last executing test programs: 25m30.878649362s ago: executing program 1 (id=172): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='fib_table_lookup\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89e0, &(0x7f0000000080)) 25m29.480745395s ago: executing program 1 (id=180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x2, 0x9, 0x5, 0x3, 0x0, 0x0, 0x8260, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000540), 0xf60117df12504eee}, 0x0, 0x40000000000000, 0x0, 0x3, 0x0, 0xfffffd, 0x0, 0x0, 0x4, 0x0, 0x2}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff9b, 0x8}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 25m29.103769446s ago: executing program 1 (id=184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m28.514594253s ago: executing program 1 (id=186): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x900) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000060000006d20f767373a1edf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000000, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r2, 0x0, 0x800000000}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m27.677574151s ago: executing program 1 (id=190): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000580)={'caif0\x00', 0x200}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x11, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m26.626627196s ago: executing program 1 (id=194): perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1, 0x8000000}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[0x0], 0x0, 0xd8, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 25m11.419660255s ago: executing program 32 (id=194): perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1, 0x8000000}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[0x0], 0x0, 0xd8, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 23m13.31073779s ago: executing program 4 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 23m12.593439447s ago: executing program 4 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m12.482645357s ago: executing program 4 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 23m12.271948203s ago: executing program 4 (id=1118): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x100) 23m12.114793296s ago: executing program 2 (id=1121): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = getpid() gettid() sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20, 0x80}, 0x1) 23m11.956537959s ago: executing program 2 (id=1125): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) 23m11.773195374s ago: executing program 2 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000004000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 23m11.542757682s ago: executing program 2 (id=1133): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 23m11.45107729s ago: executing program 2 (id=1135): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) 23m11.234698827s ago: executing program 4 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 23m9.34708208s ago: executing program 2 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000004000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 23m9.261392377s ago: executing program 4 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdir(0x0, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff02"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 23m9.008334417s ago: executing program 33 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdir(0x0, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff02"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 23m8.984947359s ago: executing program 34 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000004000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 4.278009475s ago: executing program 3 (id=8550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0xfe3c, &(0x7f0000000180)=[{&(0x7f00000005c0)="476de32199", 0xffe3}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.995710737s ago: executing program 5 (id=8554): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0xd0, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x5, 0x4}, 0x80, 0x0}, 0xc810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b000000010000000002", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="010000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000040000000300"/28], 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) (fail_nth: 4) 3.445562712s ago: executing program 3 (id=8556): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ebffffffffffffff04000000ad4b5b6200000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r2}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) socketpair(0x22, 0x2, 0x25, &(0x7f0000000840)) 2.337985301s ago: executing program 3 (id=8563): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x12}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000140)={'vlan1\x00', @random="0200ff7fffff"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfe3a) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="76657468305f766972745f77696669323000f5ed151ecc68b9736e86a5b1190fea90276791c08d902f0e5a2b1928f9fde74124e0df1cf763ee530bc06f6ef12109a77e8b8436b2bf465e5af5ed08805b368b3893d0d03cde7910f9eb5c9265ff7c0ef87c1b7024643fd4b2c1aa38cb95cd6b3fa1d44ffbdc8b68175de67abefb5fabd98f5dd6be92031860fd947909a26dc723ae4e5f0b5aac558936587a0693c42db53609241701768dda7093b8123392b58f9ac23d2442f607ac1d593c324226f9a84950854aa70a18b930aab72e75bd5cc71f63beb033f959101f492812591867e4ae2ccb74d04cac6cfaee2c7aff1ad19d1623fb6a9aaaa35c1394e09c13b2940c94d84165ec222fd68ce46ad8edd02bccdc36b4ee6ac5"], 0x12) 2.184514714s ago: executing program 5 (id=8575): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/user\x00') socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x31) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) socket$kcm(0x10, 0x3, 0x10) 1.956943062s ago: executing program 0 (id=8567): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0xd0, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x5, 0x4}, 0x80, 0x0}, 0xc810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b000000010000000002", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="010000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000040000000300"/28], 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x891e, &(0x7f0000000280)={'wlan0\x00', @multicast}) 1.866424119s ago: executing program 6 (id=8568): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="7b00000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x67, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786b56680d5a07c8ed11bab347e9a267ffd231ffbc2b3cf466b", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000008"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r7, 0x11}, 0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@ethernet={0x0, @random="90e92d80d435"}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x41, 0x69d}}], 0x18}, 0x0) 1.637228968s ago: executing program 5 (id=8569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0xfe3c, &(0x7f0000000180)=[{&(0x7f00000005c0)="476de32199", 0xffe3}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.542519676s ago: executing program 6 (id=8570): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.386715028s ago: executing program 0 (id=8571): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.383898629s ago: executing program 3 (id=8572): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x9, 0x1, 0x5, 0x0, 0x86, 0x410, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc6, 0x6}, 0x0, 0x400, 0x5, 0x0, 0x5, 0x10001, 0x6, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.336407663s ago: executing program 7 (id=8573): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.299169715s ago: executing program 6 (id=8574): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) 1.11475486s ago: executing program 6 (id=8576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2b2a, 0x0, 0x0, 0x0, 0xef}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x10, 0x1, 0x9, 0x4, 0xa9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000000b80)=""/4085, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xc, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[{0x1, 0x1, 0x7, 0x5}, {0x2, 0x3, 0xa, 0x1}, {0x5, 0x1, 0x4, 0x8}, {0x4, 0x4, 0x10, 0x7}], 0x10, 0x1}, 0x94) syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x13, 0x1, 0x9, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r2, r0, 0x10, 0x0, 0x0, @void, @value, @void, @void, r1}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.104132701s ago: executing program 7 (id=8577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000040)="e5bf9a17712210a276e3f02b31101c70f0eb55bef4cb259df42c1431113fc9a5e97d9c8b5ba28e72f251dcfdf71c3f7ec2290024074b6203df70b29b6d280240b3c58da2ce968e00442bab49b3bb51308cb69219"}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff09000000691012000000008a7f4e3f5d3684d200"], &(0x7f0000000480)='GPL\x00'}, 0x80) 996.15214ms ago: executing program 5 (id=8578): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000300d1bd", 0x33fe0}], 0x1}, 0x0) 985.587741ms ago: executing program 0 (id=8579): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 902.701567ms ago: executing program 7 (id=8580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0xfe3c, &(0x7f0000000180)=[{&(0x7f00000005c0)="476de32199", 0xffe3}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) 827.959914ms ago: executing program 3 (id=8581): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/user\x00') socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) write$cgroup_subtree(r5, 0x0, 0x31) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) socket$kcm(0x10, 0x3, 0x10) 715.077663ms ago: executing program 0 (id=8582): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="7b00000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x67, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786b56680d5a07c8ed11bab347e9a267ffd231ffbc2b3cf466b", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000008"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r7, 0x11}, 0x14) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@ethernet={0x0, @random="90e92d80d435"}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x41, 0x69d}}], 0x18}, 0x0) 677.698926ms ago: executing program 5 (id=8583): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x12}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000140)={'vlan1\x00', @random="0200ff7fffff"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfe3a) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x12) 676.874656ms ago: executing program 7 (id=8584): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0xd0, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x4}, 0x100040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="100000008f7c303e8d04000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x5, 0x4}, 0x80, 0x0}, 0xc810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="13000000100002000200000000000100000000000080ef8a72d3ddf9fb72c500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b000000010000000002", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r6, @ANYBLOB="010000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="05000000040000000300"/28], 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x600}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 590.604643ms ago: executing program 6 (id=8585): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, 0x0, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="73fa", 0x2}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0xfd66) recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000340)=""/34}, 0x20) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e00000010008188e6b62aa73772cc9f1ba1f8482c0000005e140602000000000e000a0010000000028088c733be78b625a555f62686c5eef4dcc567e33d996387ccae3c4119943f88521455a6836b4e21b211191da0392bdf7f10ed05c55850ed5bbeb838fab02b4055727670d6eab276bbf432740adc84", 0x78}, {&(0x7f00000004c0)="8795705e1f8fa1485261b0c64c0e0ae0dcd684978ffd2af8a084a797fdd04e0771e8187f9850f65829d4686cb5945a7a3595aa392f9f9e23b0e8fa31c7153200e4375f2518e1c33b7104df6ddf192ce1dd6cb30cea884ac29a1bf1c02a9da20a8f9b8ae40bb1d1463ff3dcc81fb0c6fa2a9ffbec5a963fdf5b5887f1dc472f21f3f7", 0x82}], 0x2}, 0x0) 287.545667ms ago: executing program 0 (id=8586): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) 243.92385ms ago: executing program 7 (id=8587): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 130.58939ms ago: executing program 3 (id=8588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0xfe3c, &(0x7f0000000180)=[{&(0x7f00000005c0)="476de32199", 0xffe3}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.67782ms ago: executing program 0 (id=8589): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.11159ms ago: executing program 6 (id=8590): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 391.06µs ago: executing program 7 (id=8591): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x9, 0x1, 0x5, 0x0, 0x86, 0x410, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc6, 0x6}, 0x0, 0x400, 0x5, 0x0, 0x5, 0x10001, 0x6, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 5 (id=8592): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 24728] ? __fdget_pos+0x2ae/0x360 [ 1378.754338][T24728] ? ksys_read+0x71/0x240 [ 1378.758972][T24728] ksys_read+0x143/0x240 [ 1378.763516][T24728] ? vfs_write+0x960/0x960 [ 1378.768190][T24728] ? lockdep_hardirqs_on+0x94/0x140 [ 1378.773435][T24728] do_syscall_64+0x4c/0xa0 [ 1378.778336][T24728] ? clear_bhb_loop+0x60/0xb0 [ 1378.783208][T24728] ? clear_bhb_loop+0x60/0xb0 [ 1378.788086][T24728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.794430][T24728] RIP: 0033:0x7fc42918d5fc [ 1378.798859][T24728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1378.818927][T24728] RSP: 002b:00007fc429f6d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1378.827541][T24728] RAX: ffffffffffffffda RBX: 00007fc4293b5fa0 RCX: 00007fc42918d5fc [ 1378.835816][T24728] RDX: 000000000000000f RSI: 00007fc429f6d0a0 RDI: 0000000000000004 [ 1378.844249][T24728] RBP: 00007fc429f6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.852674][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.861029][T24728] R13: 00007fc4293b6038 R14: 00007fc4293b5fa0 R15: 00007ffceab8a2e8 [ 1378.869227][T24728] [ 1379.159243][T24730] netlink: 'syz.0.6877': attribute type 3 has an invalid length. [ 1379.198424][T24730] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1380.377931][T24752] netlink: 'syz.7.6884': attribute type 10 has an invalid length. [ 1380.427103][T24753] netlink: 'syz.3.6883': attribute type 10 has an invalid length. [ 1380.435543][T24752] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6884'. [ 1380.494190][T24753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1380.685209][T24752] netlink: 'syz.7.6884': attribute type 10 has an invalid length. [ 1380.707597][T24752] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6884'. [ 1380.764556][T24753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1380.918795][T24761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6886'. [ 1380.995587][T24761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6886'. [ 1381.306766][T24773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1381.473258][T24773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1381.654691][T24776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1382.021561][T24797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6897'. [ 1382.047014][T24800] validate_nla: 3 callbacks suppressed [ 1382.047032][T24800] netlink: 'syz.0.6900': attribute type 10 has an invalid length. [ 1382.091704][T24797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6897'. [ 1382.133382][T24800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6900'. [ 1382.185411][T24800] netlink: 'syz.0.6900': attribute type 10 has an invalid length. [ 1382.596436][T24810] netlink: 'syz.3.6901': attribute type 10 has an invalid length. [ 1382.614448][T24812] netlink: 'syz.0.6903': attribute type 10 has an invalid length. [ 1382.633762][T24810] netlink: 'syz.3.6901': attribute type 10 has an invalid length. [ 1382.769005][T24812] netlink: 'syz.0.6903': attribute type 10 has an invalid length. [ 1383.356636][T24838] netlink: 'syz.7.6912': attribute type 10 has an invalid length. [ 1383.384209][T24838] netlink: 'syz.7.6912': attribute type 10 has an invalid length. [ 1383.771978][T24849] netlink: 'syz.6.6916': attribute type 10 has an invalid length. [ 1383.797397][T24849] netlink: 'syz.6.6916': attribute type 10 has an invalid length. [ 1384.383257][T24864] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1385.816132][T24901] __nla_validate_parse: 29 callbacks suppressed [ 1385.816152][T24901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1385.914728][T24903] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1385.955223][T24901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1386.022571][T24909] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6938'. [ 1386.068398][T24909] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6938'. [ 1386.599461][T24921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1386.664729][T24925] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6944'. [ 1386.714244][T24925] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6944'. [ 1386.778153][T24921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1386.830026][T24927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1386.934227][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1387.190838][T24946] IPv6: Can't replace route, no match found [ 1387.212397][T24946] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1387.366503][T24948] validate_nla: 13 callbacks suppressed [ 1387.366525][T24948] netlink: 'syz.6.6949': attribute type 3 has an invalid length. [ 1387.408014][T24950] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1387.434634][T24952] netlink: 'syz.5.6951': attribute type 10 has an invalid length. [ 1387.448892][T24955] netlink: 'syz.7.6953': attribute type 10 has an invalid length. [ 1387.494351][T24955] netlink: 'syz.7.6953': attribute type 10 has an invalid length. [ 1387.513849][T24952] netlink: 'syz.5.6951': attribute type 10 has an invalid length. [ 1388.231876][T24975] netlink: 'syz.3.6958': attribute type 10 has an invalid length. [ 1388.260414][T24975] netlink: 'syz.3.6958': attribute type 10 has an invalid length. [ 1389.020786][T24990] IPv6: Can't replace route, no match found [ 1389.075055][T24989] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1389.676631][T24998] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1389.724714][T25000] netlink: 'syz.5.6967': attribute type 10 has an invalid length. [ 1389.735277][T25004] netlink: 'syz.3.6970': attribute type 10 has an invalid length. [ 1389.762343][T25004] netlink: 'syz.3.6970': attribute type 10 has an invalid length. [ 1389.982581][T25009] FAULT_INJECTION: forcing a failure. [ 1389.982581][T25009] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.034206][T25009] CPU: 1 PID: 25009 Comm: syz.6.6972 Not tainted 6.1.147-syzkaller #0 [ 1390.042522][T25009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1390.052951][T25009] Call Trace: [ 1390.056262][T25009] [ 1390.059367][T25009] dump_stack_lvl+0x168/0x22e [ 1390.064133][T25009] ? show_regs_print_info+0x12/0x12 [ 1390.069354][T25009] ? load_image+0x3b0/0x3b0 [ 1390.073942][T25009] ? __might_sleep+0xd0/0xd0 [ 1390.078616][T25009] ? __lock_acquire+0x7c50/0x7c50 [ 1390.083747][T25009] ? ct_irq_exit_irqson+0xfa/0x160 [ 1390.088940][T25009] should_fail_ex+0x399/0x4d0 [ 1390.093791][T25009] should_failslab+0x5/0x20 [ 1390.098291][T25009] slab_pre_alloc_hook+0x59/0x310 [ 1390.103612][T25009] ? exc_page_fault+0x88/0x100 [ 1390.108569][T25009] ? sk_prot_alloc+0xe7/0x210 [ 1390.113257][T25009] __kmem_cache_alloc_node+0x4f/0x260 [ 1390.118718][T25009] ? exc_page_fault+0x88/0x100 [ 1390.123586][T25009] ? sk_prot_alloc+0xe7/0x210 [ 1390.128345][T25009] __kmalloc+0xa0/0x240 [ 1390.132589][T25009] sk_prot_alloc+0xe7/0x210 [ 1390.137177][T25009] ? sk_alloc+0x20/0x340 [ 1390.141521][T25009] sk_alloc+0x36/0x340 [ 1390.145768][T25009] ? bpf_ctx_init+0x163/0x1a0 [ 1390.150524][T25009] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 1390.156164][T25009] bpf_prog_test_run_skb+0x350/0x11b0 [ 1390.161702][T25009] ? __fget_files+0x28/0x4d0 [ 1390.166726][T25009] ? __fget_files+0x44a/0x4d0 [ 1390.171429][T25009] ? cpu_online+0xa0/0xa0 [ 1390.175775][T25009] bpf_prog_test_run+0x31e/0x390 [ 1390.180913][T25009] __sys_bpf+0x593/0x6d0 [ 1390.185197][T25009] ? bpf_link_show_fdinfo+0x340/0x340 [ 1390.190759][T25009] ? lock_chain_count+0x20/0x20 [ 1390.195626][T25009] __x64_sys_bpf+0x78/0x90 [ 1390.200131][T25009] do_syscall_64+0x4c/0xa0 [ 1390.204542][T25009] ? clear_bhb_loop+0x60/0xb0 [ 1390.209384][T25009] ? clear_bhb_loop+0x60/0xb0 [ 1390.214401][T25009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1390.220552][T25009] RIP: 0033:0x7f409af8ebe9 [ 1390.225226][T25009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.245443][T25009] RSP: 002b:00007f409be27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1390.254243][T25009] RAX: ffffffffffffffda RBX: 00007f409b1b5fa0 RCX: 00007f409af8ebe9 [ 1390.263035][T25009] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1390.271027][T25009] RBP: 00007f409be27090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.279089][T25009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.287162][T25009] R13: 00007f409b1b6038 R14: 00007f409b1b5fa0 R15: 00007ffc9bfd4228 [ 1390.295404][T25009] [ 1390.724433][T25028] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.259309][T25035] __nla_validate_parse: 21 callbacks suppressed [ 1391.259346][T25035] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1391.315893][T25035] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1391.434993][T25038] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1391.492723][T25039] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1391.666484][T25043] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1391.707565][T25047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6983'. [ 1391.784237][T25047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6983'. [ 1392.066928][T25055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1392.151422][T25055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1392.245245][T25056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1392.274788][T25063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1392.405731][T25064] IPv6: Can't replace route, no match found [ 1392.412627][T25060] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1392.503157][T25067] validate_nla: 5 callbacks suppressed [ 1392.503176][T25067] netlink: 'syz.5.6991': attribute type 10 has an invalid length. [ 1392.665832][T25067] netlink: 'syz.5.6991': attribute type 10 has an invalid length. [ 1394.184913][T25091] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1394.373683][T25093] netlink: 'syz.0.6999': attribute type 10 has an invalid length. [ 1394.458846][T25093] netlink: 'syz.0.6999': attribute type 10 has an invalid length. [ 1395.851103][T25106] IPv6: Can't replace route, no match found [ 1395.903244][T25106] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1396.379208][T25114] netlink: 'syz.3.7006': attribute type 10 has an invalid length. [ 1396.495289][T25114] __nla_validate_parse: 8 callbacks suppressed [ 1396.495307][T25114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7006'. [ 1396.644549][T25114] netlink: 'syz.3.7006': attribute type 10 has an invalid length. [ 1396.764261][T25114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7006'. [ 1397.095381][T25119] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7008'. [ 1397.155042][T25119] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7008'. [ 1397.209100][T25120] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7008'. [ 1397.267159][T25122] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7008'. [ 1398.238476][T25132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1398.706728][T25135] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7013'. [ 1398.795332][T25135] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7013'. [ 1398.877168][T25136] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7013'. [ 1399.157968][T25142] netlink: 'syz.0.7015': attribute type 10 has an invalid length. [ 1399.269777][T25142] netlink: 'syz.0.7015': attribute type 10 has an invalid length. [ 1402.012727][T25174] __nla_validate_parse: 7 callbacks suppressed [ 1402.012811][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7026'. [ 1402.095352][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7026'. [ 1402.165838][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7026'. [ 1402.215799][T25174] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7026'. [ 1403.288205][T25186] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7031'. [ 1403.575483][T25192] netlink: 'syz.6.7032': attribute type 10 has an invalid length. [ 1403.648437][T25192] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7032'. [ 1403.755882][T25192] netlink: 'syz.6.7032': attribute type 10 has an invalid length. [ 1403.834159][T25192] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7032'. [ 1404.408251][T25199] netlink: 'syz.7.7035': attribute type 10 has an invalid length. [ 1404.554878][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7035'. [ 1404.654354][T25199] netlink: 'syz.7.7035': attribute type 10 has an invalid length. [ 1404.662592][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7035'. [ 1404.799756][T25202] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1406.339979][T25221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7041'. [ 1406.756261][T25228] netlink: 'syz.7.7043': attribute type 1 has an invalid length. [ 1407.635720][T25240] netlink: 'syz.0.7047': attribute type 10 has an invalid length. [ 1407.663423][T25240] __nla_validate_parse: 4 callbacks suppressed [ 1407.663442][T25240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7047'. [ 1407.664912][T25238] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7046'. [ 1407.673241][T25240] netlink: 'syz.0.7047': attribute type 10 has an invalid length. [ 1407.761999][T25240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7047'. [ 1407.807654][T25238] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7046'. [ 1407.883892][T25243] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7046'. [ 1407.974711][T25244] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7046'. [ 1408.195443][T25249] netlink: 'syz.0.7050': attribute type 10 has an invalid length. [ 1408.203331][T25249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1408.256556][T25249] netlink: 'syz.0.7050': attribute type 10 has an invalid length. [ 1408.284333][T25249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1410.097470][T25276] netlink: 'syz.3.7057': attribute type 1 has an invalid length. [ 1410.143566][T25276] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1410.940011][T25283] netlink: 'syz.3.7060': attribute type 10 has an invalid length. [ 1410.983600][T25283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7060'. [ 1411.044092][T25283] netlink: 'syz.3.7060': attribute type 10 has an invalid length. [ 1411.152744][T25288] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1411.558061][T25293] netlink: 'syz.3.7063': attribute type 10 has an invalid length. [ 1411.620061][T25293] netlink: 'syz.3.7063': attribute type 10 has an invalid length. [ 1413.944640][T25318] netlink: 'syz.7.7073': attribute type 10 has an invalid length. [ 1413.952798][T25318] __nla_validate_parse: 7 callbacks suppressed [ 1413.952814][T25318] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7073'. [ 1414.092278][T25318] netlink: 'syz.7.7073': attribute type 10 has an invalid length. [ 1414.171615][T25318] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7073'. [ 1414.779039][T25328] netlink: 'syz.0.7086': attribute type 10 has an invalid length. [ 1414.806693][T25328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1414.844262][T25328] netlink: 'syz.0.7086': attribute type 10 has an invalid length. [ 1414.852300][T25328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1414.896035][T25331] netlink: 'syz.6.7077': attribute type 10 has an invalid length. [ 1414.964338][T25331] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7077'. [ 1414.965007][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 1415.011565][T25332] IPv6: Can't replace route, no match found [ 1415.154675][T25336] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1415.234715][T25331] netlink: 'syz.6.7077': attribute type 10 has an invalid length. [ 1415.302820][T25331] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7077'. [ 1416.777693][T25358] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1417.404614][T25366] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1417.505582][T25370] netlink: 'syz.0.7092': attribute type 10 has an invalid length. [ 1417.574129][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1417.583651][T25370] netlink: 'syz.0.7092': attribute type 10 has an invalid length. [ 1417.621613][T25371] netlink: 'syz.7.7091': attribute type 10 has an invalid length. [ 1417.666183][T25371] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1417.694285][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7092'. [ 1417.727449][T25371] netlink: 'syz.7.7091': attribute type 10 has an invalid length. [ 1417.767265][T25371] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1418.230081][T25381] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.842906][T25404] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.937873][T25406] netlink: 'syz.0.7105': attribute type 10 has an invalid length. [ 1419.964302][T25406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7105'. [ 1419.989652][T25406] netlink: 'syz.0.7105': attribute type 10 has an invalid length. [ 1420.014435][T25406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7105'. [ 1420.516357][T25416] netlink: 'syz.3.7107': attribute type 10 has an invalid length. [ 1420.564499][T25416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 1420.605099][T25416] netlink: 'syz.3.7107': attribute type 10 has an invalid length. [ 1420.674262][T25416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 1422.634926][T25445] netlink: 'syz.7.7119': attribute type 10 has an invalid length. [ 1422.642843][T25445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7119'. [ 1422.731940][T25445] netlink: 'syz.7.7119': attribute type 10 has an invalid length. [ 1422.832185][T25445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7119'. [ 1423.128685][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.135795][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.299362][T22074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1423.309457][T22074] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1423.319799][T22074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1423.328793][T22074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1423.339110][T22074] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1423.363847][T22074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1423.966780][T25452] chnl_net:caif_netlink_parms(): no params data found [ 1424.146700][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.159724][T25466] netlink: 'syz.3.7126': attribute type 10 has an invalid length. [ 1424.178035][T25466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7126'. [ 1424.247166][T25465] netlink: 14564 bytes leftover after parsing attributes in process `syz.0.7127'. [ 1424.304214][T25466] netlink: 'syz.3.7126': attribute type 10 has an invalid length. [ 1424.389850][T25466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7126'. [ 1424.705995][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.736049][T25479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7131'. [ 1424.991365][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.075378][T25481] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1425.098853][T25452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.112459][T25452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.159486][T25452] device bridge_slave_0 entered promiscuous mode [ 1425.191971][T25452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.200761][T25452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.214938][T25452] device bridge_slave_1 entered promiscuous mode [ 1425.228333][T25482] __nla_validate_parse: 1 callbacks suppressed [ 1425.228352][T25482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7131'. [ 1425.241012][T25491] netlink: 'syz.7.7134': attribute type 10 has an invalid length. [ 1425.294142][T25491] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7134'. [ 1425.407146][ T11] team0: Port device netdevsim0 removed [ 1425.429710][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.444291][T22074] Bluetooth: hci4: command 0x0409 tx timeout [ 1425.652012][T25483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7131'. [ 1425.667063][T25491] netlink: 'syz.7.7134': attribute type 10 has an invalid length. [ 1425.706172][T25491] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7134'. [ 1425.791314][T25452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.830978][T25452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.885164][T25503] netlink: 14564 bytes leftover after parsing attributes in process `syz.0.7138'. [ 1426.073806][T25452] team0: Port device team_slave_0 added [ 1426.118726][T25452] team0: Port device team_slave_1 added [ 1426.130331][T25513] netlink: 'syz.3.7142': attribute type 10 has an invalid length. [ 1426.159063][T25513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1426.198168][T25513] netlink: 'syz.3.7142': attribute type 10 has an invalid length. [ 1426.243692][T25513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1426.324829][T25452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.331906][T25452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.384299][T25452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.572359][T25452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.596794][T25452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.678710][T25452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.732806][T25530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1426.777439][T25528] IPv6: Can't replace route, no match found [ 1426.801076][T25525] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1426.822767][T25530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1426.953308][T25533] netlink: 'syz.7.7149': attribute type 10 has an invalid length. [ 1426.984161][T25533] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7149'. [ 1427.099576][T25452] device hsr_slave_0 entered promiscuous mode [ 1427.125324][T25452] device hsr_slave_1 entered promiscuous mode [ 1427.132270][T25452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.164834][T25452] Cannot create hsr debugfs directory [ 1427.194211][T25533] netlink: 'syz.7.7149': attribute type 10 has an invalid length. [ 1427.524563][T22074] Bluetooth: hci4: command 0x041b tx timeout [ 1427.674129][T25555] netlink: 'syz.0.7156': attribute type 10 has an invalid length. [ 1427.694267][T25555] netlink: 'syz.0.7156': attribute type 10 has an invalid length. [ 1427.914258][T25558] netlink: 'syz.5.7157': attribute type 10 has an invalid length. [ 1428.092354][T25558] netlink: 'syz.5.7157': attribute type 10 has an invalid length. [ 1428.327123][T25576] netlink: 'syz.7.7163': attribute type 10 has an invalid length. [ 1428.515839][ T11] bond0: (slave wlan1): Releasing backup interface [ 1428.998827][ T11] device vlan0 left promiscuous mode [ 1429.019421][ T11] À: port 1(vlan0) entered disabled state [ 1429.048675][ T11] device hsr_slave_0 left promiscuous mode [ 1429.080042][ T11] device hsr_slave_1 left promiscuous mode [ 1429.097021][ T11] device bridge_slave_1 left promiscuous mode [ 1429.112978][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.154610][ T11] device bridge_slave_0 left promiscuous mode [ 1429.163730][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.496575][ T11] device veth1_macvtap left promiscuous mode [ 1429.502783][ T11] device veth0_macvtap left promiscuous mode [ 1429.519621][ T11] device veth1_vlan left promiscuous mode [ 1429.536852][ T11] device veth0_vlan left promiscuous mode [ 1429.604421][T22074] Bluetooth: hci4: command 0x040f tx timeout [ 1430.610550][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1430.715937][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1430.807125][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1430.873410][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.963613][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.668273][ T11] bond0 (unregistering): Released all slaves [ 1431.694522][T22074] Bluetooth: hci4: command 0x0419 tx timeout [ 1431.812166][T25602] validate_nla: 6 callbacks suppressed [ 1431.812187][T25602] netlink: 'syz.3.7175': attribute type 10 has an invalid length. [ 1431.828826][T25602] __nla_validate_parse: 20 callbacks suppressed [ 1431.828843][T25602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7175'. [ 1431.869550][T25613] netlink: 'syz.0.7177': attribute type 10 has an invalid length. [ 1431.894278][T25613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1431.925943][T25620] netlink: 'syz.5.7180': attribute type 10 has an invalid length. [ 1431.945343][T25620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7180'. [ 1432.067051][T25452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1432.132717][T25627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7184'. [ 1432.143543][T25452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1432.183801][T25452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1432.213302][T25627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7184'. [ 1432.235768][T25634] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7184'. [ 1432.266098][T25452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1432.333484][T25627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7184'. [ 1432.386943][T25637] IPv6: Can't replace route, no match found [ 1432.404204][T25631] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1432.634463][T25452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.658168][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1432.684881][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1432.714660][T25452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.725747][T25656] netlink: 'syz.0.7191': attribute type 10 has an invalid length. [ 1432.742251][T25658] netlink: 'syz.7.7190': attribute type 10 has an invalid length. [ 1432.750958][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1432.752393][T25656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1432.763375][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1432.799694][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.807078][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.825262][T25658] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7190'. [ 1432.849359][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1432.860258][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1432.888750][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1432.905091][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.912558][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.941565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1432.964180][T25656] netlink: 'syz.0.7191': attribute type 10 has an invalid length. [ 1432.972073][T25656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1432.999503][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1433.027319][T25658] netlink: 'syz.7.7190': attribute type 10 has an invalid length. [ 1433.088277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1433.109428][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1433.148427][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1433.163241][T25667] netlink: 'syz.0.7194': attribute type 10 has an invalid length. [ 1433.176254][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1433.220470][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1433.252391][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1433.286910][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1433.314960][T25667] netlink: 'syz.0.7194': attribute type 10 has an invalid length. [ 1433.333734][T25452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.369013][T25452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1433.407440][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1433.432688][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1434.091471][T25699] netlink: 'syz.0.7204': attribute type 10 has an invalid length. [ 1434.308065][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1434.326873][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1434.385214][T25452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.398014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1435.428534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1435.500476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1435.544879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1435.554701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1435.566283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1435.611527][T25452] device veth0_vlan entered promiscuous mode [ 1435.649530][T25452] device veth1_vlan entered promiscuous mode [ 1435.722443][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1435.739737][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1435.781162][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1435.802049][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1435.824930][T25452] device veth0_macvtap entered promiscuous mode [ 1435.849216][T25452] device veth1_macvtap entered promiscuous mode [ 1435.912037][T25452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.946219][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1435.961894][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1435.990974][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1436.017355][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1436.047186][T25452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.065715][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1436.081067][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1436.112042][T25452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.134120][T25452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.155686][T25452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.174244][T25452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.338357][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.364125][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.399548][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1436.446635][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.469157][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.507866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1437.727805][T25794] __nla_validate_parse: 23 callbacks suppressed [ 1437.727839][T25794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7239'. [ 1437.814434][T25794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7239'. [ 1437.860321][T25798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7239'. [ 1438.004979][T22074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1438.017606][T22074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1438.027512][T22074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1438.038939][T22074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1438.047993][T22074] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1438.056561][T22074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1438.276094][ T4354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.516331][ T4354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.564642][T25801] chnl_net:caif_netlink_parms(): no params data found [ 1438.584933][T25814] validate_nla: 11 callbacks suppressed [ 1438.584948][T25814] netlink: 'syz.6.7242': attribute type 10 has an invalid length. [ 1438.647378][T25814] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7242'. [ 1438.853837][ T4354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.154677][T25814] netlink: 'syz.6.7242': attribute type 10 has an invalid length. [ 1439.163163][T25814] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7242'. [ 1439.260024][ T4354] team0: Port device netdevsim0 removed [ 1439.287151][ T4354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.467760][T25830] IPv6: Can't replace route, no match found [ 1439.716535][T25801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.756778][T25801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.767036][T25801] device bridge_slave_0 entered promiscuous mode [ 1439.837445][T25801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.850657][T25801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.870898][T25801] device bridge_slave_1 entered promiscuous mode [ 1440.013219][T25801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.087768][T25801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.165204][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1440.313065][T25861] netlink: 'syz.6.7258': attribute type 10 has an invalid length. [ 1440.326106][T25861] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7258'. [ 1440.381097][T25801] team0: Port device team_slave_0 added [ 1440.396732][T25801] team0: Port device team_slave_1 added [ 1440.445367][T25861] netlink: 'syz.6.7258': attribute type 10 has an invalid length. [ 1440.453310][T25861] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7258'. [ 1440.648187][T25801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.664110][T25801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.742977][T25801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.953538][T25801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.961056][T25801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.000961][T25801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.015373][T25873] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1441.026984][T25872] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1441.343017][T25801] device hsr_slave_0 entered promiscuous mode [ 1441.368281][T25801] device hsr_slave_1 entered promiscuous mode [ 1441.377270][T25801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.391326][T25801] Cannot create hsr debugfs directory [ 1442.049516][T25901] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.244933][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1442.290110][T25909] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.590368][T25916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.643353][T25916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.713068][T25916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.817725][T25916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.273264][T25935] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1443.645696][ T4354] bond0: (slave wlan1): Releasing backup interface [ 1443.795450][T25948] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1444.036378][T25801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1444.089339][T25801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1444.105220][T25958] netlink: 'syz.3.7294': attribute type 10 has an invalid length. [ 1444.134201][T25958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7294'. [ 1444.231529][ T4354] device vlan0 left promiscuous mode [ 1444.237563][ T4354] À: port 1(vlan0) entered disabled state [ 1444.302124][ T4354] device hsr_slave_0 left promiscuous mode [ 1444.324491][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1444.332189][ T4354] device hsr_slave_1 left promiscuous mode [ 1444.464367][ T4354] device bridge_slave_1 left promiscuous mode [ 1444.471108][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.524781][ T4354] device bridge_slave_0 left promiscuous mode [ 1444.531488][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.620524][ T4354] device veth1_macvtap left promiscuous mode [ 1444.634174][ T4354] device veth0_macvtap left promiscuous mode [ 1444.640525][ T4354] device veth1_vlan left promiscuous mode [ 1444.665032][ T4354] device veth0_vlan left promiscuous mode [ 1446.407683][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 1447.225786][ T4354] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1447.447442][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 1447.600512][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 1447.731926][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.837240][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.114859][ T4354] bond0 (unregistering): Released all slaves [ 1449.233625][T25958] netlink: 'syz.3.7294': attribute type 10 has an invalid length. [ 1449.254193][T25958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7294'. [ 1449.265984][T25801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1449.287766][T25801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1449.323421][T25981] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1449.655632][T26000] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1449.723776][T25801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.759774][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1449.785517][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1449.832506][T25801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.025884][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1450.050526][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1450.116883][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.124193][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.275085][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1450.291420][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1450.302566][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1450.344424][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.351674][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.384483][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1450.405446][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1450.418820][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1450.447098][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1450.486581][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1450.522388][T26028] IPv6: Can't replace route, no match found [ 1450.556229][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1450.582091][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1450.615071][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1450.625652][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1450.640099][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1450.663052][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1450.686774][T25801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.703940][T26024] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1451.584977][T26048] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7316'. [ 1451.654442][T26048] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7316'. [ 1451.695491][T26049] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7316'. [ 1451.733373][T26048] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7316'. [ 1451.857293][T26056] netlink: 'syz.5.7318': attribute type 10 has an invalid length. [ 1451.922667][T26056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7318'. [ 1451.932672][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1451.946759][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1451.957918][T25801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.983240][T26056] netlink: 'syz.5.7318': attribute type 10 has an invalid length. [ 1452.071136][T26056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7318'. [ 1452.293800][T26064] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.878933][T26075] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.935432][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1452.983954][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1453.042938][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1453.058090][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1453.070716][T25801] device veth0_vlan entered promiscuous mode [ 1453.078888][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1453.088625][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1453.110631][T25801] device veth1_vlan entered promiscuous mode [ 1453.161314][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1453.175686][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1453.210881][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1453.235475][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1453.260116][T25801] device veth0_macvtap entered promiscuous mode [ 1453.275987][T25801] device veth1_macvtap entered promiscuous mode [ 1453.337850][T25801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.352500][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1453.366684][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1453.389321][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1453.417479][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1453.448127][T25801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.465341][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1453.485345][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1453.510239][T25801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.532150][T25801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.556559][T25801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.578305][T25801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.788726][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.834423][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.860417][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1453.927187][T26097] netlink: 'syz.6.7330': attribute type 10 has an invalid length. [ 1453.936386][T10783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.966852][T10783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.994995][T26097] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7330'. [ 1454.053115][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.109471][T26097] netlink: 'syz.6.7330': attribute type 10 has an invalid length. [ 1454.153685][T26097] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7330'. [ 1454.262884][T26103] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1454.591024][T26113] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7334'. [ 1454.630645][T26117] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1454.675628][T26113] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7334'. [ 1454.721735][T26120] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7334'. [ 1454.764293][T26118] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7334'. [ 1455.961272][T26148] IPv6: Can't replace route, no match found [ 1455.964760][T26152] netlink: 'syz.3.7344': attribute type 10 has an invalid length. [ 1456.006608][T26151] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.073108][T26152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7344'. [ 1456.145333][T26152] netlink: 'syz.3.7344': attribute type 10 has an invalid length. [ 1456.196038][T26152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7344'. [ 1456.448476][T26161] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.420076][T26184] IPv6: Can't replace route, no match found [ 1457.455425][T26184] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1457.693733][T26189] netlink: 'syz.7.7361': attribute type 10 has an invalid length. [ 1457.724908][T26189] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7361'. [ 1457.766002][T26189] netlink: 'syz.7.7361': attribute type 10 has an invalid length. [ 1457.814860][T26189] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7361'. [ 1458.387648][T26200] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1459.120498][T26219] IPv6: Can't replace route, no match found [ 1459.167627][T26219] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1459.437378][T26229] netlink: 'syz.6.7373': attribute type 10 has an invalid length. [ 1459.474472][T26229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7373'. [ 1459.495744][T26229] netlink: 'syz.6.7373': attribute type 10 has an invalid length. [ 1459.539949][T26229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7373'. [ 1459.753878][T26233] netlink: 'syz.5.7386': attribute type 10 has an invalid length. [ 1459.772314][T26233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7386'. [ 1459.814928][T26233] netlink: 'syz.5.7386': attribute type 10 has an invalid length. [ 1459.844632][T26233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7386'. [ 1460.354184][T26253] IPv6: Can't replace route, no match found [ 1460.392079][T26253] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1460.447615][T26248] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1460.484795][T26259] netlink: 'syz.6.7387': attribute type 10 has an invalid length. [ 1460.518256][T26259] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7387'. [ 1460.561997][T26259] netlink: 'syz.6.7387': attribute type 10 has an invalid length. [ 1460.637201][T26259] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7387'. [ 1461.299629][T26281] netlink: 'syz.5.7395': attribute type 10 has an invalid length. [ 1461.349653][T26281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1461.352238][T26283] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1461.401272][T26285] IPv6: Can't replace route, no match found [ 1461.441310][T26285] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1461.535666][T26281] netlink: 'syz.5.7395': attribute type 10 has an invalid length. [ 1461.655356][T26281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1461.709260][T26295] IPv6: Can't replace route, no match found [ 1461.723079][T26298] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1461.900065][T26302] netlink: 'syz.0.7401': attribute type 10 has an invalid length. [ 1461.944199][T26302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1461.994367][T26302] netlink: 'syz.0.7401': attribute type 10 has an invalid length. [ 1462.038390][T26302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1462.111735][T26307] IPv6: Can't replace route, no match found [ 1462.162288][T26307] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1462.640049][T26327] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1462.879809][T26331] IPv6: Can't replace route, no match found [ 1462.894234][T26331] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.513355][T26349] netlink: 'syz.0.7418': attribute type 10 has an invalid length. [ 1463.635647][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7418'. [ 1463.715409][T26349] netlink: 'syz.0.7418': attribute type 10 has an invalid length. [ 1463.787848][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7418'. [ 1464.100726][T26362] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1464.169428][T26367] IPv6: Can't replace route, no match found [ 1464.221477][T26371] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1465.146944][T26398] netlink: 'syz.6.7436': attribute type 10 has an invalid length. [ 1465.184168][T26398] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7436'. [ 1465.211356][T26398] netlink: 'syz.6.7436': attribute type 10 has an invalid length. [ 1465.244433][T26398] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7436'. [ 1465.541796][T26405] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1465.803380][T26409] IPv6: Can't replace route, no match found [ 1465.949179][T26420] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1466.767278][T26448] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1467.187388][T26457] IPv6: Can't replace route, no match found [ 1467.695914][T26471] IPv6: Can't replace route, no match found [ 1467.747295][T26471] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1468.158133][T26480] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1469.281714][T26513] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1469.733300][T26527] netlink: 'syz.3.7485': attribute type 10 has an invalid length. [ 1469.771720][T26527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7485'. [ 1469.822933][T26527] netlink: 'syz.3.7485': attribute type 10 has an invalid length. [ 1469.884102][T26527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7485'. [ 1470.004985][T26531] IPv6: Can't replace route, no match found [ 1470.499118][T26550] IPv6: Can't replace route, no match found [ 1470.558758][T26548] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1471.054004][T26562] netlink: 'syz.3.7500': attribute type 10 has an invalid length. [ 1471.124290][T26562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1471.187222][T26562] netlink: 'syz.3.7500': attribute type 10 has an invalid length. [ 1471.234505][T26562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1471.945790][T26585] IPv6: Can't replace route, no match found [ 1472.013831][T26587] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1472.034932][T26585] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1472.193489][T26593] netlink: 'syz.7.7512': attribute type 10 has an invalid length. [ 1472.234167][T26593] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7512'. [ 1472.525004][T26600] netlink: 'syz.7.7515': attribute type 10 has an invalid length. [ 1472.564148][T26600] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7515'. [ 1472.616717][T26600] netlink: 'syz.7.7515': attribute type 10 has an invalid length. [ 1472.660503][T26600] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7515'. [ 1473.124296][T26620] netlink: 'syz.3.7522': attribute type 10 has an invalid length. [ 1473.164202][T26620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7522'. [ 1473.211890][T26620] netlink: 'syz.3.7522': attribute type 10 has an invalid length. [ 1473.249390][T26620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7522'. [ 1473.459297][T26624] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1473.661081][T26626] IPv6: Can't replace route, no match found [ 1473.698561][T26626] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1473.922972][T26641] netlink: 'syz.3.7531': attribute type 10 has an invalid length. [ 1473.942391][T26641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7531'. [ 1473.990828][T26641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7531'. [ 1474.225521][T26651] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1474.257453][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.294786][T26656] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7533'. [ 1474.314388][T26653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.426549][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.457497][T26653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.941612][T26672] IPv6: Can't replace route, no match found [ 1474.969161][T26672] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1476.155081][T26704] IPv6: Can't replace route, no match found [ 1477.329447][T26742] IPv6: Can't replace route, no match found [ 1477.344462][T26741] validate_nla: 3 callbacks suppressed [ 1477.344476][T26741] netlink: 'syz.3.7569': attribute type 10 has an invalid length. [ 1477.400602][T26741] __nla_validate_parse: 1 callbacks suppressed [ 1477.400620][T26741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7569'. [ 1477.455676][T26741] netlink: 'syz.3.7569': attribute type 10 has an invalid length. [ 1477.463545][T26741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7569'. [ 1478.206664][T26771] IPv6: Can't replace route, no match found [ 1478.896788][T26790] netlink: 'syz.7.7590': attribute type 10 has an invalid length. [ 1478.913032][T26790] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7590'. [ 1478.933663][T26790] netlink: 'syz.7.7590': attribute type 10 has an invalid length. [ 1478.967454][T26790] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7590'. [ 1479.313115][T26804] IPv6: Can't replace route, no match found [ 1482.115403][T26841] IPv6: Can't replace route, no match found [ 1482.195325][T26844] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1482.234163][T26844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7612'. [ 1482.326903][T26844] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1482.364752][T26844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7612'. [ 1483.272890][T26861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1483.375431][T26861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1483.391135][T26863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1483.452560][T26866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1483.615447][T26868] netlink: 'syz.6.7620': attribute type 10 has an invalid length. [ 1483.623508][T26868] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7620'. [ 1483.684420][T26868] netlink: 'syz.6.7620': attribute type 10 has an invalid length. [ 1483.692436][T26868] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7620'. [ 1484.569426][T26881] netlink: 'syz.6.7626': attribute type 10 has an invalid length. [ 1484.581619][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.581723][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.640072][T26881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1484.670839][T26881] netlink: 'syz.6.7626': attribute type 10 has an invalid length. [ 1484.694339][T26881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1484.716493][T26883] IPv6: Can't replace route, no match found [ 1485.071526][T26887] netlink: 'syz.0.7627': attribute type 10 has an invalid length. [ 1485.114546][T26887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1485.184318][T26887] netlink: 'syz.0.7627': attribute type 10 has an invalid length. [ 1485.244272][T26887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1488.078665][T26927] IPv6: Can't replace route, no match found [ 1488.107765][T26927] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1488.494909][T26933] netlink: 'syz.3.7641': attribute type 10 has an invalid length. [ 1488.521141][T26933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7641'. [ 1488.557771][T26933] netlink: 'syz.3.7641': attribute type 10 has an invalid length. [ 1488.582798][T26933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7641'. [ 1489.128635][T26947] netlink: 'syz.5.7656': attribute type 10 has an invalid length. [ 1489.200205][T26947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7656'. [ 1489.254565][T26947] netlink: 'syz.5.7656': attribute type 10 has an invalid length. [ 1489.344543][T26947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7656'. [ 1490.734173][T26965] IPv6: Can't replace route, no match found [ 1490.757940][T26965] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1494.384170][T27003] IPv6: Can't replace route, no match found [ 1494.447045][T27004] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1498.419818][T27041] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1499.012708][T27043] IPv6: Can't replace route, no match found [ 1499.065653][T27043] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1500.767705][T16237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1500.779582][T16237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1500.790726][T16237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1500.802078][T16237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1500.814367][T16237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1500.826129][T16237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1500.858308][T10783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.277459][T10783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.615372][T10783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.946483][T10783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.476708][T27083] IPv6: Can't replace route, no match found [ 1502.512592][T27084] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1502.884509][T16237] Bluetooth: hci1: command 0x0409 tx timeout [ 1503.110403][T27064] chnl_net:caif_netlink_parms(): no params data found [ 1504.120613][T27064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.147604][T27064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.172485][T27064] device bridge_slave_0 entered promiscuous mode [ 1504.318985][T27064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.334443][T27064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.374838][T27064] device bridge_slave_1 entered promiscuous mode [ 1504.700191][T27064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.819095][T27064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.964495][T16237] Bluetooth: hci1: command 0x041b tx timeout [ 1505.132507][T27064] team0: Port device team_slave_0 added [ 1505.313826][T10783] bond0: (slave wlan1): Releasing backup interface [ 1505.378233][T27064] team0: Port device team_slave_1 added [ 1505.758912][T27064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.797664][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.847889][T27064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.290470][T27064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.318950][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.414122][T27064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.460416][T27115] IPv6: Can't replace route, no match found [ 1506.509342][T27117] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1506.639228][T10783] device hsr_slave_0 left promiscuous mode [ 1506.674910][T10783] device hsr_slave_1 left promiscuous mode [ 1506.691018][T10783] device bridge_slave_1 left promiscuous mode [ 1506.716404][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.726722][T10783] device bridge_slave_0 left promiscuous mode [ 1506.733122][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.844589][T10783] device veth1_macvtap left promiscuous mode [ 1506.850758][T10783] device veth0_macvtap left promiscuous mode [ 1506.894393][T10783] device veth1_vlan left promiscuous mode [ 1506.900462][T10783] device veth0_vlan left promiscuous mode [ 1507.044335][T16237] Bluetooth: hci1: command 0x040f tx timeout [ 1509.134256][T16237] Bluetooth: hci1: command 0x0419 tx timeout [ 1510.200159][T10783] team0 (unregistering): Port device team_slave_1 removed [ 1510.538453][T10783] team0 (unregistering): Port device team_slave_0 removed [ 1510.949173][T10783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.336200][T10783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.234759][T10783] bond0 (unregistering): Released all slaves [ 1514.514532][T27155] IPv6: Can't replace route, no match found [ 1514.521226][T27157] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1514.583894][T27064] device hsr_slave_0 entered promiscuous mode [ 1514.606040][T27064] device hsr_slave_1 entered promiscuous mode [ 1514.638943][T27064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.661314][T27064] Cannot create hsr debugfs directory [ 1515.809806][T27064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1515.832487][T27064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1515.859781][T27064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1515.927844][T27064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1516.033556][T27207] IPv6: Can't replace route, no match found [ 1516.053789][T27214] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1516.711697][T27064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.771516][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1516.784931][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1516.820259][T27064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.849401][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1516.906948][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1516.927053][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.934345][T10783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.985879][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1517.006927][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.025004][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.045480][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.053326][T10783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.095153][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1517.113226][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1517.154818][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1517.178904][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1517.198591][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1517.220228][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1517.245196][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1517.264812][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1517.297978][T27064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.312520][T27064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1517.324167][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1517.334538][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1517.343923][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.593449][T27247] IPv6: Can't replace route, no match found [ 1517.608220][T27247] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1517.890207][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1517.909319][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1517.945218][T27064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.009197][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1518.019737][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.058503][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1518.073999][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.127964][T27064] device veth0_vlan entered promiscuous mode [ 1518.718839][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.735019][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.748164][T27064] device veth1_vlan entered promiscuous mode [ 1518.808861][T24694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1518.843850][T24694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1518.900079][T27064] device veth0_macvtap entered promiscuous mode [ 1518.938402][T27064] device veth1_macvtap entered promiscuous mode [ 1519.001601][T27064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.019606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1519.040612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1519.116181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1519.134829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1519.149055][T27064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.186021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.215297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.251417][T27064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.278445][T27064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.305986][T27064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.335089][T27064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.476110][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.504130][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.520377][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1519.547351][T24694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.559435][T24694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.579426][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1521.425807][T27349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.433890][T27349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.503021][T27349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.525234][T27349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.921525][T27378] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 1525.675843][T27439] IPv6: Can't replace route, no match found [ 1527.826631][T27491] IPv6: Can't replace route, no match found [ 1529.992947][T27527] IPv6: Can't replace route, no match found [ 1530.024951][T27527] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1530.369531][T27538] IPv6: Can't replace route, no match found [ 1530.416003][T27538] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1531.825789][T27577] IPv6: Can't replace route, no match found [ 1531.910659][T27579] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1532.510631][T27590] IPv6: Can't replace route, no match found [ 1533.626026][T27621] IPv6: Can't replace route, no match found [ 1533.694657][T27623] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1534.251978][T27635] IPv6: Can't replace route, no match found [ 1535.860425][T27665] IPv6: Can't replace route, no match found [ 1535.880259][T27665] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1536.048529][T27671] IPv6: Can't replace route, no match found [ 1537.840204][T27695] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1538.061304][T27702] IPv6: Can't replace route, no match found [ 1538.088825][T27702] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1539.156775][T27728] FAULT_INJECTION: forcing a failure. [ 1539.156775][T27728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1539.203976][T27728] CPU: 0 PID: 27728 Comm: syz.3.7928 Not tainted 6.1.147-syzkaller #0 [ 1539.212370][T27728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1539.222970][T27728] Call Trace: [ 1539.226461][T27728] [ 1539.229421][T27728] dump_stack_lvl+0x168/0x22e [ 1539.234823][T27728] ? show_regs_print_info+0x12/0x12 [ 1539.240742][T27728] ? load_image+0x3b0/0x3b0 [ 1539.245386][T27728] ? __lock_acquire+0x7c50/0x7c50 [ 1539.251077][T27728] should_fail_ex+0x399/0x4d0 [ 1539.256068][T27728] prepare_alloc_pages+0x1e2/0x5f0 [ 1539.261925][T27728] __alloc_pages+0x123/0x4e0 [ 1539.266563][T27728] ? trace_event_raw_event_lock+0x230/0x230 [ 1539.272659][T27728] ? zone_statistics+0x170/0x170 [ 1539.277887][T27728] ? mark_lock+0x94/0x320 [ 1539.282438][T27728] ? alloc_pages+0x4d8/0x740 [ 1539.287149][T27728] __get_free_pages+0x8/0x30 [ 1539.291950][T27728] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1539.297787][T27728] ? __apply_to_page_range+0x953/0xc80 [ 1539.303466][T27728] __apply_to_page_range+0x962/0xc80 [ 1539.309232][T27728] ? kasan_populate_vmalloc+0x70/0x70 [ 1539.314876][T27728] alloc_vmap_area+0x1754/0x1880 [ 1539.320042][T27728] ? lockdep_hardirqs_on+0x94/0x140 [ 1539.325530][T27728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1539.331885][T27728] ? vm_map_ram+0xab0/0xab0 [ 1539.336543][T27728] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1539.342736][T27728] ? __kasan_kmalloc+0x96/0xa0 [ 1539.347794][T27728] __get_vm_area_node+0x158/0x330 [ 1539.352958][T27728] __vmalloc_node_range+0x357/0x1390 [ 1539.358361][T27728] ? array_map_alloc+0x27c/0x6f0 [ 1539.363414][T27728] ? ct_irq_enter_irqson+0x160/0x160 [ 1539.368753][T27728] ? lockdep_hardirqs_on+0x94/0x140 [ 1539.373997][T27728] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1539.380463][T27728] ? free_vm_area+0x50/0x50 [ 1539.385492][T27728] ? apparmor_capable+0x12c/0x190 [ 1539.390550][T27728] ? bpf_lsm_capable+0x5/0x10 [ 1539.396047][T27728] ? security_capable+0x85/0xb0 [ 1539.401183][T27728] bpf_map_area_alloc+0xd4/0xe0 [ 1539.406432][T27728] ? array_map_alloc+0x27c/0x6f0 [ 1539.411621][T27728] array_map_alloc+0x27c/0x6f0 [ 1539.416597][T27728] map_create+0x531/0xe30 [ 1539.421234][T27728] __sys_bpf+0x2f3/0x6d0 [ 1539.425513][T27728] ? bpf_link_show_fdinfo+0x340/0x340 [ 1539.431197][T27728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1539.437564][T27728] __x64_sys_bpf+0x78/0x90 [ 1539.442278][T27728] do_syscall_64+0x4c/0xa0 [ 1539.446782][T27728] ? clear_bhb_loop+0x60/0xb0 [ 1539.451795][T27728] ? clear_bhb_loop+0x60/0xb0 [ 1539.457200][T27728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1539.463656][T27728] RIP: 0033:0x7f63b938ebe9 [ 1539.468316][T27728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.489623][T27728] RSP: 002b:00007f63ba197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1539.498505][T27728] RAX: ffffffffffffffda RBX: 00007f63b95b5fa0 RCX: 00007f63b938ebe9 [ 1539.506952][T27728] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 1539.515126][T27728] RBP: 00007f63ba197090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.523560][T27728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.531733][T27728] R13: 00007f63b95b6038 R14: 00007f63b95b5fa0 R15: 00007ffc58b945f8 [ 1539.540014][T27728] [ 1539.658650][T27733] IPv6: Can't replace route, no match found [ 1539.727703][T27736] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1539.908859][T27739] netlink: 'syz.6.7931': attribute type 2 has an invalid length. [ 1539.979378][T27739] device 0 entered promiscuous mode [ 1541.092956][T27773] FAULT_INJECTION: forcing a failure. [ 1541.092956][T27773] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.263717][T27773] CPU: 1 PID: 27773 Comm: syz.7.7944 Not tainted 6.1.147-syzkaller #0 [ 1541.272729][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1541.283064][T27773] Call Trace: [ 1541.286896][T27773] [ 1541.290202][T27773] dump_stack_lvl+0x168/0x22e [ 1541.295043][T27773] ? show_regs_print_info+0x12/0x12 [ 1541.300710][T27773] ? load_image+0x3b0/0x3b0 [ 1541.305862][T27773] ? __might_sleep+0xd0/0xd0 [ 1541.310477][T27773] ? __lock_acquire+0x7c50/0x7c50 [ 1541.315793][T27773] should_fail_ex+0x399/0x4d0 [ 1541.320699][T27773] should_failslab+0x5/0x20 [ 1541.325325][T27773] slab_pre_alloc_hook+0x59/0x310 [ 1541.330581][T27773] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1541.336549][T27773] __kmem_cache_alloc_node+0x4f/0x260 [ 1541.342384][T27773] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1541.348763][T27773] __kmalloc+0xa0/0x240 [ 1541.353043][T27773] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1541.359452][T27773] tomoyo_path_number_perm+0x1e3/0x600 [ 1541.365395][T27773] ? tomoyo_path_number_perm+0x1b6/0x600 [ 1541.371758][T27773] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1541.377767][T27773] ? ksys_write+0x1bd/0x240 [ 1541.382688][T27773] ? common_file_perm+0x171/0x1c0 [ 1541.388162][T27773] ? __fget_files+0x28/0x4d0 [ 1541.393140][T27773] security_file_ioctl+0x6c/0xa0 [ 1541.398120][T27773] __se_sys_ioctl+0x48/0x170 [ 1541.402927][T27773] do_syscall_64+0x4c/0xa0 [ 1541.407540][T27773] ? clear_bhb_loop+0x60/0xb0 [ 1541.412494][T27773] ? clear_bhb_loop+0x60/0xb0 [ 1541.417371][T27773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.423633][T27773] RIP: 0033:0x7fa83b78ebe9 [ 1541.428254][T27773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.449015][T27773] RSP: 002b:00007fa83c519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.457836][T27773] RAX: ffffffffffffffda RBX: 00007fa83b9b5fa0 RCX: 00007fa83b78ebe9 [ 1541.466312][T27773] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 1541.475176][T27773] RBP: 00007fa83c519090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.484054][T27773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.492585][T27773] R13: 00007fa83b9b6038 R14: 00007fa83b9b5fa0 R15: 00007fffc298abd8 [ 1541.501655][T27773] [ 1541.816346][T27773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1541.885527][T27787] IPv6: Can't replace route, no match found [ 1541.917920][T27787] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1543.401753][T27831] IPv6: Can't replace route, no match found [ 1543.450830][T27831] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1543.650772][T27835] netlink: 'syz.3.7967': attribute type 10 has an invalid length. [ 1543.668189][T27835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7967'. [ 1543.677941][T27835] netlink: 'syz.3.7967': attribute type 10 has an invalid length. [ 1543.686156][T27835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7967'. [ 1544.300953][T27857] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1544.606001][T27866] IPv6: Can't replace route, no match found [ 1544.646534][T27866] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1544.714511][T27871] netlink: 'syz.3.7982': attribute type 10 has an invalid length. [ 1544.754197][T27871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7982'. [ 1544.784201][T27871] netlink: 'syz.3.7982': attribute type 10 has an invalid length. [ 1544.792515][T27871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7982'. [ 1545.744436][T27905] FAULT_INJECTION: forcing a failure. [ 1545.744436][T27905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.824966][T27905] CPU: 1 PID: 27905 Comm: syz.0.7991 Not tainted 6.1.147-syzkaller #0 [ 1545.833312][T27905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1545.843831][T27905] Call Trace: [ 1545.847136][T27905] [ 1545.850438][T27905] dump_stack_lvl+0x168/0x22e [ 1545.855416][T27905] ? show_regs_print_info+0x12/0x12 [ 1545.860986][T27905] ? load_image+0x3b0/0x3b0 [ 1545.865688][T27905] ? __lock_acquire+0x7c50/0x7c50 [ 1545.871174][T27905] ? __lock_acquire+0x13c0/0x7c50 [ 1545.876307][T27905] ? __stack_depot_save+0x35/0x460 [ 1545.881615][T27905] should_fail_ex+0x399/0x4d0 [ 1545.886518][T27905] _copy_from_user+0x2c/0x170 [ 1545.891522][T27905] ip_tunnel_siocdevprivate+0xa3/0x1c0 [ 1545.897200][T27905] ? mark_lock+0x94/0x320 [ 1545.901577][T27905] ? ip_tunnel_update+0xaa0/0xaa0 [ 1545.906825][T27905] ipip6_tunnel_siocdevprivate+0x1ce/0x1530 [ 1545.912930][T27905] ? sit_tunnel_xmit+0x1f60/0x1f60 [ 1545.918520][T27905] ? perf_trace_lock+0xf3/0x370 [ 1545.923487][T27905] ? __mutex_trylock_common+0x14f/0x250 [ 1545.929316][T27905] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1545.935584][T27905] ? full_name_hash+0x8e/0xe0 [ 1545.940374][T27905] dev_ifsioc+0xb92/0xe90 [ 1545.944907][T27905] ? dev_ioctl+0xea0/0xea0 [ 1545.949527][T27905] ? mutex_lock_nested+0x10/0x10 [ 1545.955007][T27905] ? __lock_acquire+0x7c50/0x7c50 [ 1545.960242][T27905] ? full_name_hash+0x8e/0xe0 [ 1545.964955][T27905] ? dev_load+0x1d/0x1e0 [ 1545.969407][T27905] ? dev_load+0x1d/0x1e0 [ 1545.973894][T27905] dev_ioctl+0x612/0xea0 [ 1545.978772][T27905] ? get_user_ifreq+0xc7/0x170 [ 1545.983918][T27905] sock_ioctl+0x67b/0x6e0 [ 1545.988652][T27905] ? sock_poll+0x3f0/0x3f0 [ 1545.993114][T27905] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1545.998230][T27905] ? security_file_ioctl+0x7c/0xa0 [ 1546.003468][T27905] ? sock_poll+0x3f0/0x3f0 [ 1546.007920][T27905] __se_sys_ioctl+0xfa/0x170 [ 1546.012665][T27905] do_syscall_64+0x4c/0xa0 [ 1546.017399][T27905] ? clear_bhb_loop+0x60/0xb0 [ 1546.022105][T27905] ? clear_bhb_loop+0x60/0xb0 [ 1546.026904][T27905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.033004][T27905] RIP: 0033:0x7f1bcb38ebe9 [ 1546.038081][T27905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.059450][T27905] RSP: 002b:00007f1bcc241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.068081][T27905] RAX: ffffffffffffffda RBX: 00007f1bcb5b6090 RCX: 00007f1bcb38ebe9 [ 1546.076081][T27905] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 1546.084339][T27905] RBP: 00007f1bcc241090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.092434][T27905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.100602][T27905] R13: 00007f1bcb5b6128 R14: 00007f1bcb5b6090 R15: 00007ffc0012ce18 [ 1546.108792][T27905] [ 1546.115463][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.122098][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.413339][T27915] IPv6: Can't replace route, no match found [ 1546.433005][T27916] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1546.576252][T27918] netlink: 'syz.0.7997': attribute type 10 has an invalid length. [ 1546.594566][T27918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1546.635551][T27918] netlink: 'syz.0.7997': attribute type 10 has an invalid length. [ 1546.708932][T27918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1547.490801][T27950] IPv6: Can't replace route, no match found [ 1547.506705][T27950] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1547.536084][T27949] FAULT_INJECTION: forcing a failure. [ 1547.536084][T27949] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.606266][T27949] CPU: 0 PID: 27949 Comm: syz.0.8008 Not tainted 6.1.147-syzkaller #0 [ 1547.614912][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1547.625774][T27949] Call Trace: [ 1547.629324][T27949] [ 1547.632382][T27949] dump_stack_lvl+0x168/0x22e [ 1547.637126][T27949] ? show_regs_print_info+0x12/0x12 [ 1547.642436][T27949] ? load_image+0x3b0/0x3b0 [ 1547.647746][T27949] ? __might_sleep+0xd0/0xd0 [ 1547.652804][T27949] ? __lock_acquire+0x7c50/0x7c50 [ 1547.658300][T27949] ? ct_irq_exit_irqson+0xfa/0x160 [ 1547.664292][T27949] should_fail_ex+0x399/0x4d0 [ 1547.669355][T27949] should_failslab+0x5/0x20 [ 1547.673885][T27949] slab_pre_alloc_hook+0x59/0x310 [ 1547.679188][T27949] ? exc_page_fault+0x88/0x100 [ 1547.684329][T27949] ? sk_prot_alloc+0xe7/0x210 [ 1547.689255][T27949] __kmem_cache_alloc_node+0x4f/0x260 [ 1547.695252][T27949] ? exc_page_fault+0x88/0x100 [ 1547.700739][T27949] ? sk_prot_alloc+0xe7/0x210 [ 1547.705619][T27949] __kmalloc+0xa0/0x240 [ 1547.709980][T27949] sk_prot_alloc+0xe7/0x210 [ 1547.714749][T27949] ? sk_alloc+0x20/0x340 [ 1547.719681][T27949] sk_alloc+0x36/0x340 [ 1547.724297][T27949] ? bpf_ctx_init+0x163/0x1a0 [ 1547.729958][T27949] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 1547.736165][T27949] bpf_prog_test_run_skb+0x350/0x11b0 [ 1547.741824][T27949] ? __fget_files+0x28/0x4d0 [ 1547.747108][T27949] ? __fget_files+0x44a/0x4d0 [ 1547.752805][T27949] ? cpu_online+0xa0/0xa0 [ 1547.758249][T27949] bpf_prog_test_run+0x31e/0x390 [ 1547.764370][T27949] __sys_bpf+0x593/0x6d0 [ 1547.769551][T27949] ? bpf_link_show_fdinfo+0x340/0x340 [ 1547.775667][T27949] ? lock_chain_count+0x20/0x20 [ 1547.781032][T27949] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1547.787717][T27949] __x64_sys_bpf+0x78/0x90 [ 1547.792471][T27949] do_syscall_64+0x4c/0xa0 [ 1547.797180][T27949] ? clear_bhb_loop+0x60/0xb0 [ 1547.801983][T27949] ? clear_bhb_loop+0x60/0xb0 [ 1547.807273][T27949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1547.813986][T27949] RIP: 0033:0x7f1bcb38ebe9 [ 1547.818860][T27949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.839708][T27949] RSP: 002b:00007f1bcc262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1547.848582][T27949] RAX: ffffffffffffffda RBX: 00007f1bcb5b5fa0 RCX: 00007f1bcb38ebe9 [ 1547.857005][T27949] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1547.866370][T27949] RBP: 00007f1bcc262090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.875234][T27949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.883675][T27949] R13: 00007f1bcb5b6038 R14: 00007f1bcb5b5fa0 R15: 00007ffc0012ce18 [ 1547.892124][T27949] [ 1548.086323][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 1548.360252][T27963] netlink: 'syz.0.8013': attribute type 10 has an invalid length. [ 1548.384208][T27963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8013'. [ 1548.440584][T27963] netlink: 'syz.0.8013': attribute type 10 has an invalid length. [ 1548.497236][T27963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8013'. [ 1549.077724][T27983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.085848][T27983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.145617][T27981] IPv6: Can't replace route, no match found [ 1549.202296][T27988] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1550.449465][T28000] netlink: 'syz.5.8028': attribute type 10 has an invalid length. [ 1550.507831][T28000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8028'. [ 1551.159079][T28000] netlink: 'syz.5.8028': attribute type 10 has an invalid length. [ 1551.209999][T28000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8028'. [ 1551.836554][T28028] IPv6: Can't replace route, no match found [ 1551.851753][T28028] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1552.042729][T28035] IPv6: Can't replace route, no match found [ 1552.075627][T28035] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1552.326579][T28048] netlink: 'syz.6.8047': attribute type 10 has an invalid length. [ 1552.402963][T28048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1552.474228][T28048] netlink: 'syz.6.8047': attribute type 10 has an invalid length. [ 1552.506650][T28048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1552.541691][T28054] device bridge_slave_1 left promiscuous mode [ 1552.552043][T28054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.567922][T28054] device bridge_slave_0 left promiscuous mode [ 1552.575330][T28054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.979294][T28067] IPv6: Can't replace route, no match found [ 1553.021585][T28067] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1553.272144][T28080] netlink: 'syz.7.8063': attribute type 10 has an invalid length. [ 1553.285287][T28080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8063'. [ 1553.297473][T28080] netlink: 'syz.7.8063': attribute type 10 has an invalid length. [ 1553.321587][T28080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8063'. [ 1554.206671][T28104] IPv6: Can't replace route, no match found [ 1554.213671][T28106] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1554.427232][T28116] netlink: 'syz.3.8075': attribute type 10 has an invalid length. [ 1554.462451][T28116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8075'. [ 1554.496152][T28116] netlink: 'syz.3.8075': attribute type 10 has an invalid length. [ 1554.518695][T28116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8075'. [ 1555.037996][T28138] IPv6: Can't replace route, no match found [ 1555.075936][T28138] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1555.361307][T28150] netlink: 'syz.6.8091': attribute type 10 has an invalid length. [ 1555.370585][T28150] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1555.397711][T28150] netlink: 'syz.6.8091': attribute type 10 has an invalid length. [ 1555.416095][T28150] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1555.891873][T28171] IPv6: Can't replace route, no match found [ 1555.918121][T28171] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1556.657544][T28191] netlink: 'syz.3.8107': attribute type 10 has an invalid length. [ 1556.666108][T28191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1556.724485][T28191] netlink: 'syz.3.8107': attribute type 10 has an invalid length. [ 1556.743145][T28191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1557.058894][T28202] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8120'. [ 1557.085846][T28202] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8120'. [ 1557.372875][T28212] IPv6: Can't replace route, no match found [ 1557.406828][T28212] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1558.029957][T28235] IPv6: Can't replace route, no match found [ 1558.040110][T28232] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1558.178581][T28238] validate_nla: 2 callbacks suppressed [ 1558.178605][T28238] netlink: 'syz.6.8126': attribute type 10 has an invalid length. [ 1558.223584][T28238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8126'. [ 1558.275003][T28238] netlink: 'syz.6.8126': attribute type 10 has an invalid length. [ 1558.315776][T28238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8126'. [ 1558.657799][T28251] IPv6: Can't replace route, no match found [ 1558.687890][T28251] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1559.014270][T28267] IPv6: Can't replace route, no match found [ 1559.035473][T28267] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1559.127604][T28273] netlink: 'syz.3.8142': attribute type 10 has an invalid length. [ 1559.189565][T28273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8142'. [ 1559.703441][T28273] netlink: 'syz.3.8142': attribute type 10 has an invalid length. [ 1559.724206][T28273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8142'. [ 1559.838413][T28285] IPv6: Can't replace route, no match found [ 1559.861934][T28285] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1560.465310][T28311] netlink: 'syz.6.8158': attribute type 10 has an invalid length. [ 1560.539939][T28311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8158'. [ 1560.557572][T28311] netlink: 'syz.6.8158': attribute type 10 has an invalid length. [ 1560.574207][T28311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8158'. [ 1561.537143][T28328] IPv6: Can't replace route, no match found [ 1561.544345][T28329] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1562.855934][T28349] netlink: 'syz.0.8171': attribute type 10 has an invalid length. [ 1562.884462][T28349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1562.904302][T28349] netlink: 'syz.0.8171': attribute type 10 has an invalid length. [ 1562.917557][T28349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1563.318023][T28364] IPv6: Can't replace route, no match found [ 1563.354765][T28364] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1563.524146][T16237] Bluetooth: hci2: command 0x0406 tx timeout [ 1564.594993][T28394] netlink: 'syz.0.8188': attribute type 10 has an invalid length. [ 1564.684279][T28394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1564.911955][T28394] netlink: 'syz.0.8188': attribute type 10 has an invalid length. [ 1564.977468][T28394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1565.078336][T28405] IPv6: Can't replace route, no match found [ 1565.124827][T28405] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1565.332582][T28411] netlink: 'syz.3.8196': attribute type 10 has an invalid length. [ 1565.355225][T28411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1565.388956][T28411] netlink: 'syz.3.8196': attribute type 10 has an invalid length. [ 1565.462381][T28411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1565.652510][T28420] netlink: 'syz.3.8201': attribute type 10 has an invalid length. [ 1565.702461][T28420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1565.724215][T28420] netlink: 'syz.3.8201': attribute type 10 has an invalid length. [ 1565.763270][T28420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1566.147579][T28435] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1567.295495][T28447] netlink: 'syz.5.8208': attribute type 10 has an invalid length. [ 1567.344388][T28447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8208'. [ 1567.416764][T28447] netlink: 'syz.5.8208': attribute type 10 has an invalid length. [ 1567.491562][T28447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8208'. [ 1568.689639][T28459] netlink: 'syz.7.8212': attribute type 10 has an invalid length. [ 1568.729116][T28459] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8212'. [ 1568.805025][T28459] netlink: 'syz.7.8212': attribute type 10 has an invalid length. [ 1568.990773][T28459] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8212'. [ 1569.375328][T28467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8215'. [ 1569.474533][T28467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8215'. [ 1570.399813][T28479] IPv6: Can't replace route, no match found [ 1570.486878][T28483] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1570.699843][T28485] validate_nla: 2 callbacks suppressed [ 1570.699864][T28485] netlink: 'syz.3.8221': attribute type 10 has an invalid length. [ 1570.764427][T28485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1570.804633][T28485] netlink: 'syz.3.8221': attribute type 10 has an invalid length. [ 1570.836559][T28485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1574.555211][T28516] netlink: 'syz.5.8231': attribute type 10 has an invalid length. [ 1574.563106][T28516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8231'. [ 1574.645974][T28516] netlink: 'syz.5.8231': attribute type 10 has an invalid length. [ 1574.674274][T28516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8231'. [ 1575.537417][T28525] netlink: 'syz.0.8234': attribute type 10 has an invalid length. [ 1575.574702][T28525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8234'. [ 1575.602787][T28525] netlink: 'syz.0.8234': attribute type 10 has an invalid length. [ 1575.648503][T28525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8234'. [ 1575.665165][T28527] netlink: 'syz.3.8236': attribute type 10 has an invalid length. [ 1575.731440][T28527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1575.786413][T28529] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1575.928041][T28527] netlink: 'syz.3.8236': attribute type 10 has an invalid length. [ 1575.993568][T28527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1577.104363][T28544] netlink: 'syz.3.8240': attribute type 3 has an invalid length. [ 1580.083574][T28569] netlink: 'syz.0.8247': attribute type 10 has an invalid length. [ 1580.144332][T28569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8247'. [ 1580.153939][T28569] netlink: 'syz.0.8247': attribute type 10 has an invalid length. [ 1580.264243][T28569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8247'. [ 1580.823174][T28573] netlink: 'syz.3.8250': attribute type 10 has an invalid length. [ 1580.872424][T28573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8250'. [ 1580.909495][T28575] IPv6: Can't replace route, no match found [ 1580.941206][T28575] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1580.985109][T28573] netlink: 'syz.3.8250': attribute type 10 has an invalid length. [ 1581.036265][T28573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8250'. [ 1583.275747][T28599] netlink: 'syz.0.8257': attribute type 10 has an invalid length. [ 1583.304475][T28599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1583.346517][T28599] netlink: 'syz.0.8257': attribute type 10 has an invalid length. [ 1583.368093][T28599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1584.365788][T28611] IPv6: Can't replace route, no match found [ 1584.400568][T28611] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1584.867371][T28618] netlink: 'syz.5.8265': attribute type 10 has an invalid length. [ 1584.917487][T28618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8265'. [ 1584.961731][T28622] netlink: 'syz.7.8263': attribute type 10 has an invalid length. [ 1585.088575][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8263'. [ 1585.124532][T28618] netlink: 'syz.5.8265': attribute type 10 has an invalid length. [ 1585.194006][T28618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8265'. [ 1585.315135][T28622] netlink: 'syz.7.8263': attribute type 10 has an invalid length. [ 1585.389290][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8263'. [ 1589.620960][T28663] IPv6: Can't replace route, no match found [ 1589.675857][T28664] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1591.024336][T28676] netlink: 'syz.0.8283': attribute type 10 has an invalid length. [ 1591.094129][T28676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1591.176868][T28676] netlink: 'syz.0.8283': attribute type 10 has an invalid length. [ 1591.256651][T28676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1593.333139][T28694] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1595.049345][T28707] IPv6: Can't replace route, no match found [ 1595.850446][T28716] netlink: 'syz.6.8297': attribute type 3 has an invalid length. [ 1596.915318][T28727] netlink: 'syz.5.8299': attribute type 10 has an invalid length. [ 1596.923761][T28727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8299'. [ 1597.174300][T28727] netlink: 'syz.5.8299': attribute type 10 has an invalid length. [ 1597.182888][T28727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8299'. [ 1599.087635][T28745] IPv6: Can't replace route, no match found [ 1599.217309][T28747] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1600.917871][T28758] IPv6: Can't replace route, no match found [ 1602.420819][T28769] netlink: 'syz.7.8314': attribute type 3 has an invalid length. [ 1602.690927][T28774] netlink: 'syz.3.8316': attribute type 10 has an invalid length. [ 1602.856886][T28774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8316'. [ 1602.995130][T28774] netlink: 'syz.3.8316': attribute type 10 has an invalid length. [ 1603.003460][T28774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8316'. [ 1605.119403][T28795] IPv6: Can't replace route, no match found [ 1605.269222][T28797] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1605.426191][T28796] IPv6: Can't replace route, no match found [ 1606.725251][T28813] netlink: 'syz.6.8331': attribute type 10 has an invalid length. [ 1606.733672][T28813] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8331'. [ 1606.794513][T28813] netlink: 'syz.6.8331': attribute type 10 has an invalid length. [ 1606.803464][T28813] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8331'. [ 1607.447600][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.454222][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.806136][T28834] netlink: 'syz.5.8335': attribute type 3 has an invalid length. [ 1610.312840][T28853] netlink: 'syz.3.8343': attribute type 10 has an invalid length. [ 1610.343376][T28853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8343'. [ 1610.372796][T28853] netlink: 'syz.3.8343': attribute type 10 has an invalid length. [ 1610.443338][T28853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8343'. [ 1610.826906][T28859] IPv6: Can't replace route, no match found [ 1615.276764][T28901] IPv6: Can't replace route, no match found [ 1615.681177][T28912] netlink: 'syz.7.8366': attribute type 10 has an invalid length. [ 1615.744304][T28912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8366'. [ 1615.774395][T28912] netlink: 'syz.7.8366': attribute type 10 has an invalid length. [ 1615.874279][T28912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8366'. [ 1616.658666][T28921] IPv6: Can't replace route, no match found [ 1616.731354][T28926] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.8370'. [ 1616.889151][T28926] netlink: 'syz.7.8370': attribute type 1 has an invalid length. [ 1616.989779][T28926] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.8370'. [ 1620.202352][T28960] netlink: 'syz.7.8381': attribute type 10 has an invalid length. [ 1620.294433][T28960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8381'. [ 1620.409390][T28960] netlink: 'syz.7.8381': attribute type 10 has an invalid length. [ 1620.537168][T28960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8381'. [ 1620.804663][T28967] IPv6: Can't replace route, no match found [ 1620.840934][T28966] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1624.884441][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 1625.165446][T29005] netlink: 'syz.3.8397': attribute type 10 has an invalid length. [ 1625.204423][T29005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1625.239646][T29005] netlink: 'syz.3.8397': attribute type 10 has an invalid length. [ 1625.297246][T29005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1625.494295][T29011] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1625.565628][T29010] IPv6: Can't replace route, no match found [ 1625.575962][T29014] netlink: 'syz.5.8399': attribute type 1 has an invalid length. [ 1625.614355][T29014] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1625.697378][T29017] netlink: 'syz.7.8400': attribute type 10 has an invalid length. [ 1626.003326][T29017] team0: Port device netdevsim0 added [ 1626.044741][T29020] netlink: 'syz.7.8400': attribute type 10 has an invalid length. [ 1626.165406][T29020] team0: Port device netdevsim0 removed [ 1626.260395][T29020] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1626.789706][T29029] netlink: 'syz.5.8404': attribute type 10 has an invalid length. [ 1627.003713][T29029] team0: Device xfrm0 is of different type [ 1629.094304][T29057] netlink: 'syz.7.8413': attribute type 10 has an invalid length. [ 1629.124246][T29057] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8413'. [ 1629.174841][T29057] netlink: 'syz.7.8413': attribute type 10 has an invalid length. [ 1629.221929][T29057] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8413'. [ 1629.874614][T29064] IPv6: Can't replace route, no match found [ 1629.926935][T29064] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1631.044652][T29095] netlink: 'syz.7.8427': attribute type 10 has an invalid length. [ 1631.053486][T29095] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8427'. [ 1631.282140][T29095] netlink: 'syz.7.8427': attribute type 10 has an invalid length. [ 1631.319124][T29095] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8427'. [ 1631.961410][T29116] IPv6: Can't replace route, no match found [ 1632.031690][T29116] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1632.707607][T29138] netlink: 'syz.3.8441': attribute type 10 has an invalid length. [ 1632.794201][T29138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1632.803360][T29138] netlink: 'syz.3.8441': attribute type 10 has an invalid length. [ 1632.874251][T29138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1633.467730][T29158] IPv6: Can't replace route, no match found [ 1633.504858][T29158] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1634.150619][T29176] netlink: 'syz.3.8456': attribute type 10 has an invalid length. [ 1634.194141][T29176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1634.235661][T29176] netlink: 'syz.3.8456': attribute type 10 has an invalid length. [ 1634.243986][T29176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1634.345926][T29183] FAULT_INJECTION: forcing a failure. [ 1634.345926][T29183] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.387589][T29183] CPU: 1 PID: 29183 Comm: syz.0.8458 Not tainted 6.1.147-syzkaller #0 [ 1634.396160][T29183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1634.407120][T29183] Call Trace: [ 1634.410509][T29183] [ 1634.413461][T29183] dump_stack_lvl+0x168/0x22e [ 1634.418689][T29183] ? show_regs_print_info+0x12/0x12 [ 1634.424089][T29183] ? load_image+0x3b0/0x3b0 [ 1634.428893][T29183] ? __might_sleep+0xd0/0xd0 [ 1634.434042][T29183] ? __lock_acquire+0x7c50/0x7c50 [ 1634.439839][T29183] should_fail_ex+0x399/0x4d0 [ 1634.444955][T29183] should_failslab+0x5/0x20 [ 1634.450207][T29183] slab_pre_alloc_hook+0x59/0x310 [ 1634.455362][T29183] kmem_cache_alloc_node+0x5a/0x320 [ 1634.460835][T29183] ? lock_chain_count+0x20/0x20 [ 1634.465708][T29183] ? dup_task_struct+0x57/0x6b0 [ 1634.470581][T29183] dup_task_struct+0x57/0x6b0 [ 1634.475644][T29183] ? lockdep_hardirqs_on+0x94/0x140 [ 1634.481808][T29183] copy_process+0x5bd/0x4020 [ 1634.486440][T29183] ? trace_event_raw_event_lock+0x230/0x230 [ 1634.493163][T29183] ? perf_trace_lock+0xf3/0x370 [ 1634.498485][T29183] ? perf_trace_lock+0xf3/0x370 [ 1634.504076][T29183] ? idle_dummy+0x10/0x10 [ 1634.509159][T29183] kernel_clone+0x225/0x8b0 [ 1634.514387][T29183] ? ksys_write+0x1bd/0x240 [ 1634.519280][T29183] ? create_io_thread+0x120/0x120 [ 1634.524790][T29183] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1634.531197][T29183] __x64_sys_clone+0x17c/0x1d0 [ 1634.536364][T29183] ? __fget_files+0x44a/0x4d0 [ 1634.541805][T29183] ? __ia32_sys_vfork+0x100/0x100 [ 1634.547130][T29183] ? lock_chain_count+0x20/0x20 [ 1634.552202][T29183] ? lockdep_hardirqs_on+0x94/0x140 [ 1634.557791][T29183] do_syscall_64+0x4c/0xa0 [ 1634.562445][T29183] ? clear_bhb_loop+0x60/0xb0 [ 1634.567416][T29183] ? clear_bhb_loop+0x60/0xb0 [ 1634.572292][T29183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1634.578565][T29183] RIP: 0033:0x7f1bcb38ebe9 [ 1634.583342][T29183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.603852][T29183] RSP: 002b:00007f1bcc261fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1634.613653][T29183] RAX: ffffffffffffffda RBX: 00007f1bcb5b5fa0 RCX: 00007f1bcb38ebe9 [ 1634.622449][T29183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 1634.630862][T29183] RBP: 00007f1bcc262090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.639275][T29183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1634.647445][T29183] R13: 00007f1bcb5b6038 R14: 00007f1bcb5b5fa0 R15: 00007ffc0012ce18 [ 1634.655813][T29183] [ 1634.774870][T29192] netlink: 'syz.7.8460': attribute type 10 has an invalid length. [ 1634.835707][T29192] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1634.885090][T29192] netlink: 'syz.7.8460': attribute type 10 has an invalid length. [ 1634.946989][T29192] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1635.065623][T29198] IPv6: Can't replace route, no match found [ 1635.125346][T29198] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1635.665462][T29220] netlink: 'syz.0.8471': attribute type 10 has an invalid length. [ 1635.734314][T29220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8471'. [ 1635.784366][T29220] netlink: 'syz.0.8471': attribute type 10 has an invalid length. [ 1635.830131][T29220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8471'. [ 1636.519165][T29239] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1636.896307][T29252] __nla_validate_parse: 2 callbacks suppressed [ 1636.896326][T29252] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8484'. [ 1636.974649][T29256] validate_nla: 2 callbacks suppressed [ 1636.974723][T29256] netlink: 'syz.5.8486': attribute type 10 has an invalid length. [ 1637.139707][T29262] netlink: 'syz.5.8488': attribute type 10 has an invalid length. [ 1637.160215][T29262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8488'. [ 1637.181744][T29262] netlink: 'syz.5.8488': attribute type 10 has an invalid length. [ 1637.208813][T29262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8488'. [ 1637.261778][T29265] netlink: 'syz.3.8489': attribute type 10 has an invalid length. [ 1637.281275][T29265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8489'. [ 1637.304380][T29265] netlink: 'syz.3.8489': attribute type 10 has an invalid length. [ 1637.335532][T29265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8489'. [ 1637.826029][T29279] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1638.437532][T29295] netlink: 'syz.5.8501': attribute type 10 has an invalid length. [ 1638.479187][T29295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8501'. [ 1638.509381][T29295] netlink: 'syz.5.8501': attribute type 10 has an invalid length. [ 1638.546586][T29295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8501'. [ 1638.884868][T29304] netlink: 'syz.0.8503': attribute type 10 has an invalid length. [ 1638.944199][T29304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8503'. [ 1639.028469][T29304] netlink: 'syz.0.8503': attribute type 10 has an invalid length. [ 1639.059027][T29309] FAULT_INJECTION: forcing a failure. [ 1639.059027][T29309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.083483][T29304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8503'. [ 1639.147955][T29309] CPU: 0 PID: 29309 Comm: syz.3.8505 Not tainted 6.1.147-syzkaller #0 [ 1639.156988][T29309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1639.168629][T29309] Call Trace: [ 1639.172026][T29309] [ 1639.175187][T29309] dump_stack_lvl+0x168/0x22e [ 1639.180872][T29309] ? show_regs_print_info+0x12/0x12 [ 1639.186391][T29309] ? load_image+0x3b0/0x3b0 [ 1639.191486][T29309] ? __lock_acquire+0x7c50/0x7c50 [ 1639.196693][T29309] should_fail_ex+0x399/0x4d0 [ 1639.201849][T29309] _copy_from_user+0x2c/0x170 [ 1639.206927][T29309] __sys_bpf+0x265/0x6d0 [ 1639.211515][T29309] ? bpf_link_show_fdinfo+0x340/0x340 [ 1639.217221][T29309] ? lock_chain_count+0x20/0x20 [ 1639.222237][T29309] __x64_sys_bpf+0x78/0x90 [ 1639.226952][T29309] do_syscall_64+0x4c/0xa0 [ 1639.231787][T29309] ? clear_bhb_loop+0x60/0xb0 [ 1639.236785][T29309] ? clear_bhb_loop+0x60/0xb0 [ 1639.241770][T29309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1639.247976][T29309] RIP: 0033:0x7f63b938ebe9 [ 1639.253845][T29309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.275302][T29309] RSP: 002b:00007f63ba197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1639.284168][T29309] RAX: ffffffffffffffda RBX: 00007f63b95b5fa0 RCX: 00007f63b938ebe9 [ 1639.292862][T29309] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001b [ 1639.301742][T29309] RBP: 00007f63ba197090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.310154][T29309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.318539][T29309] R13: 00007f63b95b6038 R14: 00007f63b95b5fa0 R15: 00007ffc58b945f8 [ 1639.326720][T29309] [ 1639.473228][T29317] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1639.958411][T29332] netlink: 'syz.0.8514': attribute type 10 has an invalid length. [ 1640.008691][T29332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8514'. [ 1640.883516][T29354] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1641.443692][T29371] FAULT_INJECTION: forcing a failure. [ 1641.443692][T29371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.566309][T29371] CPU: 0 PID: 29371 Comm: syz.5.8529 Not tainted 6.1.147-syzkaller #0 [ 1641.574972][T29371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1641.585570][T29371] Call Trace: [ 1641.589457][T29371] [ 1641.592562][T29371] dump_stack_lvl+0x168/0x22e [ 1641.597902][T29371] ? show_regs_print_info+0x12/0x12 [ 1641.603473][T29371] ? load_image+0x3b0/0x3b0 [ 1641.608175][T29371] ? __lock_acquire+0x7c50/0x7c50 [ 1641.613395][T29371] ? __virt_addr_valid+0x188/0x540 [ 1641.618682][T29371] should_fail_ex+0x399/0x4d0 [ 1641.623535][T29371] _copy_from_user+0x2c/0x170 [ 1641.628836][T29371] sctp_setsockopt+0x19a/0xf90 [ 1641.633998][T29371] ? sock_common_recvmsg+0x1a0/0x1a0 [ 1641.639507][T29371] __sys_setsockopt+0x2bf/0x3d0 [ 1641.644540][T29371] __x64_sys_setsockopt+0xb1/0xc0 [ 1641.649733][T29371] do_syscall_64+0x4c/0xa0 [ 1641.654540][T29371] ? clear_bhb_loop+0x60/0xb0 [ 1641.659849][T29371] ? clear_bhb_loop+0x60/0xb0 [ 1641.664532][T29371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.670600][T29371] RIP: 0033:0x7fc42918ebe9 [ 1641.675107][T29371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.695770][T29371] RSP: 002b:00007fc429f6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1641.704901][T29371] RAX: ffffffffffffffda RBX: 00007fc4293b5fa0 RCX: 00007fc42918ebe9 [ 1641.713176][T29371] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003 [ 1641.721672][T29371] RBP: 00007fc429f6d090 R08: 0000000000000084 R09: 0000000000000000 [ 1641.730119][T29371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.738353][T29371] R13: 00007fc4293b6038 R14: 00007fc4293b5fa0 R15: 00007ffceab8a2e8 [ 1641.746506][T29371] [ 1641.975366][T29386] __nla_validate_parse: 5 callbacks suppressed [ 1641.975387][T29386] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8534'. [ 1642.113531][T29386] validate_nla: 6 callbacks suppressed [ 1642.113550][T29386] netlink: 'syz.7.8534': attribute type 10 has an invalid length. [ 1642.254095][T29386] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8534'. [ 1642.959363][T29394] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1643.124885][T29400] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.8539'. [ 1643.554544][T29416] netlink: 'syz.6.8542': attribute type 10 has an invalid length. [ 1643.589548][T29416] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8542'. [ 1643.646724][T29416] netlink: 'syz.6.8542': attribute type 10 has an invalid length. [ 1643.734126][T29416] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8542'. [ 1644.048210][T29429] netlink: 'syz.5.8548': attribute type 10 has an invalid length. [ 1644.084172][T29429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8548'. [ 1644.134460][T29429] netlink: 'syz.5.8548': attribute type 10 has an invalid length. [ 1644.191918][T29429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8548'. [ 1644.712680][T29440] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1645.042050][T29450] device wlan0 entered promiscuous mode [ 1645.087382][T29450] FAULT_INJECTION: forcing a failure. [ 1645.087382][T29450] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.125094][T29450] CPU: 1 PID: 29450 Comm: syz.5.8554 Not tainted 6.1.147-syzkaller #0 [ 1645.134195][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1645.145147][T29450] Call Trace: [ 1645.148532][T29450] [ 1645.151487][T29450] dump_stack_lvl+0x168/0x22e [ 1645.156286][T29450] ? show_regs_print_info+0x12/0x12 [ 1645.162033][T29450] ? load_image+0x3b0/0x3b0 [ 1645.167032][T29450] should_fail_ex+0x399/0x4d0 [ 1645.171796][T29450] should_failslab+0x5/0x20 [ 1645.176545][T29450] slab_pre_alloc_hook+0x59/0x310 [ 1645.181860][T29450] ? br_netlink_fini+0x30/0x30 [ 1645.186975][T29450] kmem_cache_alloc_node+0x5a/0x320 [ 1645.192464][T29450] ? if_nlmsg_size+0x5b0/0x880 [ 1645.197424][T29450] ? __alloc_skb+0xfc/0x7e0 [ 1645.202223][T29450] __alloc_skb+0xfc/0x7e0 [ 1645.206725][T29450] rtmsg_ifinfo_build_skb+0x80/0x180 [ 1645.212541][T29450] rtmsg_ifinfo+0x71/0x120 [ 1645.217154][T29450] __dev_notify_flags+0xde/0x2d0 [ 1645.222498][T29450] ? __dev_change_flags+0x47c/0x6a0 [ 1645.227866][T29450] ? __dev_change_flags+0x6a0/0x6a0 [ 1645.233489][T29450] ? __dev_change_flags+0x4bb/0x6a0 [ 1645.238980][T29450] ? dev_get_flags+0x1c0/0x1c0 [ 1645.244235][T29450] ? do_raw_spin_lock+0x11d/0x280 [ 1645.249498][T29450] ? __rwlock_init+0x140/0x140 [ 1645.254635][T29450] dev_change_flags+0xe3/0x1a0 [ 1645.260329][T29450] dev_ifsioc+0x159/0xe90 [ 1645.265025][T29450] ? __mutex_lock+0x3a5/0xaf0 [ 1645.270108][T29450] ? dev_ioctl+0xea0/0xea0 [ 1645.274795][T29450] ? mutex_lock_nested+0x10/0x10 [ 1645.279887][T29450] ? apparmor_capable+0x12c/0x190 [ 1645.285003][T29450] ? full_name_hash+0x8e/0xe0 [ 1645.289684][T29450] ? dev_load+0x1d/0x1e0 [ 1645.294199][T29450] ? dev_load+0x1d/0x1e0 [ 1645.298525][T29450] dev_ioctl+0x578/0xea0 [ 1645.302889][T29450] sock_do_ioctl+0x222/0x2f0 [ 1645.307746][T29450] ? sock_show_fdinfo+0xb0/0xb0 [ 1645.313010][T29450] sock_ioctl+0x4ed/0x6e0 [ 1645.317794][T29450] ? sock_poll+0x3f0/0x3f0 [ 1645.323076][T29450] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1645.328296][T29450] ? security_file_ioctl+0x7c/0xa0 [ 1645.333665][T29450] ? sock_poll+0x3f0/0x3f0 [ 1645.338094][T29450] __se_sys_ioctl+0xfa/0x170 [ 1645.342946][T29450] do_syscall_64+0x4c/0xa0 [ 1645.347708][T29450] ? clear_bhb_loop+0x60/0xb0 [ 1645.352446][T29450] ? clear_bhb_loop+0x60/0xb0 [ 1645.357219][T29450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1645.363291][T29450] RIP: 0033:0x7fc42918ebe9 [ 1645.367786][T29450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.387745][T29450] RSP: 002b:00007fc429f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1645.397320][T29450] RAX: ffffffffffffffda RBX: 00007fc4293b6090 RCX: 00007fc42918ebe9 [ 1645.406118][T29450] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 000000000000000a [ 1645.416015][T29450] RBP: 00007fc429f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.427161][T29450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.436450][T29450] R13: 00007fc4293b6128 R14: 00007fc4293b6090 R15: 00007ffceab8a2e8 [ 1645.446181][T29450] [ 1645.592913][T29458] netlink: 'syz.7.8559': attribute type 10 has an invalid length. [ 1645.613056][T29458] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8559'. [ 1645.720266][T29463] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8556'. [ 1645.812317][T29463] delete_channel: no stack [ 1645.844479][T29463] delete_channel: no stack [ 1646.045170][T29458] netlink: 'syz.7.8559': attribute type 10 has an invalid length. [ 1646.064306][T29458] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8559'. [ 1646.382072][T29479] netlink: 'syz.5.8575': attribute type 10 has an invalid length. [ 1646.458988][T29479] netlink: 'syz.5.8575': attribute type 10 has an invalid length. [ 1646.596294][T29482] netlink: 'syz.7.8565': attribute type 10 has an invalid length. [ 1646.669835][T29482] team0: Device xfrm0 is of different type [ 1646.724896][T29489] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1647.920259][T29520] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1647.959385][T29519] netlink: 'syz.3.8581': attribute type 10 has an invalid length. [ 1647.992115][T29519] __nla_validate_parse: 2 callbacks suppressed [ 1647.992130][T29519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1648.058340][T29529] device wlan0 entered promiscuous mode [ 1648.079919][T29519] netlink: 'syz.3.8581': attribute type 10 has an invalid length. [ 1648.141681][T29519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1648.196814][T29531] netlink: 'syz.6.8585': attribute type 10 has an invalid length. [ 1648.227735][T29531] team0: Device xfrm0 is of different type [ 1648.642328][T29544] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1648.650275][T29544] #PF: supervisor instruction fetch in kernel mode [ 1648.657416][T29544] #PF: error_code(0x0010) - not-present page [ 1648.664382][T29544] PGD 23478067 P4D 23478067 PUD 0 [ 1648.669792][T29544] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1648.675179][T29544] CPU: 0 PID: 29544 Comm: syz.7.8591 Not tainted 6.1.147-syzkaller #0 [ 1648.683985][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1648.694974][T29544] RIP: 0010:0x0 [ 1648.698567][T29544] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1648.706206][T29544] RSP: 0018:ffffc90004f67398 EFLAGS: 00010246 [ 1648.712377][T29544] RAX: 1ffffffff16571b7 RBX: 000000000000000f RCX: 0000000000000000 [ 1648.720707][T29544] RDX: ffffc90004f67440 RSI: 0000000000000001 RDI: ffff88807ea9c000 [ 1648.729308][T29544] RBP: ffffc90004f674b0 R08: dffffc0000000000 R09: ffffed100fd53808 [ 1648.737762][T29544] R10: ffffed100fd53808 R11: 1ffff1100fd53807 R12: ffffe8ffff81ade8 [ 1648.746220][T29544] R13: ffffffff8b2b8db8 R14: 0000000000000000 R15: ffff88807ea9c000 [ 1648.755277][T29544] FS: 00007fa83c5196c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1648.764553][T29544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.771328][T29544] CR2: ffffffffffffffd6 CR3: 0000000075999000 CR4: 00000000003506f0 [ 1648.779506][T29544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1648.788106][T29544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1648.796279][T29544] Call Trace: [ 1648.799675][T29544] [ 1648.802792][T29544] bond_xdp_xmit+0x309/0x520 [ 1648.807709][T29544] ? bond_xdp_xmit+0x93/0x520 [ 1648.812774][T29544] ? bond_xdp+0x840/0x840 [ 1648.817133][T29544] bq_xmit_all+0xc99/0x10d0 [ 1648.821859][T29544] ? __dev_flush+0x1b0/0x1b0 [ 1648.826570][T29544] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1648.832489][T29544] ? perf_trace_preemptirq_template+0x287/0x330 [ 1648.839374][T29544] ? irqentry_enter+0x33/0x50 [ 1648.844093][T29544] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1648.850274][T29544] ? lock_chain_count+0x20/0x20 [ 1648.855784][T29544] bq_enqueue+0x337/0x3d0 [ 1648.860315][T29544] dev_map_enqueue+0x1b4/0x340 [ 1648.865185][T29544] xdp_do_redirect_frame+0x30c/0x650 [ 1648.870503][T29544] bpf_test_run_xdp_live+0x9dd/0x1970 [ 1648.876004][T29544] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 1648.881574][T29544] ? xdp_convert_md_to_buff+0x330/0x330 [ 1648.887434][T29544] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1648.893979][T29544] ? bpf_test_init+0x134/0x150 [ 1648.898952][T29544] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1648.904702][T29544] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 1648.910192][T29544] ? dev_put+0x80/0x80 [ 1648.914470][T29544] ? dev_put+0x80/0x80 [ 1648.919028][T29544] bpf_prog_test_run+0x31e/0x390 [ 1648.924156][T29544] __sys_bpf+0x593/0x6d0 [ 1648.928431][T29544] ? bpf_link_show_fdinfo+0x340/0x340 [ 1648.934111][T29544] ? lock_chain_count+0x20/0x20 [ 1648.939698][T29544] __x64_sys_bpf+0x78/0x90 [ 1648.944584][T29544] do_syscall_64+0x4c/0xa0 [ 1648.949206][T29544] ? clear_bhb_loop+0x60/0xb0 [ 1648.954193][T29544] ? clear_bhb_loop+0x60/0xb0 [ 1648.959675][T29544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.966486][T29544] RIP: 0033:0x7fa83b78ebe9 [ 1648.971121][T29544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.992422][T29544] RSP: 002b:00007fa83c519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1649.001042][T29544] RAX: ffffffffffffffda RBX: 00007fa83b9b5fa0 RCX: 00007fa83b78ebe9 [ 1649.009365][T29544] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1649.017740][T29544] RBP: 00007fa83b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1649.026082][T29544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.034541][T29544] R13: 00007fa83b9b6038 R14: 00007fa83b9b5fa0 R15: 00007fffc298abd8 [ 1649.043234][T29544] [ 1649.046473][T29544] Modules linked in: [ 1649.050569][T29544] CR2: 0000000000000000 [ 1649.055276][T29544] ---[ end trace 0000000000000000 ]--- [ 1649.061177][T29544] RIP: 0010:0x0 [ 1649.064639][T29544] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1649.072167][T29544] RSP: 0018:ffffc90004f67398 EFLAGS: 00010246 [ 1649.078321][T29544] RAX: 1ffffffff16571b7 RBX: 000000000000000f RCX: 0000000000000000 [ 1649.086387][T29544] RDX: ffffc90004f67440 RSI: 0000000000000001 RDI: ffff88807ea9c000 [ 1649.095324][T29544] RBP: ffffc90004f674b0 R08: dffffc0000000000 R09: ffffed100fd53808 [ 1649.103390][T29544] R10: ffffed100fd53808 R11: 1ffff1100fd53807 R12: ffffe8ffff81ade8 [ 1649.112501][T29544] R13: ffffffff8b2b8db8 R14: 0000000000000000 R15: ffff88807ea9c000 [ 1649.121106][T29544] FS: 00007fa83c5196c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1649.131188][T29544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1649.137958][T29544] CR2: ffffffffffffffd6 CR3: 0000000075999000 CR4: 00000000003506f0 [ 1649.146023][T29544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1649.153996][T29544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1649.162615][T29544] Kernel panic - not syncing: Fatal exception in interrupt [ 1649.170753][T29544] Kernel Offset: disabled [ 1649.175573][T29544] Rebooting in 86400 seconds..