last executing test programs: 2.301378421s ago: executing program 0 (id=1367): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.018668876s ago: executing program 0 (id=1369): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.959905339s ago: executing program 0 (id=1371): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1d, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x18, 0x0, 0x0) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x40010040) r9 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, &(0x7f0000000900)=r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x4000088) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r10, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x100000032, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571ebdff9e9929c347f5b6581ee1edb6245cd7cf", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 1.877515793s ago: executing program 3 (id=1373): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={0xffffffffffffffff, 0x0, 0x47, 0x35, &(0x7f0000000200)="a720f0b60a56d9442598df1fc9d738bf00938af7ccd5e8a044aa24695bde71ac76abc1c31c3fb61ce85ac6a48946d8ef304d5a6f8ce542cc14857b18746eb3339dbc9bb802ee82", &(0x7f00000002c0)=""/53, 0xfffffff8, 0x0, 0x8e, 0x1000, &(0x7f0000000300)="85f6df6312063e9bd5b40729cbef1221def2e2eaf0b0c1cb509255c79d05c682ef53ea3a7fa447e57a531a8c1e40128d6a88bc3f971aa5b6d39f46d1b9fa72965c08af4b44e78e6217e2b66de4d6b03eb7fefda4e593ae8751ada908e50d723985cc487e1c7044c023fcfa422c409a42822576775df4a4c9bb4273ed64e4e7c09dc0b7023d40e2dc6ee83b306a37", &(0x7f0000001980)="7ffa09efee9096352ee7c2051fe23cc8c119c40477ea7bb16eb6faf8e7f5b8631124499f7659650fba0c5484306dd4e0f5a0dddae6f9b8f334fd31505c9120f4b6320dc8531d1a7e35c4f4cae0c7f568532e5cedc0eac6a6f4c9e46da7e299a1bd07fc391189fec2808cfae58752a30720e6eb8dc1f378f057f7bf8a636208f57f77cedcb9d2b72bbbaaabf5cb178ceb1c5718f3c5074e7125b79cc851eb3bc20daa792630fd5257c94c2f11cfbf7fcefb724f7991aecbf976b243869f120c6a43f9c83c10c26766738a57e66262e4cb35e611624be7b2e4eb9efbc18567a74de5a8c5a9a7233e79987447430618f2f4700c6304bc62c922d620c1300388b1b007ca32e9eb347f9356e5be8e75a148aa7d50730c150faa6473d652fec9e8c75037538b013ce378a39877059fb6cc1a9911e1b0c450181d3b0b947a6b656a059a076b520dc985e4d8e9364f4122481ac6d2b645e79b090040974fcbba5ccb1711fcc9358fb63cbdf881de95e27c62ba4ac6b16f6c5492b7f301b95e428ca842591177bf30b259d297b92f307e8bf7ecffc1545f6f2164f62087991b576b76d94f085c0d34dc20cef3fb6b908bf89f46aa4ef2ed453ab6786bcc380063ae8b5b38d1eaf4a07dc787d7453335cdf92e97034aa60cce7aab971b6e9d5646f88440d6ae1fd6c2231637443ab33c01880757fb38202769f18d9d92942593875694837bb0afa47ea972356869a8dabba299e4b95f520e1a774e4b6249c3c9953eb45847a7223507ba9d60570d7cbc6071036d9399b66ffc45fc07749ddba34639f84e4010883fa46919d45faff8f95e522507c5520aa993efa5f4cc1319a08734dfbf9ac1dca63478313e2e275954ea9d9894d82bc0ceac7932ed2cae7cd77cd735c6cb6e0f50e6c6b9a17200553d8faf618838faef51a62a6b4d0794eb7f8d0fabeba332ce1db28c3be22ce57b63fc1e61de2c7e654ace1ea2c6c2bddfd8376d914004b14b2cffcf3978f9f7c71e88b651937b1ebc77b593f5b8decf05bd992f0223177a1983c5a131d752c61992215e85705d2ec6129bca71885cfcd67b8dedc3c965a5b246586644e567dfc4366247d5627fed0028362c756cab1bad2f79ceaf0428b3288e1edddfb5bfeda1aa2cf7237f8d2db98481ee6c824cf6093e41c81950533c5e5f171f8476a0e9e41faa5f2bedbe4c738dfb06323caa807028fde704d50e8f85f395c76f394ab1d2a716287d893dea34e8bc432295b1057a581ed364e9cb2bb7c20a90f1d586a3b41b8d48f2ced7ad1fd3a0fee4f5ad067ac1a2f9b5fc90a44dfc1a2c0e43363de42da1d52a72be5a78b6b9bc8c7c797bb035bfc73673dbf6b3f4010adc9a48a152c2559a27db06b521b78091862c7ab25609ab30f8aba5f2dded2a0f668d720d008348901b01e56cda88a42997525eece171fe9837d579b93bfaeebc986583c88c62732c346d185893f7800fdfafb1a0df27e4eea20d3369e1a0a5feb44cb2de517a28a765b24fcfbff609ca74fb235d43e7a3b038fa2ead047ba79725b1bcff320bc6481f14897364c851a4bd160ac57d6c753ee2a69d6ef1f1366e3c9ba5525a2ccb97ccbe35619e9f6be312d1830e7a67e6cb81c4315f203ba359a47aa32dc1dbca2141f882829bb307079866736247fa54869732df60ecc33dbad243a4a500d914c7017a4e9a4de0ecc020db574fde6b618194c4339a00ad2eeafabba4d3cf9bd3585b0f9e9cc4606e33f80949c478ce998b60f34a1606077e3a32f82cd0efe5b90cb930a694438417955c6d215d8c8d93f47cbe34b3898d14e00cc438d94fde905f776453de03091991825b2263a1c3d0056d381f638492c7b988d8a778be67dd36821d2bf0e197339bb6931cb79beaa92acb7d2d685285983ba1c7c13def654628219628f4c0a045191f82ad937bc0f9891285ba3bbabd2f958a24f6cefce0b34aa161939e96271eabdbe7b65381d4fa7a9cf4715defbd7d4a99d2be24b8a75e0a4a0ff2ebe3a12a0fdbf171ad6b03a3e3729534e0e1b2d38c7d384f5781f2598073567f52ede8ca70f77dc415cefdc0189d100ad38de2a75cf96b8c29f7f594df0bd1ae6883bdf15180acc11e2cee6f3841273a555ecef060087eadfddf05178c5938a069eaa706622fdfffa79292df6e0849d4f3915eb026d892aa068a2e62bd673a19ac694249a15c863fe80f0fa5c6d2535a07d30414f52ccbfc7525f65ef7e174ee401b04234ee6038afd816997d6e2271009de0ba79a2829a11c3be47ac52cb0e907f0f7af2f8effb3a3afeefe7dfd9a4f64efaf5cde7ea34b39f6efed2df62add4d333bcc0e453cc5d5f5e0ce5558d5ca753f3c26d3f88dc507cda97c602debc43154f987f246bc2f020b5b57970478bcf6668a3950c098f0a3b9324bc3f7fb0998a8335791a387feccc3f7313b2611c471442457060b9dcf1e419a958dd6d371a973f9c6ba2e7c790790dec016a33c30cfa4261796cb24da83f9f60fb031c4a9d60966d688c67be0f4f8348caebe38988d2d2762d9a6d3850081a65ae0e957e322d37d1ed1012fe28972ecaff7829ad41a5a982d435d00590f84e26800d571f01e6742370cff768f7444bf81bfeb2b8af4479a3e564713d47ae33b76510788bb548ef6a003074a862ea9ced9f7846164729404d7bbf3c6d803813f4e75e25179536e0841df39a106ecfdc6f45a65158e61e0faf455e6ecb4833cd317517384c6ab0d73d8dc66144461f277d447dd5a5316b6ec3428b907fa1f685284792d2c6d7c96aca359d26e2b6b63b2bb5e48b137c356d7c8e2b69955faac7642d29dbab05a9863cf32eec2f050f33b15318148316066f0445f8ceca032aeefe80b2596271470ce36f2873cd246869dd9814665a48b88dcf253c115d362e751b4ff053e8b8675f79759566ae854fe41bff7f0f42a71057bda173c8e58d97f06cbbac9300358d74be9aeef1e1f86fdf31ba92810c64fed58a2408bac736f7a5b4bdbf78c95749c4efd6d3646ba660dc2a97f9adb7b4db23e1c7896b250115c0c8c40319d0dceb5dda6344233aee713260621c83c584d5882fe6daa36162be35bbed5ce5456aa650348db5971e936edd4a9f978838da4b6b40d000507317f466d3c01f8c662430d661cc2286daaa90d66d081137d905c2cf28a22fc1ea7215b50e0b28825fe6afe22e60d1e7b6e4adb7bcc9aa86730ef97bf36c8bfb4cabefa6f9b421c45798559eee28a1cbcefac8e0686ec84e28c8e9eaa1ef68b78e08c78d260d07d4ffe4dbee06e96dabfe29759188ddb11c9afd0aaccfea3f626892aee93ce95cb619d9d6bcb360894b696e9b73f1c6ff7faffa77eeee1b5d3caa1197c0ca44c6ed1e6d0b5c4e168bc6ba06ba4070a0a149019c29bfe27a341bc473b0d67a293d67efe4fcbd0101da7783bc2fd0c030edb06b76866e32103359b4233ca7b27db92b95bbf8f908efde33aab5aea651ba90158499e44a45a8fee2deccd716325b08134d71c9a57b8144a8c35da4e1f64c1625c39f748e522108800712ce85bdcb2d28cd0fe646dd1c4c4030ba5e84fab46c81786de65f378cdfad2feab1ef2cc3f1e6e133e626f9b9ddd0315bc35cfb7789d6f5c30728e179c9117db57fe127fb419f25f223a4203f165b7e4433f3430a882b513542587c2242f30b98e0d9bea2a96c12448337affec65e6777c6503c450ddfcc2048eaf2bc2f534e845d9a04b42051f0e7075b4e168f1a51028b6568eeab2125d6faca817a27d8fcd87bd58070f48a0168fba33577e0e2a10457dcc5f938701ef03cba5e74cac0051bbc9c9c7cd3fde5e8eb35091112254223f27e5254fec5908491831d119a957aa26b63641123596cde5ec411290d6a994f98f1be2c08cfd81895ab7cf4ec69b9e92e6da5f955e702aefd4ee1a644437e88452ee7ca5ef2bda298163db7cfada2eef01a625799a1ec1ece2aecfd13ee409eb80c7ec44c3ac13caf26f70a1a50e835b2972d0af3fffb26a968f503f0a3cc0e9becf939331aa4e8b15c565ff0f0cd93f941fe6b9cd811f12770b95e19f9e7b940ada359292c6b1bb076a42bea02fa472ec0046e19657821cf27139487fe4e1764b608cd02492aead1a94ab6ce1d23189fa16270c3ab1601c501b3ef2625f2627a04a3318d9f770c05cb9d64ea59754ffd94c622af5259f5bcf01ad7c0342e909fae639bfc73f86dd7d950564dbc46e9f4ccb319321d229bd0df9998d854ac34e2dc04056a34f5969e414e5544c1ee5a26032aeb93e8a4d4c5a6ad477c6025e9b9eeae83b9c15d891d2f5f24f00866ab2007aca0f5e4bea69b91060bfb6a63519541c5027d2e3bc06903c3ebeff2ab17b4fa6786e789ac8ae21ab84bb2edbe9d17b8d33320c79f6fb50b8a0d9407c68a9449a81662001a9b3f8e78929031ab1c18e3f65afd0535f8506f0d88fb39e4a9987d61a5401a605132ba30820c2b6ecda41a379e350f388f5aa090dcb5f5b3ce089cb14a6c283b5e8f01e851023c51671bd2abea9c14e0685a3133f6e221cee34c28a75c9dafd40a43a5ba53c351c14b9039e9d3f27b7292d0afac4a2b0eb87c2a946283eded6affc915efef70aecec24f5dbb6e3a67f42d666259c171d53d280a634d088f7b9de139c3b93f37e5d64636ebfc536ba2e8e18f142b7807718bd286566b8281afba48ce1630714a422c6919725cab6686694039a8a2a091660cceb50962e85bda0c9a948a3cd1467942440963266056cfa242365f1f94b56cc6dd0abdb2391a33769cbe96a1de4102801bb98c13f7091fa2b2a16d36384043209b267b4b9ffce923f4233d5c21773bd8aca61741bdd001471f8839b44ad2f4512154c1253b9e3035d1e84fb4918071f44faaf1c5e4550100fcaae551e951dfc04aa90a4e38c2ae1607d9139f4df0c9db0f80ff81d08908bb9470f7d1a466cda8e00ba497f3497a9d41c9e434343879262d32236164dd08c84ca903ccbdfc93c75e63b1ce7f194069b92f1a517fe77447a72cbda4da980677a3acc7389388bd25d3db0d0eaba5b59895d1a9fbebac36122b80e9e258067a0d82121e6c8e2d812c1125dc9b8ec899223a2fc3318af54daaef9ac90edd2d41709adbd2df71a334d36847245eba48fb9467f8d3a68c04eb5680cbb9416c0a77bc83bc1dbb91d6a7bdb013562d19dbb7c63e43a76931a2a394c5ecfb7db8ce38b98d07f7193c1422438d970d9e29478c8c392a30856738818178da37f456033dafeadd724d4899470c9899531837f47f9c407b2377e21b0cebe93eaf654b3df8a66666e69c8a87d563738cf294c1fae959fe4ea179ddcfd58b4cfa4342dd0271f9f7f25ac0fa29fc473eb9e37dcd8d0857574e8164deea4dfad3210fac6a93f9a8c3ea630133a1a65783dfd41a427a6c00cb49572b0be549f8c60dc4d10127285879358de416fa64a23cbff37dd0457179d69801fddd2cec537b7ee14ad5e6bcc688ac8984a3503265b552e7c19e48bb22aa6e85021757897b0a544387ca6d21ed237c145bbdfd90bdecd7273bc31bb4b07a99fc8f05d3f310d7326ff193903507ffd6f6580a97bf7259cf5fd3d992cac34e0734c86fa566665cf0bd6de4e8e9deb28849d53ad3ff5e9c268c711e8979ca6e817f509e5b1952b614bd4a114797224dadb16bc8253ba812547a4f622461fcc9a3b30803c65082198acea074d34208d22802fc5cc220f6e00e2f7ee10d4843e237b6ec516c2e3be2308fd7c2de9df5023ca06ab6aeba98a3dd6f386f08a9f181d779a101fd8cb5e88351b4934b26008", 0x0, 0x0, 0xd}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 1.730287201s ago: executing program 2 (id=1374): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x900000000000000) 1.684187823s ago: executing program 0 (id=1375): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.657664785s ago: executing program 3 (id=1376): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0xfe, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0xfe, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x26, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4c}}, @jmp={0x5, 0x1, 0xd, 0x9, 0xb, 0x18, 0x4}, @jmp={0x5, 0x0, 0x2, 0x3, 0x8, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6d}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x22, &(0x7f0000000300)=""/34, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x1, 0x5}, 0x10, 0x0, 0x0, 0xd, &(0x7f0000000380)=[r2], &(0x7f00000005c0)=[{0x1, 0x4, 0x2, 0x3}, {0x2, 0x5, 0x6, 0xb}, {0x1, 0x5, 0xe, 0x3}, {0xffffffff, 0x5, 0xd, 0xc}, {0x3, 0x5, 0x1, 0x5}, {0x0, 0x4, 0xb, 0xa}, {0x3, 0x4, 0xa, 0x2}, {0x1, 0x1, 0x3, 0xc}, {0x5, 0x5, 0x3}, {0x2, 0x3, 0x1, 0x6}, {0x3, 0x1, 0x5}, {0x3, 0x4, 0x4, 0x6}, {0x4, 0x4, 0x5, 0x6}], 0x10, 0x57}, 0x94) socket$kcm(0x29, 0x2, 0x0) 1.566420959s ago: executing program 2 (id=1377): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.560560469s ago: executing program 1 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @loopback={0xff00000000000000}, 0x5}, 0xfe92, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) close(r1) 1.390681228s ago: executing program 3 (id=1379): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.381988838s ago: executing program 0 (id=1380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x2000000000000216, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) sendmsg$tipc(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44008000}, 0x8005) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0xa0}, 0x8000004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x100000000000001}, 0x4a1a, 0x0, 0xfffffffe, 0x7, 0x0, 0x4b, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c"], 0xfdef) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.231290957s ago: executing program 3 (id=1381): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1d, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x40010040) r9 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, &(0x7f0000000900)=r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000088) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r10, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x100000032, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571ebdff9e9929c347f5b6581ee1edb6245cd7cf", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 1.230464446s ago: executing program 1 (id=1389): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.219889107s ago: executing program 2 (id=1382): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="74845831", 0x4}], 0x1}, 0x4084) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5e0}, 0x4801) 1.065802355s ago: executing program 1 (id=1383): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 901.363423ms ago: executing program 2 (id=1384): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1d, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x18, 0x0, 0x0) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x40010040) r10 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000900)=r9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x4000088) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r11, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0x100000032, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571ebdff9e9929c347f5b6581ee1edb6245cd7cf", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 733.346862ms ago: executing program 3 (id=1385): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={0xffffffffffffffff, 0x0, 0x47, 0x35, &(0x7f0000000200)="a720f0b60a56d9442598df1fc9d738bf00938af7ccd5e8a044aa24695bde71ac76abc1c31c3fb61ce85ac6a48946d8ef304d5a6f8ce542cc14857b18746eb3339dbc9bb802ee82", &(0x7f00000002c0)=""/53, 0xfffffff8, 0x0, 0x8e, 0x1000, &(0x7f0000000300)="85f6df6312063e9bd5b40729cbef1221def2e2eaf0b0c1cb509255c79d05c682ef53ea3a7fa447e57a531a8c1e40128d6a88bc3f971aa5b6d39f46d1b9fa72965c08af4b44e78e6217e2b66de4d6b03eb7fefda4e593ae8751ada908e50d723985cc487e1c7044c023fcfa422c409a42822576775df4a4c9bb4273ed64e4e7c09dc0b7023d40e2dc6ee83b306a37", &(0x7f0000001980)="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", 0x0, 0x0, 0xd}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 510.445494ms ago: executing program 2 (id=1386): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x900000000000000) 375.401701ms ago: executing program 2 (id=1387): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 374.96273ms ago: executing program 1 (id=1388): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 374.17083ms ago: executing program 3 (id=1390): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffa62, 0x7fffffffffffffff}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fe, &(0x7f0000000680)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xb, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="911094000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000005dead9c3ffffffd4000000100000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180400000000000014000000140000000200000003000000002100010200000000000000000000000100"], 0x0, 0x2e, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 318.927324ms ago: executing program 0 (id=1391): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 103.431065ms ago: executing program 1 (id=1392): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 1 (id=1393): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="74845831", 0x4}], 0x1}, 0x4084) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5e0}, 0x4801) kernel console output (not intermixed with test programs): an1 may have been left with an inconsistent configuration, please check. [ 481.658646][ T7689] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.490'. [ 482.495696][ T7707] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 484.219331][ T7729] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 484.238467][ T7729] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 484.837140][ T7753] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 484.964289][ T12] wlan1: Trigger new scan to find an IBSS to join [ 485.923882][ T5854] wlan1: Trigger new scan to find an IBSS to join [ 486.662130][ T7780] __nla_validate_parse: 28 callbacks suppressed [ 486.662145][ T7780] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.514'. [ 486.703661][ T7780] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.514'. [ 486.748021][ T7777] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.514'. [ 487.045678][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.127752][ T7788] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.515'. [ 487.161198][ T7791] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.517'. [ 487.178221][ T7788] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.515'. [ 487.187283][ T7791] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 487.205975][ T7785] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.515'. [ 487.292876][ T7773] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.511'. [ 487.355458][ T7773] bridge_slave_1: default FDB implementation only supports local addresses [ 487.381440][ T7796] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.515'. [ 487.637734][ T7806] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 487.656620][ T7806] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.519'. [ 488.616038][ T7817] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 488.636850][ T7814] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 488.648279][ T7814] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 488.963898][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 488.970559][ T12] wlan1: Trigger new scan to find an IBSS to join [ 490.883759][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 491.370970][ T5846] wlan1: Creating new IBSS network, BSSID 66:db:03:99:a7:45 [ 491.694547][ T7831] __nla_validate_parse: 6 callbacks suppressed [ 491.694560][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.526'. [ 491.755380][ T7832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 493.933884][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 494.603068][ T5912] wlan1: Creating new IBSS network, BSSID 66:bc:f5:13:94:48 [ 495.155924][ T42] wlan1: Creating new IBSS network, BSSID 56:e7:d1:71:17:30 [ 495.506175][ T7845] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.532'. [ 495.520372][ T7845] bridge_slave_1: default FDB implementation only supports local addresses [ 495.546431][ T7850] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.528'. [ 495.563688][ T7850] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.528'. [ 495.584533][ T7850] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.528'. [ 495.614080][ T7839] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.528'. [ 496.225250][ T7869] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 496.240215][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 496.241147][ T7870] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.537'. [ 496.273194][ T7869] bridge0: port 3(ipvlan1) entered blocking state [ 496.282741][ T7869] bridge0: port 3(ipvlan1) entered disabled state [ 496.318777][ T7869] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 496.338748][ T7870] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.537'. [ 496.612623][ T7874] bridge_slave_1: default FDB implementation only supports local addresses [ 497.924207][ T42] wlan1: Trigger new scan to find an IBSS to join [ 498.651746][ T7886] __nla_validate_parse: 3 callbacks suppressed [ 498.651763][ T7886] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.542'. [ 498.713804][ T7886] bridge_slave_1: default FDB implementation only supports local addresses [ 498.983378][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'. [ 499.212296][ T7899] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.545'. [ 499.241984][ T7899] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.545'. [ 499.332409][ T7894] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.545'. [ 499.362206][ T7897] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.543'. [ 499.393799][ T7897] bridge_slave_1: default FDB implementation only supports local addresses [ 499.404667][ T7907] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.545'. [ 499.923863][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 500.897145][ T42] wlan1: Trigger new scan to find an IBSS to join [ 500.903709][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 501.531282][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537667][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.972360][ T7932] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 501.984799][ T7932] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 502.006797][ T7930] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.550'. [ 503.923892][ T42] wlan1: Trigger new scan to find an IBSS to join [ 503.930481][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 504.701813][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.553'. [ 504.754429][ T7944] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.554'. [ 504.773717][ T7944] bridge_slave_1: default FDB implementation only supports local addresses [ 504.854461][ T2118] wlan1: Creating new IBSS network, BSSID 42:bc:67:57:8d:3d [ 504.942638][ T7959] netlink: 'syz.1.557': attribute type 21 has an invalid length. [ 505.108766][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 505.236572][ T7964] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.556'. [ 505.925086][ T42] wlan1: Trigger new scan to find an IBSS to join [ 506.236303][ T7965] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.560'. [ 506.299739][ T7964] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.556'. [ 506.309358][ T7965] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.560'. [ 506.353262][ T7974] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.560'. [ 506.362811][ T7976] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.560'. [ 506.964014][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 507.946818][ T5846] wlan1: Creating new IBSS network, BSSID 72:a4:32:5a:d7:fd [ 508.141664][ T7988] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 508.170087][ T7988] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 508.210207][ T7991] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 508.912573][ T8005] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.568'. [ 508.951556][ T8005] bridge_slave_1: default FDB implementation only supports local addresses [ 509.094979][ T8016] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 509.126144][ T8016] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 509.322584][ T8028] netlink: 'syz.0.574': attribute type 29 has an invalid length. [ 509.332583][ T8028] netlink: 'syz.0.574': attribute type 29 has an invalid length. [ 509.342060][ T8028] netlink: 'syz.0.574': attribute type 29 has an invalid length. [ 509.719699][ T8033] __nla_validate_parse: 6 callbacks suppressed [ 509.719714][ T8033] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.575'. [ 509.764301][ T8033] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.575'. [ 509.823965][ T8032] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.575'. [ 510.885017][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 510.891636][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 510.901462][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 514.893663][ T42] wlan1: Trigger new scan to find an IBSS to join [ 514.900404][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 514.908098][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 514.963827][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 515.668148][ T8056] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 515.682342][ T8058] netlink: 'syz.2.581': attribute type 10 has an invalid length. [ 515.690966][ T8058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 515.707566][ T8058] bridge0: port 3(ipvlan1) entered blocking state [ 515.718690][ T8058] bridge0: port 3(ipvlan1) entered disabled state [ 515.749808][ T8058] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 515.773103][ T8054] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 515.791902][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.582'. [ 515.805265][ T8054] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 515.826772][ T8056] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 515.836121][ T8065] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 515.860138][ T5912] wlan1: Creating new IBSS network, BSSID 92:ee:d2:e2:17:c3 [ 515.877348][ T5846] wlan1: Creating new IBSS network, BSSID 3a:cf:6f:71:56:3e [ 515.884638][ T2118] wlan1: Creating new IBSS network, BSSID 1e:06:59:9f:56:07 [ 516.186135][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.586'. [ 516.203332][ T8075] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.585'. [ 516.213385][ T8075] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.585'. [ 516.225236][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 516.249196][ T8067] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.585'. [ 516.263390][ T8075] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.585'. [ 516.425267][ T8080] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 516.439135][ T8080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'. [ 516.455345][ T8080] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 517.352191][ T8098] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.591'. [ 517.376053][ T8101] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 517.387185][ T8101] bridge0: port 3(ipvlan1) entered blocking state [ 517.397491][ T8101] bridge0: port 3(ipvlan1) entered disabled state [ 517.540298][ T8101] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 517.756424][ T8102] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 517.815587][ T8102] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.108170][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 521.107715][ T8121] __nla_validate_parse: 3 callbacks suppressed [ 521.107732][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 521.139516][ T8115] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.599'. [ 521.157657][ T8115] bridge_slave_1: default FDB implementation only supports local addresses [ 521.170489][ T8128] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.601'. [ 521.318393][ T8139] bridge_slave_1: left allmulticast mode [ 521.336261][ T8139] bridge_slave_1: left promiscuous mode [ 521.361277][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.435261][ T8145] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 521.437016][ T8139] bridge_slave_0: left allmulticast mode [ 521.461367][ T8139] bridge_slave_0: left promiscuous mode [ 521.477113][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.582922][ T8148] FAULT_INJECTION: forcing a failure. [ 521.582922][ T8148] name fail_futex, interval 1, probability 0, space 0, times 1 [ 521.596033][ T8148] CPU: 0 PID: 8148 Comm: syz.1.606 Not tainted syzkaller #0 [ 521.603340][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.613394][ T8148] Call Trace: [ 521.616667][ T8148] [ 521.619611][ T8148] dump_stack_lvl+0x18c/0x250 [ 521.624291][ T8148] ? show_regs_print_info+0x20/0x20 [ 521.629499][ T8148] ? load_image+0x420/0x420 [ 521.634009][ T8148] ? __lock_acquire+0x1347/0x7d40 [ 521.639035][ T8148] should_fail_ex+0x39d/0x4d0 [ 521.643717][ T8148] get_futex_key+0x136/0x1010 [ 521.648402][ T8148] ? futex_setup_timer+0xc0/0xc0 [ 521.653354][ T8148] ? perf_trace_lock_acquire+0x104/0x410 [ 521.659010][ T8148] futex_wake+0x127/0x4f0 [ 521.663356][ T8148] ? futex_wake_mark+0x150/0x150 [ 521.668292][ T8148] do_futex+0x35d/0x3e0 [ 521.672440][ T8148] ? __might_fault+0xaa/0x120 [ 521.677127][ T8148] ? __ia32_sys_get_robust_list+0x110/0x110 [ 521.683031][ T8148] ? __might_fault+0xc6/0x120 [ 521.687701][ T8148] mm_release+0x184/0x3a0 [ 521.692025][ T8148] ? exit_mm_release+0x30/0x30 [ 521.696778][ T8148] ? lockdep_hardirqs_on+0x98/0x150 [ 521.701976][ T8148] exit_mm+0xa7/0x2c0 [ 521.705972][ T8148] ? do_exit+0x2460/0x2460 [ 521.710407][ T8148] ? taskstats_exit+0x35e/0x9e0 [ 521.715257][ T8148] do_exit+0x8dd/0x2460 [ 521.719419][ T8148] ? get_signal+0x1068/0x13f0 [ 521.724088][ T8148] ? put_task_struct+0xc0/0xc0 [ 521.728849][ T8148] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 521.734820][ T8148] ? get_signal+0x1068/0x13f0 [ 521.739488][ T8148] ? lock_chain_count+0x20/0x20 [ 521.744334][ T8148] ? _raw_spin_lock_irq+0xbb/0xf0 [ 521.749354][ T8148] do_group_exit+0x21b/0x2d0 [ 521.753955][ T8148] ? lockdep_hardirqs_on+0x98/0x150 [ 521.759151][ T8148] get_signal+0x12fc/0x13f0 [ 521.763664][ T8148] arch_do_signal_or_restart+0xc2/0x800 [ 521.769210][ T8148] ? get_sigframe_size+0x20/0x20 [ 521.774157][ T8148] ? exit_to_user_mode_loop+0x3b/0x110 [ 521.779615][ T8148] exit_to_user_mode_loop+0x70/0x110 [ 521.784896][ T8148] exit_to_user_mode_prepare+0xee/0x180 [ 521.790437][ T8148] syscall_exit_to_user_mode+0x1a/0x50 [ 521.795890][ T8148] do_syscall_64+0x61/0xa0 [ 521.800297][ T8148] ? clear_bhb_loop+0x40/0x90 [ 521.804968][ T8148] ? clear_bhb_loop+0x40/0x90 [ 521.809641][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.815539][ T8148] RIP: 0033:0x7f4ef3d9c819 [ 521.819949][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.839545][ T8148] RSP: 002b:00007f4ef1ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 521.847953][ T8148] RAX: fffffffffffffe00 RBX: 00007f4ef4016090 RCX: 00007f4ef3d9c819 [ 521.855918][ T8148] RDX: 0000000040010002 RSI: 0000200000000100 RDI: 0000000000000005 [ 521.863884][ T8148] RBP: 00007f4ef1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 521.871846][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.879809][ T8148] R13: 00007f4ef4016128 R14: 00007f4ef4016090 R15: 00007ffc7a246da8 [ 521.887787][ T8148] [ 521.933030][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 521.955089][ T8145] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 521.984841][ T8149] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 521.999569][ T8152] netlink: 'syz.3.604': attribute type 29 has an invalid length. [ 522.300351][ T8159] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 522.319140][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'. [ 522.346615][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 522.367751][ T8159] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 522.385174][ T8156] netlink: 'syz.2.607': attribute type 10 has an invalid length. [ 522.393173][ T8156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 522.404167][ T8156] team0: entered promiscuous mode [ 522.424177][ T8156] team_slave_0: entered promiscuous mode [ 522.431734][ T8156] team_slave_1: entered promiscuous mode [ 522.443287][ T8156] team0: entered allmulticast mode [ 522.449933][ T8156] team_slave_0: entered allmulticast mode [ 522.469448][ T8156] team_slave_1: entered allmulticast mode [ 522.493661][ T8156] bridge0: port 3(team0) entered blocking state [ 522.511059][ T8156] bridge0: port 3(team0) entered disabled state [ 522.548861][ T8156] bridge0: port 3(team0) entered blocking state [ 522.555431][ T8156] bridge0: port 3(team0) entered forwarding state [ 522.565440][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 522.576795][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 522.655754][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 522.963788][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 524.654248][ T5845] wlan1: Creating new IBSS network, BSSID a6:45:bd:84:bc:23 [ 524.974188][ T8184] FAULT_INJECTION: forcing a failure. [ 524.974188][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.051249][ T8184] CPU: 1 PID: 8184 Comm: syz.1.617 Not tainted syzkaller #0 [ 525.058584][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.068646][ T8184] Call Trace: [ 525.071933][ T8184] [ 525.074874][ T8184] dump_stack_lvl+0x18c/0x250 [ 525.079578][ T8184] ? show_regs_print_info+0x20/0x20 [ 525.084799][ T8184] ? load_image+0x420/0x420 [ 525.089323][ T8184] ? __might_fault+0xaa/0x120 [ 525.094015][ T8184] ? __lock_acquire+0x7d40/0x7d40 [ 525.099074][ T8184] should_fail_ex+0x39d/0x4d0 [ 525.103782][ T8184] _copy_from_iter+0x1d9/0x12e0 [ 525.108647][ T8184] ? __virt_addr_valid+0x18c/0x540 [ 525.113773][ T8184] ? __lock_acquire+0x7d40/0x7d40 [ 525.118810][ T8184] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 525.124201][ T8184] ? copyout_mc+0x70/0x70 [ 525.128544][ T8184] ? __virt_addr_valid+0x18c/0x540 [ 525.133665][ T8184] ? __virt_addr_valid+0x18c/0x540 [ 525.138784][ T8184] ? __virt_addr_valid+0x469/0x540 [ 525.143908][ T8184] ? __check_object_size+0x506/0xa20 [ 525.149203][ T8184] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 525.154937][ T8184] ? skb_put+0x11b/0x210 [ 525.159192][ T8184] tun_get_user+0x15db/0x3ca0 [ 525.163885][ T8184] ? aa_file_perm+0x11b/0xee0 [ 525.168586][ T8184] ? rcu_read_unlock+0xa0/0xa0 [ 525.173376][ T8184] ? tun_get+0x1c/0x2e0 [ 525.177542][ T8184] ? __lock_acquire+0x7d40/0x7d40 [ 525.182596][ T8184] ? tun_get+0x1c/0x2e0 [ 525.186781][ T8184] tun_chr_write_iter+0x119/0x200 [ 525.191828][ T8184] vfs_write+0x46c/0x990 [ 525.196097][ T8184] ? file_end_write+0x250/0x250 [ 525.200974][ T8184] ? __fget_files+0x43d/0x4b0 [ 525.205678][ T8184] ? __fdget_pos+0x1d8/0x330 [ 525.210284][ T8184] ? ksys_write+0x75/0x260 [ 525.214718][ T8184] ksys_write+0x150/0x260 [ 525.219067][ T8184] ? __ia32_sys_read+0x90/0x90 [ 525.223849][ T8184] ? lockdep_hardirqs_on+0x98/0x150 [ 525.229072][ T8184] do_syscall_64+0x55/0xa0 [ 525.233497][ T8184] ? clear_bhb_loop+0x40/0x90 [ 525.238185][ T8184] ? clear_bhb_loop+0x40/0x90 [ 525.242882][ T8184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.248790][ T8184] RIP: 0033:0x7f4ef3d9c819 [ 525.253218][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.272837][ T8184] RSP: 002b:00007f4ef1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.281266][ T8184] RAX: ffffffffffffffda RBX: 00007f4ef4016090 RCX: 00007f4ef3d9c819 [ 525.289247][ T8184] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 525.297226][ T8184] RBP: 00007f4ef1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.305208][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.313191][ T8184] R13: 00007f4ef4016128 R14: 00007f4ef4016090 R15: 00007ffc7a246da8 [ 525.321188][ T8184] [ 525.683823][ T8197] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 526.454272][ T8206] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 526.465587][ T8206] __nla_validate_parse: 4 callbacks suppressed [ 526.465626][ T8206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.621'. [ 526.522416][ T8206] team0: entered promiscuous mode [ 526.533657][ T8206] team_slave_0: entered promiscuous mode [ 526.540573][ T8206] team_slave_1: entered promiscuous mode [ 526.584347][ T8206] team0: entered allmulticast mode [ 526.591249][ T8206] team_slave_0: entered allmulticast mode [ 526.612352][ T8206] team_slave_1: entered allmulticast mode [ 526.648834][ T8206] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.897949][ T5854] wlan1: Trigger new scan to find an IBSS to join [ 526.952715][ T8218] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 526.963892][ T8218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.625'. [ 526.976903][ T8218] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 527.056058][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'. [ 527.466279][ T8228] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'. [ 527.493626][ T8228] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'. [ 527.514254][ T8227] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'. [ 527.528472][ T8228] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.628'. [ 528.680709][ T8236] bridge0: port 3(team0) entered disabled state [ 528.724417][ T8237] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.629'. [ 528.885720][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 528.893561][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 531.486288][ T8236] bridge_slave_1: left allmulticast mode [ 531.491984][ T8236] bridge_slave_1: left promiscuous mode [ 531.499978][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.546896][ T8236] bridge_slave_0: left allmulticast mode [ 531.552583][ T8236] bridge_slave_0: left promiscuous mode [ 531.568345][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.780124][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 531.843659][ T8243] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 531.979800][ T42] wlan1: Trigger new scan to find an IBSS to join [ 531.992596][ T8243] geneve1: entered promiscuous mode [ 532.081834][ T8243] geneve1: entered allmulticast mode [ 532.104420][ T8243] team0: Port device geneve1 added [ 532.390912][ T8255] netlink: 'syz.2.635': attribute type 29 has an invalid length. [ 532.409353][ T8255] netlink: 'syz.2.635': attribute type 29 has an invalid length. [ 532.449522][ T8258] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.636'. [ 532.459690][ T8255] netlink: 'syz.2.635': attribute type 29 has an invalid length. [ 532.475000][ T8258] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.636'. [ 532.745856][ T8268] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 532.763758][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'. [ 532.778119][ T8268] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 532.800104][ T8265] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 532.825370][ T8265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.639'. [ 532.846204][ T8265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 532.957410][ T5846] wlan1: Creating new IBSS network, BSSID 0a:19:4e:82:fc:fc [ 532.992160][ T8270] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.637'. [ 533.013792][ T8270] bridge_slave_1: default FDB implementation only supports local addresses [ 533.116371][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.641'. [ 533.936882][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 533.944105][ T42] wlan1: Trigger new scan to find an IBSS to join [ 534.375339][ T8280] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.642'. [ 534.789735][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 534.884033][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 534.977670][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 536.082615][ T5845] wlan1: Creating new IBSS network, BSSID 9e:54:c1:98:ac:af [ 536.094528][ T42] wlan1: Creating new IBSS network, BSSID 12:3c:e4:9c:7b:5b [ 536.606060][ T8302] netlink: 'syz.1.647': attribute type 29 has an invalid length. [ 536.638693][ T8302] netlink: 'syz.1.647': attribute type 29 has an invalid length. [ 536.672293][ T8305] netlink: 'syz.1.647': attribute type 29 has an invalid length. [ 536.734034][ T8306] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 537.134284][ T8313] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 537.164008][ T8313] __nla_validate_parse: 3 callbacks suppressed [ 537.164024][ T8313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.650'. [ 537.217651][ T8313] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.416332][ T8317] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 537.448424][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 537.486758][ T8317] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 537.640282][ T8324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.653'. [ 537.956098][ T8332] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.658'. [ 537.967387][ T8328] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.655'. [ 537.968857][ T8332] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.658'. [ 538.023676][ T8328] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.655'. [ 538.058077][ T8323] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.655'. [ 538.093603][ T8333] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.655'. [ 538.728433][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 539.934831][ T5854] wlan1: Trigger new scan to find an IBSS to join [ 540.169955][ T8335] delete_channel: no stack [ 540.292410][ T8343] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 540.306081][ T8343] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 540.319851][ T8343] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 540.555417][ T8352] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 540.730299][ T8353] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 540.804396][ T8353] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 540.877623][ T2118] wlan1: Creating new IBSS network, BSSID 16:a4:1f:4a:ae:72 [ 540.964216][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 541.079126][ T8358] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 541.094078][ T8358] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 541.558977][ T8369] netlink: 'syz.0.670': attribute type 29 has an invalid length. [ 541.570777][ T8369] netlink: 'syz.0.670': attribute type 29 has an invalid length. [ 541.586605][ T8367] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 542.883700][ T5854] wlan1: Trigger new scan to find an IBSS to join [ 544.292842][ T5846] wlan1: Creating new IBSS network, BSSID 26:04:ef:cb:34:05 [ 544.499535][ T8391] __nla_validate_parse: 12 callbacks suppressed [ 544.499549][ T8391] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.684'. [ 544.528809][ T8391] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.684'. [ 544.575124][ T8392] validate_nla: 12 callbacks suppressed [ 544.575156][ T8392] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 544.595628][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.677'. [ 544.609479][ T8392] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 544.664027][ T8393] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 544.672265][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 544.688104][ T8393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 544.898440][ T8405] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 544.985583][ T8405] geneve1: entered promiscuous mode [ 544.991407][ T8405] geneve1: entered allmulticast mode [ 544.999323][ T8405] team0: Port device geneve1 added [ 545.242165][ T8410] FAULT_INJECTION: forcing a failure. [ 545.242165][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.270567][ T8410] CPU: 0 PID: 8410 Comm: syz.0.682 Not tainted syzkaller #0 [ 545.277918][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 545.288006][ T8410] Call Trace: [ 545.291320][ T8410] [ 545.294293][ T8410] dump_stack_lvl+0x18c/0x250 [ 545.299038][ T8410] ? show_regs_print_info+0x20/0x20 [ 545.304291][ T8410] ? load_image+0x420/0x420 [ 545.308843][ T8410] ? __might_fault+0xaa/0x120 [ 545.313999][ T8410] ? __lock_acquire+0x7d40/0x7d40 [ 545.319063][ T8410] ? __might_fault+0xaa/0x120 [ 545.323789][ T8410] should_fail_ex+0x39d/0x4d0 [ 545.328533][ T8410] _copy_from_iter+0x1d9/0x12e0 [ 545.333430][ T8410] ? __might_fault+0xaa/0x120 [ 545.333704][ T8408] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 545.338132][ T8410] ? _copy_from_iter+0x24e/0x12e0 [ 545.338163][ T8410] ? __virt_addr_valid+0x18c/0x540 [ 545.338196][ T8410] ? __lock_acquire+0x7d40/0x7d40 [ 545.338236][ T8410] ? copyout_mc+0x70/0x70 [ 545.338277][ T8410] ? copyout_mc+0x70/0x70 [ 545.338302][ T8410] ? __virt_addr_valid+0x18c/0x540 [ 545.338343][ T8410] ? page_copy_sane+0x16a/0x270 [ 545.338386][ T8410] copy_page_from_iter+0x7b/0x100 [ 545.338427][ T8410] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 545.338487][ T8410] tun_get_user+0x15db/0x3ca0 [ 545.338544][ T8410] ? aa_file_perm+0x11b/0xee0 [ 545.338589][ T8410] ? rcu_read_unlock+0xa0/0xa0 [ 545.338652][ T8410] ? tun_get+0x1c/0x2e0 [ 545.338681][ T8410] ? __lock_acquire+0x7d40/0x7d40 [ 545.346858][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.681'. [ 545.351434][ T8410] ? tun_get+0x1c/0x2e0 [ 545.351490][ T8410] tun_chr_write_iter+0x119/0x200 [ 545.351526][ T8410] vfs_write+0x46c/0x990 [ 545.351572][ T8410] ? file_end_write+0x250/0x250 [ 545.351615][ T8410] ? __fget_files+0x43d/0x4b0 [ 545.351671][ T8410] ? __fdget_pos+0x1d8/0x330 [ 545.351694][ T8410] ? ksys_write+0x75/0x260 [ 545.351730][ T8410] ksys_write+0x150/0x260 [ 545.351767][ T8410] ? __ia32_sys_read+0x90/0x90 [ 545.351808][ T8410] ? lockdep_hardirqs_on+0x98/0x150 [ 545.351845][ T8410] do_syscall_64+0x55/0xa0 [ 545.351864][ T8410] ? clear_bhb_loop+0x40/0x90 [ 545.351887][ T8410] ? clear_bhb_loop+0x40/0x90 [ 545.351918][ T8410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.351941][ T8410] RIP: 0033:0x7f9d7019c819 [ 545.351965][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.351982][ T8410] RSP: 002b:00007f9d710b0028 EFLAGS: 00000246 [ 545.380883][ T8408] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 545.385767][ T8410] ORIG_RAX: 0000000000000001 [ 545.385781][ T8410] RAX: ffffffffffffffda RBX: 00007f9d70415fa0 RCX: 00007f9d7019c819 [ 545.385798][ T8410] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 545.385812][ T8410] RBP: 00007f9d710b0090 R08: 0000000000000000 R09: 0000000000000000 [ 545.385825][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.385838][ T8410] R13: 00007f9d70416038 R14: 00007f9d70415fa0 R15: 00007fff0a83bf28 [ 545.385907][ T8410] [ 545.999194][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 546.049980][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.685'. [ 546.567774][ T8426] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.687'. [ 546.600608][ T8426] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.687'. [ 546.632402][ T8423] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.687'. [ 546.894106][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 546.900674][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 547.009535][ T8430] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 547.045881][ T8430] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 549.718048][ T5912] wlan1: Creating new IBSS network, BSSID 4e:03:45:12:3f:73 [ 550.289926][ T8469] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 550.327846][ T8469] __nla_validate_parse: 6 callbacks suppressed [ 550.327993][ T8469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.700'. [ 550.410249][ T8469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 550.468870][ T8475] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.698'. [ 550.478765][ T8475] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.698'. [ 550.490049][ T8475] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.698'. [ 550.512374][ T8466] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.699'. [ 550.574486][ T8466] bridge_slave_1: default FDB implementation only supports local addresses [ 550.634918][ T8464] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.698'. [ 550.866801][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 550.964176][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 551.121626][ T8483] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.702'. [ 551.138239][ T8483] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.702'. [ 551.197941][ T8485] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 551.211526][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.703'. [ 551.225228][ T8485] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.329085][ T8492] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 551.340046][ T8492] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.681741][ T8506] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 551.691941][ T8506] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 551.707053][ T8506] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 551.923919][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 552.876416][ T8525] bridge_slave_1: default FDB implementation only supports local addresses [ 552.987808][ T8528] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 553.030797][ T2118] wlan1: Creating new IBSS network, BSSID 06:b5:6f:5f:de:c2 [ 553.039405][ T8528] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 553.178518][ T8532] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 553.211335][ T8532] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 553.923951][ T12] wlan1: Trigger new scan to find an IBSS to join [ 554.749196][ T8567] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 554.766346][ T8567] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 554.845938][ T8571] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 554.878754][ T8571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 554.939099][ T8569] bridge_slave_1: default FDB implementation only supports local addresses [ 555.925069][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 556.416283][ T8591] __nla_validate_parse: 19 callbacks suppressed [ 556.416294][ T8591] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.735'. [ 557.732627][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 557.759867][ T8591] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.735'. [ 558.045861][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 558.065123][ T8610] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 558.847969][ T8618] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 558.857805][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.741'. [ 558.871782][ T8618] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 559.096481][ T8623] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 559.117327][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.742'. [ 559.137433][ T8623] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 559.751287][ T8639] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.745'. [ 559.792064][ T8639] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.745'. [ 559.831140][ T8631] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.745'. [ 559.877859][ T8643] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.745'. [ 559.885532][ T8645] netlink: 'syz.0.749': attribute type 29 has an invalid length. [ 559.928981][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 559.933260][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 559.965675][ T8645] netlink: 'syz.0.749': attribute type 29 has an invalid length. [ 559.991765][ T8648] netlink: 'syz.0.749': attribute type 29 has an invalid length. [ 560.036907][ T8649] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 560.888256][ T12] wlan1: Creating new IBSS network, BSSID 02:17:72:9a:e6:9c [ 561.107374][ T8667] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 561.127488][ T8667] openvswitch: netlink: Flow key attr not present in new flow. [ 561.164871][ T8666] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 561.186469][ T8666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.386944][ T8676] FAULT_INJECTION: forcing a failure. [ 561.386944][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.406968][ T8676] CPU: 1 PID: 8676 Comm: syz.2.758 Not tainted syzkaller #0 [ 561.414292][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 561.424365][ T8676] Call Trace: [ 561.427832][ T8676] [ 561.430763][ T8676] dump_stack_lvl+0x18c/0x250 [ 561.435451][ T8676] ? show_regs_print_info+0x20/0x20 [ 561.440655][ T8676] ? load_image+0x420/0x420 [ 561.445162][ T8676] ? __lock_acquire+0x7d40/0x7d40 [ 561.450199][ T8676] should_fail_ex+0x39d/0x4d0 [ 561.454882][ T8676] _copy_from_user+0x2f/0xe0 [ 561.459475][ T8676] __copy_msghdr+0x3bb/0x580 [ 561.464064][ T8676] ___sys_sendmsg+0x214/0x360 [ 561.468742][ T8676] ? __sys_sendmsg+0x2a0/0x2a0 [ 561.473527][ T8676] ? __lock_acquire+0x7d40/0x7d40 [ 561.478584][ T8676] __se_sys_sendmsg+0x1c2/0x2b0 [ 561.483439][ T8676] ? __x64_sys_sendmsg+0x80/0x80 [ 561.488391][ T8676] ? lockdep_hardirqs_on+0x98/0x150 [ 561.493598][ T8676] do_syscall_64+0x55/0xa0 [ 561.498009][ T8676] ? clear_bhb_loop+0x40/0x90 [ 561.502704][ T8676] ? clear_bhb_loop+0x40/0x90 [ 561.507395][ T8676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.513294][ T8676] RIP: 0033:0x7f740b79c819 [ 561.517711][ T8676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.537344][ T8676] RSP: 002b:00007f740c5a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.545763][ T8676] RAX: ffffffffffffffda RBX: 00007f740ba15fa0 RCX: 00007f740b79c819 [ 561.553740][ T8676] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 561.561714][ T8676] RBP: 00007f740c5a0090 R08: 0000000000000000 R09: 0000000000000000 [ 561.569683][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.577653][ T8676] R13: 00007f740ba16038 R14: 00007f740ba15fa0 R15: 00007ffe8bf513d8 [ 561.585646][ T8676] [ 561.717840][ T8680] netlink: 'syz.0.762': attribute type 29 has an invalid length. [ 561.924939][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 562.270191][ T8690] __nla_validate_parse: 7 callbacks suppressed [ 562.270207][ T8690] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.766'. [ 562.294500][ T8690] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.766'. [ 562.309889][ T8689] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.766'. [ 562.342856][ T8690] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.766'. [ 562.446646][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 562.748477][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 562.766050][ T8696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 562.791242][ T8698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.769'. [ 562.887140][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 563.030428][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.036896][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.049844][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 563.123653][ T51] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 563.258499][ T8715] validate_nla: 4 callbacks suppressed [ 563.258512][ T8715] netlink: 'syz.2.774': attribute type 29 has an invalid length. [ 563.272506][ T8715] netlink: 'syz.2.774': attribute type 29 has an invalid length. [ 563.296593][ T8715] netlink: 'syz.2.774': attribute type 29 has an invalid length. [ 563.503756][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.775'. [ 563.938988][ T8721] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.777'. [ 564.427360][ T8732] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 564.441424][ T8732] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 564.813759][ T8736] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 564.835635][ T8736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.964201][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 565.769966][ T2118] wlan1: Creating new IBSS network, BSSID 3a:5e:0b:ae:f6:6c [ 566.163486][ T8744] netlink: 'syz.3.780': attribute type 10 has an invalid length. [ 566.202961][ T8744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 566.404804][ T8755] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 566.418999][ T8755] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 566.463754][ T8755] netlink: 'syz.3.787': attribute type 29 has an invalid length. [ 566.875761][ T8770] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 566.901355][ T8770] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 568.892679][ T12] wlan1: Trigger new scan to find an IBSS to join [ 569.976779][ T8786] __nla_validate_parse: 14 callbacks suppressed [ 569.976815][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 570.298020][ T8788] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 570.308802][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 570.328296][ T8788] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 570.361233][ T8790] netlink: 168 bytes leftover after parsing attributes in process `syz.1.796'. [ 570.372445][ T8793] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 570.386845][ T8793] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 570.398345][ T8793] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 570.444388][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 570.732483][ T8809] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 570.766113][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 570.793134][ T8809] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 570.883839][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.803'. [ 572.965066][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 572.972961][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 573.933670][ T42] wlan1: Trigger new scan to find an IBSS to join [ 574.035539][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 574.117023][ T8819] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.804'. [ 574.153471][ T8830] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 574.162722][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.808'. [ 574.198796][ T8830] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 574.278573][ T8819] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.804'. [ 574.538443][ T8838] netlink: 'syz.1.809': attribute type 29 has an invalid length. [ 574.593454][ T8838] netlink: 'syz.1.809': attribute type 29 has an invalid length. [ 574.621975][ T8842] netlink: 'syz.1.809': attribute type 29 has an invalid length. [ 574.963687][ T8854] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 575.075657][ T42] wlan1: Creating new IBSS network, BSSID 1e:2d:6a:4b:77:63 [ 575.218179][ T8854] geneve1: entered promiscuous mode [ 575.231633][ T8854] geneve1: entered allmulticast mode [ 575.261678][ T8854] team0: Port device geneve1 added [ 575.435061][ T8864] __nla_validate_parse: 3 callbacks suppressed [ 575.435078][ T8864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'. [ 575.936065][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 575.943863][ T42] wlan1: Trigger new scan to find an IBSS to join [ 576.963728][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 578.056108][ T42] wlan1: Creating new IBSS network, BSSID 16:29:e0:e9:ba:ba [ 578.085598][ T2118] wlan1: Creating new IBSS network, BSSID b2:31:2b:bc:23:a2 [ 578.102031][ T8873] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 578.114716][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 578.134861][ T8873] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 578.510527][ T8882] netlink: 'syz.3.821': attribute type 29 has an invalid length. [ 578.683349][ T8883] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 578.699452][ T8882] netlink: 'syz.3.821': attribute type 29 has an invalid length. [ 578.714340][ T8885] netlink: 'syz.3.821': attribute type 29 has an invalid length. [ 578.733140][ T8886] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.820'. [ 578.753079][ T8886] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.820'. [ 578.796566][ T8875] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.820'. [ 578.808781][ T8886] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.820'. [ 579.459873][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 579.940933][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 580.476357][ T8913] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 580.489908][ T8913] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 580.507256][ T8894] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 580.544975][ T8908] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.832'. [ 581.009165][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 581.160987][ T8926] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 581.169700][ T8926] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 581.180844][ T8926] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 581.204740][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 581.547839][ T8930] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 581.564361][ T8930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'. [ 581.579600][ T8930] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 581.934387][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 582.507904][ T8948] netlink: 'syz.1.840': attribute type 10 has an invalid length. [ 582.547208][ T8946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.839'. [ 582.590961][ T8946] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 584.883997][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 585.398076][ T5922] wlan1: Creating new IBSS network, BSSID ce:c9:e8:b8:3c:c7 [ 585.412822][ T8960] validate_nla: 2 callbacks suppressed [ 585.412838][ T8960] netlink: 'syz.0.843': attribute type 29 has an invalid length. [ 585.617910][ T8963] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.844'. [ 585.808524][ T8972] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 585.888744][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.847'. [ 585.918627][ T8972] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 585.944315][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 586.310276][ T8981] netlink: 'syz.3.851': attribute type 3 has an invalid length. [ 586.324076][ T8981] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 586.331903][ T8981] netlink: 'syz.3.851': attribute type 7 has an invalid length. [ 586.344425][ T8981] netlink: 'syz.3.851': attribute type 8 has an invalid length. [ 586.352325][ T8981] netlink: 'syz.3.851': attribute type 7 has an invalid length. [ 586.367181][ T8981] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.851'. [ 586.438074][ T5846] wlan1: Creating new IBSS network, BSSID 22:43:a6:6c:a9:01 [ 587.923868][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 588.357309][ T8989] netlink: 'syz.3.854': attribute type 29 has an invalid length. [ 588.407636][ T8989] netlink: 'syz.3.854': attribute type 29 has an invalid length. [ 588.444340][ T8991] netlink: 'syz.3.854': attribute type 29 has an invalid length. [ 588.769238][ T8992] can: request_module (can-proto-0) failed. [ 589.061452][ T9000] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.855'. [ 589.093667][ T9000] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.855'. [ 589.103894][ T8998] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.855'. [ 589.117766][ T9000] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.855'. [ 589.420102][ T9006] netlink: 172 bytes leftover after parsing attributes in process `syz.3.858'. [ 589.491072][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 589.664625][ T9012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 590.964886][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 592.080822][ T9014] __nla_validate_parse: 1 callbacks suppressed [ 592.080853][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.861'. [ 592.097754][ T9021] FAULT_INJECTION: forcing a failure. [ 592.097754][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 592.123962][ T9021] CPU: 0 PID: 9021 Comm: syz.3.864 Not tainted syzkaller #0 [ 592.131286][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.141352][ T9021] Call Trace: [ 592.144640][ T9021] [ 592.147588][ T9021] dump_stack_lvl+0x18c/0x250 [ 592.152302][ T9021] ? show_regs_print_info+0x20/0x20 [ 592.157527][ T9021] ? load_image+0x420/0x420 [ 592.162052][ T9021] ? __might_sleep+0xe0/0xe0 [ 592.166663][ T9021] ? __lock_acquire+0x7d40/0x7d40 [ 592.171707][ T9021] should_fail_ex+0x39d/0x4d0 [ 592.176408][ T9021] should_failslab+0x9/0x20 [ 592.180933][ T9021] slab_pre_alloc_hook+0x59/0x310 [ 592.185984][ T9021] ? __lock_acquire+0x7d40/0x7d40 [ 592.191028][ T9021] kmem_cache_alloc_node+0x60/0x320 [ 592.196250][ T9021] ? __alloc_skb+0x103/0x2c0 [ 592.200866][ T9021] __alloc_skb+0x103/0x2c0 [ 592.205304][ T9021] netlink_sendmsg+0x66a/0xbf0 [ 592.208426][ T9024] validate_nla: 3 callbacks suppressed [ 592.208439][ T9024] netlink: 'syz.1.865': attribute type 10 has an invalid length. [ 592.210082][ T9021] ? netlink_getsockopt+0x590/0x590 [ 592.210113][ T9021] ? aa_sock_msg_perm+0x94/0x150 [ 592.225104][ T9024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 592.228443][ T9021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 592.228469][ T9021] ? security_socket_sendmsg+0x80/0xa0 [ 592.228488][ T9021] ? netlink_getsockopt+0x590/0x590 [ 592.239397][ T9024] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 592.242231][ T9021] ____sys_sendmsg+0x5ba/0x960 [ 592.242266][ T9021] ? __asan_memset+0x22/0x40 [ 592.283039][ T9021] ? __sys_sendmsg_sock+0x30/0x30 [ 592.288058][ T9021] ? __import_iovec+0x5f2/0x850 [ 592.292905][ T9021] ? import_iovec+0x73/0xa0 [ 592.297410][ T9021] ___sys_sendmsg+0x2a6/0x360 [ 592.302085][ T9021] ? get_pid_task+0x20/0x1e0 [ 592.306674][ T9021] ? __sys_sendmsg+0x2a0/0x2a0 [ 592.311449][ T9021] ? __lock_acquire+0x7d40/0x7d40 [ 592.316488][ T9021] __se_sys_sendmsg+0x1c2/0x2b0 [ 592.321330][ T9021] ? __x64_sys_sendmsg+0x80/0x80 [ 592.326272][ T9021] ? lockdep_hardirqs_on+0x98/0x150 [ 592.331467][ T9021] do_syscall_64+0x55/0xa0 [ 592.335876][ T9021] ? clear_bhb_loop+0x40/0x90 [ 592.340545][ T9021] ? clear_bhb_loop+0x40/0x90 [ 592.345216][ T9021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.351103][ T9021] RIP: 0033:0x7f0066b9c819 [ 592.355508][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.375109][ T9021] RSP: 002b:00007f0064df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.383518][ T9021] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066b9c819 [ 592.391481][ T9021] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 592.399440][ T9021] RBP: 00007f0064df6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.407401][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.415362][ T9021] R13: 00007f0066e16038 R14: 00007f0066e15fa0 R15: 00007ffca79a5638 [ 592.423335][ T9021] [ 592.587107][ T9029] can: request_module (can-proto-0) failed. [ 592.681303][ T9033] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.866'. [ 592.890629][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 593.274812][ T9047] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 593.600661][ T9058] netlink: 'syz.3.874': attribute type 29 has an invalid length. [ 593.638563][ T9058] netlink: 'syz.3.874': attribute type 29 has an invalid length. [ 593.652936][ T9061] netlink: 'syz.3.874': attribute type 29 has an invalid length. [ 593.923888][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 593.980583][ T9065] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 594.004744][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'. [ 594.016461][ T9065] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 594.032864][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.878'. [ 594.124282][ T9072] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.879'. [ 594.320817][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 594.873234][ T9082] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.889'. [ 594.887995][ T9082] bridge_slave_1: default FDB implementation only supports local addresses [ 594.904487][ T5846] wlan1: Creating new IBSS network, BSSID 5e:4e:a0:35:d8:3c [ 594.988763][ T9080] can: request_module (can-proto-0) failed. [ 595.410940][ T9100] netlink: 'syz.3.886': attribute type 29 has an invalid length. [ 595.420524][ T9100] netlink: 'syz.3.886': attribute type 29 has an invalid length. [ 595.440178][ T9100] netlink: 'syz.3.886': attribute type 29 has an invalid length. [ 595.926407][ T9111] FAULT_INJECTION: forcing a failure. [ 595.926407][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.940799][ T9111] CPU: 0 PID: 9111 Comm: syz.2.890 Not tainted syzkaller #0 [ 595.948118][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 595.958186][ T9111] Call Trace: [ 595.961479][ T9111] [ 595.964422][ T9111] dump_stack_lvl+0x18c/0x250 [ 595.969125][ T9111] ? show_regs_print_info+0x20/0x20 [ 595.974351][ T9111] ? load_image+0x420/0x420 [ 595.978873][ T9111] ? __might_fault+0xaa/0x120 [ 595.983569][ T9111] ? __lock_acquire+0x7d40/0x7d40 [ 595.988612][ T9111] should_fail_ex+0x39d/0x4d0 [ 595.993314][ T9111] _copy_from_iter+0x1d9/0x12e0 [ 595.998181][ T9111] ? slab_post_alloc_hook+0x8a/0x4b0 [ 596.003465][ T9111] ? __virt_addr_valid+0x18c/0x540 [ 596.008569][ T9111] ? __lock_acquire+0x7d40/0x7d40 [ 596.013589][ T9111] ? rcu_is_watching+0x15/0xb0 [ 596.018347][ T9111] ? copyout_mc+0x70/0x70 [ 596.022669][ T9111] ? __virt_addr_valid+0x18c/0x540 [ 596.027775][ T9111] ? __virt_addr_valid+0x18c/0x540 [ 596.032876][ T9111] ? __virt_addr_valid+0x469/0x540 [ 596.037979][ T9111] ? __check_object_size+0x506/0xa20 [ 596.043256][ T9111] netlink_sendmsg+0x76b/0xbf0 [ 596.048026][ T9111] ? netlink_getsockopt+0x590/0x590 [ 596.053222][ T9111] ? aa_sock_msg_perm+0x94/0x150 [ 596.058158][ T9111] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 596.063437][ T9111] ? security_socket_sendmsg+0x80/0xa0 [ 596.068892][ T9111] ? netlink_getsockopt+0x590/0x590 [ 596.074090][ T9111] ____sys_sendmsg+0x5ba/0x960 [ 596.078860][ T9111] ? __asan_memset+0x22/0x40 [ 596.083441][ T9111] ? __sys_sendmsg_sock+0x30/0x30 [ 596.088451][ T9111] ? __import_iovec+0x5f2/0x850 [ 596.093309][ T9111] ? import_iovec+0x73/0xa0 [ 596.097816][ T9111] ___sys_sendmsg+0x2a6/0x360 [ 596.102484][ T9111] ? get_pid_task+0x20/0x1e0 [ 596.107070][ T9111] ? __sys_sendmsg+0x2a0/0x2a0 [ 596.111840][ T9111] ? __lock_acquire+0x7d40/0x7d40 [ 596.116871][ T9111] __se_sys_sendmsg+0x1c2/0x2b0 [ 596.121714][ T9111] ? __x64_sys_sendmsg+0x80/0x80 [ 596.126652][ T9111] ? lockdep_hardirqs_on+0x98/0x150 [ 596.131846][ T9111] do_syscall_64+0x55/0xa0 [ 596.136254][ T9111] ? clear_bhb_loop+0x40/0x90 [ 596.140920][ T9111] ? clear_bhb_loop+0x40/0x90 [ 596.145600][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.151484][ T9111] RIP: 0033:0x7f740b79c819 [ 596.155889][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.175485][ T9111] RSP: 002b:00007f740c57f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.183889][ T9111] RAX: ffffffffffffffda RBX: 00007f740ba16090 RCX: 00007f740b79c819 [ 596.191853][ T9111] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 596.199816][ T9111] RBP: 00007f740c57f090 R08: 0000000000000000 R09: 0000000000000000 [ 596.207776][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.215740][ T9111] R13: 00007f740ba16128 R14: 00007f740ba16090 R15: 00007ffe8bf513d8 [ 596.223719][ T9111] [ 596.374778][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 596.441773][ T9118] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 596.486515][ T9118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 596.974106][ T9122] bridge_slave_1: default FDB implementation only supports local addresses [ 597.231231][ T9135] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 601.640386][ T9150] __nla_validate_parse: 3 callbacks suppressed [ 601.640403][ T9150] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.899'. [ 601.726509][ T9150] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.899'. [ 601.796354][ T9137] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.899'. [ 601.838463][ T9155] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 601.866460][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'. [ 601.879525][ T9155] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 601.922353][ T9150] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.899'. [ 602.406407][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 602.572468][ T9164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 603.148623][ T9142] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.907'. [ 603.199005][ T9142] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.907'. [ 603.232636][ T9146] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.907'. [ 603.859257][ T9184] bridge_slave_1: default FDB implementation only supports local addresses [ 604.856100][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.868846][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.879974][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.911152][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.923706][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.938509][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.950044][ T9192] batadv_slave_1: entered promiscuous mode [ 604.959227][ T9191] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 604.984082][ T9191] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 605.925331][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 606.559901][ T9196] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 606.587194][ T9194] syzkaller0: entered promiscuous mode [ 606.593016][ T9194] syzkaller0: entered allmulticast mode [ 606.688229][ T9198] __nla_validate_parse: 4 callbacks suppressed [ 606.688275][ T9198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.917'. [ 606.727386][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 606.848121][ T9203] FAULT_INJECTION: forcing a failure. [ 606.848121][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 606.867898][ T9203] CPU: 1 PID: 9203 Comm: syz.3.921 Not tainted syzkaller #0 [ 606.875231][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 606.885312][ T9203] Call Trace: [ 606.888620][ T9203] [ 606.891573][ T9203] dump_stack_lvl+0x18c/0x250 [ 606.896299][ T9203] ? show_regs_print_info+0x20/0x20 [ 606.901537][ T9203] ? load_image+0x420/0x420 [ 606.906081][ T9203] ? __might_sleep+0xe0/0xe0 [ 606.910701][ T9203] ? __lock_acquire+0x7d40/0x7d40 [ 606.915762][ T9203] should_fail_ex+0x39d/0x4d0 [ 606.920479][ T9203] should_failslab+0x9/0x20 [ 606.925010][ T9203] slab_pre_alloc_hook+0x59/0x310 [ 606.930065][ T9203] ? sctp_association_new+0x89/0x25c0 [ 606.935470][ T9203] __kmem_cache_alloc_node+0x53/0x250 [ 606.940880][ T9203] ? sctp_association_new+0x89/0x25c0 [ 606.946286][ T9203] kmalloc_trace+0x2a/0xe0 [ 606.950740][ T9203] sctp_association_new+0x89/0x25c0 [ 606.955971][ T9203] ? sctp_do_bind+0x6bd/0x990 [ 606.960676][ T9203] ? __ipv6_addr_type+0x10c/0x2f0 [ 606.965736][ T9203] sctp_connect_new_asoc+0x2de/0x6a0 [ 606.971039][ T9203] ? __sctp_connect+0xd80/0xd80 [ 606.975900][ T9203] ? __local_bh_enable_ip+0x13a/0x1c0 [ 606.981280][ T9203] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 606.986827][ T9203] ? security_sctp_bind_connect+0x89/0xb0 [ 606.992551][ T9203] sctp_sendmsg+0x1575/0x28c0 [ 606.997245][ T9203] ? sctp_getsockopt+0xb60/0xb60 [ 607.002185][ T9203] ? aa_sk_perm+0x83c/0x970 [ 607.006701][ T9203] ? aa_af_perm+0x330/0x330 [ 607.011205][ T9203] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 607.017623][ T9203] ? sock_rps_record_flow+0x19/0x3f0 [ 607.022915][ T9203] ? inet_sendmsg+0xe9/0x2f0 [ 607.027508][ T9203] ? inet_send_prepare+0x260/0x260 [ 607.032622][ T9203] ____sys_sendmsg+0x5ba/0x960 [ 607.037386][ T9203] ? __lock_acquire+0x7d40/0x7d40 [ 607.042416][ T9203] ? __asan_memset+0x22/0x40 [ 607.047008][ T9203] ? __sys_sendmsg_sock+0x30/0x30 [ 607.052028][ T9203] ? __import_iovec+0x5f2/0x850 [ 607.056893][ T9203] ? import_iovec+0x73/0xa0 [ 607.061399][ T9203] ___sys_sendmsg+0x2a6/0x360 [ 607.066081][ T9203] ? __sys_sendmsg+0x2a0/0x2a0 [ 607.070877][ T9203] ? __lock_acquire+0x7d40/0x7d40 [ 607.075939][ T9203] __se_sys_sendmsg+0x1c2/0x2b0 [ 607.080796][ T9203] ? __x64_sys_sendmsg+0x80/0x80 [ 607.085753][ T9203] ? lockdep_hardirqs_on+0x98/0x150 [ 607.090956][ T9203] do_syscall_64+0x55/0xa0 [ 607.095386][ T9203] ? clear_bhb_loop+0x40/0x90 [ 607.100071][ T9203] ? clear_bhb_loop+0x40/0x90 [ 607.104750][ T9203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.110645][ T9203] RIP: 0033:0x7f0066b9c819 [ 607.115059][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.134671][ T9203] RSP: 002b:00007f0064df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.143094][ T9203] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066b9c819 [ 607.151073][ T9203] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 607.159046][ T9203] RBP: 00007f0064df6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.167019][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.174995][ T9203] R13: 00007f0066e16038 R14: 00007f0066e15fa0 R15: 00007ffca79a5638 [ 607.182987][ T9203] [ 607.511301][ T9209] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.919'. [ 607.553742][ T9209] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.919'. [ 607.593018][ T9205] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.919'. [ 607.642917][ T9205] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.919'. [ 607.754922][ T9214] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.923'. [ 607.824508][ T9217] netlink: 2 bytes leftover after parsing attributes in process `syz.3.923'. [ 607.901673][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.978529][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046342][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.093750][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.128479][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.179271][ T2118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.203670][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.269720][ T9217] batadv_slave_1: entered promiscuous mode [ 608.657046][ T9224] netlink: 'syz.2.928': attribute type 10 has an invalid length. [ 608.725720][ T9222] syzkaller0: entered promiscuous mode [ 608.754545][ T9222] syzkaller0: entered allmulticast mode [ 608.788565][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 608.987101][ T9235] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 609.011180][ T9235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 609.054074][ T9235] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 609.262067][ T9240] netlink: 'syz.3.932': attribute type 9 has an invalid length. [ 609.631185][ T9252] netlink: 'syz.3.936': attribute type 10 has an invalid length. [ 609.645575][ T9252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 609.923999][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 610.379728][ T9256] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 610.513987][ T9261] netlink: 'syz.3.939': attribute type 10 has an invalid length. [ 610.536991][ T9261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 610.841890][ T5912] wlan1: Creating new IBSS network, BSSID 96:c5:67:85:42:7f [ 611.034598][ T9273] syzkaller0: entered promiscuous mode [ 611.069218][ T9273] syzkaller0: entered allmulticast mode [ 611.193271][ T9285] FAULT_INJECTION: forcing a failure. [ 611.193271][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 611.210373][ T9285] CPU: 0 PID: 9285 Comm: syz.1.946 Not tainted syzkaller #0 [ 611.217695][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.227762][ T9285] Call Trace: [ 611.231036][ T9285] [ 611.233962][ T9285] dump_stack_lvl+0x18c/0x250 [ 611.238641][ T9285] ? show_regs_print_info+0x20/0x20 [ 611.243844][ T9285] ? load_image+0x420/0x420 [ 611.248357][ T9285] ? __might_sleep+0xe0/0xe0 [ 611.252952][ T9285] ? __lock_acquire+0x7d40/0x7d40 [ 611.257975][ T9285] should_fail_ex+0x39d/0x4d0 [ 611.262652][ T9285] should_failslab+0x9/0x20 [ 611.267151][ T9285] slab_pre_alloc_hook+0x59/0x310 [ 611.272172][ T9285] ? apparmor_sk_alloc_security+0x77/0x100 [ 611.277976][ T9285] __kmem_cache_alloc_node+0x53/0x250 [ 611.283349][ T9285] ? apparmor_sk_alloc_security+0x77/0x100 [ 611.289151][ T9285] kmalloc_trace+0x2a/0xe0 [ 611.293574][ T9285] apparmor_sk_alloc_security+0x77/0x100 [ 611.299207][ T9285] security_sk_alloc+0x6e/0xa0 [ 611.303973][ T9285] sk_prot_alloc+0x101/0x210 [ 611.308554][ T9285] ? sk_alloc+0x24/0x360 [ 611.312793][ T9285] sk_alloc+0x3a/0x360 [ 611.316859][ T9285] ? bpf_ctx_init+0x163/0x1a0 [ 611.321525][ T9285] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 611.327064][ T9285] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 611.332430][ T9285] ? __fget_files+0x28/0x4b0 [ 611.337014][ T9285] ? __fget_files+0x28/0x4b0 [ 611.341598][ T9285] ? __fget_files+0x43d/0x4b0 [ 611.346276][ T9285] ? cpu_online+0x60/0x60 [ 611.350596][ T9285] bpf_prog_test_run+0x321/0x390 [ 611.355528][ T9285] __sys_bpf+0x49d/0x890 [ 611.359768][ T9285] ? bpf_link_show_fdinfo+0x390/0x390 [ 611.365143][ T9285] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.371301][ T9285] __x64_sys_bpf+0x7c/0x90 [ 611.375718][ T9285] do_syscall_64+0x55/0xa0 [ 611.380125][ T9285] ? clear_bhb_loop+0x40/0x90 [ 611.384791][ T9285] ? clear_bhb_loop+0x40/0x90 [ 611.389466][ T9285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.395351][ T9285] RIP: 0033:0x7f4ef3d9c819 [ 611.399758][ T9285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.419354][ T9285] RSP: 002b:00007f4ef4b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 611.427758][ T9285] RAX: ffffffffffffffda RBX: 00007f4ef4015fa0 RCX: 00007f4ef3d9c819 [ 611.436152][ T9285] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 611.444115][ T9285] RBP: 00007f4ef4b88090 R08: 0000000000000000 R09: 0000000000000000 [ 611.452076][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.460040][ T9285] R13: 00007f4ef4016038 R14: 00007f4ef4015fa0 R15: 00007ffc7a246da8 [ 611.468021][ T9285] [ 611.920576][ T9290] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 611.932944][ T9290] __nla_validate_parse: 7 callbacks suppressed [ 611.932975][ T9290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 611.975935][ T9290] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 612.119151][ T9297] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 612.281840][ T9304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 612.510189][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 613.040190][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 613.588088][ T9315] netlink: 'syz.1.957': attribute type 10 has an invalid length. [ 613.595977][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.957'. [ 613.606129][ T9315] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 613.621895][ T9321] netlink: 'syz.2.959': attribute type 2 has an invalid length. [ 613.630342][ T9321] netlink: 'syz.2.959': attribute type 8 has an invalid length. [ 613.638484][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.959'. [ 613.745164][ T9329] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 613.754701][ T9329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 613.767039][ T9329] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 613.923845][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 616.931947][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.965'. [ 616.969385][ T9340] syzkaller0: entered promiscuous mode [ 616.985522][ T9340] syzkaller0: entered allmulticast mode [ 617.484386][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 618.884540][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 618.891129][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 619.930519][ T5912] wlan1: Trigger new scan to find an IBSS to join [ 620.299143][ T5845] wlan1: Creating new IBSS network, BSSID c6:5b:49:48:3a:21 [ 620.314408][ T2118] wlan1: Creating new IBSS network, BSSID 92:56:95:09:3a:ab [ 620.506718][ T9372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.973'. [ 620.830088][ T9389] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.980'. [ 620.856870][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.976'. [ 620.869705][ T9386] netlink: 830 bytes leftover after parsing attributes in process `syz.1.978'. [ 620.881980][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 621.190727][ T9393] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 621.200789][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.981'. [ 621.220071][ T9393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 621.244499][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 622.849363][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.990'. [ 622.889947][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 622.930986][ T9418] netlink: 156 bytes leftover after parsing attributes in process `syz.3.992'. [ 624.414697][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.421039][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.951384][ T9424] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 625.951667][ T5922] wlan1: Creating new IBSS network, BSSID 5a:f6:71:88:27:fa [ 625.959329][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.994'. [ 625.989965][ T9424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 626.295151][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 626.371478][ T9440] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 626.664151][ T9444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1002'. [ 629.428372][ T9456] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 629.471367][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1008'. [ 629.493325][ T9456] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 629.924041][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 630.367662][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 630.693493][ T9472] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1006'. [ 630.744077][ T9472] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1006'. [ 630.828487][ T9453] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1006'. [ 630.849838][ T9469] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1011'. [ 630.875880][ T9479] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 630.895610][ T9480] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1006'. [ 630.923750][ T9469] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1011'. [ 631.033530][ T9465] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1011'. [ 631.118531][ T9471] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1011'. [ 631.923694][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 633.018303][ T9487] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 633.028752][ T9487] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 633.173375][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.200328][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.214466][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.226695][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.237407][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.249748][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.299043][ T9489] batadv_slave_1: entered promiscuous mode [ 633.569504][ T9508] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 633.609760][ T9504] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 633.626579][ T9504] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 635.013134][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 635.974077][ T42] wlan1: Trigger new scan to find an IBSS to join [ 636.939220][ T42] wlan1: Creating new IBSS network, BSSID a2:16:e7:a5:57:b4 [ 637.077009][ T9519] __nla_validate_parse: 5 callbacks suppressed [ 637.077025][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 637.589306][ T9524] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1031'. [ 637.620415][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.649113][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.666393][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.690683][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.703125][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.721930][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.749186][ T9530] vcan0: entered allmulticast mode [ 637.759683][ T9530] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 637.768776][ T9530] veth0_macvtap: left promiscuous mode [ 637.944939][ T9535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1035'. [ 638.124105][ T9539] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 638.236379][ T9540] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 638.258122][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1038'. [ 638.280802][ T9540] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 639.627033][ T9552] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 640.203841][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'. [ 640.209907][ T5922] wlan1: Trigger new scan to find an IBSS to join [ 640.232596][ T9552] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 640.409827][ T9557] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1039'. [ 640.429247][ T9557] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1039'. [ 640.508701][ T9544] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1039'. [ 640.644502][ T9557] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1039'. [ 640.816978][ T9565] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1040'. [ 641.041541][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.067991][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.081804][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.099303][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.111448][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.137703][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.327374][ T42] wlan1: Creating new IBSS network, BSSID fe:dd:e4:8c:ed:92 [ 641.584870][ T9575] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 641.817786][ T9584] netlink: 'syz.0.1051': attribute type 3 has an invalid length. [ 641.978553][ T9589] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 642.000997][ T9589] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 642.143377][ T9599] FAULT_INJECTION: forcing a failure. [ 642.143377][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 642.161174][ T9599] CPU: 1 PID: 9599 Comm: syz.0.1063 Not tainted syzkaller #0 [ 642.168579][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 642.178650][ T9599] Call Trace: [ 642.181939][ T9599] [ 642.184889][ T9599] dump_stack_lvl+0x18c/0x250 [ 642.189591][ T9599] ? sctp_sendmsg+0x1575/0x28c0 [ 642.194458][ T9599] ? ___sys_sendmsg+0x2a6/0x360 [ 642.199327][ T9599] ? show_regs_print_info+0x20/0x20 [ 642.204551][ T9599] ? load_image+0x420/0x420 [ 642.209091][ T9599] should_fail_ex+0x39d/0x4d0 [ 642.213792][ T9599] should_failslab+0x9/0x20 [ 642.218312][ T9599] slab_pre_alloc_hook+0x59/0x310 [ 642.223360][ T9599] ? sctp_add_bind_addr+0x8c/0x360 [ 642.228490][ T9599] __kmem_cache_alloc_node+0x53/0x250 [ 642.233889][ T9599] ? sctp_add_bind_addr+0x8c/0x360 [ 642.239013][ T9599] kmalloc_trace+0x2a/0xe0 [ 642.243450][ T9599] sctp_add_bind_addr+0x8c/0x360 [ 642.248403][ T9599] sctp_copy_local_addr_list+0x315/0x4f0 [ 642.254051][ T9599] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 642.259787][ T9599] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 642.265877][ T9599] ? sctp_v4_is_any+0x35/0x60 [ 642.270569][ T9599] ? sctp_copy_one_addr+0x8c/0x350 [ 642.275703][ T9599] sctp_bind_addr_copy+0xb3/0x3c0 [ 642.280747][ T9599] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 642.287095][ T9599] sctp_connect_new_asoc+0x2f9/0x6a0 [ 642.292404][ T9599] ? __sctp_connect+0xd80/0xd80 [ 642.297268][ T9599] ? __local_bh_enable_ip+0x13a/0x1c0 [ 642.302660][ T9599] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 642.308227][ T9599] ? security_sctp_bind_connect+0x89/0xb0 [ 642.313969][ T9599] sctp_sendmsg+0x1575/0x28c0 [ 642.318675][ T9599] ? sctp_getsockopt+0xb60/0xb60 [ 642.323633][ T9599] ? aa_sk_perm+0x83c/0x970 [ 642.328172][ T9599] ? aa_af_perm+0x330/0x330 [ 642.332694][ T9599] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 642.339128][ T9599] ? sock_rps_record_flow+0x19/0x3f0 [ 642.344436][ T9599] ? inet_sendmsg+0xe9/0x2f0 [ 642.349044][ T9599] ? inet_send_prepare+0x260/0x260 [ 642.354178][ T9599] ____sys_sendmsg+0x5ba/0x960 [ 642.358955][ T9599] ? __lock_acquire+0x7d40/0x7d40 [ 642.364001][ T9599] ? __asan_memset+0x22/0x40 [ 642.368614][ T9599] ? __sys_sendmsg_sock+0x30/0x30 [ 642.373652][ T9599] ? __import_iovec+0x5f2/0x850 [ 642.378525][ T9599] ? import_iovec+0x73/0xa0 [ 642.383047][ T9599] ___sys_sendmsg+0x2a6/0x360 [ 642.387733][ T9599] ? get_pid_task+0x20/0x1e0 [ 642.392343][ T9599] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.397137][ T9599] ? __lock_acquire+0x7d40/0x7d40 [ 642.402198][ T9599] __se_sys_sendmsg+0x1c2/0x2b0 [ 642.407060][ T9599] ? __x64_sys_sendmsg+0x80/0x80 [ 642.412020][ T9599] ? lockdep_hardirqs_on+0x98/0x150 [ 642.417238][ T9599] do_syscall_64+0x55/0xa0 [ 642.421667][ T9599] ? clear_bhb_loop+0x40/0x90 [ 642.426361][ T9599] ? clear_bhb_loop+0x40/0x90 [ 642.431056][ T9599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.436969][ T9599] RIP: 0033:0x7f9d7019c819 [ 642.441391][ T9599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.461005][ T9599] RSP: 002b:00007f9d710b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.469433][ T9599] RAX: ffffffffffffffda RBX: 00007f9d70415fa0 RCX: 00007f9d7019c819 [ 642.477413][ T9599] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000003 [ 642.485399][ T9599] RBP: 00007f9d710b0090 R08: 0000000000000000 R09: 0000000000000000 [ 642.493379][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.501359][ T9599] R13: 00007f9d70416038 R14: 00007f9d70415fa0 R15: 00007fff0a83bf28 [ 642.509359][ T9599] [ 642.914337][ T9604] __nla_validate_parse: 7 callbacks suppressed [ 642.914353][ T9604] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1055'. [ 642.999319][ T9603] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1056'. [ 643.018515][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.030565][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.041021][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.051877][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.061983][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.081632][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.092130][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'. [ 643.112607][ T9604] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1055'. [ 643.141039][ T9600] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1055'. [ 643.162659][ T9610] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1055'. [ 643.289144][ T9624] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 643.826651][ T9643] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 643.836093][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1068'. [ 643.867083][ T9643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 643.911752][ T9646] netlink: 'syz.2.1069': attribute type 10 has an invalid length. [ 643.924875][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 643.924969][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 643.957083][ T9646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1069'. [ 643.988621][ T9646] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.105492][ T9650] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1071'. [ 644.155275][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.215653][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.259141][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.282007][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.321918][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.338110][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.381527][ T9650] batadv_slave_1: entered promiscuous mode [ 644.399170][ T9656] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1073'. [ 644.410625][ T9656] bridge_slave_1: default FDB implementation only supports local addresses [ 644.450844][ T9666] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 644.459463][ T9666] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 644.546971][ T9669] netlink: 'syz.0.1077': attribute type 12 has an invalid length. [ 644.751925][ T9675] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 644.771443][ T9675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 645.236996][ T9697] FAULT_INJECTION: forcing a failure. [ 645.236996][ T9697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.251307][ T9697] CPU: 1 PID: 9697 Comm: syz.3.1088 Not tainted syzkaller #0 [ 645.258713][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.268779][ T9697] Call Trace: [ 645.272062][ T9697] [ 645.274993][ T9697] dump_stack_lvl+0x18c/0x250 [ 645.279679][ T9697] ? show_regs_print_info+0x20/0x20 [ 645.284876][ T9697] ? load_image+0x420/0x420 [ 645.289378][ T9697] ? __might_fault+0xaa/0x120 [ 645.294054][ T9697] should_fail_ex+0x39d/0x4d0 [ 645.298756][ T9697] copyin+0x1a/0x90 [ 645.302580][ T9697] _copy_from_iter+0x404/0x12e0 [ 645.307439][ T9697] ? __virt_addr_valid+0x18c/0x540 [ 645.312559][ T9697] ? __lock_acquire+0x7d40/0x7d40 [ 645.317610][ T9697] ? copyout_mc+0x70/0x70 [ 645.321946][ T9697] ? __virt_addr_valid+0x18c/0x540 [ 645.327058][ T9697] ? __virt_addr_valid+0x18c/0x540 [ 645.332191][ T9697] ? __virt_addr_valid+0x469/0x540 [ 645.337308][ T9697] ? __check_object_size+0x506/0xa20 [ 645.342594][ T9697] kcm_sendmsg+0xd95/0x28b0 [ 645.347123][ T9697] ? kcm_getsockopt+0x280/0x280 [ 645.351969][ T9697] ? aa_sock_msg_perm+0x94/0x150 [ 645.356909][ T9697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 645.362195][ T9697] ? security_socket_sendmsg+0x80/0xa0 [ 645.367644][ T9697] ? kcm_getsockopt+0x280/0x280 [ 645.372486][ T9697] ____sys_sendmsg+0x5ba/0x960 [ 645.377247][ T9697] ? __asan_memset+0x22/0x40 [ 645.381832][ T9697] ? __sys_sendmsg_sock+0x30/0x30 [ 645.386846][ T9697] ? __import_iovec+0x3fa/0x850 [ 645.391694][ T9697] ? import_iovec+0x73/0xa0 [ 645.396190][ T9697] ___sys_sendmsg+0x2a6/0x360 [ 645.400855][ T9697] ? get_pid_task+0x20/0x1e0 [ 645.405439][ T9697] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.410207][ T9697] ? __lock_acquire+0x7d40/0x7d40 [ 645.415240][ T9697] __se_sys_sendmsg+0x1c2/0x2b0 [ 645.420083][ T9697] ? __x64_sys_sendmsg+0x80/0x80 [ 645.425033][ T9697] ? lockdep_hardirqs_on+0x98/0x150 [ 645.430229][ T9697] do_syscall_64+0x55/0xa0 [ 645.434639][ T9697] ? clear_bhb_loop+0x40/0x90 [ 645.439315][ T9697] ? clear_bhb_loop+0x40/0x90 [ 645.443983][ T9697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.449876][ T9697] RIP: 0033:0x7f0066b9c819 [ 645.454295][ T9697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.473892][ T9697] RSP: 002b:00007f0064df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.482299][ T9697] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066b9c819 [ 645.490289][ T9697] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 645.498284][ T9697] RBP: 00007f0064df6090 R08: 0000000000000000 R09: 0000000000000000 [ 645.506269][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.514241][ T9697] R13: 00007f0066e16038 R14: 00007f0066e15fa0 R15: 00007ffca79a5638 [ 645.522220][ T9697] [ 645.543006][ T9692] bridge_slave_1: default FDB implementation only supports local addresses [ 645.692018][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.718325][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.729184][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.740803][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.753751][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.766332][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.789060][ T9701] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 645.817745][ T9701] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 645.924495][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 645.930999][ T42] wlan1: Trigger new scan to find an IBSS to join [ 646.023919][ T9710] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 646.054275][ T9710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 646.384250][ T9715] FAULT_INJECTION: forcing a failure. [ 646.384250][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 646.398502][ T9712] netlink: 'syz.1.1093': attribute type 21 has an invalid length. [ 646.418268][ T9715] CPU: 1 PID: 9715 Comm: syz.3.1094 Not tainted syzkaller #0 [ 646.425678][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.435749][ T9715] Call Trace: [ 646.439043][ T9715] [ 646.441982][ T9715] dump_stack_lvl+0x18c/0x250 [ 646.446673][ T9715] ? sctp_sendmsg+0x1575/0x28c0 [ 646.451510][ T9715] ? ___sys_sendmsg+0x2a6/0x360 [ 646.453860][ T9718] netlink: 'syz.2.1096': attribute type 6 has an invalid length. [ 646.456349][ T9715] ? show_regs_print_info+0x20/0x20 [ 646.469316][ T9715] ? load_image+0x420/0x420 [ 646.473856][ T9715] should_fail_ex+0x39d/0x4d0 [ 646.478569][ T9715] should_failslab+0x9/0x20 [ 646.483092][ T9715] slab_pre_alloc_hook+0x59/0x310 [ 646.488141][ T9715] ? sctp_add_bind_addr+0x8c/0x360 [ 646.493272][ T9715] __kmem_cache_alloc_node+0x53/0x250 [ 646.498673][ T9715] ? sctp_add_bind_addr+0x8c/0x360 [ 646.503800][ T9715] kmalloc_trace+0x2a/0xe0 [ 646.508236][ T9715] sctp_add_bind_addr+0x8c/0x360 [ 646.513191][ T9715] sctp_copy_local_addr_list+0x315/0x4f0 [ 646.518855][ T9715] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 646.524599][ T9715] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 646.530691][ T9715] ? sctp_v4_is_any+0x35/0x60 [ 646.535381][ T9715] ? sctp_copy_one_addr+0x8c/0x350 [ 646.540513][ T9715] sctp_bind_addr_copy+0x189/0x3c0 [ 646.545645][ T9715] sctp_connect_new_asoc+0x2f9/0x6a0 [ 646.550953][ T9715] ? __sctp_connect+0xd80/0xd80 [ 646.555824][ T9715] ? __local_bh_enable_ip+0x13a/0x1c0 [ 646.561212][ T9715] ? _local_bh_enable+0xa0/0xa0 [ 646.566074][ T9715] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 646.571898][ T9715] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 646.577725][ T9715] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 646.583288][ T9715] ? security_sctp_bind_connect+0x89/0xb0 [ 646.589027][ T9715] sctp_sendmsg+0x1575/0x28c0 [ 646.593733][ T9715] ? sctp_getsockopt+0xb60/0xb60 [ 646.598688][ T9715] ? aa_sk_perm+0x83c/0x970 [ 646.603216][ T9715] ? aa_af_perm+0x330/0x330 [ 646.607736][ T9715] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 646.614167][ T9715] ? sock_rps_record_flow+0x19/0x3f0 [ 646.619479][ T9715] ? inet_sendmsg+0x7c/0x2f0 [ 646.624090][ T9715] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 646.629394][ T9715] ? security_socket_sendmsg+0x80/0xa0 [ 646.634865][ T9715] ? inet_send_prepare+0x260/0x260 [ 646.639997][ T9715] ____sys_sendmsg+0x5ba/0x960 [ 646.644791][ T9715] ? __lock_acquire+0x7d40/0x7d40 [ 646.649841][ T9715] ? __asan_memset+0x22/0x40 [ 646.654455][ T9715] ? __sys_sendmsg_sock+0x30/0x30 [ 646.659491][ T9715] ? __import_iovec+0x5f2/0x850 [ 646.664368][ T9715] ? import_iovec+0x73/0xa0 [ 646.668891][ T9715] ___sys_sendmsg+0x2a6/0x360 [ 646.673583][ T9715] ? get_pid_task+0x20/0x1e0 [ 646.678194][ T9715] ? __sys_sendmsg+0x2a0/0x2a0 [ 646.682997][ T9715] ? __lock_acquire+0x7d40/0x7d40 [ 646.688066][ T9715] __se_sys_sendmsg+0x1c2/0x2b0 [ 646.692944][ T9715] ? __x64_sys_sendmsg+0x80/0x80 [ 646.697912][ T9715] ? lockdep_hardirqs_on+0x98/0x150 [ 646.703130][ T9715] do_syscall_64+0x55/0xa0 [ 646.707555][ T9715] ? clear_bhb_loop+0x40/0x90 [ 646.712248][ T9715] ? clear_bhb_loop+0x40/0x90 [ 646.716954][ T9715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.722869][ T9715] RIP: 0033:0x7f0066b9c819 [ 646.727303][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.746922][ T9715] RSP: 002b:00007f0064df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.755354][ T9715] RAX: ffffffffffffffda RBX: 00007f0066e15fa0 RCX: 00007f0066b9c819 [ 646.763343][ T9715] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000003 [ 646.771329][ T9715] RBP: 00007f0064df6090 R08: 0000000000000000 R09: 0000000000000000 [ 646.779307][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.787278][ T9715] R13: 00007f0066e16038 R14: 00007f0066e15fa0 R15: 00007ffca79a5638 [ 646.795258][ T9715] [ 647.219881][ T9730] bridge_slave_1: default FDB implementation only supports local addresses [ 647.517848][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.554421][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.597173][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.642318][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.671139][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.708924][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.982905][ T9739] __nla_validate_parse: 15 callbacks suppressed [ 647.982949][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1103'. [ 648.011661][ T9739] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 648.080291][ T9748] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1106'. [ 648.234584][ T9754] FAULT_INJECTION: forcing a failure. [ 648.234584][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.263605][ T9754] CPU: 0 PID: 9754 Comm: syz.2.1108 Not tainted syzkaller #0 [ 648.271018][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.281087][ T9754] Call Trace: [ 648.284385][ T9754] [ 648.287336][ T9754] dump_stack_lvl+0x18c/0x250 [ 648.291165][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 648.292030][ T9754] ? show_regs_print_info+0x20/0x20 [ 648.306197][ T9754] ? load_image+0x420/0x420 [ 648.310724][ T9754] ? __lock_acquire+0x7d40/0x7d40 [ 648.315788][ T9754] ? snprintf+0xe9/0x140 [ 648.320055][ T9754] should_fail_ex+0x39d/0x4d0 [ 648.322899][ T9757] žÿ: renamed from team_slave_1 (while UP) [ 648.324743][ T9754] _copy_to_user+0x2f/0xa0 [ 648.324769][ T9754] simple_read_from_buffer+0xe7/0x150 [ 648.324798][ T9754] proc_fail_nth_read+0x1e8/0x260 [ 648.324823][ T9754] ? proc_fault_inject_write+0x360/0x360 [ 648.324850][ T9754] ? fsnotify_perm+0x271/0x5e0 [ 648.324873][ T9754] ? proc_fault_inject_write+0x360/0x360 [ 648.324895][ T9754] vfs_read+0x28b/0x970 [ 648.365559][ T9754] ? kernel_read+0x1e0/0x1e0 [ 648.370151][ T9754] ? __fget_files+0x28/0x4b0 [ 648.374739][ T9754] ? __fget_files+0x28/0x4b0 [ 648.379327][ T9754] ? __fget_files+0x43d/0x4b0 [ 648.384007][ T9754] ? __fdget_pos+0x2a3/0x330 [ 648.388589][ T9754] ? ksys_read+0x75/0x260 [ 648.392913][ T9754] ksys_read+0x150/0x260 [ 648.397158][ T9754] ? vfs_write+0x990/0x990 [ 648.401569][ T9754] ? lockdep_hardirqs_on+0x98/0x150 [ 648.406762][ T9754] do_syscall_64+0x55/0xa0 [ 648.411168][ T9754] ? clear_bhb_loop+0x40/0x90 [ 648.415839][ T9754] ? clear_bhb_loop+0x40/0x90 [ 648.420515][ T9754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.426400][ T9754] RIP: 0033:0x7f740b75d04e [ 648.430806][ T9754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.450406][ T9754] RSP: 002b:00007f740c59ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.458813][ T9754] RAX: ffffffffffffffda RBX: 00007f740c5a06c0 RCX: 00007f740b75d04e [ 648.466778][ T9754] RDX: 000000000000000f RSI: 00007f740c5a00a0 RDI: 0000000000000004 [ 648.474738][ T9754] RBP: 00007f740c5a0090 R08: 0000000000000000 R09: 0000000000000000 [ 648.482697][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.490655][ T9754] R13: 00007f740ba16038 R14: 00007f740ba15fa0 R15: 00007ffe8bf513d8 [ 648.498651][ T9754] [ 648.707533][ T9763] validate_nla: 3 callbacks suppressed [ 648.707550][ T9763] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 648.733736][ T9763] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1113'. [ 648.963821][ T42] wlan1: Trigger new scan to find an IBSS to join [ 648.970370][ T2118] wlan1: Trigger new scan to find an IBSS to join [ 649.058274][ T9771] tap0: tun_chr_ioctl cmd 1074025677 [ 649.074894][ T9771] tap0: linktype set to 769 [ 649.908446][ T5921] wlan1: Creating new IBSS network, BSSID ae:61:9b:79:92:c5 [ 649.924491][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 649.931019][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 649.939183][ T5846] wlan1: Creating new IBSS network, BSSID 32:ab:a6:e9:bd:f3 [ 651.103246][ T5846] wlan1: Creating new IBSS network, BSSID 7e:56:36:64:60:c3 [ 651.103250][ T42] wlan1: Creating new IBSS network, BSSID 26:16:0f:16:8b:be [ 651.549597][ T9884] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 651.570647][ T9884] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1172'. [ 653.291203][ T9968] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 653.367154][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1211'. [ 653.381026][ T9968] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 653.638491][ T9981] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 653.691179][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 653.769863][ T9981] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 653.944991][ T9987] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 654.118002][ T9988] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1213'. [ 654.143109][ T9988] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1213'. [ 654.232736][ T9971] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1213'. [ 654.286891][ T9996] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1213'. [ 654.346266][ T9995] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 654.380588][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1221'. [ 654.403364][ T9995] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 654.474312][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 654.579863][T10005] netlink: 'syz.0.1224': attribute type 21 has an invalid length. [ 654.602187][T10003] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 654.612285][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1225'. [ 654.658328][T10003] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 654.736453][T10005] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 654.758299][T10005] netlink: 'syz.0.1224': attribute type 2 has an invalid length. [ 654.776586][T10005] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.1224'. [ 654.919812][T10015] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 655.749272][T10039] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 655.800073][T10039] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 655.949119][ T42] wlan1: Trigger new scan to find an IBSS to join [ 656.465502][T10055] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 656.513745][T10056] netlink: 'syz.2.1243': attribute type 21 has an invalid length. [ 657.325036][T10072] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 657.679441][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.703297][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.723790][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.750235][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.761535][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.772856][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.785757][T10070] bridge_slave_1: default FDB implementation only supports local addresses [ 658.125293][T10091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.145112][T10091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.173771][T10091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.204306][T10091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.221181][T10091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.251984][T10091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.789977][T10105] __nla_validate_parse: 18 callbacks suppressed [ 658.790069][T10105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1264'. [ 658.835873][T10105] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 658.985379][ T42] wlan1: Trigger new scan to find an IBSS to join [ 659.175768][T10116] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1263'. [ 659.217371][T10110] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1267'. [ 659.226683][T10110] bridge_slave_1: default FDB implementation only supports local addresses [ 659.235634][T10112] validate_nla: 4 callbacks suppressed [ 659.235647][T10112] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 659.311861][T10116] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1263'. [ 659.338649][T10117] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1269'. [ 659.382013][T10117] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1269'. [ 659.398475][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.431079][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.450198][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.473687][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.496487][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.517583][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.537178][T10101] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1263'. [ 659.665409][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 660.302693][T10143] syzkaller0: entered promiscuous mode [ 660.308587][T10143] syzkaller0: entered allmulticast mode [ 660.324648][T10150] netlink: 'syz.2.1277': attribute type 10 has an invalid length. [ 660.343631][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'. [ 660.359347][T10150] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 660.462560][T10152] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1279'. [ 660.475995][T10152] bridge_slave_1: default FDB implementation only supports local addresses [ 660.980771][T10168] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 661.002029][T10168] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 661.076852][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.102687][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.133170][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.165521][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.190295][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.207055][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.681085][T10188] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 661.704685][T10188] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 661.861852][T10190] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 661.872979][T10190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 661.915920][T10193] bridge_slave_1: default FDB implementation only supports local addresses [ 661.924970][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 662.191251][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.208748][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.219593][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.236139][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.251093][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.265728][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.614666][T10221] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 662.668018][T10221] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 663.033026][T10235] bridge_slave_1: default FDB implementation only supports local addresses [ 663.188578][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.214458][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.243794][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.261673][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.279574][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.291099][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.716252][T10261] netlink: 'syz.0.1321': attribute type 6 has an invalid length. [ 663.843220][T10263] __nla_validate_parse: 28 callbacks suppressed [ 663.843238][T10263] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1322'. [ 663.870830][T10263] bridge_slave_1: default FDB implementation only supports local addresses [ 664.966314][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 666.200387][T10278] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 666.209741][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1327'. [ 666.229263][T10278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 666.299588][T10282] netlink: 'syz.1.1329': attribute type 10 has an invalid length. [ 666.313928][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1329'. [ 666.336997][T10282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 666.381491][T10289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1328'. [ 666.400881][T10289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1328'. [ 666.412016][T10280] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1328'. [ 666.422789][T10289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1328'. [ 666.821848][T10303] netlink: 'syz.3.1336': attribute type 6 has an invalid length. [ 666.840488][T10303] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1336'. [ 666.973747][ T42] wlan1: Trigger new scan to find an IBSS to join [ 667.459198][T10317] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 667.514932][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'. [ 667.562147][T10317] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 667.933799][ T42] wlan1: Trigger new scan to find an IBSS to join [ 668.864703][ T42] wlan1: Creating new IBSS network, BSSID 36:e6:50:ef:68:fb [ 668.963904][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 669.082025][T10321] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 669.095031][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1342'. [ 669.109040][T10321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 669.461162][T10335] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1343'. [ 669.501029][T10335] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1343'. [ 669.532623][T10325] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1343'. [ 669.599991][T10335] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1343'. [ 670.019198][T10349] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 670.043361][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1353'. [ 670.066628][T10349] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 670.720749][T10357] netlink: 'syz.1.1356': attribute type 6 has an invalid length. [ 670.750292][T10357] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1356'. [ 670.892692][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 670.974084][T10333] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1347'. [ 670.997749][T10333] bridge_slave_1: default FDB implementation only supports local addresses [ 671.053051][T10369] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 671.083256][T10369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1358'. [ 671.112384][T10369] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 671.260496][T10375] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 671.306302][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'. [ 671.320189][T10375] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 672.172287][T10401] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 672.196313][T10401] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 672.222176][T10406] netlink: 'syz.3.1373': attribute type 10 has an invalid length. [ 672.703413][T10424] netlink: 'syz.0.1380': attribute type 6 has an invalid length. [ 672.885426][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 673.010948][T10432] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 673.043064][T10432] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 673.284064][T10440] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 673.309120][T10440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 673.498028][T10444] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 673.883371][ T5845] wlan1: Creating new IBSS network, BSSID aa:b8:44:71:f6:18 [ 673.928469][ T5846] wlan1: Trigger new scan to find an IBSS to join [ 673.956207][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.984848][ T2118] ------------[ cut here ]------------ [ 673.990604][ T2118] WARNING: CPU: 1 PID: 2118 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 674.000528][ T2118] Modules linked in: [ 674.005112][ T2118] CPU: 1 PID: 2118 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 674.013061][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 674.023709][ T2118] Workqueue: cfg80211 cfg80211_event_work [ 674.029468][ T2118] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 674.035910][ T2118] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 a4 a0 f7 0f 0b eb bb e8 4e a4 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 40 a4 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 674.055678][ T2118] RSP: 0018:ffffc90005757a20 EFLAGS: 00010293 [ 674.061767][ T2118] RAX: ffffffff89e67db2 RBX: dffffc0000000000 RCX: ffff888026863c00 [ 674.068938][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.069922][ T2118] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 674.069969][ T2118] RBP: ffffc90005757af8 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 674.069984][ T2118] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88805dd50c90 [ 674.070000][ T2118] R13: 1ffff92000aeaf4c R14: ffff888021a335b8 R15: 000000000000001e [ 674.070014][ T2118] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 674.070030][ T2118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.070045][ T2118] CR2: 00007f6bafd35eb8 CR3: 000000002e163000 CR4: 00000000003506e0 [ 674.070063][ T2118] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 674.070076][ T2118] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 674.108938][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.112010][ T2118] Call Trace: [ 674.112022][ T2118] [ 674.112033][ T2118] ? mutex_lock_nested+0x20/0x20 [ 674.112062][ T2118] ? trace_rdev_return_void+0x1c0/0x1c0 [ 674.112099][ T2118] cfg80211_process_wdev_events+0x3bc/0x550 [ 674.112136][ T2118] cfg80211_process_rdev_events+0xa1/0x110 [ 674.112162][ T2118] cfg80211_event_work+0x2f/0x40 [ 674.112183][ T2118] ? process_scheduled_works+0x96f/0x15d0 [ 674.112205][ T2118] process_scheduled_works+0xa5d/0x15d0 [ 674.112261][ T2118] ? worker_attach_to_pool+0x380/0x380 [ 674.143249][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.152487][ T2118] ? assign_work+0x3d2/0x5d0 [ 674.152525][ T2118] worker_thread+0xa55/0xfc0 [ 674.152582][ T2118] kthread+0x2fa/0x390 [ 674.152599][ T2118] ? pr_cont_work+0x560/0x560 [ 674.152622][ T2118] ? kthread_blkcg+0xd0/0xd0 [ 674.152642][ T2118] ret_from_fork+0x48/0x80 [ 674.152664][ T2118] ? kthread_blkcg+0xd0/0xd0 [ 674.152690][ T2118] ret_from_fork_asm+0x11/0x20 [ 674.152731][ T2118] [ 674.152753][ T2118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 674.152763][ T2118] CPU: 1 PID: 2118 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 674.152779][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 674.152789][ T2118] Workqueue: cfg80211 cfg80211_event_work [ 674.152810][ T2118] Call Trace: [ 674.152817][ T2118] [ 674.152823][ T2118] dump_stack_lvl+0x18c/0x250 [ 674.152852][ T2118] ? show_regs_print_info+0x20/0x20 [ 674.152874][ T2118] ? load_image+0x420/0x420 [ 674.152909][ T2118] panic+0x2dc/0x730 [ 674.152934][ T2118] ? bpf_jit_dump+0xd0/0xd0 [ 674.152963][ T2118] ? ret_from_fork_asm+0x11/0x20 [ 674.152989][ T2118] __warn+0x2e0/0x470 [ 674.153006][ T2118] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 674.153027][ T2118] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 674.153045][ T2118] report_bug+0x2be/0x4f0 [ 674.153061][ T2118] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 674.153081][ T2118] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 674.153100][ T2118] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 674.153119][ T2118] handle_bug+0xcf/0x120 [ 674.153136][ T2118] exc_invalid_op+0x1a/0x50 [ 674.153151][ T2118] asm_exc_invalid_op+0x1a/0x20 [ 674.153169][ T2118] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 674.153189][ T2118] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 a4 a0 f7 0f 0b eb bb e8 4e a4 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 40 a4 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 674.153202][ T2118] RSP: 0018:ffffc90005757a20 EFLAGS: 00010293 [ 674.153216][ T2118] RAX: ffffffff89e67db2 RBX: dffffc0000000000 RCX: ffff888026863c00 [ 674.153228][ T2118] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 674.153240][ T2118] RBP: ffffc90005757af8 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 674.153251][ T2118] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88805dd50c90 [ 674.153262][ T2118] R13: 1ffff92000aeaf4c R14: ffff888021a335b8 R15: 000000000000001e [ 674.153288][ T2118] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 674.153315][ T2118] ? mutex_lock_nested+0x20/0x20 [ 674.153336][ T2118] ? trace_rdev_return_void+0x1c0/0x1c0 [ 674.153366][ T2118] cfg80211_process_wdev_events+0x3bc/0x550 [ 674.153396][ T2118] cfg80211_process_rdev_events+0xa1/0x110 [ 674.153417][ T2118] cfg80211_event_work+0x2f/0x40 [ 674.153433][ T2118] ? process_scheduled_works+0x96f/0x15d0 [ 674.153451][ T2118] process_scheduled_works+0xa5d/0x15d0 [ 674.153505][ T2118] ? worker_attach_to_pool+0x380/0x380 [ 674.153532][ T2118] ? assign_work+0x3d2/0x5d0 [ 674.153557][ T2118] worker_thread+0xa55/0xfc0 [ 674.153603][ T2118] kthread+0x2fa/0x390 [ 674.153617][ T2118] ? pr_cont_work+0x560/0x560 [ 674.153638][ T2118] ? kthread_blkcg+0xd0/0xd0 [ 674.153653][ T2118] ret_from_fork+0x48/0x80 [ 674.153670][ T2118] ? kthread_blkcg+0xd0/0xd0 [ 674.153692][ T2118] ret_from_fork_asm+0x11/0x20 [ 674.153727][ T2118] [ 674.163429][ T2118] Kernel Offset: disabled