last executing test programs: 5m4.940263147s ago: executing program 3 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff765802005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m3.544890884s ago: executing program 3 (id=571): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8, 0x12) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x7a, 0x7, 0xc, 0x0, 0x6, 0x8080, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8e3f, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x2020, 0x5, 0x8, 0x8, 0x7, 0x1, 0x2, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x7, 0xc0, 0x81, 0x0, 0x100000001, 0x2411, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa7, 0x0, @perf_config_ext={0xab}, 0x800, 0xffffffffffffffaa, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2, 0x0, 0x6}, r1, 0x2, r2, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r5, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0), 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xc6, 0xbb, &(0x7f00000003c0)="88a85b840998bd9fd102518c361e14c31c6f60fb1f58f77489e16dabbef66fe3da2e54dcd0bbf3e586fcb03c20495311a2894fa1cb0d5b0ea83f050c1112176927f6b445e10f121a72ae2a017394e5eb793bcccdcd98c03c05a0f88dfbe480fae80bfa07ea19aa24d503edf9862d39f75d282fdb5b4ad803223839304b1c156a6ce0d11bc246d0d30a2f0db8f0a2b7cc5e7cdd485f5e88a522191caf49e962d21fb9de019ec5bbc9af3ff65ceeed2bc1df461f648b614e75c3b4042b95e87f737b279e4bd748", &(0x7f00000004c0)=""/187, 0x1, 0x0, 0xed, 0xb7, &(0x7f0000000580)="8f6d2d966cb989486d078386aeeebc87926a7e31ded33b7040f7ee50a0a689a750c5b1b23e90715f02ea71d5b4339b44d108f7886d127edcdd61f1c593845ca4349a6f8822c34674a62a9789864258d805e2b9171d9ea669638695cd451fc12ea125066d55200739eada6f6443b8d48324058050d6cba16c65f0ec2e68129f32aab3baad9bd4fd8882db463c4e1b21078cdc0b3665bd35adfbde6b43091e29b407245c3f57a435dae74ef1906f3368f571ab10d8ae8731fdc85a0b12daa8344ffa5cf58146ae1199750d42a64116d6a6b14f4df5940fc5a134dfb91c915f2492ce258b8a21635385852b7f8bba", &(0x7f0000000680)="dbc6024058c60c19549a6e9e26c7403ed9c725da233b0537df1a79cddff3423605e38db37436a928fca61e1b988e0d9f1ccddc4dadcc30c75f64fcc7f8783f3953e9fdbd69c357cb28247210ab69ba62600b2a89e639b8d9ae58fde46692394edeb509a02fa56cfb73e95acc4eb163752d9bdb0b98ed10121b0f0834fe71ada345632aaea8bd40c3deb8c820bfc067c9b72e86ca83208246675af5b2b6116d243b43705a7e9e268abea0ef0958bd7b1d27e4d37fc0472b", 0x1, 0x0, 0x1ff}, 0x50) r8 = openat$cgroup_type(r1, &(0x7f00000007c0), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000800), 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x907, '\x00', 0x0, r7, 0x0, 0x1, 0x2}, 0x50) r10 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r10, &(0x7f0000000b80)={&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/129, 0x81}], 0x3}, 0x6002) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000bc0)=r7) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%ps \x00'}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r3}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004280)={&(0x7f0000000d40)=@nfc, 0x80, &(0x7f0000004180)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/76, 0x4c}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/124, 0x7c}, {&(0x7f0000003ec0)=""/65, 0x41}, {&(0x7f0000003f40)=""/234, 0xea}, {&(0x7f0000004040)=""/242, 0xf2}, {&(0x7f0000004140)=""/8, 0x8}], 0x9, &(0x7f0000004240)=""/2, 0x2}, 0x40000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000042c0)={r6}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000044c0)={r11, 0x58, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000004600)={&(0x7f0000004300)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004400)=[{&(0x7f0000004340)="f7ecbecb6927135c010382dae35900429c2e88382b039a515fe43b34c86bab094f7248b735d84bcec6f7736ac7f58f3a8d361c1dcfaecaaccc10e1cd5f84372249eff6e6ff7db20a8cda86ac49c0c0ac02e1ea8022120897c8a955c3bcf87a860f9cbdb506d258211bc16ce767b57e2c96e54467206039e50ebd6544fd389d2d95dbabb8a53d871b70619458c84afa388ac186b60e237828af26c41cdbec95df2e79cc9e7035be03", 0xa8}], 0x1, &(0x7f0000004500)=[@ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0xb, [{@empty, 0xc}, {@broadcast}, {@empty, 0x6}, {@remote, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x4}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xe2}, {@local, 0x1}]}, @lsrr={0x83, 0xf, 0xf5, [@rand_addr=0x64010100, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xb, "cbcf5a9c7efc1cacc0"}, @timestamp_addr={0x44, 0x34, 0xa0, 0x1, 0x7, [{@private=0xa010100, 0x7}, {@broadcast, 0xfffff666}, {@local, 0x7ff}, {@multicast2, 0xbe5}, {@empty}, {@rand_addr=0x64010102, 0x7}]}, @timestamp={0x44, 0x18, 0x54, 0x0, 0x0, [0x1cec, 0x4, 0x400, 0x9, 0x7fff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010101, @remote}}}], 0xe8}, 0x804) close(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004640)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x2, '\x00', r12, 0xffffffffffffffff, 0x4, 0x5}, 0x50) 5m2.617052062s ago: executing program 3 (id=589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000200000000000000000000000000000273678f3bf90b9d6939e760b8fe7ede8175e50666550e32a2f6d9d666ee8f395461270cc4256eedb259ad55114b55a8a0d990e5ccdfc41e6c8ab76ea36ec86d036675f7b3a855c3bc8e4c033ac4de949dc49c5377385f01f8439b813c100"/121, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000c0ff0000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x7, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180200000100000000000000000300008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711828000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xf7, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1d, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0xb, 0x2, 0x5, 0xffffffffffffffff, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}], {{}, {}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0x34, &(0x7f0000000300)=""/52, 0x40f00, 0x1, '\x00', r8, @lsm=0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x3, 0xd, 0x0, 0x8}, 0x10, 0x0, r4, 0x1, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x4, 0x3, 0xf, 0xc}], 0x10, 0x8}, 0x94) write$cgroup_freezer_state(r7, &(0x7f00000001c0)='FREEZING\x00', 0x9) 5m2.289138828s ago: executing program 3 (id=595): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007012300f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m2.18185094s ago: executing program 3 (id=597): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000079500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m1.780935668s ago: executing program 3 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5m1.452317675s ago: executing program 32 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.450801973s ago: executing program 2 (id=3347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0xc0, 0x0, 0x9, 0x0, 0x10000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x8}, 0xa100, 0xc8, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x1e, 0x4, 0x0) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f00000000c0)="f7c6f9c29124d0344c514f3c381a854d3933dbb2abf51ab389254783e13b845d727329f47192ac91950f679c57a7206634ffcc5d0a7484d98e9e3d5fcb72984ef4d1298f2f9c874aee8e", &(0x7f0000000240)=""/87}, 0x20) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) r6 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x28, 0x8, 0x0, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1, 0x0, 0x20}, 0x10021) (async) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1, 0x0, 0x20}, 0x10021) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75, r1}, 0x38) r7 = socket$kcm(0x18, 0x7, 0x2) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8080) recvmsg$unix(r0, 0x0, 0x0) (async) recvmsg$unix(r0, 0x0, 0x0) 4.343167915s ago: executing program 0 (id=3349): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000020040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.164456209s ago: executing program 4 (id=3350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3158c3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) 3.996003572s ago: executing program 0 (id=3351): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000060000000002000040"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="070000000000000000000000bd700e9a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000090000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000100000000000000000002583076098a404359500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) 3.829168146s ago: executing program 2 (id=3352): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x95f7}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffb, 0x60, &(0x7f0000000240)=""/96, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x8001, 0xc60}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x4, 0x4, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) close(0x3) 3.661598559s ago: executing program 4 (id=3355): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/24, 0x18, 0x0, &(0x7f0000000340)=""/139, 0x8b}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000005c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@map, r3, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="29000000250005000000b62c8200eb1405000000a48cdfb11301b355", 0x1c}, {&(0x7f0000000580)="1c7e17c4b3dfa62dd13c405faf", 0xd}], 0x2}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) 3.465601613s ago: executing program 2 (id=3356): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast1}, 0x2, 0x1, 0x1, 0x2}}, 0x80, 0x0}, 0x24000043) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r7, 0x0, 0x2, 0x0) getpid() recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000010) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000020000000200000012000000200000000000000b"], 0x0, 0x5a}, 0x28) 3.258634386s ago: executing program 0 (id=3357): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x2, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r6) socketpair(0x11, 0x6, 0xe, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r11) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) socketpair(0x20, 0x0, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000"], 0x33fe0) 3.257721057s ago: executing program 4 (id=3359): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (fail_nth: 6) 2.666713628s ago: executing program 2 (id=3360): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000008202000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x400, 0x880, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2.513095791s ago: executing program 1 (id=3361): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8516, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xc) 2.482104752s ago: executing program 4 (id=3362): socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x864) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000060000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 2.460368072s ago: executing program 0 (id=3363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3158c3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) 2.361140404s ago: executing program 2 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYRES16=r2, @ANYRES16=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB="0040070000000000000000300c18c9d500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r9, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x161) close(r2) sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="be30d36f74cd536a79bdab2309274e79", 0x10}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x4004000) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.274007876s ago: executing program 4 (id=3366): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/24, 0x18, 0x0, &(0x7f0000000340)=""/139, 0x8b}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000005c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@map, r3, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="29000000250005000000b62c8200eb1405000000a48cdfb11301b355", 0x1c}, {&(0x7f0000000580)="1c7e17c4b3dfa62dd13c405faf", 0xd}], 0x2}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) 2.158392258s ago: executing program 0 (id=3367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000301000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd21, 0x10, 0x0, 0xfffffffffffffd15}, 0x23) 1.889041823s ago: executing program 4 (id=3368): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000060000000002000040"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="070000000000000000000000bd700e9a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000090000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000100000000000000000002583076098a404359500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) 1.53834126s ago: executing program 33 (id=3368): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000060000000002000040"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="070000000000000000000000bd700e9a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000090000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000100000000000000000002583076098a404359500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) 1.511276301s ago: executing program 0 (id=3370): socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="200000002000ff07090f9becdb4cb96b0a000000ff000001000000007bffd290", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 1.301074664s ago: executing program 34 (id=3370): socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="200000002000ff07090f9becdb4cb96b0a000000ff000001000000007bffd290", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 1.290669735s ago: executing program 1 (id=3371): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401000535", 0x1e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110040", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)='wvh', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x33) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0}, 0x18) 1.04122067s ago: executing program 2 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008558020007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 682.064817ms ago: executing program 35 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008558020007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 666.531067ms ago: executing program 1 (id=3374): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast1}, 0x2, 0x1, 0x1, 0x2}}, 0x80, 0x0}, 0x24000043) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r7, 0x0, 0x2, 0x0) getpid() recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000010) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000020000000200000012000000210000000000000b"], 0x0, 0x5a}, 0x28) 411.783202ms ago: executing program 1 (id=3375): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006620020000000000180000000000000000fff800000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0xc9, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", &(0x7f0000000100)}, 0x50) 229.009825ms ago: executing program 1 (id=3376): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/24, 0x18, 0x0, &(0x7f0000000340)=""/139, 0x8b}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={0x0, 0x0, 0x56}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000005c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@map, r3, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="29000000250005000000b62c8200eb1405000000a48cdfb11301b355", 0x1c}, {&(0x7f0000000580)="1c7e17c4b3dfa62dd13c405faf", 0xd}], 0x2}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) 0s ago: executing program 1 (id=3378): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa000000}, 0x94) kernel console output (not intermixed with test programs): 8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.472306][T10115] RSP: 002b:00007f0732bb1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.480852][T10115] RAX: ffffffffffffffda RBX: 00007f0731fd5fa0 RCX: 00007f0731d8d5bc [ 230.488861][T10115] RDX: 000000000000000f RSI: 00007f0732bb10a0 RDI: 0000000000000005 [ 230.496869][T10115] RBP: 00007f0732bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 230.504968][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.512974][T10115] R13: 00007f0731fd6038 R14: 00007f0731fd5fa0 R15: 00007ffc40870478 [ 230.521035][T10115] [ 230.920395][T10131] netlink: 'syz.2.1638': attribute type 29 has an invalid length. [ 230.931762][T10131] netlink: 'syz.2.1638': attribute type 3 has an invalid length. [ 230.945235][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1638'. [ 230.960394][T10131] netlink: 'syz.2.1638': attribute type 21 has an invalid length. [ 230.974824][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1638'. [ 230.988172][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 231.028624][T10131] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1638'. [ 231.474470][T10139] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1641'. [ 231.587463][T10139] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1641'. [ 231.599306][T10141] sit0: left promiscuous mode [ 231.634393][T10139] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 231.720260][T10141] tap0: tun_chr_ioctl cmd 1074025692 [ 231.729190][T10141] sit0: entered promiscuous mode [ 232.589766][T10168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1654'. [ 232.672072][T10168] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1654'. [ 232.691607][T10168] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 232.956032][T10183] netlink: 'syz.1.1660': attribute type 27 has an invalid length. [ 232.963999][T10183] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1660'. [ 233.009101][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.455056][ T5788] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 234.756395][T10255] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1684'. [ 234.784444][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.809355][T10254] netlink: 'syz.1.1689': attribute type 5 has an invalid length. [ 234.842242][T10254] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 235.447992][T10287] raw_sendmsg: syz.1.1702 forgot to set AF_INET. Fix it! [ 236.827710][T10329] veth0_vlan: entered allmulticast mode [ 236.994950][T10332] veth0_vlan: left promiscuous mode [ 237.020207][T10332] veth0_vlan: entered promiscuous mode [ 237.082462][T10332] netlink: 'syz.4.1720': attribute type 3 has an invalid length. [ 237.108685][T10332] netlink: 'syz.4.1720': attribute type 5 has an invalid length. [ 237.748631][T10352] __nla_validate_parse: 1 callbacks suppressed [ 237.748650][T10352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1728'. [ 237.797788][T10352] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1728'. [ 237.822045][T10352] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 238.634360][T10377] syzkaller0: entered promiscuous mode [ 238.639890][T10377] syzkaller0: entered allmulticast mode [ 238.699707][T10383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1739'. [ 238.798023][T10383] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1739'. [ 238.823167][T10383] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 239.573593][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 239.878147][T10418] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1753'. [ 239.929455][T10418] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1753'. [ 239.962140][T10418] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 240.152588][T10429] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.271080][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.358793][T10429] netlink: 'syz.1.1757': attribute type 21 has an invalid length. [ 240.378809][T10429] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.870198][T10457] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1765'. [ 240.985480][T10457] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 241.514066][T10484] netlink: 'syz.4.1776': attribute type 2 has an invalid length. [ 241.862528][T10494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 243.765496][T10570] __nla_validate_parse: 18 callbacks suppressed [ 243.765519][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 243.834054][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 243.852355][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 243.876900][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 244.166707][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1820'. [ 244.258173][T10588] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.268107][T10592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1823'. [ 244.325750][T10592] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1823'. [ 244.353295][T10592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 244.451584][T10600] netlink: 'syz.4.1826': attribute type 9 has an invalid length. [ 244.473397][T10600] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1826'. [ 250.252107][T10625] netlink: 'syz.4.1837': attribute type 39 has an invalid length. [ 250.281575][T10625] veth0_macvtap: left promiscuous mode [ 250.911149][T10652] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 251.043981][T10652] veth0_vlan: left promiscuous mode [ 251.051999][T10652] veth0_vlan: entered promiscuous mode [ 251.098489][T10652] team0: Device veth0_vlan failed to register rx_handler [ 251.311759][T10665] netlink: 'syz.1.1852': attribute type 2 has an invalid length. [ 251.434909][T10667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1855'. [ 251.487626][T10667] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1855'. [ 251.507553][T10667] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 252.386827][T10708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1868'. [ 252.442752][T10708] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1868'. [ 252.459070][T10708] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 252.740145][T10724] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1876'. [ 252.855143][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 252.866726][T10728] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1879'. [ 252.890915][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 252.956809][T10728] netlink: 'syz.2.1879': attribute type 21 has an invalid length. [ 253.025554][T10728] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1879'. [ 253.341166][T10741] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1885'. [ 253.378650][T10741] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1885'. [ 253.391567][T10741] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 254.170619][T10759] netlink: 'syz.0.1891': attribute type 21 has an invalid length. [ 254.477947][T10766] netlink: 'syz.0.1895': attribute type 3 has an invalid length. [ 254.983831][T10783] netlink: zone id is out of range [ 254.989759][T10783] netlink: zone id is out of range [ 255.044266][T10783] netlink: zone id is out of range [ 255.049444][T10783] netlink: zone id is out of range [ 255.077976][T10783] netlink: zone id is out of range [ 255.084417][T10783] netlink: zone id is out of range [ 255.090657][T10783] netlink: del zone limit has 8 unknown bytes [ 255.420932][T10794] netlink: 'syz.1.1904': attribute type 21 has an invalid length. [ 255.899192][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909793][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.680987][T10831] __nla_validate_parse: 13 callbacks suppressed [ 256.681004][T10831] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1916'. [ 256.706016][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 256.727434][T10831] netlink: 'syz.0.1916': attribute type 21 has an invalid length. [ 256.737817][T10831] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1916'. [ 257.906945][T10856] netlink: 'syz.2.1926': attribute type 3 has an invalid length. [ 257.915315][T10856] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1926'. [ 257.979406][T10858] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 258.013261][T10858] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1934'. [ 258.491305][T10872] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1929'. [ 258.529473][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 258.579222][T10872] netlink: 'syz.1.1929': attribute type 21 has an invalid length. [ 258.603882][T10872] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1929'. [ 258.890858][T10882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1933'. [ 258.905545][T10881] netlink: 'syz.0.1932': attribute type 10 has an invalid length. [ 258.934254][T10881] batman_adv: batadv0: Adding interface: wlan0 [ 258.940470][T10882] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1933'. [ 258.961042][T10882] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 258.976275][T10881] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.026702][T10881] batman_adv: batadv0: Interface activated: wlan0 [ 259.174546][T10887] netlink: 'syz.0.1932': attribute type 29 has an invalid length. [ 259.192013][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 259.200109][T10887] netlink: 'syz.0.1932': attribute type 29 has an invalid length. [ 259.454658][T10897] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 259.974177][T10911] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 260.479637][T10927] netlink: 'syz.1.1951': attribute type 3 has an invalid length. [ 260.589878][ T5793] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 262.432828][T10980] __nla_validate_parse: 7 callbacks suppressed [ 262.432844][T10980] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1975'. [ 262.556472][T10980] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1975'. [ 262.607670][T10980] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 263.957408][T11023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1991'. [ 264.045511][T11023] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1991'. [ 264.062252][T11023] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 264.386198][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1994'. [ 264.408471][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1994'. [ 264.435599][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1994'. [ 264.450649][T11036] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1995'. [ 264.475025][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 264.887254][T11060] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2003'. [ 264.914994][T11060] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 266.415021][T11095] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 267.919007][T11112] __nla_validate_parse: 4 callbacks suppressed [ 267.919026][T11112] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2023'. [ 269.258320][T11093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2015'. [ 269.272184][T11107] netlink: 'syz.0.2021': attribute type 21 has an invalid length. [ 269.280243][T11107] netlink: 'syz.0.2021': attribute type 20 has an invalid length. [ 269.292998][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'. [ 269.493852][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.514406][T11124] bridge0: entered allmulticast mode [ 269.540584][T11124] bridge_slave_1: left allmulticast mode [ 269.553897][T11124] bridge_slave_1: left promiscuous mode [ 269.564191][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.639686][T11132] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2031'. [ 269.993276][T11143] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2033'. [ 270.032573][T11143] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2033'. [ 270.053534][T11143] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 270.379021][T11151] netlink: 'syz.4.2038': attribute type 6 has an invalid length. [ 270.423071][T11151] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2038'. [ 270.641611][T11158] netlink: 'syz.0.2041': attribute type 10 has an invalid length. [ 270.672693][T11158] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2041'. [ 270.991671][T11169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2046'. [ 271.061437][T11169] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2046'. [ 271.183129][T11169] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 272.285817][T11211] pim6reg1: entered promiscuous mode [ 272.291173][T11211] pim6reg1: entered allmulticast mode [ 272.763744][T11226] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 272.771836][T11226] netlink: 'syz.4.2067': attribute type 19 has an invalid length. [ 273.079697][T11238] __nla_validate_parse: 4 callbacks suppressed [ 273.079716][T11238] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2072'. [ 273.098260][T11240] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2073'. [ 273.128092][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 273.871270][T11271] netlink: 'syz.1.2084': attribute type 10 has an invalid length. [ 273.882694][T11271] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2084'. [ 274.017749][T11278] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2088'. [ 274.027947][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 274.317760][T11293] netlink: 'syz.0.2094': attribute type 9 has an invalid length. [ 274.346944][T11293] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2094'. [ 274.429689][T11294] netlink: 'syz.0.2094': attribute type 9 has an invalid length. [ 274.439143][T11294] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2094'. [ 274.596043][T11298] bridge0: port 4(bond0) entered disabled state [ 274.603089][T11298] bridge0: port 3(batadv0) entered disabled state [ 274.610130][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.617791][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.664707][T11298] bridge0: entered allmulticast mode [ 274.692821][T11299] bond0: left allmulticast mode [ 274.716549][T11299] bond_slave_0: left allmulticast mode [ 274.742616][T11299] bond_slave_1: left allmulticast mode [ 274.770283][T11299] bridge0: port 4(bond0) entered disabled state [ 274.816265][T11299] bridge0: port 3(batadv0) entered disabled state [ 274.863910][T11299] bridge_slave_1: left allmulticast mode [ 274.893125][T11299] bridge_slave_1: left promiscuous mode [ 274.902431][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.931624][T11299] bridge_slave_0: left allmulticast mode [ 274.961427][T11299] bridge_slave_0: left promiscuous mode [ 274.980051][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.460144][T11314] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2103'. [ 275.503843][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 275.613576][T11318] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 276.062552][T11338] netlink: 'syz.0.2114': attribute type 10 has an invalid length. [ 276.075426][T11338] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 276.100326][T11338] pim6reg: tun_chr_ioctl cmd 2147767517 [ 276.234376][T11342] C: renamed from team_slave_0 [ 276.254833][T11342] netlink: 'syz.1.2116': attribute type 8 has an invalid length. [ 276.273042][T11342] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.326147][T11342] netlink: 'syz.1.2116': attribute type 21 has an invalid length. [ 276.343709][T11342] netlink: 'syz.1.2116': attribute type 21 has an invalid length. [ 276.453178][T11349] netlink: 'syz.4.2119': attribute type 3 has an invalid length. [ 277.234540][T11377] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 277.286317][T11377] team0: Port device netdevsim0 added [ 277.323109][T11377] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 277.389540][T11377] team0: Port device netdevsim0 removed [ 277.404792][T11384] netlink: 'syz.2.2133': attribute type 153 has an invalid length. [ 277.426246][T11377] : (slave netdevsim0): Enslaving as an active interface with an up link [ 280.576176][T11463] __nla_validate_parse: 6 callbacks suppressed [ 280.576194][T11463] netlink: 164316 bytes leftover after parsing attributes in process `syz.0.2164'. [ 280.636830][T11463] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 280.654513][T11463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.765492][T11474] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2168'. [ 280.801706][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 280.848493][T11478] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 280.924388][T11478] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 280.938152][T11478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 280.958065][T11480] netlink: 'syz.4.2171': attribute type 21 has an invalid length. [ 280.987391][T11480] netlink: 'syz.4.2171': attribute type 6 has an invalid length. [ 281.012256][T11480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2171'. [ 281.243490][T11494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2176'. [ 281.292025][T11494] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2176'. [ 281.306546][T11494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 281.857088][T11518] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2186'. [ 281.913145][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 282.084247][T11525] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2188'. [ 282.208231][T11528] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2188'. [ 282.235291][T11528] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 282.947365][T11563] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 282.966258][T11563] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 283.001095][T11566] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 283.060638][T11563] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 283.095034][T11563] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 286.332096][T11660] netlink: 'syz.1.2240': attribute type 10 has an invalid length. [ 286.340806][T11660] batman_adv: batadv0: Adding interface: wlan0 [ 286.371590][T11660] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.423096][T11660] batman_adv: batadv0: Interface activated: wlan0 [ 286.432533][T11666] netlink: 'syz.1.2240': attribute type 29 has an invalid length. [ 286.460641][T11666] netlink: 'syz.1.2240': attribute type 29 has an invalid length. [ 289.119228][T11693] netlink: 'syz.1.2253': attribute type 9 has an invalid length. [ 289.143044][T11693] __nla_validate_parse: 1 callbacks suppressed [ 289.143060][T11693] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2253'. [ 290.394061][T11692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.744295][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.754200][T11723] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2264'. [ 291.763748][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.773881][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.803885][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.812333][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.820092][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.029384][ T170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.212722][ T170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.242296][T11732] bridge0: port 3(gretap0) entered blocking state [ 292.255161][T11732] bridge0: port 3(gretap0) entered disabled state [ 292.261845][T11732] gretap0: entered allmulticast mode [ 292.272867][T11732] gretap0: entered promiscuous mode [ 292.278869][T11732] bridge0: port 3(gretap0) entered blocking state [ 292.285491][T11732] bridge0: port 3(gretap0) entered forwarding state [ 292.307853][T11735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2267'. [ 292.339918][ T170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.543508][ T170] bond0: (slave netdevsim0): Releasing backup interface [ 292.552844][ T170] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 292.563377][ T170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.661495][T11725] chnl_net:caif_netlink_parms(): no params data found [ 293.138463][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.156550][T11725] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.173488][T11725] bridge_slave_0: entered allmulticast mode [ 293.180842][T11725] bridge_slave_0: entered promiscuous mode [ 293.190655][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.198160][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.205568][T11725] bridge_slave_1: entered allmulticast mode [ 293.214140][T11725] bridge_slave_1: entered promiscuous mode [ 293.401763][T11725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.420754][T11725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.868162][T11725] team0: Port device team_slave_0 added [ 293.882753][T11725] team0: Port device team_slave_1 added [ 293.893271][ T5788] Bluetooth: hci3: command tx timeout [ 293.924039][T11785] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.2282'. [ 293.942844][T11785] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 294.062773][T11785] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 294.124485][T11786] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 294.163803][T11725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.182974][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.263214][T11725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.297100][T11725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.325267][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.396679][T11725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.527372][T11785] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 294.569884][T11786] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 294.814728][T11725] hsr_slave_0: entered promiscuous mode [ 294.822120][T11725] hsr_slave_1: entered promiscuous mode [ 294.849848][T11725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.861016][T11725] Cannot create hsr debugfs directory [ 295.102740][ T170] erspan0 (unregistering): left allmulticast mode [ 295.144439][ T170] erspan0 (unregistering): left promiscuous mode [ 295.150908][ T170] GPL: port 1(erspan0) entered disabled state [ 295.975802][ T5788] Bluetooth: hci3: command tx timeout [ 296.752444][ T170] hsr_slave_0: left promiscuous mode [ 296.818923][ T170] hsr_slave_1: left promiscuous mode [ 296.860704][ T170] batman_adv: batadv0: Removing interface: team0 [ 296.954801][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.962252][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.055374][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.062824][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.238443][ T170] veth1_macvtap: left promiscuous mode [ 297.288860][ T170] veth1_vlan: left allmulticast mode [ 297.328813][ T170] veth1_vlan: left promiscuous mode [ 297.381442][ T170] veth0_vlan: left promiscuous mode [ 297.990352][ T170] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 298.059110][ T5788] Bluetooth: hci3: command tx timeout [ 298.691333][ T170] team0 (unregistering): Port device team_slave_1 removed [ 298.904744][ T170] team0 (unregistering): Port device team_slave_0 removed [ 299.050655][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.081388][ T170] bond_slave_1 (unregistering): left promiscuous mode [ 299.161667][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.180426][ T170] bond_slave_0 (unregistering): left promiscuous mode [ 300.142805][ T5788] Bluetooth: hci3: command tx timeout [ 300.479690][ T170] bond0 (unregistering): Released all slaves [ 300.526122][T11823] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2291'. [ 301.209254][T11725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.283759][T11725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.308191][T11725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.336111][T11725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.384741][T11841] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2300'. [ 301.394255][T11841] team0: default FDB implementation only supports local addresses [ 301.632258][T11725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.687407][T11725] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.721014][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.728258][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.790086][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.797361][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.320582][T11725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.390718][T11863] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 302.407451][T11863] team0: Port device dummy0 added [ 302.467432][T11859] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 302.519753][T11859] team0: Port device dummy0 removed [ 302.561647][T11859] : (slave dummy0): Enslaving as an active interface with an up link [ 302.620969][T11872] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2306'. [ 302.690027][T11725] veth0_vlan: entered promiscuous mode [ 302.754538][T11725] veth1_vlan: entered promiscuous mode [ 302.799718][T11725] veth0_macvtap: entered promiscuous mode [ 302.819122][T11725] veth1_macvtap: entered promiscuous mode [ 302.988719][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.004404][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.015026][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.026234][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.051908][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.062531][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.074483][T11725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.094991][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.116274][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.142955][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.168088][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.194995][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.239516][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.320509][T11725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.457477][T11725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.470059][T11725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.479274][T11725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.488540][T11725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.832604][T11725] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 303.844138][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.854242][T11725] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 303.865250][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.915133][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.934621][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.978857][T11894] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 303.984770][T11886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2310'. [ 303.995101][T11894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2313'. [ 304.025513][T11894] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.062000][T11897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 304.090604][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.107022][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.208127][T11903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2261'. [ 304.261308][T11903] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2261'. [ 304.271717][T11903] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 304.979699][T11926] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.2324'. [ 305.001763][T11928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2326'. [ 305.048680][T11928] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2326'. [ 305.067565][T11928] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 305.438247][T11941] netlink: 'syz.2.2331': attribute type 9 has an invalid length. [ 305.556993][T11941] netlink: 'syz.2.2331': attribute type 9 has an invalid length. [ 305.633279][T11941] __nla_validate_parse: 1 callbacks suppressed [ 305.633298][T11941] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2331'. [ 305.945539][T11953] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2337'. [ 305.959814][T11954] sit0: entered promiscuous mode [ 305.981231][T11953] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2337'. [ 305.994412][T11954] sit0: entered allmulticast mode [ 306.020901][T11953] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 307.119979][T11972] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 307.195079][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.204562][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.212846][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.221039][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.226031][T11972] team0: Port device dummy0 added [ 307.249424][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.259154][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.260057][T11978] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 307.389634][T11978] team0: Port device dummy0 removed [ 307.409160][T11978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.806737][ T6595] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.905033][T11989] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2348'. [ 307.952767][T11989] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2348'. [ 307.963861][T11989] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 307.993394][ T6595] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.143781][ T6595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.269376][ T6595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.544653][T11977] chnl_net:caif_netlink_parms(): no params data found [ 309.036138][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.061264][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.097641][T11977] bridge_slave_0: entered allmulticast mode [ 309.125641][T11977] bridge_slave_0: entered promiscuous mode [ 309.333275][ T5788] Bluetooth: hci4: command tx timeout [ 309.560549][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.573313][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.580776][T11977] bridge_slave_1: entered allmulticast mode [ 309.588397][T11977] bridge_slave_1: entered promiscuous mode [ 309.732066][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.770857][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.951360][T11977] team0: Port device team_slave_0 added [ 310.046248][T11977] team0: Port device team_slave_1 added [ 310.204670][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.215298][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.276456][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.334347][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.348709][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.378047][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.473622][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.481632][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.503400][T12046] bridge0: entered allmulticast mode [ 310.751230][T11977] hsr_slave_0: entered promiscuous mode [ 310.767282][T11977] hsr_slave_1: entered promiscuous mode [ 310.808685][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.828803][T11977] Cannot create hsr debugfs directory [ 311.164104][ T6595] batman_adv: batadv0: Interface deactivated: wlan0 [ 311.239701][ T6595] batman_adv: batadv0: Removing interface: wlan0 [ 311.411057][ T6595] hsr_slave_0: left promiscuous mode [ 311.417938][ T5788] Bluetooth: hci4: command tx timeout [ 311.626141][ T6595] hsr_slave_1: left promiscuous mode [ 311.643633][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.651373][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.662057][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.682767][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.818816][ T6595] veth1_vlan: left promiscuous mode [ 311.834154][ T6595] veth0_vlan: left promiscuous mode [ 312.820917][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.891112][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.434718][ T6595] bond0 (unregistering): Released all slaves [ 313.501225][ T5788] Bluetooth: hci4: command tx timeout [ 313.776629][T12112] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2395'. [ 313.828810][T12112] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2395'. [ 313.849905][T12112] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 314.056188][T11977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.090410][T11977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.126500][T11977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.189902][T11977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.357594][T12127] IPv6: Can't replace route, no match found [ 314.368910][T12127] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 314.394269][T12127] netlink: 'syz.2.2399': attribute type 10 has an invalid length. [ 314.439897][T12127] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.499789][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.548190][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.562531][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.569964][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.618341][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.625644][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.949285][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.042023][T11977] veth0_vlan: entered promiscuous mode [ 315.067159][T11977] veth1_vlan: entered promiscuous mode [ 315.136937][T11977] veth0_macvtap: entered promiscuous mode [ 315.150854][T11977] veth1_macvtap: entered promiscuous mode [ 315.198371][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.210919][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.226144][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.238511][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.255050][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.268952][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.286215][T11977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.315270][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.329513][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.342648][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.361717][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.377607][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.400298][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.437658][T11977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.515345][T11977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.546366][T11977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.570882][T11977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.580253][ T5788] Bluetooth: hci4: command tx timeout [ 315.587791][T11977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.601860][T12149] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2405'. [ 315.705180][T11977] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 315.715159][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.733310][T12144] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2405'. [ 315.748465][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.751193][T12144] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 315.762969][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.846762][ T6604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.860441][ T6604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.980087][T12155] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 316.275496][T12155] syzkaller1: linktype set to 823 [ 316.781879][T12160] sit0: entered promiscuous mode [ 316.803497][T12160] sit0: entered allmulticast mode [ 317.240201][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.283335][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.291661][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.302127][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.314443][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.321942][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.342579][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.349263][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.583175][ T6592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.727193][ T6592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.782218][T12187] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2423'. [ 317.831858][T12187] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2423'. [ 317.854670][ T6592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.867425][T12187] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 318.004963][ T6592] : (slave netdevsim0): Releasing backup interface [ 318.032105][ T6592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.109790][T12195] netlink: 'syz.4.2425': attribute type 10 has an invalid length. [ 318.127594][T12195] macvlan0: entered promiscuous mode [ 318.143608][T12195] macvlan0: entered allmulticast mode [ 318.157341][T12195] veth1_vlan: entered allmulticast mode [ 318.177492][T12195] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 318.490975][T12170] chnl_net:caif_netlink_parms(): no params data found [ 318.652062][T12204] netlink: 794 bytes leftover after parsing attributes in process `syz.2.2429'. [ 318.686690][T12170] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.694560][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.703422][T12170] bridge_slave_0: entered allmulticast mode [ 318.710147][T12170] bridge_slave_0: entered promiscuous mode [ 318.751615][T12170] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.759231][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.770422][T12170] bridge_slave_1: entered allmulticast mode [ 318.778858][T12170] bridge_slave_1: entered promiscuous mode [ 318.832796][T12170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.930873][T12170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.413279][ T5793] Bluetooth: hci0: command tx timeout [ 319.686152][T12218] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2433'. [ 319.696854][T12218] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 321.180403][T12215] netlink: 'syz.4.2432': attribute type 10 has an invalid length. [ 321.195226][T12215] bond0: (slave dummy0): Releasing backup interface [ 321.206966][T12215] team0: Port device dummy0 added [ 321.281115][T12217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2433'. [ 321.410087][T12170] team0: Port device team_slave_0 added [ 321.422653][T12170] team0: Port device team_slave_1 added [ 321.434405][T12221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.493695][ T5793] Bluetooth: hci0: command tx timeout [ 321.549982][T12170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.557517][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.588296][T12170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.601325][T12170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.610069][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.636578][T12170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.783462][T12170] hsr_slave_0: entered promiscuous mode [ 321.800362][T12170] hsr_slave_1: entered promiscuous mode [ 321.821542][T12170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.833794][T12170] Cannot create hsr debugfs directory [ 321.880661][T12236] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2440'. [ 321.997400][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 322.251130][ T6592] batman_adv: batadv0: Interface deactivated: wlan0 [ 322.287075][ T6592] batman_adv: batadv0: Removing interface: wlan0 [ 322.411598][ T6592] hsr_slave_0: left promiscuous mode [ 322.505331][ T6592] hsr_slave_1: left promiscuous mode [ 322.553992][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.561551][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.703827][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.711295][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.804679][ T6592] veth1_macvtap: left promiscuous mode [ 322.817481][ T6592] veth1_vlan: left promiscuous mode [ 322.956503][ T5793] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 323.237325][ T6592] team0 (unregistering): Port device geneve1 removed [ 323.583156][ T5793] Bluetooth: hci0: command tx timeout [ 323.718700][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 323.767509][ T6592] team0 (unregistering): Port device C removed [ 323.812034][ T6592]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.860169][ T6592]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.033099][ T6592]  (unregistering): (slave dummy0): Releasing backup interface [ 324.276127][ T6592]  (unregistering): Released all slaves [ 324.678479][T12170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.687681][T12170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.698644][T12170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.709104][T12170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.774636][T12170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.795580][T12170] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.809255][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.816409][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.831520][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.838707][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.005736][T12170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.050222][T12170] veth0_vlan: entered promiscuous mode [ 325.061554][T12170] veth1_vlan: entered promiscuous mode [ 325.090757][T12170] veth0_macvtap: entered promiscuous mode [ 325.100605][T12170] veth1_macvtap: entered promiscuous mode [ 325.120450][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.131410][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.142288][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.152771][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.162682][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.174186][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.185745][T12170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.199097][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.210042][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.219916][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.230966][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.241046][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.251563][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.262595][T12170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.277776][T12170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.286857][T12170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.295629][T12170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.304360][T12170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.368001][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.376325][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.399052][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.407074][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.654499][ T5793] Bluetooth: hci0: command tx timeout [ 325.812827][T12299] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2455'. [ 325.856819][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'. [ 326.154832][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.162848][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.214679][T12303] bridge0: entered allmulticast mode [ 326.279797][T12304] netlink: 'syz.1.2456': attribute type 16 has an invalid length. [ 326.303022][T12304] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2456'. [ 326.437270][T12303] bridge_slave_1: left allmulticast mode [ 326.464566][T12303] bridge_slave_1: left promiscuous mode [ 326.485582][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.514098][T12303] bridge_slave_0: left allmulticast mode [ 326.519828][T12303] bridge_slave_0: left promiscuous mode [ 326.531208][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.195020][T12339] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2473'. [ 327.204928][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'. [ 327.377980][T12345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 327.379330][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 327.394390][T12345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 327.411878][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2475'. [ 327.528090][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.535865][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.548840][T12351] bridge0: entered allmulticast mode [ 327.631104][T12351] netlink: 'syz.0.2477': attribute type 16 has an invalid length. [ 327.643167][T12351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2477'. [ 327.678210][T12351] bridge_slave_1: left allmulticast mode [ 327.691676][T12351] bridge_slave_1: left promiscuous mode [ 327.710811][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.747893][T12351] bridge_slave_0: left allmulticast mode [ 327.754552][T12351] bridge_slave_0: left promiscuous mode [ 327.764639][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.507540][T12369] syzkaller0: entered allmulticast mode [ 328.943602][T12378] netlink: 'syz.1.2489': attribute type 1 has an invalid length. [ 331.033403][T12425] netlink: 'syz.4.2508': attribute type 6 has an invalid length. [ 331.041570][T12425] __nla_validate_parse: 4 callbacks suppressed [ 331.041585][T12425] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2508'. [ 331.216553][T12436] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2513'. [ 331.337320][T12442] netlink: 'syz.0.2516': attribute type 10 has an invalid length. [ 331.346729][T12442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2516'. [ 331.356275][T12442] dummy0: entered promiscuous mode [ 331.361816][T12442] dummy0: entered allmulticast mode [ 331.373310][T12442] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 331.494269][T12445] netlink: 'syz.2.2525': attribute type 16 has an invalid length. [ 331.502133][T12445] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2525'. [ 331.549840][T12445] bridge_slave_1: left allmulticast mode [ 331.556177][T12445] bridge_slave_1: left promiscuous mode [ 331.562965][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.648672][T12451] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2519'. [ 331.811927][T12445] bridge_slave_0: left allmulticast mode [ 331.829698][T12445] bridge_slave_0: left promiscuous mode [ 331.856931][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.515690][T12456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2521'. [ 332.555155][T12456] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2521'. [ 332.574265][T12456] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 333.505490][T12484] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2534'. [ 333.562009][T12484] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2534'. [ 333.649160][T12484] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 334.117807][T12500] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2541'. [ 334.867946][T12521] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 335.929605][T12549] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 336.064167][T12553] netlink: 'syz.0.2561': attribute type 16 has an invalid length. [ 336.111077][T12553] __nla_validate_parse: 7 callbacks suppressed [ 336.111111][T12553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2561'. [ 336.467633][T12561] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2564'. [ 336.513191][T12561] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 336.545258][T12561] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 336.567832][T12564] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 336.633260][T12561] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 336.663311][T12569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2567'. [ 336.683039][T12569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2567'. [ 336.695665][T12561] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 336.727831][T12566] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2567'. [ 336.851890][T12571] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2569'. [ 336.877265][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2569'. [ 337.223620][T12578] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2571'. [ 337.263651][T12578] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2571'. [ 337.293255][T12578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 337.493751][T12588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2575'. [ 338.227961][T12612] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 339.604138][T12643] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 341.030546][T12677] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 341.310563][T12692] __nla_validate_parse: 7 callbacks suppressed [ 341.310579][T12692] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2614'. [ 341.311206][T12690] netlink: 'syz.0.2612': attribute type 33 has an invalid length. [ 341.358947][T12690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2612'. [ 341.485013][T12700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2617'. [ 341.504669][T12700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2617'. [ 341.514193][T12699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2617'. [ 341.542206][T12700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2617'. [ 341.708310][T12707] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2620'. [ 341.744791][T12707] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 341.919779][T12715] sit0: entered promiscuous mode [ 341.939811][T12715] sit0: entered allmulticast mode [ 341.982685][T12718] netlink: 'syz.4.2623': attribute type 21 has an invalid length. [ 342.504352][T12741] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2633'. [ 342.533705][T12741] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 349.958842][T12756] netlink: 'syz.0.2637': attribute type 10 has an invalid length. [ 350.249100][T12756] team0: Port device wlan1 added [ 350.279743][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.464832][T12769] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2643'. [ 350.493516][T12769] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 351.860786][T12799] veth1_macvtap: left promiscuous mode [ 352.198958][T12805] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2654'. [ 352.239450][T12805] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 352.910047][T12826] sctp: [Deprecated]: syz.2.2662 (pid 12826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.910047][T12826] Use struct sctp_sack_info instead [ 353.022065][T12829] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2663'. [ 353.434077][T12837] netlink: 'syz.2.2666': attribute type 10 has an invalid length. [ 353.610745][T12837] bond0: (slave wlan1): Releasing backup interface [ 353.671983][T12837] team0: Port device wlan1 added [ 353.756882][T12844] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2669'. [ 353.757212][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.773593][T12844] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 353.803769][T12847] netlink: 'syz.4.2670': attribute type 2 has an invalid length. [ 354.652783][T12874] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2680'. [ 354.894763][T12880] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2682'. [ 354.923065][T12880] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 355.946976][T12912] veth1_macvtap: left promiscuous mode [ 355.998337][T12924] netlink: 'syz.1.2700': attribute type 3 has an invalid length. [ 356.006688][T12924] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2700'. [ 356.051293][T12921] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2697'. [ 356.073354][T12921] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 356.567306][T12929] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 356.574191][T12929] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 357.116460][T12947] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2709'. [ 357.146222][T12947] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 357.507047][T12960] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2722'. [ 357.539176][T12960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 357.667010][T12961] veth1_macvtap: left promiscuous mode [ 358.681794][T12990] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2725'. [ 358.750744][T12990] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 359.306075][T13011] syzkaller0: entered promiscuous mode [ 359.329275][T13011] syzkaller0: entered allmulticast mode [ 359.577319][T13025] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2737'. [ 359.588085][T13025] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 361.818580][T13021] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2735'. [ 361.828749][T13028] sit0: left promiscuous mode [ 361.844009][T13029] sit0: entered promiscuous mode [ 362.453732][T13071] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2754'. [ 362.465368][T13071] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 363.028900][T13098] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2767'. [ 363.044120][T13098] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 363.119304][T13099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.312689][T13110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2772'. [ 363.329312][T13110] openvswitch: netlink: Key type 29 is not supported [ 363.588606][T13124] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2778'. [ 363.603313][T13124] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 364.457858][T13153] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2789'. [ 364.479789][T13153] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 365.626824][ T5793] Bluetooth: hci2: ISO packet for unknown connection handle 3846 [ 365.627351][T13189] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 365.652341][T13189] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2807'. [ 365.866435][T13197] netlink: 'syz.1.2813': attribute type 11 has an invalid length. [ 365.886706][T13197] netlink: 202672 bytes leftover after parsing attributes in process `syz.1.2813'. [ 366.061451][T13205] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 366.146381][T13205] team0: Port device dummy0 added [ 367.934604][T13257] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2837'. [ 367.968110][T13257] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 368.515022][T13280] sock: sock_set_timeout: `syz.4.2845' (pid 13280) tries to set negative timeout [ 368.704634][T13284] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2847'. [ 368.723614][T13284] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 368.751972][T13286] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 368.795854][T13286] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2848'. [ 368.833042][T13286] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2848'. [ 369.696667][T13323] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2862'. [ 373.332528][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2893'. [ 373.363258][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2893'. [ 373.402703][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2893'. [ 373.464744][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2893'. [ 373.525659][T13404] netlink: 'syz.4.2898': attribute type 3 has an invalid length. [ 373.588855][T13404] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2898'. [ 373.707077][T13404] ipvlan0: entered promiscuous mode [ 373.712360][T13404] ipvlan0: entered allmulticast mode [ 373.833118][T13415] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 373.853855][T13415] veth0_vlan: entered allmulticast mode [ 373.914449][T13415] veth0_vlan: left promiscuous mode [ 373.937678][T13415] veth0_vlan: entered promiscuous mode [ 373.960958][T13415] team0: Device veth0_vlan failed to register rx_handler [ 374.268485][T13431] netlink: 'syz.2.2907': attribute type 10 has an invalid length. [ 374.303427][T13431] veth1_macvtap: left promiscuous mode [ 374.560578][T13435] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 375.082972][T13435] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 375.772385][T13446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2912'. [ 375.848248][T13446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2912'. [ 375.900364][T13451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2912'. [ 376.111523][T13465] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2920'. [ 376.137970][T13465] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 376.402054][T13485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2925'. [ 376.682611][T13498] tap0: tun_chr_ioctl cmd 1074025677 [ 376.688603][T13498] tap0: linktype set to 769 [ 376.999442][T13506] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 378.338297][T13532] __nla_validate_parse: 7 callbacks suppressed [ 378.338335][T13532] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2945'. [ 378.355790][T13532] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 378.719782][T13548] netlink: 'syz.1.2951': attribute type 21 has an invalid length. [ 378.728055][T13548] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2951'. [ 378.787815][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.796415][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.421396][T13560] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2957'. [ 379.454225][T13560] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 379.918141][T13582] netlink: 'syz.0.2965': attribute type 2 has an invalid length. [ 379.944451][T13582] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2965'. [ 380.172547][T13593] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2969'. [ 380.192393][T13593] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 380.882280][T13609] netlink: 'syz.2.2974': attribute type 39 has an invalid length. [ 381.519840][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.529786][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.548379][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.578889][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.603110][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 381.610777][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.706307][T13627] netlink: 'syz.1.2982': attribute type 21 has an invalid length. [ 381.731514][T13629] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2981'. [ 381.744214][T13627] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2982'. [ 381.764219][T13629] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 381.778287][T13627] netlink: 'syz.1.2982': attribute type 4 has an invalid length. [ 381.796720][T13627] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2982'. [ 382.065081][T13620] chnl_net:caif_netlink_parms(): no params data found [ 382.301455][T13620] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.389504][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.404198][T13620] bridge_slave_0: entered allmulticast mode [ 382.424412][T13620] bridge_slave_0: entered promiscuous mode [ 382.451022][T13620] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.465031][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.472636][T13620] bridge_slave_1: entered allmulticast mode [ 382.494418][T13620] bridge_slave_1: entered promiscuous mode [ 382.591796][T13620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.643822][T13620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.723644][T13658] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2991'. [ 382.733175][T13658] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 382.774921][T13620] team0: Port device team_slave_0 added [ 382.792416][T13620] team0: Port device team_slave_1 added [ 382.868327][T13620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.893311][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.952931][T13620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.989509][T13620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.008121][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.079371][T13620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.156335][ T6603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.366570][ T6603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.398661][T13620] hsr_slave_0: entered promiscuous mode [ 383.407539][T13620] hsr_slave_1: entered promiscuous mode [ 383.535998][ T6603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.663461][ T5788] Bluetooth: hci1: command tx timeout [ 383.675655][ T6603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.031872][T13680] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3000'. [ 384.083204][T13680] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 385.101060][T13711] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3012'. [ 385.127647][T13711] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 385.242402][T13620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.266549][T13620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.289897][ T6603] bridge0: port 3(gretap0) entered disabled state [ 385.325176][ T6603] gretap0 (unregistering): left allmulticast mode [ 385.339805][ T6603] gretap0 (unregistering): left promiscuous mode [ 385.353932][ T6603] bridge0: port 3(gretap0) entered disabled state [ 385.386316][T13620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.399521][T13620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.522533][T13721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.543431][T13721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.552709][T13721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.567849][T13721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.733014][ T5788] Bluetooth: hci1: command tx timeout [ 386.001127][T13620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.154372][T13620] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.188138][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.195405][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.248259][ T6603] hsr_slave_0: left promiscuous mode [ 386.258792][ T6603] hsr_slave_1: left promiscuous mode [ 386.278561][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.289861][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.317685][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.325017][T13736] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3020'. [ 386.336448][T13736] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 386.338158][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.371801][ T6603] bridge_slave_1: left allmulticast mode [ 386.382573][ T6603] bridge_slave_1: left promiscuous mode [ 386.403174][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.434068][ T6603] bridge_slave_0: left allmulticast mode [ 386.439777][ T6603] bridge_slave_0: left promiscuous mode [ 386.445639][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.499082][ T6603] veth1_vlan: left allmulticast mode [ 386.507221][ T6603] veth1_vlan: left promiscuous mode [ 386.512541][ T6603] veth0_vlan: left promiscuous mode [ 387.067212][ T6603] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 387.681523][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 387.742828][ T6603] team0 (unregistering): Port device team_slave_0 removed [ 387.813479][ T5788] Bluetooth: hci1: command tx timeout [ 387.822303][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.295518][ T6603] team0 (unregistering): Port device dummy0 removed [ 388.552005][ T6603] bond0 (unregistering): Released all slaves [ 388.635028][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.642215][ T8860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.848903][T13761] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3028'. [ 388.877761][T13761] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 389.102246][T13768] netlink: 'syz.1.3030': attribute type 39 has an invalid length. [ 389.321983][T13620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.893494][ T5788] Bluetooth: hci1: command tx timeout [ 389.925427][T13620] veth0_vlan: entered promiscuous mode [ 390.010977][T13620] veth1_vlan: entered promiscuous mode [ 390.180152][T13620] veth0_macvtap: entered promiscuous mode [ 390.375248][T13796] netlink: 'syz.2.3036': attribute type 11 has an invalid length. [ 390.475627][T13796] netlink: 195824 bytes leftover after parsing attributes in process `syz.2.3036'. [ 391.038834][T13802] IPv6: Can't replace route, no match found [ 391.065663][T13804] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 391.122949][T13806] netlink: 'syz.0.3038': attribute type 10 has an invalid length. [ 391.159613][T13806] team0: Port device wlan1 removed [ 391.177116][T13806] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 391.222237][T13620] veth1_macvtap: entered promiscuous mode [ 391.245805][T13811] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3040'. [ 391.275995][T13811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 391.291443][T13620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.308920][T13620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.325550][T13620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.336451][T13620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.347945][T13620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.359282][T13620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.390953][T13620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.411933][T13620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.422824][T13620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.435185][T13620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.447030][T13620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.456129][T13620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.465097][T13620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.475201][T13620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.724501][ T6603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.732450][ T6603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.843788][ T6592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.857577][ T6592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.056723][T13824] netlink: 'syz.0.3044': attribute type 2 has an invalid length. [ 392.093031][T13824] netlink: 'syz.0.3044': attribute type 8 has an invalid length. [ 392.122705][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3044'. [ 392.209255][T13840] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3050'. [ 392.243566][T13840] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 392.263080][T13843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.270570][T13843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.324677][T13843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.335055][T13843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.254575][T13865] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3061'. [ 393.296939][T13865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 393.325594][T13870] netlink: 'syz.4.3063': attribute type 10 has an invalid length. [ 393.355007][T13870] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 393.645173][T13877] netlink: 'syz.0.3066': attribute type 21 has an invalid length. [ 393.664570][T13877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3066'. [ 393.770581][T13883] IPv6: Can't replace route, no match found [ 393.808011][T13879] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 393.846991][T13879] netlink: 'syz.4.3067': attribute type 10 has an invalid length. [ 393.917473][T13879] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 393.946959][T13889] netlink: 'syz.2.3070': attribute type 46 has an invalid length. [ 394.230055][T13897] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3074'. [ 394.250348][T13897] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 394.313599][T13900] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.3075'. [ 395.570293][T13924] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3084'. [ 395.605274][T13924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 396.011434][T13936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.042819][T13936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.074829][T13936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.082309][T13936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.742002][T13951] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3096'. [ 396.751525][T13951] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 397.434103][T13982] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3109'. [ 397.463457][T13982] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 398.412083][T14007] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3120'. [ 398.453841][T14007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 398.709764][T14030] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 398.727867][T14030] netlink: 'syz.1.3127': attribute type 8 has an invalid length. [ 398.743010][T14030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3127'. [ 399.045297][T14043] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3134'. [ 399.086581][T14047] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3135'. [ 399.108656][T14047] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 399.814470][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3144'. [ 399.835411][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3144'. [ 399.861274][T14073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3144'. [ 400.784958][T14094] netlink: 'syz.0.3153': attribute type 27 has an invalid length. [ 400.817545][T14094] __nla_validate_parse: 2 callbacks suppressed [ 400.817576][T14094] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3153'. [ 401.524482][T14119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3161'. [ 401.550328][T14119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3161'. [ 401.577334][T14114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3161'. [ 401.669953][T14120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3161'. [ 401.817614][T14131] netlink: 'syz.4.3168': attribute type 21 has an invalid length. [ 401.835803][T14131] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3168'. [ 401.856514][T14131] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 401.874073][T14131] netlink: 'syz.4.3168': attribute type 5 has an invalid length. [ 401.892221][T14131] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3168'. [ 402.066765][T14135] netlink: 'syz.4.3170': attribute type 39 has an invalid length. [ 403.809264][T14182] FAULT_INJECTION: forcing a failure. [ 403.809264][T14182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.834981][T14179] sit0: entered promiscuous mode [ 403.835682][T14182] CPU: 1 PID: 14182 Comm: syz.0.3190 Not tainted syzkaller #0 [ 403.841397][T14179] sit0: entered allmulticast mode [ 403.847390][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.847415][T14182] Call Trace: [ 403.847422][T14182] [ 403.847430][T14182] dump_stack_lvl+0x16c/0x230 [ 403.847457][T14182] ? show_regs_print_info+0x20/0x20 [ 403.847476][T14182] ? load_image+0x3b0/0x3b0 [ 403.847496][T14182] ? __might_fault+0xaa/0x120 [ 403.847514][T14182] ? __lock_acquire+0x7c80/0x7c80 [ 403.847535][T14182] should_fail_ex+0x39d/0x4d0 [ 403.847559][T14182] _copy_to_iter+0x1c8/0x10d0 [ 403.847579][T14182] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 403.847603][T14182] ? iov_iter_init+0x1e0/0x1e0 [ 403.847621][T14182] ? __local_bh_enable_ip+0x12e/0x1c0 [ 403.847637][T14182] ? lockdep_hardirqs_on+0x98/0x150 [ 403.847659][T14182] ? __local_bh_enable_ip+0x12e/0x1c0 [ 403.847675][T14182] ? _local_bh_enable+0xa0/0xa0 [ 403.847694][T14182] ? page_copy_sane+0x4e/0x270 [ 403.847716][T14182] copy_page_to_iter+0xa7/0x150 [ 403.847740][T14182] sk_msg_recvmsg+0x28c/0xc20 [ 403.847780][T14182] unix_bpf_recvmsg+0x5a2/0xd90 [ 403.847821][T14182] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 403.847859][T14182] unix_stream_recvmsg+0x13f/0x1b0 [ 403.847882][T14182] ? unix_stream_sendmsg+0xba0/0xba0 [ 403.847900][T14182] ? __lock_acquire+0x1260/0x7c80 [ 403.847916][T14182] ? __unix_stream_recvmsg+0x130/0x130 [ 403.847937][T14182] ? verify_lock_unused+0x140/0x140 [ 403.847954][T14182] ? aa_sock_msg_perm+0x94/0x150 [ 403.847975][T14182] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 403.847994][T14182] ? security_socket_recvmsg+0x89/0xb0 [ 403.848010][T14182] ? unix_stream_sendmsg+0xba0/0xba0 [ 403.848032][T14182] ____sys_recvmsg+0x29e/0x5b0 [ 403.848067][T14182] ? __sys_recvmsg_sock+0x50/0x50 [ 403.848104][T14182] ? import_iovec+0x73/0xa0 [ 403.848129][T14182] ___sys_recvmsg+0x1b6/0x510 [ 403.848156][T14182] ? __sys_recvmsg+0x270/0x270 [ 403.848182][T14182] ? ksys_write+0x1c1/0x250 [ 403.848223][T14182] ? __fget_files+0x44a/0x4d0 [ 403.848258][T14182] __x64_sys_recvmsg+0x1f2/0x2c0 [ 403.848283][T14182] ? ___sys_recvmsg+0x510/0x510 [ 403.848320][T14182] ? lockdep_hardirqs_on+0x98/0x150 [ 403.848346][T14182] do_syscall_64+0x55/0xb0 [ 403.848363][T14182] ? clear_bhb_loop+0x40/0x90 [ 403.848379][T14182] ? clear_bhb_loop+0x40/0x90 [ 403.848397][T14182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.848419][T14182] RIP: 0033:0x7fd08438eba9 [ 403.848437][T14182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.848452][T14182] RSP: 002b:00007fd0851aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 403.848472][T14182] RAX: ffffffffffffffda RBX: 00007fd0845d5fa0 RCX: 00007fd08438eba9 [ 403.848484][T14182] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000005 [ 403.848496][T14182] RBP: 00007fd0851aa090 R08: 0000000000000000 R09: 0000000000000000 [ 403.848507][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.848517][T14182] R13: 00007fd0845d6038 R14: 00007fd0845d5fa0 R15: 00007ffcfff771c8 [ 403.848554][T14182] [ 404.596176][T14197] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3195'. [ 405.755766][T14220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.763059][T14220] IPv6: NLM_F_CREATE should be set when creating new route [ 405.770420][T14220] IPv6: NLM_F_CREATE should be set when creating new route [ 405.777800][T14220] IPv6: NLM_F_CREATE should be set when creating new route [ 405.923999][T14226] netlink: 'syz.0.3207': attribute type 2 has an invalid length. [ 405.961551][T14226] netlink: 'syz.0.3207': attribute type 8 has an invalid length. [ 406.009912][T14226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3207'. [ 406.057632][T14224] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.275910][T14236] netlink: 'syz.1.3211': attribute type 10 has an invalid length. [ 406.366451][T14236] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 407.209350][T14277] FAULT_INJECTION: forcing a failure. [ 407.209350][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.233031][T14277] CPU: 0 PID: 14277 Comm: syz.1.3226 Not tainted syzkaller #0 [ 407.240536][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.250610][T14277] Call Trace: [ 407.253902][T14277] [ 407.256847][T14277] dump_stack_lvl+0x16c/0x230 [ 407.261590][T14277] ? show_regs_print_info+0x20/0x20 [ 407.266826][T14277] ? load_image+0x3b0/0x3b0 [ 407.271322][T14277] ? __might_fault+0xaa/0x120 [ 407.275992][T14277] ? __lock_acquire+0x7c80/0x7c80 [ 407.281011][T14277] should_fail_ex+0x39d/0x4d0 [ 407.285683][T14277] _copy_to_iter+0x1c8/0x10d0 [ 407.290425][T14277] ? iov_iter_init+0x1e0/0x1e0 [ 407.295179][T14277] ? __local_bh_enable_ip+0x12e/0x1c0 [ 407.300545][T14277] ? lockdep_hardirqs_on+0x98/0x150 [ 407.305756][T14277] ? __local_bh_enable_ip+0x12e/0x1c0 [ 407.311143][T14277] ? page_copy_sane+0x16a/0x270 [ 407.316012][T14277] copy_page_to_iter+0xa7/0x150 [ 407.320897][T14277] sk_msg_recvmsg+0x28c/0xc20 [ 407.325598][T14277] unix_bpf_recvmsg+0x5a2/0xd90 [ 407.330455][T14277] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 407.336524][T14277] unix_stream_recvmsg+0x13f/0x1b0 [ 407.341635][T14277] ? unix_stream_sendmsg+0xba0/0xba0 [ 407.346913][T14277] ? __lock_acquire+0x1260/0x7c80 [ 407.351923][T14277] ? __unix_stream_recvmsg+0x130/0x130 [ 407.357391][T14277] ? verify_lock_unused+0x140/0x140 [ 407.362609][T14277] ? aa_sock_msg_perm+0x94/0x150 [ 407.367608][T14277] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 407.372910][T14277] ? security_socket_recvmsg+0x89/0xb0 [ 407.378381][T14277] ? unix_stream_sendmsg+0xba0/0xba0 [ 407.383665][T14277] ____sys_recvmsg+0x29e/0x5b0 [ 407.388433][T14277] ? __sys_recvmsg_sock+0x50/0x50 [ 407.393503][T14277] ? import_iovec+0x73/0xa0 [ 407.398035][T14277] ___sys_recvmsg+0x1b6/0x510 [ 407.402708][T14277] ? __sys_recvmsg+0x270/0x270 [ 407.407473][T14277] ? ksys_write+0x1c1/0x250 [ 407.411979][T14277] ? __fget_files+0x44a/0x4d0 [ 407.416684][T14277] __x64_sys_recvmsg+0x1f2/0x2c0 [ 407.421643][T14277] ? ___sys_recvmsg+0x510/0x510 [ 407.426510][T14277] ? lockdep_hardirqs_on+0x98/0x150 [ 407.431704][T14277] do_syscall_64+0x55/0xb0 [ 407.436143][T14277] ? clear_bhb_loop+0x40/0x90 [ 407.440808][T14277] ? clear_bhb_loop+0x40/0x90 [ 407.445494][T14277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.451402][T14277] RIP: 0033:0x7f2bc6b8eba9 [ 407.455821][T14277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.475524][T14277] RSP: 002b:00007f2bc7a8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 407.483932][T14277] RAX: ffffffffffffffda RBX: 00007f2bc6dd5fa0 RCX: 00007f2bc6b8eba9 [ 407.491916][T14277] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000005 [ 407.499911][T14277] RBP: 00007f2bc7a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 407.507885][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.515857][T14277] R13: 00007f2bc6dd6038 R14: 00007f2bc6dd5fa0 R15: 00007ffd275a65b8 [ 407.523927][T14277] [ 408.027846][T14302] netlink: 'syz.2.3237': attribute type 10 has an invalid length. [ 408.053441][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3237'. [ 408.062439][T14302] dummy0: entered promiscuous mode [ 408.096451][T14302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 408.900937][T14318] FAULT_INJECTION: forcing a failure. [ 408.900937][T14318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.952159][T14318] CPU: 1 PID: 14318 Comm: syz.1.3245 Not tainted syzkaller #0 [ 408.959673][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.969745][T14318] Call Trace: [ 408.973043][T14318] [ 408.975989][T14318] dump_stack_lvl+0x16c/0x230 [ 408.980699][T14318] ? show_regs_print_info+0x20/0x20 [ 408.985925][T14318] ? load_image+0x3b0/0x3b0 [ 408.990453][T14318] ? __might_fault+0xaa/0x120 [ 408.995148][T14318] ? __lock_acquire+0x7c80/0x7c80 [ 409.000200][T14318] should_fail_ex+0x39d/0x4d0 [ 409.004908][T14318] _copy_to_iter+0x1c8/0x10d0 [ 409.009621][T14318] ? iov_iter_init+0x1e0/0x1e0 [ 409.014409][T14318] ? __local_bh_enable_ip+0x12e/0x1c0 [ 409.019808][T14318] ? lockdep_hardirqs_on+0x98/0x150 [ 409.025031][T14318] ? __local_bh_enable_ip+0x12e/0x1c0 [ 409.030423][T14318] ? page_copy_sane+0x16a/0x270 [ 409.035290][T14318] copy_page_to_iter+0xa7/0x150 [ 409.040164][T14318] sk_msg_recvmsg+0x28c/0xc20 [ 409.044882][T14318] unix_bpf_recvmsg+0x5a2/0xd90 [ 409.049772][T14318] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 409.055879][T14318] unix_stream_recvmsg+0x13f/0x1b0 [ 409.061016][T14318] ? unix_stream_sendmsg+0xba0/0xba0 [ 409.066324][T14318] ? __lock_acquire+0x1260/0x7c80 [ 409.071367][T14318] ? __unix_stream_recvmsg+0x130/0x130 [ 409.076970][T14318] ? verify_lock_unused+0x140/0x140 [ 409.082178][T14318] ? aa_sock_msg_perm+0x94/0x150 [ 409.087118][T14318] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 409.092409][T14318] ? security_socket_recvmsg+0x89/0xb0 [ 409.097864][T14318] ? unix_stream_sendmsg+0xba0/0xba0 [ 409.103171][T14318] ____sys_recvmsg+0x29e/0x5b0 [ 409.107981][T14318] ? __sys_recvmsg_sock+0x50/0x50 [ 409.113045][T14318] ? import_iovec+0x73/0xa0 [ 409.117573][T14318] ___sys_recvmsg+0x1b6/0x510 [ 409.122286][T14318] ? __sys_recvmsg+0x270/0x270 [ 409.127082][T14318] ? ksys_write+0x1c1/0x250 [ 409.131619][T14318] ? __fget_files+0x44a/0x4d0 [ 409.136332][T14318] __x64_sys_recvmsg+0x1f2/0x2c0 [ 409.141393][T14318] ? ___sys_recvmsg+0x510/0x510 [ 409.146287][T14318] ? lockdep_hardirqs_on+0x98/0x150 [ 409.151511][T14318] do_syscall_64+0x55/0xb0 [ 409.155953][T14318] ? clear_bhb_loop+0x40/0x90 [ 409.160647][T14318] ? clear_bhb_loop+0x40/0x90 [ 409.165371][T14318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.171427][T14318] RIP: 0033:0x7f2bc6b8eba9 [ 409.175866][T14318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.195496][T14318] RSP: 002b:00007f2bc7a8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 409.203938][T14318] RAX: ffffffffffffffda RBX: 00007f2bc6dd5fa0 RCX: 00007f2bc6b8eba9 [ 409.211942][T14318] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000005 [ 409.219934][T14318] RBP: 00007f2bc7a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.227936][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.235924][T14318] R13: 00007f2bc6dd6038 R14: 00007f2bc6dd5fa0 R15: 00007ffd275a65b8 [ 409.244022][T14318] [ 409.808008][T14344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.908007][T14346] netlink: 'syz.2.3257': attribute type 3 has an invalid length. [ 409.916291][T14346] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3257'. [ 410.234026][T14359] FAULT_INJECTION: forcing a failure. [ 410.234026][T14359] name failslab, interval 1, probability 0, space 0, times 0 [ 410.247001][T14359] CPU: 0 PID: 14359 Comm: syz.2.3262 Not tainted syzkaller #0 [ 410.254514][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.264613][T14359] Call Trace: [ 410.267943][T14359] [ 410.271089][T14359] dump_stack_lvl+0x16c/0x230 [ 410.275836][T14359] ? show_regs_print_info+0x20/0x20 [ 410.281091][T14359] ? load_image+0x3b0/0x3b0 [ 410.285658][T14359] ? __might_sleep+0xe0/0xe0 [ 410.290390][T14359] ? __lock_acquire+0x7c80/0x7c80 [ 410.295517][T14359] should_fail_ex+0x39d/0x4d0 [ 410.300268][T14359] should_failslab+0x9/0x20 [ 410.304814][T14359] slab_pre_alloc_hook+0x59/0x310 [ 410.309880][T14359] ? trace_call_bpf+0x5ba/0x690 [ 410.314776][T14359] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.320538][T14359] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.326416][T14359] __kmem_cache_alloc_node+0x53/0x260 [ 410.331853][T14359] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.337625][T14359] __kmalloc+0xa4/0x240 [ 410.341845][T14359] tomoyo_realpath_from_path+0xe3/0x5d0 [ 410.347490][T14359] tomoyo_path_number_perm+0x1ea/0x590 [ 410.353004][T14359] ? tomoyo_path_number_perm+0x1ba/0x590 [ 410.358699][T14359] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 410.364226][T14359] ? ksys_write+0x1c1/0x250 [ 410.368915][T14359] ? __fget_files+0x28/0x4d0 [ 410.373605][T14359] security_file_ioctl+0x70/0xa0 [ 410.378600][T14359] __se_sys_ioctl+0x48/0x170 [ 410.383293][T14359] do_syscall_64+0x55/0xb0 [ 410.387753][T14359] ? clear_bhb_loop+0x40/0x90 [ 410.392472][T14359] ? clear_bhb_loop+0x40/0x90 [ 410.397195][T14359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.403146][T14359] RIP: 0033:0x7fa51138eba9 [ 410.407600][T14359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.427260][T14359] RSP: 002b:00007fa512266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.435733][T14359] RAX: ffffffffffffffda RBX: 00007fa5115d5fa0 RCX: 00007fa51138eba9 [ 410.443755][T14359] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 410.451857][T14359] RBP: 00007fa512266090 R08: 0000000000000000 R09: 0000000000000000 [ 410.459967][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.467988][T14359] R13: 00007fa5115d6038 R14: 00007fa5115d5fa0 R15: 00007ffdb894aff8 [ 410.476059][T14359] [ 410.505058][T14359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.218999][T14380] netlink: 'syz.0.3270': attribute type 21 has an invalid length. [ 411.259921][T14380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3270'. [ 412.126017][T14415] FAULT_INJECTION: forcing a failure. [ 412.126017][T14415] name failslab, interval 1, probability 0, space 0, times 0 [ 412.143103][T14415] CPU: 0 PID: 14415 Comm: syz.4.3285 Not tainted syzkaller #0 [ 412.150631][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.160723][T14415] Call Trace: [ 412.164122][T14415] [ 412.167093][T14415] dump_stack_lvl+0x16c/0x230 [ 412.171827][T14415] ? show_regs_print_info+0x20/0x20 [ 412.177084][T14415] ? load_image+0x3b0/0x3b0 [ 412.181642][T14415] ? __might_sleep+0xe0/0xe0 [ 412.186277][T14415] ? __lock_acquire+0x7c80/0x7c80 [ 412.191346][T14415] ? prepend_path+0x4b/0x960 [ 412.195986][T14415] should_fail_ex+0x39d/0x4d0 [ 412.200722][T14415] should_failslab+0x9/0x20 [ 412.205391][T14415] slab_pre_alloc_hook+0x59/0x310 [ 412.210563][T14415] ? __asan_memcpy+0x40/0x70 [ 412.215295][T14415] ? tomoyo_encode+0x28b/0x540 [ 412.220125][T14415] ? tomoyo_encode+0x28b/0x540 [ 412.224934][T14415] __kmem_cache_alloc_node+0x53/0x260 [ 412.230350][T14415] ? prepend_path+0x4b/0x960 [ 412.234980][T14415] ? tomoyo_encode+0x28b/0x540 [ 412.239787][T14415] __kmalloc+0xa4/0x240 [ 412.243988][T14415] tomoyo_encode+0x28b/0x540 [ 412.248713][T14415] tomoyo_realpath_from_path+0x592/0x5d0 [ 412.254478][T14415] tomoyo_path_number_perm+0x1ea/0x590 [ 412.259949][T14415] ? tomoyo_path_number_perm+0x1ba/0x590 [ 412.265597][T14415] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 412.271109][T14415] ? ksys_write+0x1c1/0x250 [ 412.275708][T14415] ? __fget_files+0x28/0x4d0 [ 412.280350][T14415] security_file_ioctl+0x70/0xa0 [ 412.285315][T14415] __se_sys_ioctl+0x48/0x170 [ 412.289921][T14415] do_syscall_64+0x55/0xb0 [ 412.294703][T14415] ? clear_bhb_loop+0x40/0x90 [ 412.299385][T14415] ? clear_bhb_loop+0x40/0x90 [ 412.304071][T14415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.309973][T14415] RIP: 0033:0x7f4a4f98eba9 [ 412.314398][T14415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.334361][T14415] RSP: 002b:00007f4a5083a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.342790][T14415] RAX: ffffffffffffffda RBX: 00007f4a4fbd5fa0 RCX: 00007f4a4f98eba9 [ 412.350770][T14415] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 412.358743][T14415] RBP: 00007f4a5083a090 R08: 0000000000000000 R09: 0000000000000000 [ 412.366721][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.374816][T14415] R13: 00007f4a4fbd6038 R14: 00007f4a4fbd5fa0 R15: 00007ffec3895478 [ 412.382944][T14415] [ 412.413277][T14415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.441812][T14419] netlink: 'syz.0.3286': attribute type 10 has an invalid length. [ 412.450892][T14419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3286'. [ 412.516308][T14419] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 412.805745][T14427] Q6\bY4: renamed from lo (while UP) [ 412.973152][T14436] netlink: 'syz.4.3292': attribute type 4 has an invalid length. [ 412.991424][T14436] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3292'. [ 413.044691][T14436] wlan1: mtu less than device minimum [ 413.390490][T14449] netlink: 'syz.0.3297': attribute type 10 has an invalid length. [ 413.416046][T14449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3297'. [ 413.433000][T14449] dummy0: left allmulticast mode [ 413.438846][T14449] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 413.685486][T14451] @: renamed from bond_slave_0 (while UP) [ 413.846758][T14451] netlink: 'syz.4.3298': attribute type 4 has an invalid length. [ 413.914106][T14451] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3298'. [ 414.018230][T14451] wlan1: mtu less than device minimum [ 414.090250][T14459] netlink: 'syz.2.3301': attribute type 21 has an invalid length. [ 414.127622][T14459] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.080022][T14469] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 415.102366][T14469] syzkaller0: linktype set to 768 [ 415.647536][T14478] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3309'. [ 415.679563][T14477] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3309'. [ 416.600328][T14496] netlink: 'syz.0.3316': attribute type 13 has an invalid length. [ 416.615943][T14496] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3316'. [ 416.693560][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 417.025100][T14499] netlink: 'syz.2.3318': attribute type 10 has an invalid length. [ 417.050509][T14499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3318'. [ 417.076058][T14499] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 417.101928][T14499] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 417.127359][T14499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 417.167391][T14505] FAULT_INJECTION: forcing a failure. [ 417.167391][T14505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.244313][T14506] FAULT_INJECTION: forcing a failure. [ 417.244313][T14506] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 417.273815][T14505] CPU: 1 PID: 14505 Comm: syz.4.3317 Not tainted syzkaller #0 [ 417.281358][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.291480][T14505] Call Trace: [ 417.294806][T14505] [ 417.297776][T14505] dump_stack_lvl+0x16c/0x230 [ 417.302538][T14505] ? show_regs_print_info+0x20/0x20 [ 417.307810][T14505] ? load_image+0x3b0/0x3b0 [ 417.312375][T14505] ? __lock_acquire+0x7c80/0x7c80 [ 417.317459][T14505] ? snprintf+0xdb/0x120 [ 417.321758][T14505] should_fail_ex+0x39d/0x4d0 [ 417.326506][T14505] _copy_to_user+0x2f/0xa0 [ 417.330994][T14505] simple_read_from_buffer+0xe7/0x150 [ 417.336444][T14505] proc_fail_nth_read+0x1e3/0x250 [ 417.341538][T14505] ? proc_fault_inject_write+0x340/0x340 [ 417.347250][T14505] ? fsnotify_perm+0x271/0x5e0 [ 417.352086][T14505] ? proc_fault_inject_write+0x340/0x340 [ 417.357784][T14505] vfs_read+0x27e/0x920 [ 417.362020][T14505] ? kernel_read+0x1e0/0x1e0 [ 417.366847][T14505] ? __fget_files+0x28/0x4d0 [ 417.371501][T14505] ? __fget_files+0x44a/0x4d0 [ 417.376272][T14505] ? __fdget_pos+0x2a3/0x330 [ 417.380917][T14505] ? ksys_read+0x75/0x250 [ 417.385321][T14505] ksys_read+0x147/0x250 [ 417.389641][T14505] ? vfs_write+0x940/0x940 [ 417.394134][T14505] ? lockdep_hardirqs_on+0x98/0x150 [ 417.399412][T14505] do_syscall_64+0x55/0xb0 [ 417.403880][T14505] ? clear_bhb_loop+0x40/0x90 [ 417.408652][T14505] ? clear_bhb_loop+0x40/0x90 [ 417.413410][T14505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.419367][T14505] RIP: 0033:0x7f4a4f98d5bc [ 417.423849][T14505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 417.443511][T14505] RSP: 002b:00007f4a5083a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.451998][T14505] RAX: ffffffffffffffda RBX: 00007f4a4fbd5fa0 RCX: 00007f4a4f98d5bc [ 417.460024][T14505] RDX: 000000000000000f RSI: 00007f4a5083a0a0 RDI: 0000000000000006 [ 417.468041][T14505] RBP: 00007f4a5083a090 R08: 0000000000000000 R09: 0000000000000000 [ 417.476059][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.484124][T14505] R13: 00007f4a4fbd6038 R14: 00007f4a4fbd5fa0 R15: 00007ffec3895478 [ 417.492196][T14505] [ 417.540525][T14506] CPU: 0 PID: 14506 Comm: syz.1.3319 Not tainted syzkaller #0 [ 417.548065][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.558170][T14506] Call Trace: [ 417.561483][T14506] [ 417.564460][T14506] dump_stack_lvl+0x16c/0x230 [ 417.569196][T14506] ? show_regs_print_info+0x20/0x20 [ 417.574445][T14506] ? load_image+0x3b0/0x3b0 [ 417.579000][T14506] ? __lock_acquire+0x7c80/0x7c80 [ 417.584258][T14506] should_fail_ex+0x39d/0x4d0 [ 417.589011][T14506] prepare_alloc_pages+0x1e2/0x5f0 [ 417.594214][T14506] __alloc_pages+0x127/0x460 [ 417.598994][T14506] ? zone_statistics+0x170/0x170 [ 417.604007][T14506] ? do_wp_page+0x826/0x3630 [ 417.608775][T14506] ? do_wp_page+0x1024/0x3630 [ 417.613521][T14506] __folio_alloc+0x10/0x20 [ 417.617986][T14506] vma_alloc_folio+0x47a/0x8f0 [ 417.622826][T14506] do_wp_page+0x128e/0x3630 [ 417.627427][T14506] ? folio_put+0xd0/0xd0 [ 417.631713][T14506] ? do_raw_spin_lock+0x121/0x2c0 [ 417.636806][T14506] ? __rwlock_init+0x150/0x150 [ 417.641655][T14506] ? handle_mm_fault+0xd1/0x4920 [ 417.646655][T14506] handle_mm_fault+0x12d4/0x4920 [ 417.651658][T14506] ? handle_mm_fault+0xd1/0x4920 [ 417.656700][T14506] ? numa_migrate_prep+0x350/0x350 [ 417.661917][T14506] ? lock_mm_and_find_vma+0x9c/0x300 [ 417.667267][T14506] do_user_addr_fault+0x738/0x12e0 [ 417.672484][T14506] exc_page_fault+0x67/0x110 [ 417.677145][T14506] asm_exc_page_fault+0x26/0x30 [ 417.682055][T14506] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 417.687924][T14506] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 417.707582][T14506] RSP: 0018:ffffc9000c19f4f8 EFLAGS: 00050206 [ 417.713713][T14506] RAX: ffffffff841c6b01 RBX: 1ffff92001833fc7 RCX: 00000000000006c1 [ 417.721741][T14506] RDX: 0000000000000000 RSI: ffff88807439393f RDI: 0000200000005000 [ 417.729767][T14506] RBP: ffffc9000c19f650 R08: ffff888074393fff R09: 1ffff1100e8727ff [ 417.737796][T14506] R10: dffffc0000000000 R11: ffffed100e872800 R12: ffff888074393000 [ 417.745818][T14506] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9000c19fe48 [ 417.753950][T14506] ? _copy_to_iter+0x201/0x10d0 [ 417.758871][T14506] _copy_to_iter+0x249/0x10d0 [ 417.763639][T14506] ? iov_iter_init+0x1e0/0x1e0 [ 417.768452][T14506] ? __local_bh_enable_ip+0x12e/0x1c0 [ 417.773876][T14506] ? lockdep_hardirqs_on+0x98/0x150 [ 417.779128][T14506] ? __local_bh_enable_ip+0x12e/0x1c0 [ 417.784562][T14506] ? page_copy_sane+0x16a/0x270 [ 417.789475][T14506] copy_page_to_iter+0xa7/0x150 [ 417.794395][T14506] sk_msg_recvmsg+0x28c/0xc20 [ 417.799193][T14506] unix_bpf_recvmsg+0x5a2/0xd90 [ 417.804166][T14506] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 417.810325][T14506] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 417.816540][T14506] unix_stream_recvmsg+0x13f/0x1b0 [ 417.821729][T14506] ? unix_stream_sendmsg+0xba0/0xba0 [ 417.827096][T14506] ? __unix_stream_recvmsg+0x130/0x130 [ 417.832722][T14506] ? aa_sock_msg_perm+0x94/0x150 [ 417.837716][T14506] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 417.843046][T14506] ? security_socket_recvmsg+0x89/0xb0 [ 417.848557][T14506] ? unix_stream_sendmsg+0xba0/0xba0 [ 417.853923][T14506] ____sys_recvmsg+0x29e/0x5b0 [ 417.858897][T14506] ? __sys_recvmsg_sock+0x50/0x50 [ 417.864025][T14506] ? import_iovec+0x73/0xa0 [ 417.868679][T14506] ___sys_recvmsg+0x1b6/0x510 [ 417.873428][T14506] ? __sys_recvmsg+0x270/0x270 [ 417.878266][T14506] ? ksys_write+0x1c1/0x250 [ 417.882856][T14506] ? __fget_files+0x44a/0x4d0 [ 417.887643][T14506] __x64_sys_recvmsg+0x1f2/0x2c0 [ 417.892638][T14506] ? ___sys_recvmsg+0x510/0x510 [ 417.897598][T14506] ? lockdep_hardirqs_on+0x98/0x150 [ 417.902853][T14506] do_syscall_64+0x55/0xb0 [ 417.907308][T14506] ? clear_bhb_loop+0x40/0x90 [ 417.912024][T14506] ? clear_bhb_loop+0x40/0x90 [ 417.916752][T14506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.922791][T14506] RIP: 0033:0x7f2bc6b8eba9 [ 417.927257][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.946913][T14506] RSP: 002b:00007f2bc7a8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 417.955390][T14506] RAX: ffffffffffffffda RBX: 00007f2bc6dd5fa0 RCX: 00007f2bc6b8eba9 [ 417.963413][T14506] RDX: 0000000000002002 RSI: 0000200000000480 RDI: 0000000000000005 [ 417.971438][T14506] RBP: 00007f2bc7a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 417.979485][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.987508][T14506] R13: 00007f2bc6dd6038 R14: 00007f2bc6dd5fa0 R15: 00007ffd275a65b8 [ 417.995586][T14506] [ 419.785851][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3328'. [ 419.823264][T14534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3328'. [ 419.888963][T14529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3328'. [ 419.928649][T14535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3328'. [ 419.951878][T14529] netlink: 'syz.4.3328': attribute type 2 has an invalid length. [ 420.007282][T14536] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3329'. [ 420.007418][T14529] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 420.114323][T14529] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3328'. [ 425.377211][T14554] FAULT_INJECTION: forcing a failure. [ 425.377211][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 425.464870][T14554] CPU: 1 PID: 14554 Comm: syz.4.3337 Not tainted syzkaller #0 [ 425.472415][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.482525][T14554] Call Trace: [ 425.485864][T14554] [ 425.488844][T14554] dump_stack_lvl+0x16c/0x230 [ 425.493580][T14554] ? show_regs_print_info+0x20/0x20 [ 425.498815][T14554] ? load_image+0x3b0/0x3b0 [ 425.503344][T14554] ? __might_sleep+0xe0/0xe0 [ 425.507951][T14554] ? __lock_acquire+0x7c80/0x7c80 [ 425.513002][T14554] ? lock_chain_count+0x20/0x20 [ 425.517879][T14554] should_fail_ex+0x39d/0x4d0 [ 425.522583][T14554] should_failslab+0x9/0x20 [ 425.527103][T14554] slab_pre_alloc_hook+0x59/0x310 [ 425.532140][T14554] ? _raw_spin_unlock+0x40/0x40 [ 425.537027][T14554] ? __request_module+0x2a6/0x5b0 [ 425.542080][T14554] __kmem_cache_alloc_node+0x53/0x260 [ 425.547485][T14554] ? __request_module+0x2a6/0x5b0 [ 425.552524][T14554] kmalloc_trace+0x2a/0xe0 [ 425.556968][T14554] __request_module+0x2a6/0x5b0 [ 425.561851][T14554] ? module_enforce_rwx_sections+0x150/0x150 [ 425.567851][T14554] ? __lock_acquire+0x7c80/0x7c80 [ 425.572887][T14554] ? do_raw_spin_lock+0x121/0x2c0 [ 425.577929][T14554] ? __might_fault+0xaa/0x120 [ 425.582622][T14554] ? do_raw_spin_unlock+0x121/0x230 [ 425.587839][T14554] ppp_set_compress+0x2f2/0x720 [ 425.592714][T14554] ? ppp_bridge_channels+0x4d0/0x4d0 [ 425.598043][T14554] ? __might_fault+0xc6/0x120 [ 425.602724][T14554] ? __might_fault+0xaa/0x120 [ 425.607422][T14554] ppp_ioctl+0x1437/0x1980 [ 425.611863][T14554] ? ppp_poll+0x250/0x250 [ 425.616203][T14554] ? __fget_files+0x28/0x4d0 [ 425.620839][T14554] ? bpf_lsm_file_ioctl+0x9/0x10 [ 425.625782][T14554] ? security_file_ioctl+0x80/0xa0 [ 425.630907][T14554] ? ppp_poll+0x250/0x250 [ 425.635250][T14554] __se_sys_ioctl+0xfd/0x170 [ 425.639876][T14554] do_syscall_64+0x55/0xb0 [ 425.644299][T14554] ? clear_bhb_loop+0x40/0x90 [ 425.648977][T14554] ? clear_bhb_loop+0x40/0x90 [ 425.653663][T14554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.659594][T14554] RIP: 0033:0x7f4a4f98eba9 [ 425.664148][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.683871][T14554] RSP: 002b:00007f4a5083a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.692307][T14554] RAX: ffffffffffffffda RBX: 00007f4a4fbd5fa0 RCX: 00007f4a4f98eba9 [ 425.700346][T14554] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 425.708355][T14554] RBP: 00007f4a5083a090 R08: 0000000000000000 R09: 0000000000000000 [ 425.716346][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.724347][T14554] R13: 00007f4a4fbd6038 R14: 00007f4a4fbd5fa0 R15: 00007ffec3895478 [ 425.732399][T14554] [ 426.121236][T14566] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3341'. [ 426.153125][T14566] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 426.673178][T14578] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3343'. [ 427.701962][T14605] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3355'. [ 427.735078][T14605] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 428.162270][T14617] FAULT_INJECTION: forcing a failure. [ 428.162270][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 428.202545][T14617] CPU: 0 PID: 14617 Comm: syz.4.3359 Not tainted syzkaller #0 [ 428.210084][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.220264][T14617] Call Trace: [ 428.223559][T14617] [ 428.226684][T14617] dump_stack_lvl+0x16c/0x230 [ 428.231392][T14617] ? show_regs_print_info+0x20/0x20 [ 428.236605][T14617] ? load_image+0x3b0/0x3b0 [ 428.241127][T14617] ? __might_sleep+0xe0/0xe0 [ 428.245740][T14617] ? __lock_acquire+0x7c80/0x7c80 [ 428.250790][T14617] should_fail_ex+0x39d/0x4d0 [ 428.255604][T14617] should_failslab+0x9/0x20 [ 428.260174][T14617] slab_pre_alloc_hook+0x59/0x310 [ 428.265235][T14617] ? __request_module+0x2c2/0x5b0 [ 428.270282][T14617] ? __request_module+0x2c2/0x5b0 [ 428.275341][T14617] __kmem_cache_alloc_node+0x53/0x260 [ 428.280849][T14617] ? __request_module+0x2c2/0x5b0 [ 428.285909][T14617] __kmalloc_node_track_caller+0xa2/0x230 [ 428.291698][T14617] kstrdup+0x3b/0x80 [ 428.295627][T14617] __request_module+0x2c2/0x5b0 [ 428.300505][T14617] ? module_enforce_rwx_sections+0x150/0x150 [ 428.306506][T14617] ? __lock_acquire+0x7c80/0x7c80 [ 428.311534][T14617] ? do_raw_spin_lock+0x121/0x2c0 [ 428.316577][T14617] ? __might_fault+0xaa/0x120 [ 428.321274][T14617] ? do_raw_spin_unlock+0x121/0x230 [ 428.326496][T14617] ppp_set_compress+0x2f2/0x720 [ 428.331372][T14617] ? ppp_bridge_channels+0x4d0/0x4d0 [ 428.336702][T14617] ? __might_fault+0xc6/0x120 [ 428.341418][T14617] ? __might_fault+0xaa/0x120 [ 428.346146][T14617] ppp_ioctl+0x1437/0x1980 [ 428.350606][T14617] ? ppp_poll+0x250/0x250 [ 428.354956][T14617] ? __fget_files+0x28/0x4d0 [ 428.359586][T14617] ? bpf_lsm_file_ioctl+0x9/0x10 [ 428.364535][T14617] ? security_file_ioctl+0x80/0xa0 [ 428.369656][T14617] ? ppp_poll+0x250/0x250 [ 428.373996][T14617] __se_sys_ioctl+0xfd/0x170 [ 428.378604][T14617] do_syscall_64+0x55/0xb0 [ 428.383036][T14617] ? clear_bhb_loop+0x40/0x90 [ 428.387716][T14617] ? clear_bhb_loop+0x40/0x90 [ 428.392401][T14617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.398308][T14617] RIP: 0033:0x7f4a4f98eba9 [ 428.402732][T14617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.422376][T14617] RSP: 002b:00007f4a5083a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.430811][T14617] RAX: ffffffffffffffda RBX: 00007f4a4fbd5fa0 RCX: 00007f4a4f98eba9 [ 428.438840][T14617] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 428.446833][T14617] RBP: 00007f4a5083a090 R08: 0000000000000000 R09: 0000000000000000 [ 428.454818][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.462803][T14617] R13: 00007f4a4fbd6038 R14: 00007f4a4fbd5fa0 R15: 00007ffec3895478 [ 428.470864][T14617] [ 428.734003][T14619] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3357'. [ 429.411878][ T6592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.527666][ T6592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.718464][ T6592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.892561][ T6592] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.418679][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.443342][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.452347][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.460723][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.468771][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 430.476252][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.744241][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.754494][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.773087][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.786460][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.794202][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.802281][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.015572][T14640] chnl_net:caif_netlink_parms(): no params data found [ 431.083857][T14653] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3376'. [ 431.094366][T14653] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 431.120609][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.130234][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.138851][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.148380][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.157823][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.166860][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.315955][T14640] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.323491][T14640] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.330761][T14640] bridge_slave_0: entered allmulticast mode [ 431.340724][T14640] bridge_slave_0: entered promiscuous mode [ 431.391591][T14640] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.398808][T14640] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.407476][T14640] bridge_slave_1: entered allmulticast mode [ 431.417379][T14640] bridge_slave_1: entered promiscuous mode [ 431.480230][T14640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.507557][ T6592] [ 431.509923][ T6592] ====================================================== [ 431.516943][ T6592] WARNING: possible circular locking dependency detected [ 431.523971][ T6592] syzkaller #0 Not tainted [ 431.528375][ T6592] ------------------------------------------------------ [ 431.535383][ T6592] kworker/u4:17/6592 is trying to acquire lock: [ 431.541599][ T6592] ffff888030194d00 (team->team_lock_key#5){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 431.551164][ T6592] [ 431.551164][ T6592] but task is already holding lock: [ 431.558507][ T6592] ffff888049a38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 431.568843][ T6592] [ 431.568843][ T6592] which lock already depends on the new lock. [ 431.568843][ T6592] [ 431.579241][ T6592] [ 431.579241][ T6592] the existing dependency chain (in reverse order) is: [ 431.588242][ T6592] [ 431.588242][ T6592] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 431.595954][ T6592] __mutex_lock+0x129/0xcc0 [ 431.601024][ T6592] ieee80211_open+0x144/0x200 [ 431.606236][ T6592] __dev_open+0x2bc/0x430 [ 431.611079][ T6592] dev_open+0xab/0x170 [ 431.615681][ T6592] team_add_slave+0xae7/0x2660 [ 431.621083][ T6592] do_setlink+0xe14/0x3fb0 [ 431.626002][ T6592] rtnl_newlink+0x175b/0x2020 [ 431.631186][ T6592] rtnetlink_rcv_msg+0x7c7/0xf10 [ 431.636631][ T6592] netlink_rcv_skb+0x216/0x480 [ 431.641898][ T6592] netlink_unicast+0x751/0x8d0 [ 431.647162][ T6592] netlink_sendmsg+0x8c1/0xbe0 [ 431.652438][ T6592] ____sys_sendmsg+0x5bf/0x950 [ 431.657717][ T6592] ___sys_sendmsg+0x220/0x290 [ 431.662930][ T6592] __se_sys_sendmsg+0x1a5/0x270 [ 431.668302][ T6592] do_syscall_64+0x55/0xb0 [ 431.673231][ T6592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.679719][ T6592] [ 431.679719][ T6592] -> #0 (team->team_lock_key#5){+.+.}-{3:3}: [ 431.687901][ T6592] __lock_acquire+0x2ddb/0x7c80 [ 431.693291][ T6592] lock_acquire+0x197/0x410 [ 431.698313][ T6592] __mutex_lock+0x129/0xcc0 [ 431.703340][ T6592] team_del_slave+0x32/0x1c0 [ 431.708428][ T6592] team_device_event+0x28d/0xa20 [ 431.713875][ T6592] notifier_call_chain+0x197/0x390 [ 431.719505][ T6592] unregister_netdevice_many_notify+0xf36/0x1810 [ 431.726335][ T6592] unregister_netdevice_queue+0x324/0x360 [ 431.732553][ T6592] _cfg80211_unregister_wdev+0x16b/0x580 [ 431.738692][ T6592] ieee80211_remove_interfaces+0x496/0x680 [ 431.745016][ T6592] ieee80211_unregister_hw+0x5d/0x2a0 [ 431.750910][ T6592] mac80211_hwsim_del_radio+0x274/0x450 [ 431.756979][ T6592] hwsim_exit_net+0x585/0x640 [ 431.762186][ T6592] cleanup_net+0x6f4/0xb90 [ 431.767115][ T6592] process_scheduled_works+0xa45/0x15b0 [ 431.773170][ T6592] worker_thread+0xa55/0xfc0 [ 431.778294][ T6592] kthread+0x2fa/0x390 [ 431.782965][ T6592] ret_from_fork+0x48/0x80 [ 431.787890][ T6592] ret_from_fork_asm+0x11/0x20 [ 431.793157][ T6592] [ 431.793157][ T6592] other info that might help us debug this: [ 431.793157][ T6592] [ 431.803386][ T6592] Possible unsafe locking scenario: [ 431.803386][ T6592] [ 431.810814][ T6592] CPU0 CPU1 [ 431.816172][ T6592] ---- ---- [ 431.821528][ T6592] lock(&rdev->wiphy.mtx); [ 431.826029][ T6592] lock(team->team_lock_key#5); [ 431.833469][ T6592] lock(&rdev->wiphy.mtx); [ 431.840471][ T6592] lock(team->team_lock_key#5); [ 431.845393][ T6592] [ 431.845393][ T6592] *** DEADLOCK *** [ 431.845393][ T6592] [ 431.853511][ T6592] 5 locks held by kworker/u4:17/6592: [ 431.858852][ T6592] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 431.869704][ T6592] #1: ffffc90003727d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 431.880293][ T6592] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 431.889666][ T6592] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 431.899465][ T6592] #4: ffff888049a38768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 431.910220][ T6592] [ 431.910220][ T6592] stack backtrace: [ 431.916112][ T6592] CPU: 1 PID: 6592 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 431.923724][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.933805][ T6592] Workqueue: netns cleanup_net [ 431.938656][ T6592] Call Trace: [ 431.941928][ T6592] [ 431.944844][ T6592] dump_stack_lvl+0x16c/0x230 [ 431.949505][ T6592] ? load_image+0x3b0/0x3b0 [ 431.953988][ T6592] ? show_regs_print_info+0x20/0x20 [ 431.959169][ T6592] ? print_circular_bug+0x12b/0x1a0 [ 431.964355][ T6592] check_noncircular+0x2bd/0x3c0 [ 431.969276][ T6592] ? print_deadlock_bug+0x5d0/0x5d0 [ 431.974473][ T6592] ? lockdep_lock+0xe0/0x220 [ 431.979050][ T6592] ? __lock_acquire+0x1334/0x7c80 [ 431.984058][ T6592] ? _find_first_zero_bit+0xd3/0x100 [ 431.989328][ T6592] __lock_acquire+0x2ddb/0x7c80 [ 431.994179][ T6592] ? verify_lock_unused+0x140/0x140 [ 431.999372][ T6592] ? verify_lock_unused+0x140/0x140 [ 432.004703][ T6592] lock_acquire+0x197/0x410 [ 432.009183][ T6592] ? team_del_slave+0x32/0x1c0 [ 432.013939][ T6592] ? __might_sleep+0xe0/0xe0 [ 432.018527][ T6592] ? read_lock_is_recursive+0x20/0x20 [ 432.023914][ T6592] __mutex_lock+0x129/0xcc0 [ 432.028417][ T6592] ? team_del_slave+0x32/0x1c0 [ 432.033160][ T6592] ? __lock_acquire+0x7c80/0x7c80 [ 432.038162][ T6592] ? rcu_is_watching+0x15/0xb0 [ 432.042911][ T6592] ? trace_contention_end+0x39/0xe0 [ 432.048110][ T6592] ? __mutex_lock+0x304/0xcc0 [ 432.052776][ T6592] ? team_del_slave+0x32/0x1c0 [ 432.057535][ T6592] ? mutex_lock_nested+0x20/0x20 [ 432.062463][ T6592] ? bond_netdev_event+0xe1/0xef0 [ 432.067488][ T6592] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 432.073196][ T6592] ? bond_ipsec_offload_ok+0x410/0x410 [ 432.078642][ T6592] team_del_slave+0x32/0x1c0 [ 432.083228][ T6592] team_device_event+0x28d/0xa20 [ 432.088155][ T6592] notifier_call_chain+0x197/0x390 [ 432.093250][ T6592] unregister_netdevice_many_notify+0xf36/0x1810 [ 432.099561][ T6592] ? lock_chain_count+0x20/0x20 [ 432.104482][ T6592] ? unregister_netdevice_many+0x20/0x20 [ 432.110117][ T6592] ? kernfs_remove_by_name_ns+0x117/0x150 [ 432.115821][ T6592] ? __lock_acquire+0x7c80/0x7c80 [ 432.120829][ T6592] unregister_netdevice_queue+0x324/0x360 [ 432.126535][ T6592] ? list_netdevice+0x730/0x730 [ 432.131368][ T6592] ? kernfs_remove_by_name_ns+0x117/0x150 [ 432.137091][ T6592] _cfg80211_unregister_wdev+0x16b/0x580 [ 432.142719][ T6592] ieee80211_remove_interfaces+0x496/0x680 [ 432.148531][ T6592] ? ieee80211_do_stop+0x1db0/0x1db0 [ 432.153799][ T6592] ? rcu_is_watching+0x15/0xb0 [ 432.158544][ T6592] ieee80211_unregister_hw+0x5d/0x2a0 [ 432.163911][ T6592] mac80211_hwsim_del_radio+0x274/0x450 [ 432.169477][ T6592] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 432.175025][ T6592] hwsim_exit_net+0x585/0x640 [ 432.179694][ T6592] ? hwsim_init_net+0x90/0x90 [ 432.184356][ T6592] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 432.190178][ T6592] cleanup_net+0x6f4/0xb90 [ 432.194580][ T6592] ? ops_free_list+0x3b0/0x3b0 [ 432.199323][ T6592] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.204538][ T6592] ? process_scheduled_works+0x957/0x15b0 [ 432.210252][ T6592] ? process_scheduled_works+0x957/0x15b0 [ 432.215976][ T6592] process_scheduled_works+0xa45/0x15b0 [ 432.221516][ T6592] ? assign_work+0x400/0x400 [ 432.226100][ T6592] ? assign_work+0x39e/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.230684][ T6592] worker_thread+0xa55/0xfc0 [ 432.235270][ T6592] kthread+0x2fa/0x390 [ 432.239320][ T6592] ? pr_cont_work+0x560/0x560 [ 432.243998][ T6592] ? kthread_blkcg+0xd0/0xd0 [ 432.248671][ T6592] ret_from_fork+0x48/0x80 [ 432.253117][ T6592] ? kthread_blkcg+0xd0/0xd0 [ 432.257688][ T6592] ret_from_fork_asm+0x11/0x20 [ 432.262436][ T6592] [ 432.266164][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 432.314790][ T6592] team0: Port device wlan1 removed [ 432.344347][T14640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.532960][ T5788] Bluetooth: hci0: command tx timeout [ 432.563520][ T6592] hsr_slave_0: left promiscuous mode [ 432.612947][ T6592] hsr_slave_1: left promiscuous mode [ 432.620689][ T6592] veth0_macvtap: left promiscuous mode [ 432.626438][ T6592] veth1_vlan: left promiscuous mode [ 432.631731][ T6592] veth0_vlan: left promiscuous mode [ 432.848354][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 432.872623][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 432.919537][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.946731][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.016873][ T6592] bond0 (unregistering): Released all slaves [ 433.252976][ T5788] Bluetooth: hci2: command tx timeout [ 433.369032][ T6592] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.458658][ T6592] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.520944][ T6592] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.589662][ T6592] bond0: (slave netdevsim0): Releasing backup interface [ 433.599922][ T6592] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.713672][ T6592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.797486][ T6592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.857374][ T6592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.898015][ T6592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.652350][ T6592] bond0: (slave wlan1): Releasing backup interface [ 434.745929][ T6592] hsr_slave_0: left promiscuous mode [ 434.751689][ T6592] hsr_slave_1: left promiscuous mode [ 434.757995][ T6592] bridge_slave_1: left allmulticast mode [ 434.763716][ T6592] bridge_slave_1: left promiscuous mode [ 434.769397][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.778280][ T6592] bridge_slave_0: left allmulticast mode [ 434.783953][ T6592] bridge_slave_0: left promiscuous mode [ 434.789646][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.800518][ T6592] hsr_slave_0: left promiscuous mode [ 434.806780][ T6592] hsr_slave_1: left promiscuous mode [ 434.815111][ T6592] veth0_macvtap: left promiscuous mode [ 434.820659][ T6592] veth1_vlan: left promiscuous mode [ 434.829206][ T6592] veth0_macvtap: left promiscuous mode [ 434.835755][ T6592] veth1_vlan: left promiscuous mode [ 434.840978][ T6592] veth0_vlan: left promiscuous mode [ 435.088074][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 435.116846][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 435.127650][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.155750][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.201525][ T6592] team0 (unregistering): Port device dummy0 removed [ 435.232347][ T6592] bond0 (unregistering): Released all slaves [ 435.253253][ T6592] bond0 (unregistering): Released all slaves [ 435.316334][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.328504][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.368086][ T6592] bond0 (unregistering): Released all slaves [ 435.546413][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 435.557526][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 435.592283][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.617986][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.681046][ T6592] bond0 (unregistering): Released all slaves [ 440.215058][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.221682][ T1283] ieee802154 phy1 wpan1: encryption failed: -22