0 [ 190.191288][ T6198] ? __lock_acquire+0x7c40/0x7c40 [ 190.196392][ T6198] __se_sys_sendmsg+0x1c3/0x2b0 [ 190.201475][ T6198] ? __x64_sys_sendmsg+0x80/0x80 [ 190.206474][ T6198] ? lockdep_hardirqs_on+0x94/0x140 [ 190.211746][ T6198] do_syscall_64+0x4c/0xa0 [ 190.216218][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 190.220940][ T6198] ? clear_bhb_loop+0x60/0xb0 [ 190.225664][ T6198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.231603][ T6198] RIP: 0033:0x7f25f079de99 [ 190.236094][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.255914][ T6198] RSP: 002b:00007f25f1737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.264371][ T6198] RAX: ffffffffffffffda RBX: 00007f25f0a25fa0 RCX: 00007f25f079de99 [ 190.272384][ T6198] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004 [ 190.280485][ T6198] RBP: 00007f25f1737090 R08: 0000000000000000 R09: 0000000000000000 [ 190.288499][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.296507][ T6198] R13: 00007f25f0a26038 R14: 00007f25f0a25fa0 R15: 00007ffc27799b48 [ 190.304536][ T6198] [ 190.313410][ T6200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.631'. [ 190.341436][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 191.965057][ T6230] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 191.972079][ T6230] syzkaller0: linktype set to 8 [ 192.016257][ T6228] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.058043][ T6231] netlink: 'syz.1.641': attribute type 46 has an invalid length. [ 192.089126][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 192.128863][ T6231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.641'. [ 192.289613][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 192.400077][ T6240] netlink: 'syz.4.645': attribute type 46 has an invalid length. [ 192.604807][ T6240] netlink: 132 bytes leftover after parsing attributes in process `syz.4.645'. [ 193.160866][ T6245] netlink: 'syz.1.657': attribute type 46 has an invalid length. [ 193.175026][ T6247] netlink: 'syz.4.647': attribute type 46 has an invalid length. [ 193.229110][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.657'. [ 193.285218][ T6247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.647'. [ 193.806261][ T6263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'. [ 193.889484][ T6267] netlink: 'syz.0.665': attribute type 27 has an invalid length. [ 194.625168][ T6278] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 194.634531][ T6278] syzkaller0: linktype set to 8 [ 194.647709][ T6281] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.668607][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 194.998395][ T6285] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.065745][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 195.095351][ T6290] netlink: 'syz.0.661': attribute type 46 has an invalid length. [ 195.200159][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.661'. [ 195.794966][ T6297] FAULT_INJECTION: forcing a failure. [ 195.794966][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 195.811566][ T6297] CPU: 0 PID: 6297 Comm: syz.4.664 Not tainted syzkaller #0 [ 195.818964][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.829098][ T6297] Call Trace: [ 195.832533][ T6297] [ 195.835537][ T6297] dump_stack_lvl+0x188/0x24e [ 195.840314][ T6297] ? show_regs_print_info+0x12/0x12 [ 195.845774][ T6297] ? load_image+0x410/0x410 [ 195.850364][ T6297] ? __might_sleep+0xd0/0xd0 [ 195.855034][ T6297] ? __lock_acquire+0x7c40/0x7c40 [ 195.860161][ T6297] should_fail_ex+0x390/0x4c0 [ 195.864914][ T6297] should_failslab+0x5/0x20 [ 195.869462][ T6297] slab_pre_alloc_hook+0x59/0x300 [ 195.874546][ T6297] ? apparmor_sk_alloc_security+0x74/0x100 [ 195.880408][ T6297] __kmem_cache_alloc_node+0x4f/0x270 [ 195.885834][ T6297] ? apparmor_sk_alloc_security+0x74/0x100 [ 195.891692][ T6297] kmalloc_trace+0x26/0xe0 [ 195.896164][ T6297] apparmor_sk_alloc_security+0x74/0x100 [ 195.901848][ T6297] security_sk_alloc+0x6a/0xa0 [ 195.906667][ T6297] sk_prot_alloc+0x101/0x210 [ 195.911310][ T6297] ? sk_alloc+0x20/0x330 [ 195.915608][ T6297] sk_alloc+0x36/0x330 [ 195.919760][ T6297] ? bpf_ctx_init+0x154/0x190 [ 195.924584][ T6297] bpf_prog_test_run_skb+0x36d/0x18e0 [ 195.930009][ T6297] ? lockdep_hardirqs_on+0x94/0x140 [ 195.935266][ T6297] ? cpu_online+0xa0/0xa0 [ 195.939667][ T6297] ? cpu_online+0xa0/0xa0 [ 195.944221][ T6297] bpf_prog_test_run+0x31c/0x390 [ 195.949253][ T6297] __sys_bpf+0x62b/0x780 [ 195.953562][ T6297] ? bpf_link_show_fdinfo+0x380/0x380 [ 195.959108][ T6297] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 195.965367][ T6297] __x64_sys_bpf+0x78/0x90 [ 195.969849][ T6297] do_syscall_64+0x4c/0xa0 [ 195.974340][ T6297] ? clear_bhb_loop+0x60/0xb0 [ 195.979096][ T6297] ? clear_bhb_loop+0x60/0xb0 [ 195.983843][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.989886][ T6297] RIP: 0033:0x7fd86379de99 [ 195.994366][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.014040][ T6297] RSP: 002b:00007fd8646fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.022598][ T6297] RAX: ffffffffffffffda RBX: 00007fd863a25fa0 RCX: 00007fd86379de99 [ 196.030639][ T6297] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 196.038655][ T6297] RBP: 00007fd8646fd090 R08: 0000000000000000 R09: 0000000000000000 [ 196.046667][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.054676][ T6297] R13: 00007fd863a26038 R14: 00007fd863a25fa0 R15: 00007ffc41a593c8 [ 196.062726][ T6297] [ 196.151614][ T6302] netlink: 'syz.0.667': attribute type 27 has an invalid length. [ 196.691341][ T6314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.669'. [ 197.259433][ T9] wlan1: Trigger new scan to find an IBSS to join [ 197.329694][ T46] wlan1: Trigger new scan to find an IBSS to join [ 197.377708][ T6322] netlink: 'syz.1.674': attribute type 46 has an invalid length. [ 197.445912][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.674'. [ 197.750661][ T6334] netlink: 'syz.2.679': attribute type 27 has an invalid length. [ 199.061613][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.687'. [ 199.154125][ T6363] netlink: 'syz.0.688': attribute type 46 has an invalid length. [ 199.172457][ T6363] netlink: 132 bytes leftover after parsing attributes in process `syz.0.688'. [ 199.537801][ T6371] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.694'. [ 199.571025][ T6373] netlink: 'syz.4.693': attribute type 46 has an invalid length. [ 199.616964][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.693'. [ 199.819307][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.825804][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.195594][ T6383] netlink: 152 bytes leftover after parsing attributes in process `syz.2.699'. [ 200.221277][ T6386] netlink: 'syz.0.700': attribute type 46 has an invalid length. [ 200.270680][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 201.256381][ T11] wlan1: Trigger new scan to find an IBSS to join [ 201.477253][ T6413] FAULT_INJECTION: forcing a failure. [ 201.477253][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 201.491110][ T6413] CPU: 0 PID: 6413 Comm: syz.2.711 Not tainted syzkaller #0 [ 201.498578][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.508668][ T6413] Call Trace: [ 201.511978][ T6413] [ 201.514937][ T6413] dump_stack_lvl+0x188/0x24e [ 201.519661][ T6413] ? show_regs_print_info+0x12/0x12 [ 201.524901][ T6413] ? load_image+0x410/0x410 [ 201.529437][ T6413] ? __might_sleep+0xd0/0xd0 [ 201.534059][ T6413] ? __lock_acquire+0x7c40/0x7c40 [ 201.539115][ T6413] ? mark_lock+0x94/0x320 [ 201.543483][ T6413] should_fail_ex+0x390/0x4c0 [ 201.548212][ T6413] should_failslab+0x5/0x20 [ 201.552745][ T6413] slab_pre_alloc_hook+0x59/0x300 [ 201.557793][ T6413] ? __local_bh_enable_ip+0x136/0x1c0 [ 201.563366][ T6413] kmem_cache_alloc_node+0x5a/0x310 [ 201.568590][ T6413] ? __local_bh_enable_ip+0x136/0x1c0 [ 201.573987][ T6413] ? __alloc_skb+0xf9/0x7d0 [ 201.578702][ T6413] __alloc_skb+0xf9/0x7d0 [ 201.583268][ T6413] kcm_sendmsg+0x1f83/0x23f0 [ 201.587906][ T6413] ? aa_sk_perm+0x81f/0x950 [ 201.592458][ T6413] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 201.598900][ T6413] ? kcm_getsockopt+0x280/0x280 [ 201.603786][ T6413] ? apparmor_socket_sendmsg+0x8a/0x330 [ 201.609371][ T6413] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.614766][ T6413] ? security_socket_sendmsg+0x7c/0xa0 [ 201.620287][ T6413] sock_write_iter+0x2d5/0x3e0 [ 201.625083][ T6413] ? sock_read_iter+0x3a0/0x3a0 [ 201.629989][ T6413] ? common_file_perm+0x171/0x1c0 [ 201.635076][ T6413] vfs_write+0x482/0x9a0 [ 201.639365][ T6413] ? file_end_write+0x250/0x250 [ 201.644267][ T6413] ? __fget_files+0x3fc/0x460 [ 201.649004][ T6413] ? __fdget_pos+0x1d4/0x360 [ 201.653630][ T6413] ? ksys_write+0x70/0x260 [ 201.658085][ T6413] ksys_write+0x14d/0x260 [ 201.662457][ T6413] ? __ia32_sys_read+0x80/0x80 [ 201.667254][ T6413] ? lockdep_hardirqs_on+0x94/0x140 [ 201.672486][ T6413] do_syscall_64+0x4c/0xa0 [ 201.676937][ T6413] ? clear_bhb_loop+0x60/0xb0 [ 201.681649][ T6413] ? clear_bhb_loop+0x60/0xb0 [ 201.686361][ T6413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.692298][ T6413] RIP: 0033:0x7f25f079de99 [ 201.696741][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.716469][ T6413] RSP: 002b:00007f25f1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.725001][ T6413] RAX: ffffffffffffffda RBX: 00007f25f0a25fa0 RCX: 00007f25f079de99 [ 201.733084][ T6413] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 201.741091][ T6413] RBP: 00007f25f1737090 R08: 0000000000000000 R09: 0000000000000000 [ 201.749086][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.757173][ T6413] R13: 00007f25f0a26038 R14: 00007f25f0a25fa0 R15: 00007ffc27799b48 [ 201.765187][ T6413] [ 202.120972][ T6417] netlink: 152 bytes leftover after parsing attributes in process `syz.0.713'. [ 202.258429][ T6422] netlink: 'syz.3.715': attribute type 46 has an invalid length. [ 202.289833][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 202.307115][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.715'. [ 203.290946][ T46] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 203.444635][ T6442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.722'. [ 203.748853][ T6448] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.795135][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 204.881364][ T6481] netlink: 'syz.4.738': attribute type 46 has an invalid length. [ 204.912855][ T6481] __nla_validate_parse: 1 callbacks suppressed [ 204.912892][ T6481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.738'. [ 204.978759][ T6467] FAULT_INJECTION: forcing a failure. [ 204.978759][ T6467] name fail_futex, interval 1, probability 0, space 0, times 1 [ 205.013774][ T6467] CPU: 0 PID: 6467 Comm: syz.0.732 Not tainted syzkaller #0 [ 205.021192][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.031310][ T6467] Call Trace: [ 205.034633][ T6467] [ 205.037612][ T6467] dump_stack_lvl+0x188/0x24e [ 205.042360][ T6467] ? show_regs_print_info+0x12/0x12 [ 205.047618][ T6467] ? load_image+0x410/0x410 [ 205.052173][ T6467] ? mark_lock+0x94/0x320 [ 205.056572][ T6467] ? __lock_acquire+0x1465/0x7c40 [ 205.061835][ T6467] should_fail_ex+0x390/0x4c0 [ 205.066580][ T6467] get_futex_key+0x1de/0x1000 [ 205.071330][ T6467] ? verify_lock_unused+0x140/0x140 [ 205.077461][ T6467] ? futex_setup_timer+0xc0/0xc0 [ 205.082460][ T6467] ? verify_lock_unused+0x140/0x140 [ 205.087725][ T6467] futex_wake+0x123/0x4f0 [ 205.092113][ T6467] ? futex_wake_mark+0x150/0x150 [ 205.097130][ T6467] do_futex+0x2e2/0x320 [ 205.101364][ T6467] ? __ia32_sys_get_robust_list+0x100/0x100 [ 205.107315][ T6467] ? __might_fault+0xc2/0x120 [ 205.112053][ T6467] mm_release+0x20a/0x330 [ 205.116440][ T6467] ? exit_robust_list+0x2ce/0x2f0 [ 205.121521][ T6467] ? exit_mm_release+0x30/0x30 [ 205.126330][ T6467] ? lockdep_hardirqs_on+0x94/0x140 [ 205.131573][ T6467] exit_mm+0xa0/0x350 [ 205.135620][ T6467] ? do_exit+0x2570/0x2570 [ 205.140074][ T6467] ? taskstats_exit+0x355/0x9e0 [ 205.144962][ T6467] do_exit+0x958/0x2570 [ 205.149162][ T6467] ? put_task_struct+0x80/0x80 [ 205.153967][ T6467] ? ct_nmi_exit+0x145/0x1c0 [ 205.158598][ T6467] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 205.164632][ T6467] ? _raw_spin_lock_irq+0x86/0xf0 [ 205.169691][ T6467] ? lock_chain_count+0x20/0x20 [ 205.174579][ T6467] ? _raw_spin_lock_irq+0xb7/0xf0 [ 205.179634][ T6467] do_group_exit+0x229/0x2e0 [ 205.184252][ T6467] ? lockdep_hardirqs_on+0x94/0x140 [ 205.189945][ T6467] get_signal+0x1259/0x1340 [ 205.194520][ T6467] arch_do_signal_or_restart+0xc4/0x1310 [ 205.200275][ T6467] ? kick_process+0xd4/0x140 [ 205.204899][ T6467] ? task_work_add+0x2cb/0x330 [ 205.209805][ T6467] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 205.215218][ T6467] ? get_sigframe_size+0x10/0x10 [ 205.220206][ T6467] ? exit_to_user_mode_loop+0x3b/0x110 [ 205.225716][ T6467] exit_to_user_mode_loop+0x70/0x110 [ 205.231036][ T6467] exit_to_user_mode_prepare+0xee/0x180 [ 205.236621][ T6467] syscall_exit_to_user_mode+0x16/0x40 [ 205.242116][ T6467] do_syscall_64+0x58/0xa0 [ 205.246581][ T6467] ? clear_bhb_loop+0x60/0xb0 [ 205.251299][ T6467] ? clear_bhb_loop+0x60/0xb0 [ 205.256014][ T6467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.261964][ T6467] RIP: 0033:0x7f480739de99 [ 205.266409][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.286153][ T6467] RSP: 002b:00007f4808316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.294617][ T6467] RAX: fffffffffffffe00 RBX: 00007f4807626090 RCX: 00007f480739de99 [ 205.302624][ T6467] RDX: 0000000004000081 RSI: 0000200000000100 RDI: 0000000000000003 [ 205.310724][ T6467] RBP: 00007f4808316090 R08: 0000000000000000 R09: 0000000000000000 [ 205.318723][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.326806][ T6467] R13: 00007f4807626128 R14: 00007f4807626090 R15: 00007ffc59c48488 [ 205.334910][ T6467] [ 205.344064][ T11] wlan1: Trigger new scan to find an IBSS to join [ 205.353938][ T6485] netlink: 'syz.3.740': attribute type 46 has an invalid length. [ 205.436493][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.740'. [ 205.482952][ T6487] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.500938][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 206.239992][ T6513] netlink: 'syz.3.751': attribute type 46 has an invalid length. [ 206.305262][ T6513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.751'. [ 206.315244][ T4298] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 206.444581][ T6515] FAULT_INJECTION: forcing a failure. [ 206.444581][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 206.511147][ T6515] CPU: 0 PID: 6515 Comm: syz.4.752 Not tainted syzkaller #0 [ 206.518516][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.528636][ T6515] Call Trace: [ 206.532053][ T6515] [ 206.535052][ T6515] dump_stack_lvl+0x188/0x24e [ 206.539801][ T6515] ? lock_chain_count+0x20/0x20 [ 206.544898][ T6515] ? show_regs_print_info+0x12/0x12 [ 206.550164][ T6515] ? load_image+0x410/0x410 [ 206.554820][ T6515] ? lockdep_hardirqs_on+0x94/0x140 [ 206.560076][ T6515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 206.566313][ T6515] should_fail_ex+0x390/0x4c0 [ 206.571069][ T6515] should_failslab+0x5/0x20 [ 206.575654][ T6515] slab_pre_alloc_hook+0x59/0x300 [ 206.580921][ T6515] ? sock_kmalloc+0x92/0xf0 [ 206.585621][ T6515] __kmem_cache_alloc_node+0x4f/0x270 [ 206.591060][ T6515] ? sock_kmalloc+0x92/0xf0 [ 206.595647][ T6515] __kmalloc+0xa3/0x240 [ 206.599881][ T6515] sock_kmalloc+0x92/0xf0 [ 206.604294][ T6515] ____sys_sendmsg+0x1bf/0x9a0 [ 206.609150][ T6515] ? __sys_sendmsg_sock+0x30/0x30 [ 206.614332][ T6515] ? __import_iovec+0x306/0x510 [ 206.619353][ T6515] ? import_iovec+0x6f/0xa0 [ 206.623935][ T6515] ___sys_sendmsg+0x2a2/0x360 [ 206.628962][ T6515] ? __sys_sendmsg+0x2a0/0x2a0 [ 206.633952][ T6515] __se_sys_sendmsg+0x1c3/0x2b0 [ 206.638877][ T6515] ? __x64_sys_sendmsg+0x80/0x80 [ 206.643934][ T6515] do_syscall_64+0x4c/0xa0 [ 206.648413][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 206.653159][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 206.657912][ T6515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.663875][ T6515] RIP: 0033:0x7fd86379de99 [ 206.668354][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.688060][ T6515] RSP: 002b:00007fd8646fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.696538][ T6515] RAX: ffffffffffffffda RBX: 00007fd863a25fa0 RCX: 00007fd86379de99 [ 206.704571][ T6515] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000008 [ 206.712722][ T6515] RBP: 00007fd8646fd090 R08: 0000000000000000 R09: 0000000000000000 [ 206.720748][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.728763][ T6515] R13: 00007fd863a26038 R14: 00007fd863a25fa0 R15: 00007ffc41a593c8 [ 206.736868][ T6515] [ 207.965390][ T6548] netlink: 'syz.4.765': attribute type 46 has an invalid length. [ 208.302170][ T46] wlan1: Trigger new scan to find an IBSS to join [ 208.545042][ T6548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.765'. [ 210.426674][ T6601] netlink: 'syz.2.782': attribute type 46 has an invalid length. [ 210.595026][ T6604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.782'. [ 211.031695][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.089025][ T6610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.238482][ T6610] syz.3.786 (6610) used greatest stack depth: 18896 bytes left [ 212.112279][ T6629] netlink: 'syz.4.792': attribute type 46 has an invalid length. [ 212.129695][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 212.135839][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 212.142250][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 212.148394][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 212.154821][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 212.170257][ T6630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.792'. [ 212.673702][ T6643] netlink: 'syz.4.797': attribute type 46 has an invalid length. [ 212.752070][ T6643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.797'. [ 212.844231][ T6645] netlink: 'syz.3.798': attribute type 46 has an invalid length. [ 212.902742][ T6645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.798'. [ 213.105690][ T6655] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 213.115179][ T6655] syzkaller0: linktype set to 8 [ 213.148780][ T6654] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.171687][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 214.008681][ T6674] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 214.021382][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 214.046319][ T6680] netlink: 'syz.4.814': attribute type 46 has an invalid length. [ 214.120032][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.814'. [ 214.230445][ T6684] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 214.246903][ T6684] syzkaller0: linktype set to 8 [ 214.384458][ T6687] netlink: 'syz.4.817': attribute type 39 has an invalid length. [ 214.537031][ T6697] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 214.561115][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 215.454705][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 215.700946][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 216.045630][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 216.102498][ T6719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.146236][ T6724] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 216.152679][ T6724] syzkaller0: linktype set to 8 [ 216.469491][ T6733] FAULT_INJECTION: forcing a failure. [ 216.469491][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.487388][ T6733] CPU: 0 PID: 6733 Comm: syz.0.835 Not tainted syzkaller #0 [ 216.494850][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.504966][ T6733] Call Trace: [ 216.508298][ T6733] [ 216.511320][ T6733] dump_stack_lvl+0x188/0x24e [ 216.516067][ T6733] ? show_regs_print_info+0x12/0x12 [ 216.521337][ T6733] ? load_image+0x410/0x410 [ 216.525993][ T6733] ? __might_fault+0xa6/0x120 [ 216.530821][ T6733] should_fail_ex+0x390/0x4c0 [ 216.535570][ T6733] copyin+0x1b/0x120 [ 216.539522][ T6733] _copy_from_iter+0x447/0x1130 [ 216.544449][ T6733] ? copyout_mc+0x110/0x110 [ 216.549014][ T6733] ? __virt_addr_valid+0x188/0x540 [ 216.554228][ T6733] ? __virt_addr_valid+0x188/0x540 [ 216.559514][ T6733] ? __virt_addr_valid+0x467/0x540 [ 216.564679][ T6733] ? __phys_addr_symbol+0x2b/0x70 [ 216.569764][ T6733] ? __check_object_size+0x4f6/0xa70 [ 216.575122][ T6733] netlink_sendmsg+0x755/0xbd0 [ 216.580060][ T6733] ? netlink_getsockopt+0x550/0x550 [ 216.585326][ T6733] ? apparmor_socket_sendmsg+0x8a/0x330 [ 216.590963][ T6733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.596301][ T6733] ? security_socket_sendmsg+0x7c/0xa0 [ 216.601818][ T6733] ? netlink_getsockopt+0x550/0x550 [ 216.607078][ T6733] ____sys_sendmsg+0x5ed/0x9a0 [ 216.611914][ T6733] ? __sys_sendmsg_sock+0x30/0x30 [ 216.617004][ T6733] ? __import_iovec+0x306/0x510 [ 216.621918][ T6733] ? import_iovec+0x6f/0xa0 [ 216.626491][ T6733] ___sys_sendmsg+0x2a2/0x360 [ 216.631244][ T6733] ? __sys_sendmsg+0x2a0/0x2a0 [ 216.636093][ T6733] ? __lock_acquire+0x7c40/0x7c40 [ 216.641219][ T6733] __se_sys_sendmsg+0x1c3/0x2b0 [ 216.646228][ T6733] ? __x64_sys_sendmsg+0x80/0x80 [ 216.651355][ T6733] ? lockdep_hardirqs_on+0x94/0x140 [ 216.656641][ T6733] do_syscall_64+0x4c/0xa0 [ 216.661114][ T6733] ? clear_bhb_loop+0x60/0xb0 [ 216.665858][ T6733] ? clear_bhb_loop+0x60/0xb0 [ 216.670597][ T6733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.676653][ T6733] RIP: 0033:0x7f480739de99 [ 216.681116][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.692253][ T6734] netlink: 196 bytes leftover after parsing attributes in process `syz.4.834'. [ 216.700765][ T6733] RSP: 002b:00007f4808337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.700800][ T6733] RAX: ffffffffffffffda RBX: 00007f4807625fa0 RCX: 00007f480739de99 [ 216.700817][ T6733] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 216.700831][ T6733] RBP: 00007f4808337090 R08: 0000000000000000 R09: 0000000000000000 [ 216.700846][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.717307][ T6736] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.718235][ T6733] R13: 00007f4807626038 R14: 00007f4807625fa0 R15: 00007ffc59c48488 [ 216.718274][ T6733] [ 216.782977][ T6734] netlink: 136956 bytes leftover after parsing attributes in process `syz.4.834'. [ 216.795298][ T6734] netlink: zone id is out of range [ 216.798946][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 216.806257][ T6734] netlink: zone id is out of range [ 216.814953][ T6734] netlink: zone id is out of range [ 216.820581][ T6734] netlink: zone id is out of range [ 216.825766][ T6734] netlink: zone id is out of range [ 216.835483][ T6734] netlink: zone id is out of range [ 216.842434][ T6734] netlink: zone id is out of range [ 216.848475][ T6734] netlink: zone id is out of range [ 216.861107][ T6734] netlink: zone id is out of range [ 217.150094][ T6748] netlink: 'syz.4.840': attribute type 8 has an invalid length. [ 217.179406][ T6748] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 217.187160][ T6748] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.840'. [ 217.329381][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 217.450862][ T6752] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.841'. [ 217.467239][ T6755] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 217.477269][ T6755] syzkaller0: linktype set to 8 [ 217.976662][ T6766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.848'. [ 218.156139][ T6772] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.197432][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 218.408082][ T6781] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.426303][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 218.486939][ T6785] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 218.499904][ T6785] syzkaller0: linktype set to 8 [ 219.449901][ T6810] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.792848][ T6818] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.064600][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 220.212338][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 220.269670][ T6827] FAULT_INJECTION: forcing a failure. [ 220.269670][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 220.301654][ T41] wlan1: Trigger new scan to find an IBSS to join [ 220.305563][ T6827] CPU: 0 PID: 6827 Comm: syz.2.870 Not tainted syzkaller #0 [ 220.315473][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.325583][ T6827] Call Trace: [ 220.328945][ T6827] [ 220.331917][ T6827] dump_stack_lvl+0x188/0x24e [ 220.336680][ T6827] ? show_regs_print_info+0x12/0x12 [ 220.341944][ T6827] ? load_image+0x410/0x410 [ 220.346548][ T6827] ? __might_sleep+0xd0/0xd0 [ 220.351195][ T6827] ? __lock_acquire+0x7c40/0x7c40 [ 220.356284][ T6827] ? __wake_up_common+0x5b/0x4d0 [ 220.361294][ T6827] should_fail_ex+0x390/0x4c0 [ 220.366036][ T6827] should_failslab+0x5/0x20 [ 220.370584][ T6827] slab_pre_alloc_hook+0x59/0x300 [ 220.375660][ T6827] ? widen_string+0x3b/0x2b0 [ 220.380292][ T6827] ? string+0x257/0x290 [ 220.384489][ T6827] ? __request_module+0x31c/0xa00 [ 220.389571][ T6827] __kmem_cache_alloc_node+0x4f/0x270 [ 220.395008][ T6827] ? __request_module+0x31c/0xa00 [ 220.400093][ T6827] kmalloc_trace+0x26/0xe0 [ 220.404570][ T6827] __request_module+0x31c/0xa00 [ 220.409523][ T6827] ? copy_regset_to_user+0x1f0/0x1f0 [ 220.414893][ T6827] ? apparmor_capable+0x12c/0x190 [ 220.419959][ T6827] ? bpf_lsm_capable+0x5/0x10 [ 220.424674][ T6827] ? security_capable+0x85/0xb0 [ 220.429587][ T6827] ? capable+0x84/0xe0 [ 220.433724][ T6827] ? dev_load+0x1d/0x1e0 [ 220.438058][ T6827] devinet_ioctl+0x104/0x1bf0 [ 220.442807][ T6827] ? _copy_from_user+0x10b/0x170 [ 220.447885][ T6827] ? get_user_ifreq+0x127/0x170 [ 220.452791][ T6827] inet_ioctl+0x2fa/0x460 [ 220.457167][ T6827] ? inet_shutdown+0x370/0x370 [ 220.462061][ T6827] ? slab_free_freelist_hook+0x133/0x1b0 [ 220.467742][ T6827] ? tomoyo_path_number_perm+0x4fb/0x650 [ 220.473414][ T6827] ? __kmem_cache_free+0xb6/0x200 [ 220.478483][ T6827] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 220.483990][ T6827] sock_do_ioctl+0xfb/0x320 [ 220.488537][ T6827] ? sock_show_fdinfo+0xb0/0xb0 [ 220.493522][ T6827] sock_ioctl+0x48a/0x700 [ 220.497935][ T6827] ? sock_poll+0x420/0x420 [ 220.502407][ T6827] ? bpf_lsm_file_ioctl+0x5/0x10 [ 220.507389][ T6827] ? security_file_ioctl+0x7c/0xa0 [ 220.512547][ T6827] ? sock_poll+0x420/0x420 [ 220.517097][ T6827] __se_sys_ioctl+0xfa/0x170 [ 220.521746][ T6827] do_syscall_64+0x4c/0xa0 [ 220.526207][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 220.530927][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 220.535663][ T6827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.541623][ T6827] RIP: 0033:0x7f25f079de99 [ 220.546169][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.565911][ T6827] RSP: 002b:00007f25f1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.574375][ T6827] RAX: ffffffffffffffda RBX: 00007f25f0a25fa0 RCX: 00007f25f079de99 [ 220.582410][ T6827] RDX: 0000200000000040 RSI: 000000000000891a RDI: 0000000000000003 [ 220.590508][ T6827] RBP: 00007f25f1737090 R08: 0000000000000000 R09: 0000000000000000 [ 220.598513][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.606605][ T6827] R13: 00007f25f0a26038 R14: 00007f25f0a25fa0 R15: 00007ffc27799b48 [ 220.614673][ T6827] [ 221.700318][ T6855] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.713985][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 221.868355][ T6859] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.888183][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 222.314511][ T6861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 222.408705][ T6861] net_ratelimit: 218 callbacks suppressed [ 222.408748][ T6861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.435244][ T6867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.885'. [ 222.757867][ T6877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.889'. [ 223.118218][ T6892] netlink: 144 bytes leftover after parsing attributes in process `syz.0.893'. [ 223.268901][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'. [ 223.509407][ T6898] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.896'. [ 223.556932][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'. [ 223.691678][ T6908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.899'. [ 224.192131][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.904'. [ 224.308908][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 224.415979][ T6924] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 224.905920][ T6935] FAULT_INJECTION: forcing a failure. [ 224.905920][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 224.949973][ T6935] CPU: 0 PID: 6935 Comm: syz.1.909 Not tainted syzkaller #0 [ 224.957365][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.967655][ T6935] Call Trace: [ 224.970984][ T6935] [ 224.973954][ T6935] dump_stack_lvl+0x188/0x24e [ 224.978699][ T6935] ? show_regs_print_info+0x12/0x12 [ 224.983952][ T6935] ? load_image+0x410/0x410 [ 224.988527][ T6935] ? __might_sleep+0xd0/0xd0 [ 224.993185][ T6935] ? __lock_acquire+0x7c40/0x7c40 [ 224.998283][ T6935] should_fail_ex+0x390/0x4c0 [ 225.003033][ T6935] should_failslab+0x5/0x20 [ 225.007585][ T6935] slab_pre_alloc_hook+0x59/0x300 [ 225.012678][ T6935] ? sctp_association_new+0x86/0x2520 [ 225.018129][ T6935] __kmem_cache_alloc_node+0x4f/0x270 [ 225.023655][ T6935] ? sctp_association_new+0x86/0x2520 [ 225.029072][ T6935] kmalloc_trace+0x26/0xe0 [ 225.033554][ T6935] sctp_association_new+0x86/0x2520 [ 225.038815][ T6935] sctp_connect_new_asoc+0x2da/0x6a0 [ 225.044164][ T6935] ? __sctp_connect+0xd80/0xd80 [ 225.049146][ T6935] ? __local_bh_enable_ip+0x136/0x1c0 [ 225.054564][ T6935] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 225.060150][ T6935] ? security_sctp_bind_connect+0x85/0xb0 [ 225.065921][ T6935] sctp_sendmsg+0x1686/0x2940 [ 225.070760][ T6935] ? sctp_getsockopt+0x8a0/0x8a0 [ 225.075735][ T6935] ? __might_fault+0xa6/0x120 [ 225.080450][ T6935] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 225.086898][ T6935] ? aa_sock_msg_perm+0x94/0x150 [ 225.091909][ T6935] ? inet_sendmsg+0xca/0x2a0 [ 225.096534][ T6935] ? inet_send_prepare+0x250/0x250 [ 225.101673][ T6935] ____sys_sendmsg+0x5ed/0x9a0 [ 225.106490][ T6935] ? __sys_sendmsg_sock+0x30/0x30 [ 225.111554][ T6935] ? __import_iovec+0x306/0x510 [ 225.116624][ T6935] ? import_iovec+0x6f/0xa0 [ 225.121167][ T6935] ___sys_sendmsg+0x2a2/0x360 [ 225.125893][ T6935] ? __sys_sendmsg+0x2a0/0x2a0 [ 225.130709][ T6935] ? __lock_acquire+0x7c40/0x7c40 [ 225.135817][ T6935] __se_sys_sendmsg+0x1c3/0x2b0 [ 225.140717][ T6935] ? perf_trace_preemptirq_template+0x268/0x320 [ 225.147285][ T6935] ? __x64_sys_sendmsg+0x80/0x80 [ 225.152290][ T6935] ? lockdep_hardirqs_on+0x94/0x140 [ 225.157693][ T6935] do_syscall_64+0x4c/0xa0 [ 225.162238][ T6935] ? clear_bhb_loop+0x60/0xb0 [ 225.167034][ T6935] ? clear_bhb_loop+0x60/0xb0 [ 225.171748][ T6935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.177678][ T6935] RIP: 0033:0x7f88ed19de99 [ 225.182141][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.201789][ T6935] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.210230][ T6935] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 225.218228][ T6935] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000005 [ 225.226224][ T6935] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.234222][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.242243][ T6935] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 225.250470][ T6935] [ 225.329719][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 225.493956][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.520843][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.548652][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.573621][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.340298][ T4298] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 226.877060][ T6972] __nla_validate_parse: 7 callbacks suppressed [ 226.877085][ T6972] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.921'. [ 226.903012][ T6972] netlink: 'syz.0.921': attribute type 15 has an invalid length. [ 226.911501][ T6972] netlink: 'syz.0.921': attribute type 7 has an invalid length. [ 226.956323][ T6971] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.032794][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 227.286877][ T6980] netlink: 152 bytes leftover after parsing attributes in process `syz.0.925'. [ 227.816594][ T6984] netlink: 144 bytes leftover after parsing attributes in process `syz.2.927'. [ 228.022797][ T6994] netlink: 'syz.1.930': attribute type 46 has an invalid length. [ 228.077896][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.930'. [ 228.289843][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 228.959860][ T7016] tap0: tun_chr_ioctl cmd 1074025677 [ 228.974159][ T7016] tap0: linktype set to 776 [ 229.046789][ T7022] netlink: 'syz.3.942': attribute type 46 has an invalid length. [ 229.085305][ T7023] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.117882][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 229.138568][ T7024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.942'. [ 229.204620][ T41] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 229.341116][ T7026] netlink: 'syz.3.944': attribute type 46 has an invalid length. [ 229.476268][ T7031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.944'. [ 229.833237][ T7030] netlink: 144 bytes leftover after parsing attributes in process `syz.4.943'. [ 230.744756][ T7061] netlink: 'syz.1.955': attribute type 46 has an invalid length. [ 230.805529][ T7061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.955'. [ 231.373668][ T7068] FAULT_INJECTION: forcing a failure. [ 231.373668][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.409489][ T7068] CPU: 0 PID: 7068 Comm: syz.2.957 Not tainted syzkaller #0 [ 231.416855][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.427225][ T7068] Call Trace: [ 231.430546][ T7068] [ 231.433523][ T7068] dump_stack_lvl+0x188/0x24e [ 231.438295][ T7068] ? show_regs_print_info+0x12/0x12 [ 231.443635][ T7068] ? load_image+0x410/0x410 [ 231.448186][ T7068] ? __lock_acquire+0x7c40/0x7c40 [ 231.453274][ T7068] should_fail_ex+0x390/0x4c0 [ 231.458022][ T7068] _copy_to_user+0x2c/0x130 [ 231.462585][ T7068] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 231.468284][ T7068] ? sock_gen_cookie+0x60/0x60 [ 231.473107][ T7068] ? sock_gen_cookie+0x60/0x60 [ 231.478056][ T7068] bpf_prog_test_run+0x31c/0x390 [ 231.483172][ T7068] __sys_bpf+0x62b/0x780 [ 231.487576][ T7068] ? bpf_link_show_fdinfo+0x380/0x380 [ 231.493033][ T7068] ? lock_chain_count+0x20/0x20 [ 231.497948][ T7068] __x64_sys_bpf+0x78/0x90 [ 231.502409][ T7068] do_syscall_64+0x4c/0xa0 [ 231.506871][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 231.511595][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 231.516321][ T7068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.522341][ T7068] RIP: 0033:0x7f25f079de99 [ 231.526801][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.546536][ T7068] RSP: 002b:00007f25f1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.555075][ T7068] RAX: ffffffffffffffda RBX: 00007f25f0a25fa0 RCX: 00007f25f079de99 [ 231.563182][ T7068] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a [ 231.571183][ T7068] RBP: 00007f25f1737090 R08: 0000000000000000 R09: 0000000000000000 [ 231.579529][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.587525][ T7068] R13: 00007f25f0a26038 R14: 00007f25f0a25fa0 R15: 00007ffc27799b48 [ 231.595576][ T7068] [ 232.048298][ T7070] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.370398][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 232.472412][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.480267][ T7085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.497236][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.505370][ T7085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.641532][ T7083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.968'. [ 234.954941][ T7107] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.120650][ T7114] netlink: 'syz.1.970': attribute type 46 has an invalid length. [ 235.264725][ T7114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.970'. [ 236.035304][ T7124] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.092288][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 236.204851][ T7128] FAULT_INJECTION: forcing a failure. [ 236.204851][ T7128] name failslab, interval 1, probability 0, space 0, times 0 [ 236.239009][ T7128] CPU: 0 PID: 7128 Comm: syz.1.976 Not tainted syzkaller #0 [ 236.246395][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 236.256501][ T7128] Call Trace: [ 236.259831][ T7128] [ 236.262811][ T7128] dump_stack_lvl+0x188/0x24e [ 236.267562][ T7128] ? show_regs_print_info+0x12/0x12 [ 236.272825][ T7128] ? load_image+0x410/0x410 [ 236.277438][ T7128] ? _printk+0x1/0x130 [ 236.281589][ T7128] should_fail_ex+0x390/0x4c0 [ 236.286348][ T7128] should_failslab+0x5/0x20 [ 236.290921][ T7128] slab_pre_alloc_hook+0x59/0x300 [ 236.296017][ T7128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.302272][ T7128] ? bpf_test_init+0x9f/0x140 [ 236.307004][ T7128] __kmem_cache_alloc_node+0x4f/0x270 [ 236.312441][ T7128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.318705][ T7128] ? bpf_test_init+0x9f/0x140 [ 236.323528][ T7128] __kmalloc+0xa3/0x240 [ 236.327761][ T7128] bpf_test_init+0x9f/0x140 [ 236.332423][ T7128] bpf_prog_test_run_xdp+0x488/0xf80 [ 236.337768][ T7128] ? __lock_acquire+0x7c40/0x7c40 [ 236.342884][ T7128] ? dev_put+0x80/0x80 [ 236.347027][ T7128] ? dev_put+0x80/0x80 [ 236.351161][ T7128] bpf_prog_test_run+0x31c/0x390 [ 236.356265][ T7128] __sys_bpf+0x62b/0x780 [ 236.360578][ T7128] ? bpf_link_show_fdinfo+0x380/0x380 [ 236.366026][ T7128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 236.372261][ T7128] __x64_sys_bpf+0x78/0x90 [ 236.376742][ T7128] do_syscall_64+0x4c/0xa0 [ 236.381225][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 236.385957][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 236.390696][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.396650][ T7128] RIP: 0033:0x7f88ed19de99 [ 236.401113][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.420784][ T7128] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.429271][ T7128] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 236.437322][ T7128] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 236.445365][ T7128] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 236.453759][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.461783][ T7128] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 236.470028][ T7128] [ 238.766559][ T7168] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.987'. [ 239.175369][ T7172] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.243759][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 240.172680][ T7180] netlink: 'syz.4.992': attribute type 46 has an invalid length. [ 240.185093][ T7183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.992'. [ 240.524874][ T7190] netlink: 'syz.4.995': attribute type 7 has an invalid length. [ 241.071145][ T7207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1000'. [ 241.340112][ T7209] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1001'. [ 241.824139][ T7218] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.887229][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 241.945072][ T7221] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1005'. [ 241.997671][ T7229] netlink: 'syz.2.1007': attribute type 46 has an invalid length. [ 242.056868][ T7229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 243.746901][ T7255] netlink: 'syz.2.1013': attribute type 7 has an invalid length. [ 243.790677][ T7248] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.122385][ T7260] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 244.233456][ T7260] team0: Port device macvlan0 added [ 244.289615][ T9] wlan1: Trigger new scan to find an IBSS to join [ 244.308808][ T7260] delete_channel: no stack [ 244.534783][ T7267] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1016'. [ 244.808389][ T7271] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 244.855621][ T7275] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.885908][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 244.956986][ T7273] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1019'. [ 245.178132][ T7278] netlink: 'syz.0.1022': attribute type 46 has an invalid length. [ 245.225522][ T7278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1022'. [ 246.300593][ T7291] netlink: 'syz.3.1028': attribute type 7 has an invalid length. [ 247.225424][ T7303] netlink: 'syz.0.1030': attribute type 46 has an invalid length. [ 247.252068][ T7303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1030'. [ 247.261925][ T76] wlan1: Trigger new scan to find an IBSS to join [ 247.591930][ T7307] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 247.622340][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 247.997599][ T7317] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 248.601152][ T7328] netlink: 'syz.1.1041': attribute type 21 has an invalid length. [ 248.640437][ T7328] netlink: 'syz.1.1041': attribute type 7 has an invalid length. [ 248.791508][ T7333] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 248.820732][ T7333] FAULT_INJECTION: forcing a failure. [ 248.820732][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 248.902617][ T7333] CPU: 1 PID: 7333 Comm: syz.3.1042 Not tainted syzkaller #0 [ 248.910324][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 248.920719][ T7333] Call Trace: [ 248.924053][ T7333] [ 248.927040][ T7333] dump_stack_lvl+0x188/0x24e [ 248.931792][ T7333] ? show_regs_print_info+0x12/0x12 [ 248.937059][ T7333] ? load_image+0x410/0x410 [ 248.941624][ T7333] ? __might_sleep+0xd0/0xd0 [ 248.946296][ T7333] ? __lock_acquire+0x7c40/0x7c40 [ 248.951418][ T7333] should_fail_ex+0x390/0x4c0 [ 248.956198][ T7333] should_failslab+0x5/0x20 [ 248.960763][ T7333] slab_pre_alloc_hook+0x59/0x300 [ 248.965893][ T7333] kmem_cache_alloc_node+0x5a/0x310 [ 248.971161][ T7333] ? if_nlmsg_size+0x659/0x960 [ 248.976015][ T7333] ? __alloc_skb+0xf9/0x7d0 [ 248.980593][ T7333] __alloc_skb+0xf9/0x7d0 [ 248.984997][ T7333] rtmsg_ifinfo_build_skb+0x80/0x190 [ 248.991939][ T7333] rtnetlink_event+0xd1/0x1a0 [ 248.996894][ T7333] raw_notifier_call_chain+0xcb/0x160 [ 249.002354][ T7333] __netdev_upper_dev_unlink+0x202/0x7b0 [ 249.008256][ T7333] ? netdev_upper_dev_unlink+0xe0/0xe0 [ 249.014425][ T7333] ? _printk+0xda/0x130 [ 249.018742][ T7333] ? netdev_upper_dev_unlink+0x88/0xe0 [ 249.024276][ T7333] netdev_upper_dev_unlink+0x96/0xe0 [ 249.029631][ T7333] ? netdev_master_upper_dev_link+0x100/0x100 [ 249.035768][ T7333] ? lockdep_rtnl_is_held+0x22/0x30 [ 249.041127][ T7333] ? macsec_del_dev+0x2f1/0x300 [ 249.046040][ T7333] macsec_common_dellink+0x33e/0x5f0 [ 249.051404][ T7333] ? macsec_decrypt_done+0xc20/0xc20 [ 249.056758][ T7333] ? mark_lock+0x94/0x320 [ 249.061158][ T7333] ? __nla_validate+0x50/0x50 [ 249.065919][ T7333] ? __lock_acquire+0x1465/0x7c40 [ 249.071045][ T7333] macsec_dellink+0xe5/0x140 [ 249.075726][ T7333] ? macsec_changelink+0x390/0x390 [ 249.081366][ T7333] rtnl_dellink+0x54c/0x830 [ 249.086067][ T7333] ? rtnl_newlink+0x1f90/0x1f90 [ 249.090996][ T7333] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 249.097781][ T7333] ? rtnl_newlink+0x1f90/0x1f90 [ 249.102708][ T7333] rtnetlink_rcv_msg+0x863/0xfb0 [ 249.107729][ T7333] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 249.112927][ T7333] ? rtnetlink_bind+0x80/0x80 [ 249.117695][ T7333] ? __local_bh_enable_ip+0x136/0x1c0 [ 249.123143][ T7333] ? lockdep_hardirqs_on+0x94/0x140 [ 249.128410][ T7333] ? __local_bh_enable_ip+0x136/0x1c0 [ 249.133851][ T7333] ? _local_bh_enable+0xa0/0xa0 [ 249.138773][ T7333] ? __dev_queue_xmit+0x281/0x3810 [ 249.143950][ T7333] ? __dev_queue_xmit+0x281/0x3810 [ 249.149212][ T7333] ? __dev_queue_xmit+0x1d84/0x3810 [ 249.154495][ T7333] ? __dev_queue_xmit+0x281/0x3810 [ 249.159768][ T7333] ? ref_tracker_free+0x682/0x830 [ 249.164888][ T7333] ? refcount_inc+0x70/0x70 [ 249.170063][ T7333] ? memcpy+0x3c/0x60 [ 249.174208][ T7333] ? __copy_skb_header+0x3ba/0x4f0 [ 249.179394][ T7333] ? __skb_clone+0x446/0x6c0 [ 249.184061][ T7333] netlink_rcv_skb+0x1ef/0x440 [ 249.188895][ T7333] ? rtnetlink_bind+0x80/0x80 [ 249.193737][ T7333] ? netlink_ack+0x1160/0x1160 [ 249.198582][ T7333] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.203943][ T7333] netlink_unicast+0x7ad/0x920 [ 249.208788][ T7333] netlink_sendmsg+0x8ad/0xbd0 [ 249.213639][ T7333] ? netlink_getsockopt+0x550/0x550 [ 249.219058][ T7333] ? apparmor_socket_sendmsg+0x8a/0x330 [ 249.224658][ T7333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 249.229973][ T7333] ? security_socket_sendmsg+0x7c/0xa0 [ 249.235467][ T7333] ? netlink_getsockopt+0x550/0x550 [ 249.240834][ T7333] ____sys_sendmsg+0x5ed/0x9a0 [ 249.245739][ T7333] ? __sys_sendmsg_sock+0x30/0x30 [ 249.250800][ T7333] ? __import_iovec+0x306/0x510 [ 249.255702][ T7333] ? import_iovec+0x6f/0xa0 [ 249.260249][ T7333] ___sys_sendmsg+0x2a2/0x360 [ 249.264982][ T7333] ? __sys_sendmsg+0x2a0/0x2a0 [ 249.269892][ T7333] ? __lock_acquire+0x7c40/0x7c40 [ 249.274977][ T7333] __se_sys_sendmsg+0x1c3/0x2b0 [ 249.279959][ T7333] ? ct_nmi_exit+0x145/0x1c0 [ 249.284587][ T7333] ? __x64_sys_sendmsg+0x80/0x80 [ 249.289677][ T7333] ? lockdep_hardirqs_on+0x94/0x140 [ 249.294993][ T7333] do_syscall_64+0x4c/0xa0 [ 249.299451][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 249.304158][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 249.309073][ T7333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.315046][ T7333] RIP: 0033:0x7f8f8ab9de99 [ 249.319506][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.339178][ T7333] RSP: 002b:00007f8f8bb08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.347834][ T7333] RAX: ffffffffffffffda RBX: 00007f8f8ae25fa0 RCX: 00007f8f8ab9de99 [ 249.355853][ T7333] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 249.363897][ T7333] RBP: 00007f8f8bb08090 R08: 0000000000000000 R09: 0000000000000000 [ 249.371912][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.379969][ T7333] R13: 00007f8f8ae26038 R14: 00007f8f8ae25fa0 R15: 00007fffec86db98 [ 249.388024][ T7333] [ 249.395316][ T9] wlan1: Trigger new scan to find an IBSS to join [ 249.673522][ T7330] netlink: 'syz.0.1043': attribute type 7 has an invalid length. [ 249.739552][ T7345] netlink: 'syz.2.1045': attribute type 46 has an invalid length. [ 249.767975][ T7346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1045'. [ 250.290125][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 250.702574][ T7359] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1048'. [ 251.288107][ T4341] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 251.818280][ T7381] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 251.838707][ T7381] device veth1_macvtap left promiscuous mode [ 252.376875][ T7385] netlink: 'syz.2.1056': attribute type 17 has an invalid length. [ 252.396838][ T7385] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1056'. [ 252.427792][ T7388] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 254.290249][ T9] wlan1: Trigger new scan to find an IBSS to join [ 254.322842][ T7407] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1063'. [ 254.383050][ T7414] netlink: 'syz.3.1064': attribute type 29 has an invalid length. [ 254.462955][ T7414] netlink: 'syz.3.1064': attribute type 29 has an invalid length. [ 254.540701][ T7416] netlink: 'syz.3.1064': attribute type 29 has an invalid length. [ 254.580253][ T7418] netlink: 'syz.3.1064': attribute type 29 has an invalid length. [ 254.665907][ T7414] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 254.826396][ T7423] netlink: 'syz.1.1068': attribute type 46 has an invalid length. [ 254.930582][ T7423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1068'. [ 255.329791][ T76] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 255.824898][ T7447] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 255.848465][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1075'. [ 255.867099][ T7447] device team0 entered promiscuous mode [ 255.879623][ T7447] device team_slave_0 entered promiscuous mode [ 255.911160][ T7447] device team_slave_1 entered promiscuous mode [ 255.967554][ T7447] bridge0: port 3(team0) entered blocking state [ 255.977423][ T7447] bridge0: port 3(team0) entered disabled state [ 256.190620][ T7447] bridge0: port 3(team0) entered blocking state [ 256.199365][ T7447] bridge0: port 3(team0) entered forwarding state [ 257.402507][ T7460] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1079'. [ 257.934814][ T7469] netlink: 'syz.0.1082': attribute type 46 has an invalid length. [ 257.980447][ T7464] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1081'. [ 258.016136][ T7468] device syzkaller0 entered promiscuous mode [ 258.034666][ T7469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1082'. [ 258.149809][ T7470] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1080'. [ 258.189822][ T7465] delete_channel: no stack [ 258.563076][ T7487] FAULT_INJECTION: forcing a failure. [ 258.563076][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 258.615755][ T7487] CPU: 0 PID: 7487 Comm: syz.2.1091 Not tainted syzkaller #0 [ 258.623241][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.633462][ T7487] Call Trace: [ 258.636786][ T7487] [ 258.639758][ T7487] dump_stack_lvl+0x188/0x24e [ 258.644511][ T7487] ? show_regs_print_info+0x12/0x12 [ 258.649779][ T7487] ? load_image+0x410/0x410 [ 258.654342][ T7487] ? __might_sleep+0xd0/0xd0 [ 258.659024][ T7487] ? __lock_acquire+0x7c40/0x7c40 [ 258.664110][ T7487] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 258.670063][ T7487] ? is_dynamic_key+0x260/0x260 [ 258.674997][ T7487] should_fail_ex+0x390/0x4c0 [ 258.679750][ T7487] should_failslab+0x5/0x20 [ 258.684299][ T7487] slab_pre_alloc_hook+0x59/0x300 [ 258.689419][ T7487] kmem_cache_alloc_node+0x5a/0x310 [ 258.694679][ T7487] ? __alloc_skb+0xf9/0x7d0 [ 258.699242][ T7487] __alloc_skb+0xf9/0x7d0 [ 258.703633][ T7487] __ip_append_data+0x26d7/0x38d0 [ 258.708993][ T7487] ? ip_route_output_key_hash+0x139/0x330 [ 258.714779][ T7487] ? raw_send_hdrinc+0x1130/0x1130 [ 258.719943][ T7487] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 258.725993][ T7487] ? ip_setup_cork+0x850/0x850 [ 258.730812][ T7487] ? ipv4_mtu+0x30c/0x420 [ 258.735188][ T7487] ? ip_setup_cork+0x528/0x850 [ 258.740018][ T7487] ip_append_data+0x132/0x1a0 [ 258.744772][ T7487] ? raw_send_hdrinc+0x1130/0x1130 [ 258.749954][ T7487] raw_sendmsg+0x12c8/0x1940 [ 258.754625][ T7487] ? compat_raw_ioctl+0x60/0x60 [ 258.759543][ T7487] ? aa_sk_perm+0x81f/0x950 [ 258.764110][ T7487] ? __might_fault+0xa6/0x120 [ 258.768851][ T7487] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 258.775324][ T7487] ? aa_sock_msg_perm+0x94/0x150 [ 258.780329][ T7487] ? sock_rps_record_flow+0x19/0x3f0 [ 258.785677][ T7487] ? inet_sendmsg+0x7a/0x2a0 [ 258.790320][ T7487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.795752][ T7487] ? inet_send_prepare+0x250/0x250 [ 258.800921][ T7487] ____sys_sendmsg+0x5ed/0x9a0 [ 258.805762][ T7487] ? __sys_sendmsg_sock+0x30/0x30 [ 258.810845][ T7487] ? __import_iovec+0x306/0x510 [ 258.815749][ T7487] ? import_iovec+0x6f/0xa0 [ 258.820318][ T7487] ___sys_sendmsg+0x2a2/0x360 [ 258.825057][ T7487] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.829890][ T7487] ? __lock_acquire+0x7c40/0x7c40 [ 258.834979][ T7487] __se_sys_sendmsg+0x1c3/0x2b0 [ 258.839879][ T7487] ? ct_nmi_exit+0x145/0x1c0 [ 258.844600][ T7487] ? __x64_sys_sendmsg+0x80/0x80 [ 258.849600][ T7487] ? lockdep_hardirqs_on+0x94/0x140 [ 258.854841][ T7487] do_syscall_64+0x4c/0xa0 [ 258.859296][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 258.864011][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 258.868719][ T7487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.874654][ T7487] RIP: 0033:0x7f25f079de99 [ 258.879106][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.898759][ T7487] RSP: 002b:00007f25f1737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.907243][ T7487] RAX: ffffffffffffffda RBX: 00007f25f0a25fa0 RCX: 00007f25f079de99 [ 258.915251][ T7487] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 258.923343][ T7487] RBP: 00007f25f1737090 R08: 0000000000000000 R09: 0000000000000000 [ 258.931342][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.939352][ T7487] R13: 00007f25f0a26038 R14: 00007f25f0a25fa0 R15: 00007ffc27799b48 [ 258.947805][ T7487] [ 258.976800][ T7490] netlink: 'syz.3.1092': attribute type 3 has an invalid length. [ 259.043216][ T7490] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1092'. [ 259.489377][ T7503] netlink: 'syz.1.1096': attribute type 46 has an invalid length. [ 259.540699][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1096'. [ 260.130373][ T7517] FAULT_INJECTION: forcing a failure. [ 260.130373][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 260.143560][ T7517] CPU: 1 PID: 7517 Comm: syz.1.1101 Not tainted syzkaller #0 [ 260.151014][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 260.161115][ T7517] Call Trace: [ 260.164476][ T7517] [ 260.167450][ T7517] dump_stack_lvl+0x188/0x24e [ 260.172199][ T7517] ? show_regs_print_info+0x12/0x12 [ 260.177469][ T7517] ? load_image+0x410/0x410 [ 260.182076][ T7517] should_fail_ex+0x390/0x4c0 [ 260.187027][ T7517] should_failslab+0x5/0x20 [ 260.191593][ T7517] slab_pre_alloc_hook+0x59/0x300 [ 260.196676][ T7517] ? nsim_fib_event_nb+0xd8/0x1040 [ 260.201860][ T7517] __kmem_cache_alloc_node+0x4f/0x270 [ 260.207299][ T7517] ? nsim_fib_event_nb+0xd8/0x1040 [ 260.212472][ T7517] kmalloc_trace+0x26/0xe0 [ 260.217047][ T7517] nsim_fib_event_nb+0xd8/0x1040 [ 260.222060][ T7517] ? fib6_add_1+0xde0/0x13c0 [ 260.226720][ T7517] atomic_notifier_call_chain+0x17a/0x2b0 [ 260.232507][ T7517] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 260.238382][ T7517] call_fib_notifiers+0x2d/0x60 [ 260.243335][ T7517] fib6_add+0x1bfd/0x3ed0 [ 260.247794][ T7517] ? fib6_update_sernum_stub+0x110/0x110 [ 260.253491][ T7517] ? do_raw_spin_lock+0x128/0x2f0 [ 260.258682][ T7517] ? ip6_route_add+0x71/0x130 [ 260.263436][ T7517] ip6_route_add+0x86/0x130 [ 260.268014][ T7517] ipv6_route_ioctl+0x3ab/0x500 [ 260.272945][ T7517] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 260.278784][ T7517] ? __might_fault+0xa6/0x120 [ 260.283516][ T7517] ? __might_fault+0xc2/0x120 [ 260.288335][ T7517] ? __might_fault+0xa6/0x120 [ 260.293173][ T7517] inet6_ioctl+0x207/0x280 [ 260.297661][ T7517] ? __kmem_cache_free+0xb6/0x200 [ 260.302753][ T7517] ? inet6_getname+0x670/0x670 [ 260.307610][ T7517] ? tomoyo_path_number_perm+0x205/0x650 [ 260.313335][ T7517] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 260.318894][ T7517] sock_do_ioctl+0xfb/0x320 [ 260.323461][ T7517] ? sock_show_fdinfo+0xb0/0xb0 [ 260.328401][ T7517] sock_ioctl+0x48a/0x700 [ 260.332784][ T7517] ? sock_poll+0x420/0x420 [ 260.337349][ T7517] ? bpf_lsm_file_ioctl+0x5/0x10 [ 260.342349][ T7517] ? security_file_ioctl+0x7c/0xa0 [ 260.347525][ T7517] ? sock_poll+0x420/0x420 [ 260.352015][ T7517] __se_sys_ioctl+0xfa/0x170 [ 260.356670][ T7517] do_syscall_64+0x4c/0xa0 [ 260.361245][ T7517] ? clear_bhb_loop+0x60/0xb0 [ 260.366071][ T7517] ? clear_bhb_loop+0x60/0xb0 [ 260.370817][ T7517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.376783][ T7517] RIP: 0033:0x7f88ed19de99 [ 260.381247][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.401095][ T7517] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.409583][ T7517] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 260.417619][ T7517] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 260.425740][ T7517] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 260.433773][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.441985][ T7517] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 260.450052][ T7517] [ 260.756526][ T7530] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1108'. [ 261.201936][ T7542] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1113'. [ 261.212546][ T7542] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 261.253354][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.259930][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.560972][ T7546] netlink: 'syz.4.1114': attribute type 10 has an invalid length. [ 261.576345][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1114'. [ 261.586952][ T7546] device team0 entered promiscuous mode [ 261.596870][ T7546] device team_slave_0 entered promiscuous mode [ 261.607145][ T7546] device team_slave_1 entered promiscuous mode [ 261.633964][ T7546] bridge0: port 3(team0) entered blocking state [ 261.647304][ T7546] bridge0: port 3(team0) entered disabled state [ 261.694004][ T7546] bridge0: port 3(team0) entered blocking state [ 261.701592][ T7546] bridge0: port 3(team0) entered forwarding state [ 261.859700][ T7552] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1115'. [ 262.802385][ T7566] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1121'. [ 264.281335][ T7602] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 264.294787][ T7602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 264.305580][ T7602] device team0 entered promiscuous mode [ 264.314898][ T7602] device team_slave_0 entered promiscuous mode [ 264.327499][ T7602] device team_slave_1 entered promiscuous mode [ 264.340996][ T7602] device macvlan0 entered promiscuous mode [ 264.382223][ T7602] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.404767][ T7605] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1132'. [ 264.983739][ T7618] FAULT_INJECTION: forcing a failure. [ 264.983739][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 264.997027][ T7618] CPU: 1 PID: 7618 Comm: syz.4.1138 Not tainted syzkaller #0 [ 265.004651][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 265.014775][ T7618] Call Trace: [ 265.018195][ T7618] [ 265.021227][ T7618] dump_stack_lvl+0x188/0x24e [ 265.025983][ T7618] ? show_regs_print_info+0x12/0x12 [ 265.031282][ T7618] ? load_image+0x410/0x410 [ 265.035953][ T7618] ? __might_sleep+0xd0/0xd0 [ 265.040610][ T7618] ? __lock_acquire+0x7c40/0x7c40 [ 265.045720][ T7618] should_fail_ex+0x390/0x4c0 [ 265.050481][ T7618] should_failslab+0x5/0x20 [ 265.055076][ T7618] slab_pre_alloc_hook+0x59/0x300 [ 265.060184][ T7618] ? sctp_association_new+0x86/0x2520 [ 265.065641][ T7618] __kmem_cache_alloc_node+0x4f/0x270 [ 265.071090][ T7618] ? sctp_association_new+0x86/0x2520 [ 265.076569][ T7618] kmalloc_trace+0x26/0xe0 [ 265.081081][ T7618] sctp_association_new+0x86/0x2520 [ 265.086375][ T7618] sctp_connect_new_asoc+0x2da/0x6a0 [ 265.091834][ T7618] ? __sctp_connect+0xd80/0xd80 [ 265.096759][ T7618] ? __local_bh_enable_ip+0x136/0x1c0 [ 265.102298][ T7618] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 265.107918][ T7618] ? security_sctp_bind_connect+0x85/0xb0 [ 265.113726][ T7618] sctp_sendmsg+0x1686/0x2940 [ 265.118495][ T7618] ? sctp_getsockopt+0x8a0/0x8a0 [ 265.123528][ T7618] ? __might_fault+0xa6/0x120 [ 265.128290][ T7618] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 265.134800][ T7618] ? aa_sock_msg_perm+0x94/0x150 [ 265.139821][ T7618] ? inet_sendmsg+0xca/0x2a0 [ 265.144564][ T7618] ? inet_send_prepare+0x250/0x250 [ 265.149847][ T7618] ____sys_sendmsg+0x5ed/0x9a0 [ 265.154747][ T7618] ? __sys_sendmsg_sock+0x30/0x30 [ 265.159851][ T7618] ? __import_iovec+0x306/0x510 [ 265.164785][ T7618] ? import_iovec+0x6f/0xa0 [ 265.169363][ T7618] ___sys_sendmsg+0x2a2/0x360 [ 265.174240][ T7618] ? __sys_sendmsg+0x2a0/0x2a0 [ 265.179106][ T7618] ? __lock_acquire+0x7c40/0x7c40 [ 265.184236][ T7618] __se_sys_sendmsg+0x1c3/0x2b0 [ 265.189348][ T7618] ? __x64_sys_sendmsg+0x80/0x80 [ 265.194382][ T7618] ? lockdep_hardirqs_on+0x94/0x140 [ 265.199654][ T7618] do_syscall_64+0x4c/0xa0 [ 265.204180][ T7618] ? clear_bhb_loop+0x60/0xb0 [ 265.208925][ T7618] ? clear_bhb_loop+0x60/0xb0 [ 265.213765][ T7618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.219845][ T7618] RIP: 0033:0x7fd86379de99 [ 265.224318][ T7618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.244111][ T7618] RSP: 002b:00007fd8646fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.252607][ T7618] RAX: ffffffffffffffda RBX: 00007fd863a25fa0 RCX: 00007fd86379de99 [ 265.260645][ T7618] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 265.268709][ T7618] RBP: 00007fd8646fd090 R08: 0000000000000000 R09: 0000000000000000 [ 265.276736][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.284764][ T7618] R13: 00007fd863a26038 R14: 00007fd863a25fa0 R15: 00007ffc41a593c8 [ 265.292828][ T7618] [ 265.555678][ T7620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1139'. [ 265.565637][ T7624] netlink: 'syz.4.1141': attribute type 46 has an invalid length. [ 265.596684][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1141'. [ 265.642161][ T7623] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.666775][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 265.816174][ T7628] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1143'. [ 265.837652][ T7628] openvswitch: netlink: Key type 386 is out of range max 32 [ 265.923303][ T7631] device syzkaller0 entered promiscuous mode [ 265.943258][ T4282] Bluetooth: hci4: ISO packet for unknown connection handle 17 [ 268.291995][ T46] wlan1: Trigger new scan to find an IBSS to join [ 268.608545][ T7653] netlink: 'syz.3.1152': attribute type 10 has an invalid length. [ 268.629373][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'. [ 268.644235][ T7653] device team0 entered promiscuous mode [ 268.659423][ T7653] device team_slave_0 entered promiscuous mode [ 268.676170][ T7653] device team_slave_1 entered promiscuous mode [ 268.697097][ T7653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.719807][ T7659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1153'. [ 268.770145][ T7661] netlink: 'syz.2.1154': attribute type 46 has an invalid length. [ 268.800862][ T7661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1154'. [ 268.908021][ T7663] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 268.997500][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 270.413036][ T7698] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1168'. [ 270.484020][ T7700] netlink: 'syz.3.1169': attribute type 46 has an invalid length. [ 270.494645][ T7700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1169'. [ 270.715710][ T7704] netlink: 'syz.3.1180': attribute type 46 has an invalid length. [ 270.726285][ T7704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1180'. [ 270.945973][ T7706] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.985115][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 271.480772][ T7722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1179'. [ 272.093278][ T7731] netlink: 'syz.1.1183': attribute type 46 has an invalid length. [ 272.107634][ T7731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1183'. [ 272.202391][ T7733] FAULT_INJECTION: forcing a failure. [ 272.202391][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.230090][ T7733] CPU: 0 PID: 7733 Comm: syz.4.1185 Not tainted syzkaller #0 [ 272.237566][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 272.247780][ T7733] Call Trace: [ 272.251113][ T7733] [ 272.254101][ T7733] dump_stack_lvl+0x188/0x24e [ 272.258862][ T7733] ? show_regs_print_info+0x12/0x12 [ 272.264171][ T7733] ? load_image+0x410/0x410 [ 272.268793][ T7733] ? __lock_acquire+0x7c40/0x7c40 [ 272.273911][ T7733] should_fail_ex+0x390/0x4c0 [ 272.278675][ T7733] _copy_from_user+0x2c/0x170 [ 272.283434][ T7733] iovec_from_user+0x143/0x360 [ 272.288375][ T7733] __import_iovec+0x6c/0x510 [ 272.293087][ T7733] import_iovec+0x6f/0xa0 [ 272.297498][ T7733] ___sys_sendmsg+0x252/0x360 [ 272.302253][ T7733] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.307089][ T7733] ? irqentry_enter+0x33/0x50 [ 272.311820][ T7733] ? rcu_is_watching+0x11/0xa0 [ 272.316649][ T7733] ? __se_sys_sendmsg+0x40/0x2b0 [ 272.321642][ T7733] __se_sys_sendmsg+0x1c3/0x2b0 [ 272.326709][ T7733] ? __x64_sys_sendmsg+0x80/0x80 [ 272.331974][ T7733] ? syscall_enter_from_user_mode+0x2e/0x80 [ 272.338104][ T7733] do_syscall_64+0x4c/0xa0 [ 272.342566][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 272.347460][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 272.352290][ T7733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.358235][ T7733] RIP: 0033:0x7fd86379de99 [ 272.362808][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.382543][ T7733] RSP: 002b:00007fd8646fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.391183][ T7733] RAX: ffffffffffffffda RBX: 00007fd863a25fa0 RCX: 00007fd86379de99 [ 272.399203][ T7733] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000008 [ 272.407217][ T7733] RBP: 00007fd8646fd090 R08: 0000000000000000 R09: 0000000000000000 [ 272.415229][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.423322][ T7733] R13: 00007fd863a26038 R14: 00007fd863a25fa0 R15: 00007ffc41a593c8 [ 272.431361][ T7733] [ 272.436998][ T9] wlan1: Trigger new scan to find an IBSS to join [ 272.531809][ T7735] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 272.633612][ T7735] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 272.773008][ T7746] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 272.956422][ T7746] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 273.342372][ T7760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1192'. [ 273.380083][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 273.517656][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 273.760025][ T7776] netlink: 'syz.1.1196': attribute type 46 has an invalid length. [ 273.810789][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1196'. [ 274.294345][ T7785] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1200'. [ 274.304931][ T7785] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 274.494583][ T7789] netlink: 'syz.0.1202': attribute type 21 has an invalid length. [ 274.505584][ T7789] netlink: 'syz.0.1202': attribute type 2 has an invalid length. [ 274.513928][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1202'. [ 275.545515][ T7804] FAULT_INJECTION: forcing a failure. [ 275.545515][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.566249][ T7802] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 275.575933][ T7804] CPU: 1 PID: 7804 Comm: syz.0.1206 Not tainted syzkaller #0 [ 275.583496][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.593627][ T7804] Call Trace: [ 275.596940][ T7804] [ 275.599923][ T7804] dump_stack_lvl+0x188/0x24e [ 275.604854][ T7804] ? show_regs_print_info+0x12/0x12 [ 275.610114][ T7804] ? load_image+0x410/0x410 [ 275.614668][ T7804] ? __lock_acquire+0x7c40/0x7c40 [ 275.619755][ T7804] should_fail_ex+0x390/0x4c0 [ 275.624495][ T7804] _copy_from_user+0x2c/0x170 [ 275.629226][ T7804] iovec_from_user+0x143/0x360 [ 275.634153][ T7804] __import_iovec+0x6c/0x510 [ 275.638804][ T7804] import_iovec+0x6f/0xa0 [ 275.643193][ T7804] ___sys_sendmsg+0x252/0x360 [ 275.647934][ T7804] ? __sys_sendmsg+0x2a0/0x2a0 [ 275.652764][ T7804] ? __lock_acquire+0x7c40/0x7c40 [ 275.657870][ T7804] __se_sys_sendmsg+0x1c3/0x2b0 [ 275.662771][ T7804] ? ct_nmi_exit+0x145/0x1c0 [ 275.667405][ T7804] ? __x64_sys_sendmsg+0x80/0x80 [ 275.672408][ T7804] ? lockdep_hardirqs_on+0x94/0x140 [ 275.677643][ T7804] do_syscall_64+0x4c/0xa0 [ 275.682130][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 275.686853][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 275.691671][ T7804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.697692][ T7804] RIP: 0033:0x7f480739de99 [ 275.702145][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.721783][ T7804] RSP: 002b:00007f4808316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.730242][ T7804] RAX: ffffffffffffffda RBX: 00007f4807626090 RCX: 00007f480739de99 [ 275.738263][ T7804] RDX: 0000000004044004 RSI: 0000200000000300 RDI: 000000000000000e [ 275.746526][ T7804] RBP: 00007f4808316090 R08: 0000000000000000 R09: 0000000000000000 [ 275.754554][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.762660][ T7804] R13: 00007f4807626128 R14: 00007f4807626090 R15: 00007ffc59c48488 [ 275.770697][ T7804] [ 275.782093][ T7802] device team0 left promiscuous mode [ 275.792341][ T7802] device team_slave_0 left promiscuous mode [ 275.805363][ T7802] device team_slave_1 left promiscuous mode [ 275.866358][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.886306][ T7802] bond0: (slave team0): Enslaving as an active interface with an up link [ 275.924725][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 276.529050][ T7823] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1213'. [ 276.542601][ T7823] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 277.143875][ T7837] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.1219'. [ 277.156926][ T7837] openvswitch: netlink: Key type 386 is out of range max 32 [ 277.230068][ T7811] delete_channel: no stack [ 277.483470][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 277.713182][ T7850] netlink: 'syz.1.1223': attribute type 21 has an invalid length. [ 277.741622][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1223'. [ 277.776064][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'. [ 278.076564][ T7861] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1228'. [ 278.100420][ T7861] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 278.746984][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 278.998482][ T7888] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1240'. [ 279.023431][ T7888] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 279.576889][ T7901] netlink: 'syz.4.1241': attribute type 21 has an invalid length. [ 279.645864][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1241'. [ 279.710599][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1241'. [ 279.885389][ T7910] netlink: 'syz.0.1245': attribute type 46 has an invalid length. [ 280.860787][ T7925] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 281.204836][ T7944] netlink: 'syz.0.1257': attribute type 21 has an invalid length. [ 281.265777][ T7949] netlink: 'syz.3.1260': attribute type 46 has an invalid length. [ 281.392560][ T7955] netlink: 'syz.1.1259': attribute type 29 has an invalid length. [ 281.403341][ T7952] bridge0: port 4(ip6gretap0) entered blocking state [ 281.433988][ T7952] bridge0: port 4(ip6gretap0) entered disabled state [ 281.548205][ T7952] device ip6gretap0 entered promiscuous mode [ 281.557381][ T7952] bridge0: port 4(ip6gretap0) entered blocking state [ 281.567202][ T7952] bridge0: port 4(ip6gretap0) entered forwarding state [ 281.625553][ T7955] netlink: 'syz.1.1259': attribute type 29 has an invalid length. [ 281.641566][ T7958] netlink: 'syz.1.1259': attribute type 29 has an invalid length. [ 282.715593][ T7988] netlink: 'syz.0.1273': attribute type 46 has an invalid length. [ 282.772995][ T7988] __nla_validate_parse: 7 callbacks suppressed [ 282.773017][ T7988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1273'. [ 282.815647][ T7992] netlink: 'syz.1.1276': attribute type 2 has an invalid length. [ 282.824508][ T7992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1276'. [ 283.044683][ T7996] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1278'. [ 283.273673][ T8004] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.290277][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 283.620499][ T8019] netlink: 'syz.1.1288': attribute type 46 has an invalid length. [ 283.639356][ T8019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1288'. [ 284.290495][ T46] wlan1: Trigger new scan to find an IBSS to join [ 284.503648][ T8035] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1293'. [ 284.641096][ T8041] FAULT_INJECTION: forcing a failure. [ 284.641096][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 284.659370][ T8041] CPU: 1 PID: 8041 Comm: syz.1.1295 Not tainted syzkaller #0 [ 284.666847][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 284.676957][ T8041] Call Trace: [ 284.680279][ T8041] [ 284.683254][ T8041] dump_stack_lvl+0x188/0x24e [ 284.687993][ T8041] ? show_regs_print_info+0x12/0x12 [ 284.693230][ T8041] ? load_image+0x410/0x410 [ 284.697765][ T8041] ? __might_sleep+0xd0/0xd0 [ 284.702386][ T8041] ? __lock_acquire+0x7c40/0x7c40 [ 284.707450][ T8041] should_fail_ex+0x390/0x4c0 [ 284.712168][ T8041] should_failslab+0x5/0x20 [ 284.716701][ T8041] slab_pre_alloc_hook+0x59/0x300 [ 284.721781][ T8041] ? bpf_insn_prepare_dump+0xad/0x840 [ 284.727242][ T8041] __kmem_cache_alloc_node+0x4f/0x270 [ 284.732669][ T8041] ? bpf_insn_prepare_dump+0xad/0x840 [ 284.738089][ T8041] __kmalloc_node_track_caller+0xa0/0x240 [ 284.743858][ T8041] ? aa_get_newest_label+0xf9/0x5b0 [ 284.749108][ T8041] kmemdup+0x27/0x60 [ 284.753048][ T8041] bpf_insn_prepare_dump+0xad/0x840 [ 284.758292][ T8041] ? attach_type_to_prog_type+0x70/0x70 [ 284.763898][ T8041] ? bpf_lsm_capable+0x5/0x10 [ 284.768617][ T8041] ? security_capable+0x85/0xb0 [ 284.773720][ T8041] bpf_obj_get_info_by_fd+0x16aa/0x2f70 [ 284.779309][ T8041] ? __lock_acquire+0x7c40/0x7c40 [ 284.784395][ T8041] ? bpf_map_get_fd_by_id+0x330/0x330 [ 284.789894][ T8041] ? get_pid_task+0x1c/0x1e0 [ 284.794564][ T8041] ? __might_fault+0xa6/0x120 [ 284.799289][ T8041] ? __might_fault+0xc2/0x120 [ 284.804027][ T8041] ? __might_fault+0xa6/0x120 [ 284.808868][ T8041] ? bpf_lsm_bpf+0x5/0x10 [ 284.813267][ T8041] ? security_bpf+0x7a/0xa0 [ 284.817848][ T8041] __sys_bpf+0x505/0x780 [ 284.822155][ T8041] ? bpf_link_show_fdinfo+0x380/0x380 [ 284.827600][ T8041] ? lock_chain_count+0x20/0x20 [ 284.832681][ T8041] __x64_sys_bpf+0x78/0x90 [ 284.837181][ T8041] do_syscall_64+0x4c/0xa0 [ 284.841651][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 284.846376][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 284.851103][ T8041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.857047][ T8041] RIP: 0033:0x7f88ed19de99 [ 284.861511][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.881175][ T8041] RSP: 002b:00007f88ee14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.889645][ T8041] RAX: ffffffffffffffda RBX: 00007f88ed425fa0 RCX: 00007f88ed19de99 [ 284.897679][ T8041] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 284.905689][ T8041] RBP: 00007f88ee14e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.913695][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.921709][ T8041] R13: 00007f88ed426038 R14: 00007f88ed425fa0 R15: 00007fff69d93948 [ 284.929906][ T8041] [ 285.041865][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1297'. [ 285.083468][ T8043] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.105208][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1297'. [ 285.128889][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 285.145251][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1297'. [ 285.395038][ T8051] netlink: 'syz.3.1300': attribute type 46 has an invalid length. [ 286.058763][ T8076] FAULT_INJECTION: forcing a failure. [ 286.058763][ T8076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.074419][ T8076] CPU: 1 PID: 8076 Comm: syz.3.1310 Not tainted syzkaller #0 [ 286.081893][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.092053][ T8076] Call Trace: [ 286.095395][ T8076] [ 286.098384][ T8076] dump_stack_lvl+0x188/0x24e [ 286.103230][ T8076] ? show_regs_print_info+0x12/0x12 [ 286.108490][ T8076] ? load_image+0x410/0x410 [ 286.113098][ T8076] ? __lock_acquire+0x7c40/0x7c40 [ 286.118246][ T8076] should_fail_ex+0x390/0x4c0 [ 286.123014][ T8076] _copy_from_user+0x2c/0x170 [ 286.127862][ T8076] get_user_ifreq+0x67/0x170 [ 286.132678][ T8076] sock_ioctl+0x61f/0x700 [ 286.137091][ T8076] ? sock_poll+0x420/0x420 [ 286.141602][ T8076] ? bpf_lsm_file_ioctl+0x5/0x10 [ 286.146623][ T8076] ? security_file_ioctl+0x7c/0xa0 [ 286.151924][ T8076] ? sock_poll+0x420/0x420 [ 286.156436][ T8076] __se_sys_ioctl+0xfa/0x170 [ 286.161113][ T8076] do_syscall_64+0x4c/0xa0 [ 286.165597][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 286.170439][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 286.175285][ T8076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.181271][ T8076] RIP: 0033:0x7f8f8ab9de99 [ 286.185758][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.205452][ T8076] RSP: 002b:00007f8f8bb08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.214039][ T8076] RAX: ffffffffffffffda RBX: 00007f8f8ae25fa0 RCX: 00007f8f8ab9de99 [ 286.222076][ T8076] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000a [ 286.230104][ T8076] RBP: 00007f8f8bb08090 R08: 0000000000000000 R09: 0000000000000000 [ 286.238166][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.246240][ T8076] R13: 00007f8f8ae26038 R14: 00007f8f8ae25fa0 R15: 00007fffec86db98 [ 286.254414][ T8076] [ 286.653486][ T8081] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.758211][ T8087] netlink: 'syz.2.1316': attribute type 46 has an invalid length. [ 288.291981][ T11] wlan1: Trigger new scan to find an IBSS to join [ 288.727549][ T8131] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 288.774417][ T8131] __nla_validate_parse: 14 callbacks suppressed [ 288.774460][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 288.977580][ T8142] netlink: 'syz.3.1332': attribute type 46 has an invalid length. [ 289.012344][ T8142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1332'. [ 289.095270][ T8144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1334'. [ 289.330475][ T46] wlan1: Trigger new scan to find an IBSS to join [ 290.032195][ T8155] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 290.527235][ T8171] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.561246][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 290.571998][ T8173] netlink: 'syz.0.1346': attribute type 46 has an invalid length. [ 290.593335][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1346'. [ 290.693395][ T8175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1347'. [ 291.174821][ T8194] FAULT_INJECTION: forcing a failure. [ 291.174821][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 291.293188][ T8194] CPU: 0 PID: 8194 Comm: syz.0.1353 Not tainted syzkaller #0 [ 291.300764][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 291.310890][ T8194] Call Trace: [ 291.314305][ T8194] [ 291.317277][ T8194] dump_stack_lvl+0x188/0x24e [ 291.322022][ T8194] ? show_regs_print_info+0x12/0x12 [ 291.327292][ T8194] ? load_image+0x410/0x410 [ 291.331858][ T8194] ? __might_sleep+0xd0/0xd0 [ 291.336506][ T8194] ? __lock_acquire+0x7c40/0x7c40 [ 291.341601][ T8194] should_fail_ex+0x390/0x4c0 [ 291.346530][ T8194] should_failslab+0x5/0x20 [ 291.351200][ T8194] slab_pre_alloc_hook+0x59/0x300 [ 291.356460][ T8194] ? sctp_association_new+0x86/0x2520 [ 291.361927][ T8194] __kmem_cache_alloc_node+0x4f/0x270 [ 291.367455][ T8194] ? sctp_v6_to_sk_saddr+0xfc/0x1c0 [ 291.372718][ T8194] ? sctp_association_new+0x86/0x2520 [ 291.378678][ T8194] kmalloc_trace+0x26/0xe0 [ 291.383164][ T8194] sctp_association_new+0x86/0x2520 [ 291.388722][ T8194] ? __ipv6_addr_type+0xff/0x2e0 [ 291.393750][ T8194] sctp_connect_new_asoc+0x2da/0x6a0 [ 291.399113][ T8194] ? __sctp_connect+0xd80/0xd80 [ 291.404023][ T8194] ? __local_bh_enable_ip+0x136/0x1c0 [ 291.409448][ T8194] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 291.415129][ T8194] ? security_sctp_bind_connect+0x85/0xb0 [ 291.420913][ T8194] sctp_sendmsg+0x1686/0x2940 [ 291.425687][ T8194] ? sctp_getsockopt+0x8a0/0x8a0 [ 291.430690][ T8194] ? __might_fault+0xa6/0x120 [ 291.435466][ T8194] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 291.441942][ T8194] ? aa_sock_msg_perm+0x94/0x150 [ 291.446962][ T8194] ? inet_sendmsg+0xca/0x2a0 [ 291.451878][ T8194] ? inet_send_prepare+0x250/0x250 [ 291.457412][ T8194] ____sys_sendmsg+0x5ed/0x9a0 [ 291.462274][ T8194] ? __sys_sendmsg_sock+0x30/0x30 [ 291.467367][ T8194] ? __import_iovec+0x306/0x510 [ 291.472316][ T8194] ? import_iovec+0x6f/0xa0 [ 291.476889][ T8194] ___sys_sendmsg+0x2a2/0x360 [ 291.481655][ T8194] ? __sys_sendmsg+0x2a0/0x2a0 [ 291.486512][ T8194] ? __lock_acquire+0x7c40/0x7c40 [ 291.491636][ T8194] __se_sys_sendmsg+0x1c3/0x2b0 [ 291.496555][ T8194] ? __x64_sys_sendmsg+0x80/0x80 [ 291.501581][ T8194] ? lockdep_hardirqs_on+0x94/0x140 [ 291.506841][ T8194] do_syscall_64+0x4c/0xa0 [ 291.511315][ T8194] ? clear_bhb_loop+0x60/0xb0 [ 291.516659][ T8194] ? clear_bhb_loop+0x60/0xb0 [ 291.521435][ T8194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.527398][ T8194] RIP: 0033:0x7f480739de99 [ 291.531864][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.551742][ T8194] RSP: 002b:00007f4808316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.560308][ T8194] RAX: ffffffffffffffda RBX: 00007f4807626090 RCX: 00007f480739de99 [ 291.568334][ T8194] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000008 [ 291.576356][ T8194] RBP: 00007f4808316090 R08: 0000000000000000 R09: 0000000000000000 [ 291.584373][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.592392][ T8194] R13: 00007f4807626128 R14: 00007f4807626090 R15: 00007ffc59c48488 [ 291.600443][ T8194] [ 291.681129][ T8180] syz.2.1350 (8180) used greatest stack depth: 16272 bytes left [ 291.927884][ T4282] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 292.067469][ T8206] netlink: 'syz.2.1359': attribute type 46 has an invalid length. [ 292.113426][ T8206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1359'. [ 292.176838][ T8209] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.200783][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 292.290830][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 292.371017][ T8211] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1361'. [ 292.464669][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1363'. [ 292.487404][ T8215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.495316][ T8215] IPv6: NLM_F_CREATE should be set when creating new route [ 292.502656][ T8215] IPv6: NLM_F_CREATE should be set when creating new route [ 292.509980][ T8215] IPv6: NLM_F_CREATE should be set when creating new route [ 294.299471][ T11] wlan1: Trigger new scan to find an IBSS to join [ 295.522313][ T8217] ------------[ cut here ]------------ [ 295.527956][ T8217] WARNING: CPU: 1 PID: 8217 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 295.537948][ T8217] Modules linked in: [ 295.542051][ T8217] CPU: 1 PID: 8217 Comm: syz.4.1364 Not tainted syzkaller #0 [ 295.549539][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 295.559704][ T8217] RIP: 0010:perf_pending_task+0x353/0x480 [ 295.565504][ T8217] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 295.585367][ T8217] RSP: 0018:ffffc9000c46f8e8 EFLAGS: 00010293 [ 295.591887][ T8217] RAX: ffffffff81a7b3a3 RBX: ffff88807bf93458 RCX: ffff88802cfe3c00 [ 295.600079][ T8217] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 295.608155][ T8217] RBP: ffff88807bf93220 R08: ffff88802cfe4603 R09: 1ffff110059fc8c0 [ 295.616395][ T8217] R10: dffffc0000000000 R11: ffffed10059fc8c1 R12: ffff88802cfe3c00 [ 295.624597][ T8217] R13: ffff8880282ced60 R14: 0000000000000000 R15: 1ffff1100f7f2644 [ 295.632909][ T8217] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 295.642064][ T8217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.648728][ T8217] CR2: 0000001b2ff08ff8 CR3: 000000002aae1000 CR4: 00000000003506e0 [ 295.656934][ T8217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.665253][ T8217] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 295.673453][ T8217] Call Trace: [ 295.676809][ T8217] [ 295.679892][ T8217] task_work_run+0x1d0/0x260 [ 295.684673][ T8217] ? task_work_cancel+0x220/0x220 [ 295.690128][ T8217] ? do_raw_spin_unlock+0x11d/0x230 [ 295.695521][ T8217] do_exit+0x9d5/0x2570 [ 295.699832][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.705909][ T8217] ? put_task_struct+0x80/0x80 [ 295.710803][ T8217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.717022][ T8217] ? lockdep_hardirqs_on+0x94/0x140 [ 295.722369][ T8217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.728623][ T8217] do_group_exit+0x229/0x2e0 [ 295.733363][ T8217] ? _raw_spin_unlock_irq+0x25/0x40 [ 295.738641][ T8217] get_signal+0x1259/0x1340 [ 295.743317][ T8217] arch_do_signal_or_restart+0xc4/0x1310 [ 295.749063][ T8217] ? perf_trace_preemptirq_template+0x268/0x320 [ 295.755459][ T8217] ? irqentry_enter+0x33/0x50 [ 295.760276][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.766350][ T8217] ? get_sigframe_size+0x10/0x10 [ 295.771428][ T8217] ? lock_chain_count+0x20/0x20 [ 295.776364][ T8217] ? rcu_is_watching+0x11/0xa0 [ 295.781308][ T8217] exit_to_user_mode_loop+0x70/0x110 [ 295.786692][ T8217] exit_to_user_mode_prepare+0xee/0x180 [ 295.792393][ T8217] syscall_exit_to_user_mode+0x16/0x40 [ 295.797938][ T8217] do_syscall_64+0x58/0xa0 [ 295.802583][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 295.807354][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 295.812373][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.818358][ T8217] RIP: 0033:0x7fd86379de99 [ 295.822921][ T8217] Code: Unable to access opcode bytes at 0x7fd86379de6f. [ 295.830157][ T8217] RSP: 002b:00007fd8646fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.838660][ T8217] RAX: fffffffffffffe00 RBX: 00007fd863a25fa8 RCX: 00007fd86379de99 [ 295.846794][ T8217] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd863a25fa8 [ 295.854916][ T8217] RBP: 00007fd863a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 295.863200][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.871317][ T8217] R13: 00007fd863a26038 R14: 00007ffc41a592e0 R15: 00007ffc41a593c8 [ 295.879523][ T8217] [ 295.882636][ T8217] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.890011][ T8217] CPU: 1 PID: 8217 Comm: syz.4.1364 Not tainted syzkaller #0 [ 295.897476][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 295.908197][ T8217] Call Trace: [ 295.911544][ T8217] [ 295.914513][ T8217] dump_stack_lvl+0x188/0x24e [ 295.919298][ T8217] ? memcpy+0x3c/0x60 [ 295.923348][ T8217] ? show_regs_print_info+0x12/0x12 [ 295.928617][ T8217] ? load_image+0x410/0x410 [ 295.933185][ T8217] panic+0x2d3/0x710 [ 295.937132][ T8217] ? bpf_jit_dump+0xd0/0xd0 [ 295.941807][ T8217] __warn+0x2f8/0x4f0 [ 295.945870][ T8217] ? perf_pending_task+0x353/0x480 [ 295.951042][ T8217] ? perf_pending_task+0x353/0x480 [ 295.956293][ T8217] report_bug+0x2ba/0x4f0 [ 295.960668][ T8217] ? perf_pending_task+0x353/0x480 [ 295.965866][ T8217] handle_bug+0x3a/0x70 [ 295.970083][ T8217] exc_invalid_op+0x16/0x40 [ 295.974638][ T8217] asm_exc_invalid_op+0x16/0x20 [ 295.979538][ T8217] RIP: 0010:perf_pending_task+0x353/0x480 [ 295.985322][ T8217] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 296.004983][ T8217] RSP: 0018:ffffc9000c46f8e8 EFLAGS: 00010293 [ 296.011102][ T8217] RAX: ffffffff81a7b3a3 RBX: ffff88807bf93458 RCX: ffff88802cfe3c00 [ 296.019130][ T8217] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 296.027234][ T8217] RBP: ffff88807bf93220 R08: ffff88802cfe4603 R09: 1ffff110059fc8c0 [ 296.035253][ T8217] R10: dffffc0000000000 R11: ffffed10059fc8c1 R12: ffff88802cfe3c00 [ 296.043556][ T8217] R13: ffff8880282ced60 R14: 0000000000000000 R15: 1ffff1100f7f2644 [ 296.051686][ T8217] ? perf_pending_task+0x353/0x480 [ 296.056878][ T8217] ? perf_pending_task+0x353/0x480 [ 296.062053][ T8217] task_work_run+0x1d0/0x260 [ 296.066704][ T8217] ? task_work_cancel+0x220/0x220 [ 296.071778][ T8217] ? do_raw_spin_unlock+0x11d/0x230 [ 296.077039][ T8217] do_exit+0x9d5/0x2570 [ 296.081606][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.087829][ T8217] ? put_task_struct+0x80/0x80 [ 296.092653][ T8217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.098880][ T8217] ? lockdep_hardirqs_on+0x94/0x140 [ 296.104139][ T8217] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.110355][ T8217] do_group_exit+0x229/0x2e0 [ 296.115086][ T8217] ? _raw_spin_unlock_irq+0x25/0x40 [ 296.120424][ T8217] get_signal+0x1259/0x1340 [ 296.125016][ T8217] arch_do_signal_or_restart+0xc4/0x1310 [ 296.130726][ T8217] ? perf_trace_preemptirq_template+0x268/0x320 [ 296.137028][ T8217] ? irqentry_enter+0x33/0x50 [ 296.141756][ T8217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.147794][ T8217] ? get_sigframe_size+0x10/0x10 [ 296.152795][ T8217] ? lock_chain_count+0x20/0x20 [ 296.157710][ T8217] ? rcu_is_watching+0x11/0xa0 [ 296.162569][ T8217] exit_to_user_mode_loop+0x70/0x110 [ 296.167906][ T8217] exit_to_user_mode_prepare+0xee/0x180 [ 296.173512][ T8217] syscall_exit_to_user_mode+0x16/0x40 [ 296.179036][ T8217] do_syscall_64+0x58/0xa0 [ 296.183531][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 296.188311][ T8217] ? clear_bhb_loop+0x60/0xb0 [ 296.193078][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.199044][ T8217] RIP: 0033:0x7fd86379de99 [ 296.203509][ T8217] Code: Unable to access opcode bytes at 0x7fd86379de6f. [ 296.210575][ T8217] RSP: 002b:00007fd8646fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.219124][ T8217] RAX: fffffffffffffe00 RBX: 00007fd863a25fa8 RCX: 00007fd86379de99 [ 296.227185][ T8217] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd863a25fa8 [ 296.235199][ T8217] RBP: 00007fd863a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 296.243331][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.251351][ T8217] R13: 00007fd863a26038 R14: 00007ffc41a592e0 R15: 00007ffc41a593c8 [ 296.259385][ T8217] [ 296.263136][ T8217] Kernel Offset: disabled [ 296.267487][ T8217] Rebooting in 86400 seconds..