last executing test programs: 1m45.699150758s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 1m31.052925479s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 1m30.011727228s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 1m15.006375405s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 1m13.112745983s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 1m1.329774377s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 59.915061296s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 43.18648415s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 42.136091452s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 27.261151801s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 25.423604332s ago: executing program 2 (id=44): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb6}, 0x40010020) 17.358485008s ago: executing program 4 (id=1695): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000a5dafe2841cefe7ac3a563af008f6981dd5d0261197ee9efbea45146f6c4b8fb44bf4ad711ded341ea8963e5cd6244660b67d0feb4a84c9ff370748cf337e5452370692df21501310183a3ebdd68b1a5eca222fd0ec0f6b54289f813f371190bdacd02aad635c22bc3283830ed276859fce7a9ae298176ab7a615f6e32e1a813c4dd203a31a48fb85de40848d226656894606ea9c0adf784dd1aaaab89a1c851bf4ce0776f4e17fee6308cfecf0fcba87762912ab726ca36559101a08d1eaf96b6ac081da409f19a8c27bab60a83977026f01f3eee0465fea03ba9bc301b00f337e4c27feeb9e6de8f2effca6ec0d17a94", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000180)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) 16.723740952s ago: executing program 3 (id=1698): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 16.671580151s ago: executing program 1 (id=1699): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1, 0x0, 0x18}, 0x0) 16.641970768s ago: executing program 1 (id=1700): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 16.478633569s ago: executing program 4 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r1, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000)="3801d7dc40de0026219a4000bcbc127e6875ad575fee7cdd66df18cd49936ba2459419c3b58d7a7491221cfa03189d5eaa404657b5f18ba952542f9ed3e7e622792efab28b0fbabfb342cab176a4ff8d9f94736c397198247f13bd310749daa4cd0200bd1a1141755d3a37874e1db520bc03a35fc8a80d982745d23d3ffcf044a1b29d8bc614278616f5a52bb1e57c6fcfe9e0b82221f631e14154328ebe2d624a8ea06107c705cbe74d6dc6df3c5c44db2109ffaf0e0712b94a8add1eb87851cf7fd9101d378ea6fd08b798f54d9b8f", &(0x7f0000000100)=""/201}, 0x20) 16.419390589s ago: executing program 1 (id=1702): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00022e0200002037153e370c04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000600)="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"/1013, 0x401}, {&(0x7f0000000a40)="47f72fedcd1d", 0x6}], 0x3}, 0x10049014) syz_open_procfs$namespace(0x0, 0x0) 16.243731789s ago: executing program 3 (id=1703): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xb}, 0x104a12, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) 16.18477801s ago: executing program 4 (id=1704): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x6}, 0x0) 16.11151655s ago: executing program 1 (id=1705): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r3}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x0, 0xf2ff}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 16.058878609s ago: executing program 3 (id=1706): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x6c6a3fc0180279d3, 0x80, 0x3, 0x9, 0x8, 0x62, 0x0, 0xffff, 0x48428, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x4}, 0x100001, 0x100, 0x2c, 0x2, 0x6, 0x100, 0x1, 0x0, 0x1, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x5f480450}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9f000000240000dacf000000040000000200000002000004830f000001000000050000b10000000010000000010000000500000000612e00"], &(0x7f0000000280)=""/41, 0x40, 0x29, 0x1, 0x6949}, 0x28) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800000000000000002e7aa06acd386bcef454536a93ec360504d9c8418989d6237c92e9459fdd7c8fd0142640fcff6cad92380000000000000000000000000000917ae111f3f1a78a06f8a272771d611b4388fb4a0e8019d81f265cd6f1335f06718650d16fcc92ee7aed3ceade4a9036937a7474fc98f4cb1bb2c07be8e33fabe87795365be3ebc24621fe15a4bf477c624084993399d8efe0020cf3bba581fbc5c5b0858bc07278eec67441ef01c98893fd6e9d8ec3004a10569c401fe6b18fc68cd6186ea321da44661dd26fea7a040d101eaca781dc7b5690740d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, &(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 16.000762959s ago: executing program 4 (id=1707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000e5a0021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 15.911609479s ago: executing program 1 (id=1708): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80005001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e1d360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ccfccbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 15.849502004s ago: executing program 3 (id=1709): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x200}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x8001, @loopback, 0x6}, 0x80, 0x0}, 0x8000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x26}, 0x10) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r6, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 15.84579045s ago: executing program 4 (id=1710): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 15.800679296s ago: executing program 1 (id=1711): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x4}}, 0x80, 0x0}, 0x4000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="07f65da87a0002000400000008000000018ddf65f1617ca4df8b48f57806b70fb7dd34a4e254e33c92b0e529f3d29a531965497fb6b0e41f8599d4fb1c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x65, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x86cb, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8f76, 0x49, &(0x7f0000000340)=""/73, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x8}, @fwd={0xb}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f00000010c0)=""/218, 0x46, 0xda, 0x1, 0x9}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = syz_clone(0x8022c400, &(0x7f0000002b00)="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", 0xfe, &(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)="091ffd8c92086ca6974b0c28dfc41c532bb649613a3deac11d6bec3d9ba11ceec980e63b2e782f413bd67dde21e5e2196ca2f72179d4ed0624d6548abccfe68bd8fd6641e1492cfa7285b5d9dbb155775b637c9900342aaa154b19130a57707233640214906b047c1c59ec34e1140c8770fbbdd4f2a680c88ffd4fdc3cd9585192e2c2d63fa6a1c9331ed9ca9bdd421f4216c0fa94484cf6742821a1cfd4eeaef099bfdc33cb480897eab028f9befbba85967ce104ecb82f4d4dfad8eefff3dee91031a98d5c7a9b3a9bfc09e740") r11 = getpid() r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x4}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r9, &(0x7f0000002e00)={&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001880)="686ac1df954a3ac0ac92143a5e4bf50bbb67e189c4ec64b9133c06d52bd191f19bcef59addeea67c9e18666043c7a589582387280cd156c7b3664a2786e13e5e56dfb1aaf35a17a406bee326af6af32a299c5038298fa1e32736a954e07baa990edbee3ee9b8d0756e12dcbe2b5cff7fdc75d907fa041cf9c814a7cafe12dde033f4587bac2dc200e159f797a841114a6ec0c60498a1aa86467a2b9335351f6c4f930895d0ac9fd629f3be128117aa484e48a0b6dfe654d2a8611ed0eaffcb13f20bf9b7640d943b192bdb", 0xcb}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="e346d825fd42debb07ba81135c3ba10fcd3bd959b987e5c449798d8288915056b4e24ba1805661a655574b57d5000f3dee43a64069a9bafbd288fd50ea1b4ceb8a57e1b3e99263ff5f14", 0x4a}, {&(0x7f0000002a00)="4df4b954357752f7756414b99f03b5f39559a50ce27ad60f7fe2cfb295d8a7d01712adc0cae00d96a9c090cd72c8b4a5f99e84e8750332f898901dd8a973f061484200fa63c89734dbd1e8cecd43bedd232cdd727c9b19d20e90674d054853b95a801ca1de7a149ceecf827e37afaddba2ae9658ba8a91692010e6eaeef34dd750657894c1a2ce49de54559783e5f6fb09254fab0a5fd5488a6fac2d5666adb9909a0499a51caf7c7b5e52222b84d6a50d8394fd57e0739f93081628210168fd0daae7", 0xc3}], 0x4, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee01}}}], 0x60, 0x11}, 0x8006) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r3, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x1d, &(0x7f0000001280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r15 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r15, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r15, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000000004"], 0x28}, 0x24040080) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xf, 0x14, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x13d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x709872fb}, @jmp={0x5, 0x0, 0xd, 0x0, 0x6, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffc0, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x7c, '\x00', r4, @cgroup_device, r5, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x966, 0x6c7}, 0x10, r13, r3, 0x1, &(0x7f0000001540)=[r14, r1], &(0x7f0000001580)=[{0x4, 0x5, 0x1, 0x6}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 15.635255952s ago: executing program 4 (id=1712): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa85}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="080e58", 0x3}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0xc0045878, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) 15.630131512s ago: executing program 3 (id=1713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000000000009010000e9ffffff1800000000000000840000000200"], 0x28}, 0x4000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @exit, @call={0x85, 0x0, 0x0, 0x80}], &(0x7f0000000340)='syzkaller\x00', 0xa2, 0x19, &(0x7f0000000400)=""/25, 0x41000, 0x5, '\x00', r3, 0x0, r0, 0x8, &(0x7f00000006c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xd, 0xde, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x1, 0x4, 0x2, 0x8}, {0x4, 0x5, 0xf, 0x2}], 0x10, 0x6bc}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3e971b"], 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x32, 0x0, 0x0) r8 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r6, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xede3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9e}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r6, &(0x7f0000001e40)='syz0\x00', 0x1ff) write$cgroup_type(r8, &(0x7f0000000280), 0x9) 15.395777681s ago: executing program 3 (id=1714): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 15.032469093s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xa8, 0x3, 0xc, [{@multicast1, 0xf5c}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x772}, {@broadcast, 0x1}, {@empty, 0xb7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xae08f50}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r1, 0x0, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x10000000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000200), &(0x7f0000000840)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffff800}, 0x8) 700.725589ms ago: executing program 32 (id=1711): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x4}}, 0x80, 0x0}, 0x4000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="07f65da87a0002000400000008000000018ddf65f1617ca4df8b48f57806b70fb7dd34a4e254e33c92b0e529f3d29a531965497fb6b0e41f8599d4fb1c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x65, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x86cb, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8f76, 0x49, &(0x7f0000000340)=""/73, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x8}, @fwd={0xb}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f00000010c0)=""/218, 0x46, 0xda, 0x1, 0x9}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = syz_clone(0x8022c400, &(0x7f0000002b00)="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", 0xfe, &(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)="091ffd8c92086ca6974b0c28dfc41c532bb649613a3deac11d6bec3d9ba11ceec980e63b2e782f413bd67dde21e5e2196ca2f72179d4ed0624d6548abccfe68bd8fd6641e1492cfa7285b5d9dbb155775b637c9900342aaa154b19130a57707233640214906b047c1c59ec34e1140c8770fbbdd4f2a680c88ffd4fdc3cd9585192e2c2d63fa6a1c9331ed9ca9bdd421f4216c0fa94484cf6742821a1cfd4eeaef099bfdc33cb480897eab028f9befbba85967ce104ecb82f4d4dfad8eefff3dee91031a98d5c7a9b3a9bfc09e740") r11 = getpid() r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x4}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r9, &(0x7f0000002e00)={&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001880)="686ac1df954a3ac0ac92143a5e4bf50bbb67e189c4ec64b9133c06d52bd191f19bcef59addeea67c9e18666043c7a589582387280cd156c7b3664a2786e13e5e56dfb1aaf35a17a406bee326af6af32a299c5038298fa1e32736a954e07baa990edbee3ee9b8d0756e12dcbe2b5cff7fdc75d907fa041cf9c814a7cafe12dde033f4587bac2dc200e159f797a841114a6ec0c60498a1aa86467a2b9335351f6c4f930895d0ac9fd629f3be128117aa484e48a0b6dfe654d2a8611ed0eaffcb13f20bf9b7640d943b192bdb", 0xcb}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="e346d825fd42debb07ba81135c3ba10fcd3bd959b987e5c449798d8288915056b4e24ba1805661a655574b57d5000f3dee43a64069a9bafbd288fd50ea1b4ceb8a57e1b3e99263ff5f14", 0x4a}, {&(0x7f0000002a00)="4df4b954357752f7756414b99f03b5f39559a50ce27ad60f7fe2cfb295d8a7d01712adc0cae00d96a9c090cd72c8b4a5f99e84e8750332f898901dd8a973f061484200fa63c89734dbd1e8cecd43bedd232cdd727c9b19d20e90674d054853b95a801ca1de7a149ceecf827e37afaddba2ae9658ba8a91692010e6eaeef34dd750657894c1a2ce49de54559783e5f6fb09254fab0a5fd5488a6fac2d5666adb9909a0499a51caf7c7b5e52222b84d6a50d8394fd57e0739f93081628210168fd0daae7", 0xc3}], 0x4, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee01}}}], 0x60, 0x11}, 0x8006) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r3, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x1d, &(0x7f0000001280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r15 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r15, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r15, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000000004"], 0x28}, 0x24040080) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xf, 0x14, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x13d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x709872fb}, @jmp={0x5, 0x0, 0xd, 0x0, 0x6, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffc0, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x7c, '\x00', r4, @cgroup_device, r5, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x966, 0x6c7}, 0x10, r13, r3, 0x1, &(0x7f0000001540)=[r14, r1], &(0x7f0000001580)=[{0x4, 0x5, 0x1, 0x6}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 101.409495ms ago: executing program 33 (id=1714): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 0s ago: executing program 34 (id=1712): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa85}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="080e58", 0x3}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0xc0045878, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): mode [ 364.812168][ T1113] bridge_slave_0: left promiscuous mode [ 364.824428][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.314262][ T5845] Bluetooth: hci3: command tx timeout [ 365.778955][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.789968][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.801484][ T1113] bond0 (unregistering): Released all slaves [ 365.829027][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.929844][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.093717][T11512] team0: Port device team_slave_0 added [ 366.113674][ T5845] Bluetooth: hci1: command tx timeout [ 366.152528][T11512] team0: Port device team_slave_1 added [ 366.400786][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.423298][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.455480][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.541386][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'. [ 366.568710][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.576573][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.603011][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.829665][T11512] hsr_slave_0: entered promiscuous mode [ 366.838724][T11512] hsr_slave_1: entered promiscuous mode [ 366.845933][T11512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.854076][T11512] Cannot create hsr debugfs directory [ 366.878921][ T1113] hsr_slave_0: left promiscuous mode [ 366.888797][ T1113] hsr_slave_1: left promiscuous mode [ 366.898603][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.906372][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.915054][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.922653][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.938891][ T1113] veth1_macvtap: left promiscuous mode [ 366.948547][ T1113] veth0_macvtap: left promiscuous mode [ 366.954966][ T1113] veth1_vlan: left promiscuous mode [ 366.960441][ T1113] veth0_vlan: left promiscuous mode [ 367.034067][T11627] netlink: 'syz.3.1350': attribute type 4 has an invalid length. [ 367.041854][T11627] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1350'. [ 367.396776][ T5845] Bluetooth: hci3: command tx timeout [ 367.587586][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 367.643165][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 368.070258][T11491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.177350][T11491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.193773][ T5845] Bluetooth: hci1: command tx timeout [ 368.298615][T11491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.329359][T11491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.703211][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 368.883967][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 368.918035][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 368.972178][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.011422][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.044552][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.249496][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.329053][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.442173][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.480170][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.490351][ T5845] Bluetooth: hci3: command tx timeout [ 369.511260][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 369.558392][T11491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.637326][T11653] FAULT_INJECTION: forcing a failure. [ 369.637326][T11653] name failslab, interval 1, probability 0, space 0, times 0 [ 369.659107][T11491] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.686641][T11653] CPU: 1 UID: 0 PID: 11653 Comm: syz.1.1357 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 369.686671][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.686683][T11653] Call Trace: [ 369.686691][T11653] [ 369.686700][T11653] dump_stack_lvl+0x189/0x250 [ 369.686735][T11653] ? __pfx____ratelimit+0x10/0x10 [ 369.686764][T11653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.686800][T11653] ? __pfx__printk+0x10/0x10 [ 369.686828][T11653] ? __pfx___might_resched+0x10/0x10 [ 369.686864][T11653] should_fail_ex+0x414/0x560 [ 369.686895][T11653] should_failslab+0xa8/0x100 [ 369.686918][T11653] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 369.686938][T11653] ? __alloc_skb+0x112/0x2d0 [ 369.686965][T11653] __alloc_skb+0x112/0x2d0 [ 369.686992][T11653] __ip_append_data+0x2d99/0x40f0 [ 369.687043][T11653] ? __pfx_udplite_getfrag+0x10/0x10 [ 369.687087][T11653] ? __pfx___ip_append_data+0x10/0x10 [ 369.687122][T11653] ? __local_bh_enable_ip+0x12d/0x1c0 [ 369.687151][T11653] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.687183][T11653] ip_append_data+0x10e/0x190 [ 369.687215][T11653] ? __pfx_udplite_getfrag+0x10/0x10 [ 369.687238][T11653] udp_sendmsg+0x3f5/0x2300 [ 369.687259][T11653] ? perf_output_begin_forward+0xb1/0xa80 [ 369.687296][T11653] ? __pfx_udplite_getfrag+0x10/0x10 [ 369.687316][T11653] ? __pfx_udp_sendmsg+0x10/0x10 [ 369.687332][T11653] ? perf_output_begin_forward+0x9bc/0xa80 [ 369.687388][T11653] ? rcu_read_unlock+0x87/0xa0 [ 369.687413][T11653] ? perf_output_begin_forward+0x9bc/0xa80 [ 369.687440][T11653] udpv6_sendmsg+0x972/0x2710 [ 369.687479][T11653] ? __pfx_udplite_getfrag+0x10/0x10 [ 369.687506][T11653] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 369.687537][T11653] ? __pfx___might_resched+0x10/0x10 [ 369.687564][T11653] ? perf_event_output_forward+0x8f/0x430 [ 369.687585][T11653] ? __pfx_perf_event_output_forward+0x10/0x10 [ 369.687622][T11653] ? aa_sk_perm+0x81e/0x950 [ 369.687648][T11653] ? __perf_event_overflow+0x8c1/0xe10 [ 369.687683][T11653] ? inet_send_prepare+0x5c/0x270 [ 369.687705][T11653] ? inet6_sendmsg+0xe4/0x120 [ 369.687728][T11653] __sock_sendmsg+0xe5/0x270 [ 369.687761][T11653] ____sys_sendmsg+0x505/0x830 [ 369.687799][T11653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.687833][T11653] ? import_iovec+0x74/0xa0 [ 369.687857][T11653] ___sys_sendmsg+0x21f/0x2a0 [ 369.687885][T11653] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.687950][T11653] ? __fget_files+0x2a/0x420 [ 369.687970][T11653] ? __fget_files+0x3a0/0x420 [ 369.688003][T11653] __x64_sys_sendmsg+0x19b/0x260 [ 369.688031][T11653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.688067][T11653] ? __pfx_ksys_write+0x10/0x10 [ 369.688082][T11653] ? rcu_is_watching+0x15/0xb0 [ 369.688117][T11653] ? do_syscall_64+0xbe/0x3b0 [ 369.688140][T11653] do_syscall_64+0xfa/0x3b0 [ 369.688157][T11653] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.688184][T11653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.688203][T11653] ? clear_bhb_loop+0x60/0xb0 [ 369.688227][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.688246][T11653] RIP: 0033:0x7f9a6458e929 [ 369.688263][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.688282][T11653] RSP: 002b:00007f9a6548c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.688304][T11653] RAX: ffffffffffffffda RBX: 00007f9a647b5fa0 RCX: 00007f9a6458e929 [ 369.688319][T11653] RDX: 0000000000048800 RSI: 0000200000000880 RDI: 0000000000000003 [ 369.688332][T11653] RBP: 00007f9a6548c090 R08: 0000000000000000 R09: 0000000000000000 [ 369.688345][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.688357][T11653] R13: 0000000000000000 R14: 00007f9a647b5fa0 R15: 00007ffef726c358 [ 369.688389][T11653] [ 370.062201][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.069387][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.087283][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.094481][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.126098][T11491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.137053][T11491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.485563][T11512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.499159][T11512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.520720][T11512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.537381][T11512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.625651][T11491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.128686][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.144325][T11491] veth0_vlan: entered promiscuous mode [ 371.456191][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.490581][T11491] veth1_vlan: entered promiscuous mode [ 371.593079][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.600329][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.610537][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.617744][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.764961][T11491] veth0_macvtap: entered promiscuous mode [ 371.778087][T11491] veth1_macvtap: entered promiscuous mode [ 372.017627][T11491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.050418][T11491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.078698][T11491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.095847][T11491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.114469][T11491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.123241][T11491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.432955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.460977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.472765][T11512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.531737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.549757][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.636156][T11512] veth0_vlan: entered promiscuous mode [ 373.682747][T11731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.685023][T11512] veth1_vlan: entered promiscuous mode [ 373.690339][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 373.703247][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 373.710622][T11731] IPv6: NLM_F_CREATE should be set when creating new route [ 373.975529][T11512] veth0_macvtap: entered promiscuous mode [ 374.030825][T11512] veth1_macvtap: entered promiscuous mode [ 374.122986][T11512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.181920][T11512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.232608][T11512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.258466][T11512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.285240][T11512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.299587][T11512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.639982][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.828796][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.869527][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.977417][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.000455][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.066289][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.267469][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.427539][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.536518][ T3462] bridge_slave_1: left allmulticast mode [ 375.542209][ T3462] bridge_slave_1: left promiscuous mode [ 375.548794][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.559291][ T3462] bridge_slave_0: left allmulticast mode [ 375.566940][ T3462] bridge_slave_0: left promiscuous mode [ 375.572648][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.868607][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.880838][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.894719][ T3462] bond0 (unregistering): Released all slaves [ 376.148801][ T3462] hsr_slave_0: left promiscuous mode [ 376.184313][ T3462] hsr_slave_1: left promiscuous mode [ 376.192148][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.201340][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.213075][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.222410][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.248162][ T3462] veth1_macvtap: left promiscuous mode [ 376.255388][ T3462] veth0_macvtap: left promiscuous mode [ 376.261069][ T3462] veth1_vlan: left promiscuous mode [ 376.268822][ T3462] veth0_vlan: left promiscuous mode [ 376.727311][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.738532][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.748560][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.756868][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.766165][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.898656][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 376.938698][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 377.519715][T11762] chnl_net:caif_netlink_parms(): no params data found [ 377.599213][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.606696][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.615015][T11762] bridge_slave_0: entered allmulticast mode [ 377.622025][T11762] bridge_slave_0: entered promiscuous mode [ 377.630434][T11762] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.638347][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.646052][T11762] bridge_slave_1: entered allmulticast mode [ 377.653039][T11762] bridge_slave_1: entered promiscuous mode [ 377.694569][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.706745][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.739528][T11762] team0: Port device team_slave_0 added [ 377.747895][T11762] team0: Port device team_slave_1 added [ 377.898327][ T3462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.936313][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.943312][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.976796][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.991884][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.034210][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.085489][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.183899][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1394'. [ 378.256870][ T3462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.548694][ T3462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.572378][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.581559][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.598591][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604986][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.615377][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.625048][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.638423][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.727764][ T3462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.750694][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 378.759906][T11795] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1398'. [ 378.778907][T11762] hsr_slave_0: entered promiscuous mode [ 378.786569][T11762] hsr_slave_1: entered promiscuous mode [ 378.794403][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 378.835047][ T5845] Bluetooth: hci1: command tx timeout [ 378.975552][T11799] netlink: 'syz.4.1399': attribute type 10 has an invalid length. [ 379.126956][T11799] veth0_vlan: left promiscuous mode [ 379.165621][T11799] veth0_vlan: entered promiscuous mode [ 379.215694][T11799] team0: Device veth0_vlan failed to register rx_handler [ 379.516005][ T3462] bridge_slave_1: left allmulticast mode [ 379.521679][ T3462] bridge_slave_1: left promiscuous mode [ 379.528568][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.566072][ T3462] bridge_slave_0: left allmulticast mode [ 379.584824][ T3462] bridge_slave_0: left promiscuous mode [ 379.590666][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.957384][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.968714][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.979514][ T3462] bond0 (unregistering): Released all slaves [ 380.138472][T11817] netlink: 'syz.4.1404': attribute type 29 has an invalid length. [ 380.231646][T11819] netlink: 'syz.4.1404': attribute type 29 has an invalid length. [ 380.434649][T11792] chnl_net:caif_netlink_parms(): no params data found [ 380.498299][ T3462] hsr_slave_0: left promiscuous mode [ 380.523019][ T3462] hsr_slave_1: left promiscuous mode [ 380.538213][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.548125][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.578801][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.625599][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 380.637559][T11834] netlink: 125488 bytes leftover after parsing attributes in process `syz.4.1411'. [ 380.648032][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 380.661625][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.673942][ T5845] Bluetooth: hci3: command tx timeout [ 380.717755][ T3462] veth1_macvtap: left promiscuous mode [ 380.723381][ T3462] veth0_macvtap: left promiscuous mode [ 380.732117][ T3462] veth1_vlan: left promiscuous mode [ 380.737560][ T3462] veth0_vlan: left promiscuous mode [ 380.917434][ T5845] Bluetooth: hci1: command tx timeout [ 381.043808][T11849] netlink: 'syz.4.1417': attribute type 3 has an invalid length. [ 381.051579][T11849] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1417'. [ 381.498393][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 381.549695][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 382.160006][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.169402][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.180026][T11792] bridge_slave_0: entered allmulticast mode [ 382.197980][T11792] bridge_slave_0: entered promiscuous mode [ 382.225925][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.233089][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.267807][T11792] bridge_slave_1: entered allmulticast mode [ 382.281210][T11792] bridge_slave_1: entered promiscuous mode [ 382.550028][T11762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.567054][T11876] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1424'. [ 382.587100][T11876] net_ratelimit: 160 callbacks suppressed [ 382.587119][T11876] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 382.606154][T11876] openvswitch: netlink: Key type 256 is out of range max 32 [ 382.763757][ T5845] Bluetooth: hci3: command tx timeout [ 382.801471][T11762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.823070][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.851145][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.867828][T11762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.933049][T11762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.955599][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 382.993771][ T5845] Bluetooth: hci1: command tx timeout [ 383.071806][T11792] team0: Port device team_slave_0 added [ 383.112318][T11792] team0: Port device team_slave_1 added [ 383.203076][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.211649][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.237988][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.253536][T11900] __nla_validate_parse: 2 callbacks suppressed [ 383.265277][T11900] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1432'. [ 383.280306][T11900] batadv_slave_1: entered promiscuous mode [ 383.288530][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.314131][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.360158][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.478506][T11792] hsr_slave_0: entered promiscuous mode [ 383.485913][T11792] hsr_slave_1: entered promiscuous mode [ 383.492313][T11792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.501755][T11792] Cannot create hsr debugfs directory [ 383.527474][T11910] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1435'. [ 383.661550][T11762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.917661][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 383.938701][T11923] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1442'. [ 383.949674][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 384.027389][T11762] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.093202][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.100386][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.134723][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.141913][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.834222][ T5845] Bluetooth: hci3: command tx timeout [ 385.074564][ T5845] Bluetooth: hci1: command tx timeout [ 385.159866][T11935] netlink: 'syz.1.1446': attribute type 2 has an invalid length. [ 385.300002][T11792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.321342][T11792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.353855][T11792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.367555][T11792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.576159][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.626183][T11961] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1453'. [ 385.665180][T11963] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 385.777624][T11762] veth0_vlan: entered promiscuous mode [ 385.799289][T11762] veth1_vlan: entered promiscuous mode [ 385.866398][T11792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.906458][T11762] veth0_macvtap: entered promiscuous mode [ 385.989772][T11762] veth1_macvtap: entered promiscuous mode [ 386.003040][T11792] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.039957][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.047164][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.108164][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.134909][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.142155][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.181920][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.201561][T11762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.219417][T11762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.233199][T11762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.245609][T11762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.916330][ T5845] Bluetooth: hci3: command tx timeout [ 387.248012][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.281242][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.655648][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.686203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.944682][T11792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.016137][T11792] veth0_vlan: entered promiscuous mode [ 388.044344][T11792] veth1_vlan: entered promiscuous mode [ 388.099385][T11792] veth0_macvtap: entered promiscuous mode [ 388.110118][T11792] veth1_macvtap: entered promiscuous mode [ 388.140440][T11792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.156878][T11792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.287357][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.342243][T11792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.363348][T11792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.382293][T11792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.392257][T11792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.471441][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.542144][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.571835][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.585345][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.610053][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.618662][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.800924][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.960034][ T59] bridge_slave_1: left allmulticast mode [ 388.966710][ T59] bridge_slave_1: left promiscuous mode [ 388.972489][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.986427][ T59] bridge_slave_0: left allmulticast mode [ 388.992108][ T59] bridge_slave_0: left promiscuous mode [ 389.001432][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.391904][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.404993][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.417959][ T59] bond0 (unregistering): Released all slaves [ 389.743931][ T59] hsr_slave_0: left promiscuous mode [ 389.750015][ T59] hsr_slave_1: left promiscuous mode [ 389.756533][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.766450][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.775880][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.783339][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.807524][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.811219][ T59] veth1_macvtap: left promiscuous mode [ 389.820497][ T59] veth0_macvtap: left promiscuous mode [ 389.821366][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.834941][ T59] veth1_vlan: left promiscuous mode [ 389.835009][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.840285][ T59] veth0_vlan: left promiscuous mode [ 389.854157][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.863094][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.246696][ T59] team0 (unregistering): Port device team_slave_1 removed [ 390.287423][ T59] team0 (unregistering): Port device team_slave_0 removed [ 390.831519][T12015] chnl_net:caif_netlink_parms(): no params data found [ 390.908794][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.919684][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.927606][T12015] bridge_slave_0: entered allmulticast mode [ 390.935825][T12015] bridge_slave_0: entered promiscuous mode [ 390.943809][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.951036][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.958886][T12015] bridge_slave_1: entered allmulticast mode [ 390.966354][T12015] bridge_slave_1: entered promiscuous mode [ 391.004020][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.016904][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.126491][T12025] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1472'. [ 391.151956][T12015] team0: Port device team_slave_0 added [ 391.153823][T12025] netlink: zone id is out of range [ 391.174196][T12025] netlink: zone id is out of range [ 391.179377][T12025] netlink: zone id is out of range [ 391.208099][T12025] netlink: zone id is out of range [ 391.226198][T12025] netlink: zone id is out of range [ 391.227545][T12015] team0: Port device team_slave_1 added [ 391.242798][T12025] netlink: zone id is out of range [ 391.275491][T12025] netlink: zone id is out of range [ 391.290046][T12025] netlink: zone id is out of range [ 391.306902][T12025] netlink: zone id is out of range [ 391.312119][T12025] netlink: zone id is out of range [ 391.374455][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.395226][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.422074][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.435927][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.442903][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.474865][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.495961][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 391.514088][T12034] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1474'. [ 391.533772][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 391.590815][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.627982][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.646445][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.663951][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.672482][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.681017][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.787718][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.868535][T12015] hsr_slave_0: entered promiscuous mode [ 391.905325][T12015] hsr_slave_1: entered promiscuous mode [ 391.964331][ T5845] Bluetooth: hci1: command tx timeout [ 392.000808][T12053] sctp: [Deprecated]: syz.1.1481 (pid 12053) Use of int in maxseg socket option. [ 392.000808][T12053] Use struct sctp_assoc_value instead [ 392.061617][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.215767][T12054] syzkaller0: entered promiscuous mode [ 392.221436][T12054] syzkaller0: entered allmulticast mode [ 392.266920][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.699855][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 392.710623][T12073] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1487'. [ 392.720594][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 393.727031][ T5845] Bluetooth: hci3: command tx timeout [ 394.033662][ T5845] Bluetooth: hci1: command tx timeout [ 395.330346][T12095] sctp: [Deprecated]: syz.4.1495 (pid 12095) Use of int in maxseg socket option. [ 395.330346][T12095] Use struct sctp_assoc_value instead [ 395.499179][ T59] bridge_slave_1: left allmulticast mode [ 395.506750][ T59] bridge_slave_1: left promiscuous mode [ 395.512456][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.526099][ T59] bridge_slave_0: left allmulticast mode [ 395.532228][ T59] bridge_slave_0: left promiscuous mode [ 395.538190][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.795329][ T5845] Bluetooth: hci3: command tx timeout [ 395.890471][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.901521][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.911506][ T59] bond0 (unregistering): Released all slaves [ 395.963003][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.970653][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.979194][T12103] bridge0: entered allmulticast mode [ 396.025163][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.032276][T12104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.039694][T12104] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.046971][T12104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.057451][T12104] bridge0: entered promiscuous mode [ 396.114080][ T5845] Bluetooth: hci1: command tx timeout [ 396.172663][T12038] chnl_net:caif_netlink_parms(): no params data found [ 396.366489][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 396.375911][T12110] netlink: 125488 bytes leftover after parsing attributes in process `syz.4.1499'. [ 396.390217][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 396.440161][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.474776][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.482183][T12038] bridge_slave_0: entered allmulticast mode [ 396.495816][T12038] bridge_slave_0: entered promiscuous mode [ 396.563317][ T59] hsr_slave_0: left promiscuous mode [ 396.593982][ T59] hsr_slave_1: left promiscuous mode [ 396.600082][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.636741][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.684573][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.692042][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.738003][ T59] veth1_macvtap: left promiscuous mode [ 396.764613][ T59] veth0_macvtap: left promiscuous mode [ 396.779405][ T59] veth1_vlan: left promiscuous mode [ 396.789779][ T59] veth0_vlan: left promiscuous mode [ 397.149731][T12128] netlink: 'syz.3.1505': attribute type 39 has an invalid length. [ 397.481143][ T59] team0 (unregistering): Port device team_slave_1 removed [ 397.518949][ T59] team0 (unregistering): Port device team_slave_0 removed [ 397.873275][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.880629][ T5845] Bluetooth: hci3: command tx timeout [ 397.888611][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.895931][T12038] bridge_slave_1: entered allmulticast mode [ 397.904841][T12038] bridge_slave_1: entered promiscuous mode [ 398.047021][T12132] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1508'. [ 398.056176][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.071493][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.089873][T12130] sctp: [Deprecated]: syz.1.1506 (pid 12130) Use of int in maxseg socket option. [ 398.089873][T12130] Use struct sctp_assoc_value instead [ 398.207260][ T5845] Bluetooth: hci1: command tx timeout [ 398.287731][T12038] team0: Port device team_slave_0 added [ 398.316780][T12015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.370979][T12038] team0: Port device team_slave_1 added [ 398.386753][T12015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.453843][T12144] FAULT_INJECTION: forcing a failure. [ 398.453843][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 398.468509][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.1.1511 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 398.468536][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.468547][T12144] Call Trace: [ 398.468554][T12144] [ 398.468563][T12144] dump_stack_lvl+0x189/0x250 [ 398.468598][T12144] ? __pfx____ratelimit+0x10/0x10 [ 398.468630][T12144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.468658][T12144] ? __pfx__printk+0x10/0x10 [ 398.468691][T12144] ? __pfx___might_resched+0x10/0x10 [ 398.468725][T12144] should_fail_ex+0x414/0x560 [ 398.468756][T12144] should_failslab+0xa8/0x100 [ 398.468779][T12144] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 398.468798][T12144] ? __alloc_skb+0x112/0x2d0 [ 398.468826][T12144] __alloc_skb+0x112/0x2d0 [ 398.468852][T12144] netlink_sendmsg+0x5c6/0xb30 [ 398.468886][T12144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.468912][T12144] ? aa_sock_msg_perm+0x94/0x160 [ 398.468938][T12144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.468961][T12144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.468986][T12144] __sock_sendmsg+0x21c/0x270 [ 398.469019][T12144] ____sys_sendmsg+0x505/0x830 [ 398.469050][T12144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.469087][T12144] ? import_iovec+0x74/0xa0 [ 398.469112][T12144] ___sys_sendmsg+0x21f/0x2a0 [ 398.469140][T12144] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.469192][T12144] ? __fget_files+0x2a/0x420 [ 398.469230][T12144] ? __fget_files+0x2a/0x420 [ 398.469249][T12144] ? __fget_files+0x3a0/0x420 [ 398.469284][T12144] __x64_sys_sendmsg+0x19b/0x260 [ 398.469311][T12144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.469348][T12144] ? __pfx_ksys_write+0x10/0x10 [ 398.469364][T12144] ? rcu_is_watching+0x15/0xb0 [ 398.469399][T12144] ? do_syscall_64+0xbe/0x3b0 [ 398.469422][T12144] do_syscall_64+0xfa/0x3b0 [ 398.469438][T12144] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.469466][T12144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.469485][T12144] ? clear_bhb_loop+0x60/0xb0 [ 398.469509][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.469528][T12144] RIP: 0033:0x7f9a6458e929 [ 398.469545][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.469562][T12144] RSP: 002b:00007f9a6548c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.469583][T12144] RAX: ffffffffffffffda RBX: 00007f9a647b5fa0 RCX: 00007f9a6458e929 [ 398.469598][T12144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 398.469611][T12144] RBP: 00007f9a6548c090 R08: 0000000000000000 R09: 0000000000000000 [ 398.469623][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.469635][T12144] R13: 0000000000000000 R14: 00007f9a647b5fa0 R15: 00007ffef726c358 [ 398.469670][T12144] [ 398.767360][T12015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.786207][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1512'. [ 398.819437][T12143] netlink: 125488 bytes leftover after parsing attributes in process `syz.4.1512'. [ 398.841194][T12015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.868229][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1512'. [ 398.908536][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.945686][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.014877][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.351711][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.384274][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.456414][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.797011][T12038] hsr_slave_0: entered promiscuous mode [ 399.803228][T12038] hsr_slave_1: entered promiscuous mode [ 399.810071][T12038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.818879][T12038] Cannot create hsr debugfs directory [ 399.924525][T12162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1516'. [ 399.926649][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1516'. [ 399.953733][ T5845] Bluetooth: hci3: command tx timeout [ 400.069361][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.100466][T12163] bridge_slave_0 (unregistering): left allmulticast mode [ 400.110071][T12163] bridge_slave_0 (unregistering): left promiscuous mode [ 400.119846][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.605451][T12172] sctp: [Deprecated]: syz.4.1519 (pid 12172) Use of int in maxseg socket option. [ 400.605451][T12172] Use struct sctp_assoc_value instead [ 400.777898][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.831482][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.859756][T12179] netlink: 'syz.3.1522': attribute type 21 has an invalid length. [ 400.895258][T12179] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1522'. [ 400.911916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.919162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.965743][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.972965][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.097474][T12183] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 401.109858][T12183] netlink: 'syz.4.1524': attribute type 8 has an invalid length. [ 401.316625][T12038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.338202][T12038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.393063][T12038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.430120][T12038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.588607][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.666727][T12214] sctp: [Deprecated]: syz.1.1532 (pid 12214) Use of int in maxseg socket option. [ 401.666727][T12214] Use struct sctp_assoc_value instead [ 401.800532][T12015] veth0_vlan: entered promiscuous mode [ 401.822663][T12015] veth1_vlan: entered promiscuous mode [ 401.929159][T12015] veth0_macvtap: entered promiscuous mode [ 402.019206][T12015] veth1_macvtap: entered promiscuous mode [ 402.517210][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.735930][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.851694][T12038] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.922003][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.958468][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.965725][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.986409][T12236] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 404.741987][T12015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.761928][T12015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.770901][T12015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.780330][T12015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.843107][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.850584][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.872331][T12236] macvlan0: entered promiscuous mode [ 404.912483][T12236] : (slave macvlan0): Enslaving as an active interface with an up link [ 405.398956][T12250] sctp: [Deprecated]: syz.4.1545 (pid 12250) Use of int in maxseg socket option. [ 405.398956][T12250] Use struct sctp_assoc_value instead [ 405.537963][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.573652][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.656674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.685850][T12260] netlink: 'syz.3.1547': attribute type 29 has an invalid length. [ 405.685974][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.717044][T12260] netlink: 'syz.3.1547': attribute type 29 has an invalid length. [ 405.911764][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.015509][T12038] veth0_vlan: entered promiscuous mode [ 406.031830][T12038] veth1_vlan: entered promiscuous mode [ 406.075037][T12038] veth0_macvtap: entered promiscuous mode [ 406.091779][T12038] veth1_macvtap: entered promiscuous mode [ 406.121949][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.141026][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.160791][T12038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.169930][T12038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.183464][T12038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.205103][T12038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.375403][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.395728][T12281] __nla_validate_parse: 4 callbacks suppressed [ 406.395767][T12281] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1556'. [ 406.549371][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.583860][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.595113][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.667974][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.678869][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.760805][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.842952][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.975967][ T36] bridge_slave_1: left allmulticast mode [ 406.982289][ T36] bridge_slave_1: left promiscuous mode [ 406.989359][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.000421][ T36] bridge_slave_0: left allmulticast mode [ 407.006488][ T36] bridge_slave_0: left promiscuous mode [ 407.012209][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.486749][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.508747][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.521747][ T36] bond0 (unregistering): Released all slaves [ 407.627064][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.650674][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.665032][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.681209][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.692718][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.898565][ T36] hsr_slave_0: left promiscuous mode [ 407.907101][ T36] hsr_slave_1: left promiscuous mode [ 407.913268][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.922022][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.931970][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.939501][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.955928][ T36] veth1_macvtap: left promiscuous mode [ 407.961448][ T36] veth0_macvtap: left promiscuous mode [ 407.967313][ T36] veth1_vlan: left promiscuous mode [ 407.972609][ T36] veth0_vlan: left promiscuous mode [ 408.372297][ T36] team0 (unregistering): Port device team_slave_1 removed [ 408.417006][ T36] team0 (unregistering): Port device team_slave_0 removed [ 408.789280][T12287] chnl_net:caif_netlink_parms(): no params data found [ 408.910253][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.917638][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.926166][T12287] bridge_slave_0: entered allmulticast mode [ 408.933868][T12287] bridge_slave_0: entered promiscuous mode [ 408.943139][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.951590][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.985609][T12287] bridge_slave_1: entered allmulticast mode [ 409.015963][T12287] bridge_slave_1: entered promiscuous mode [ 409.055110][T12300] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1559'. [ 409.069089][T12297] sctp: [Deprecated]: syz.3.1558 (pid 12297) Use of int in maxseg socket option. [ 409.069089][T12297] Use struct sctp_assoc_value instead [ 409.148303][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.186757][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.364149][T12287] team0: Port device team_slave_0 added [ 409.410819][T12287] team0: Port device team_slave_1 added [ 409.598917][T12310] netlink: 'syz.4.1559': attribute type 13 has an invalid length. [ 409.803090][ T5845] Bluetooth: hci1: command tx timeout [ 410.088162][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.131192][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.145074][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.204826][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.216622][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.228956][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.237505][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.262152][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.274237][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.409973][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.455688][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.468429][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.507001][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.550200][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.672177][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.716975][T12287] hsr_slave_0: entered promiscuous mode [ 410.728420][T12287] hsr_slave_1: entered promiscuous mode [ 411.835754][ T59] bridge_slave_1: left allmulticast mode [ 411.841470][ T59] bridge_slave_1: left promiscuous mode [ 411.848660][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.865214][ T59] bridge_slave_0: left allmulticast mode [ 411.877418][ T51] Bluetooth: hci1: command tx timeout [ 411.888228][T12343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1574'. [ 411.894266][ T59] bridge_slave_0: left promiscuous mode [ 411.903016][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.378167][ T51] Bluetooth: hci3: command tx timeout [ 412.660091][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 412.672223][T12367] netlink: 125488 bytes leftover after parsing attributes in process `syz.4.1583'. [ 412.686719][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 412.839220][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.850342][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.861854][ T59] bond0 (unregistering): Released all slaves [ 413.961273][ T51] Bluetooth: hci1: command tx timeout [ 414.240915][ T59] hsr_slave_0: left promiscuous mode [ 414.264328][ T59] hsr_slave_1: left promiscuous mode [ 414.283532][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.296641][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.342727][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.354813][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.435817][ T51] Bluetooth: hci3: command tx timeout [ 414.461629][ T59] veth1_macvtap: left promiscuous mode [ 414.480428][ T59] veth0_macvtap: left promiscuous mode [ 414.492680][ T59] veth1_vlan: left promiscuous mode [ 414.503370][ T59] veth0_vlan: left promiscuous mode [ 415.126758][T12402] FAULT_INJECTION: forcing a failure. [ 415.126758][T12402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.140183][T12402] CPU: 1 UID: 0 PID: 12402 Comm: syz.3.1595 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 415.140210][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.140222][T12402] Call Trace: [ 415.140229][T12402] [ 415.140237][T12402] dump_stack_lvl+0x189/0x250 [ 415.140272][T12402] ? __pfx____ratelimit+0x10/0x10 [ 415.140301][T12402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.140330][T12402] ? __pfx__printk+0x10/0x10 [ 415.140365][T12402] should_fail_ex+0x414/0x560 [ 415.140394][T12402] _copy_to_user+0x31/0xb0 [ 415.140417][T12402] simple_read_from_buffer+0xe1/0x170 [ 415.140442][T12402] proc_fail_nth_read+0x1df/0x250 [ 415.140470][T12402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.140496][T12402] ? rw_verify_area+0x258/0x650 [ 415.140524][T12402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.140549][T12402] vfs_read+0x200/0x980 [ 415.140583][T12402] ? __pfx___mutex_lock+0x10/0x10 [ 415.140602][T12402] ? __pfx_vfs_read+0x10/0x10 [ 415.140631][T12402] ? __fget_files+0x2a/0x420 [ 415.140657][T12402] ? __fget_files+0x3a0/0x420 [ 415.140677][T12402] ? __fget_files+0x2a/0x420 [ 415.140709][T12402] ksys_read+0x145/0x250 [ 415.140730][T12402] ? __pfx_ksys_read+0x10/0x10 [ 415.140756][T12402] ? rcu_is_watching+0x15/0xb0 [ 415.140796][T12402] ? do_syscall_64+0xbe/0x3b0 [ 415.140825][T12402] do_syscall_64+0xfa/0x3b0 [ 415.140841][T12402] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.140866][T12402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.140885][T12402] ? clear_bhb_loop+0x60/0xb0 [ 415.140906][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.140922][T12402] RIP: 0033:0x7f9d6018d33c [ 415.140938][T12402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.140953][T12402] RSP: 002b:00007f9d60f65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.140972][T12402] RAX: ffffffffffffffda RBX: 00007f9d603b5fa0 RCX: 00007f9d6018d33c [ 415.140985][T12402] RDX: 000000000000000f RSI: 00007f9d60f650a0 RDI: 0000000000000003 [ 415.140996][T12402] RBP: 00007f9d60f65090 R08: 0000000000000000 R09: 0000000000000000 [ 415.141007][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.141019][T12402] R13: 0000000000000001 R14: 00007f9d603b5fa0 R15: 00007ffd6f2bd3c8 [ 415.141051][T12402] [ 415.508490][ T59] team0 (unregistering): Port device team_slave_1 removed [ 415.548432][ T59] team0 (unregistering): Port device team_slave_0 removed [ 416.033852][ T51] Bluetooth: hci1: command tx timeout [ 416.252905][T12315] chnl_net:caif_netlink_parms(): no params data found [ 416.513812][ T51] Bluetooth: hci3: command tx timeout [ 416.812998][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.843895][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.851155][T12315] bridge_slave_0: entered allmulticast mode [ 416.858957][T12315] bridge_slave_0: entered promiscuous mode [ 416.870597][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.877909][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.885440][T12315] bridge_slave_1: entered allmulticast mode [ 416.893146][T12315] bridge_slave_1: entered promiscuous mode [ 416.941934][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.956255][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.983505][T12287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.000406][T12287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.028427][T12287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.083311][T12287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.131996][T12315] team0: Port device team_slave_0 added [ 417.153078][T12315] team0: Port device team_slave_1 added [ 417.217042][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.224939][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.254532][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.290772][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.339637][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.408486][T12442] netlink: 'syz.1.1605': attribute type 10 has an invalid length. [ 417.420400][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.458262][T12444] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1605'. [ 417.521174][T12446] netlink: 'syz.3.1607': attribute type 21 has an invalid length. [ 417.522617][T12315] hsr_slave_0: entered promiscuous mode [ 417.529648][T12446] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1607'. [ 417.537409][T12315] hsr_slave_1: entered promiscuous mode [ 417.551347][T12315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.560290][T12315] Cannot create hsr debugfs directory [ 417.574479][T12446] netlink: 'syz.3.1607': attribute type 3 has an invalid length. [ 417.582798][T12446] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1607'. [ 417.595532][T12447] netlink: 'syz.3.1607': attribute type 21 has an invalid length. [ 417.605589][T12447] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1607'. [ 417.660054][T12447] netlink: 'syz.3.1607': attribute type 3 has an invalid length. [ 417.668633][T12447] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1607'. [ 417.842725][T12455] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1610'. [ 417.848482][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.925637][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.960274][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.967430][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.989451][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.996664][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.277045][T12464] FAULT_INJECTION: forcing a failure. [ 418.277045][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.302698][T12464] CPU: 1 UID: 0 PID: 12464 Comm: syz.4.1612 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 418.302726][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.302738][T12464] Call Trace: [ 418.302745][T12464] [ 418.302755][T12464] dump_stack_lvl+0x189/0x250 [ 418.302788][T12464] ? __pfx____ratelimit+0x10/0x10 [ 418.302817][T12464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.302846][T12464] ? __pfx__printk+0x10/0x10 [ 418.302867][T12464] ? __might_fault+0xb0/0x130 [ 418.302901][T12464] should_fail_ex+0x414/0x560 [ 418.302931][T12464] _copy_from_user+0x2d/0xb0 [ 418.302952][T12464] ___sys_sendmsg+0x158/0x2a0 [ 418.302981][T12464] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.303051][T12464] ? __fget_files+0x2a/0x420 [ 418.303072][T12464] ? __fget_files+0x3a0/0x420 [ 418.303106][T12464] __x64_sys_sendmsg+0x19b/0x260 [ 418.303134][T12464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.303173][T12464] ? __pfx_ksys_write+0x10/0x10 [ 418.303189][T12464] ? rcu_is_watching+0x15/0xb0 [ 418.303224][T12464] ? do_syscall_64+0xbe/0x3b0 [ 418.303244][T12464] do_syscall_64+0xfa/0x3b0 [ 418.303260][T12464] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.303297][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.303316][T12464] ? clear_bhb_loop+0x60/0xb0 [ 418.303340][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.303357][T12464] RIP: 0033:0x7f11fcb8e929 [ 418.303375][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.303392][T12464] RSP: 002b:00007f11fd945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.303411][T12464] RAX: ffffffffffffffda RBX: 00007f11fcdb6080 RCX: 00007f11fcb8e929 [ 418.303425][T12464] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 418.303438][T12464] RBP: 00007f11fd945090 R08: 0000000000000000 R09: 0000000000000000 [ 418.303450][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.303461][T12464] R13: 0000000000000000 R14: 00007f11fcdb6080 R15: 00007fffd5623c68 [ 418.303495][T12464] [ 418.593888][ T51] Bluetooth: hci3: command tx timeout [ 418.693275][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.741332][T12287] veth0_vlan: entered promiscuous mode [ 418.778526][T12315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.805933][T12287] veth1_vlan: entered promiscuous mode [ 418.821885][T12315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.873708][T12315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.964069][T12315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 419.187517][T12287] veth0_macvtap: entered promiscuous mode [ 419.488477][T12287] veth1_macvtap: entered promiscuous mode [ 419.589253][T12493] FAULT_INJECTION: forcing a failure. [ 419.589253][T12493] name failslab, interval 1, probability 0, space 0, times 0 [ 419.643917][T12493] CPU: 0 UID: 0 PID: 12493 Comm: syz.1.1620 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 419.643945][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.643956][T12493] Call Trace: [ 419.643967][T12493] [ 419.643978][T12493] dump_stack_lvl+0x189/0x250 [ 419.644019][T12493] ? __pfx____ratelimit+0x10/0x10 [ 419.644055][T12493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.644093][T12493] ? __pfx__printk+0x10/0x10 [ 419.644153][T12493] ? rcu_is_watching+0x15/0xb0 [ 419.644206][T12493] should_fail_ex+0x414/0x560 [ 419.644261][T12493] should_failslab+0xa8/0x100 [ 419.644295][T12493] kmem_cache_alloc_noprof+0x73/0x3c0 [ 419.644328][T12493] ? _sctp_make_chunk+0x14e/0x430 [ 419.644376][T12493] _sctp_make_chunk+0x14e/0x430 [ 419.644425][T12493] sctp_make_init+0x58b/0xd30 [ 419.644513][T12493] ? __pfx_sctp_make_init+0x10/0x10 [ 419.644547][T12493] ? arch_stack_walk+0xfc/0x150 [ 419.644626][T12493] ? stack_trace_save+0x9c/0xe0 [ 419.644669][T12493] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 419.644723][T12493] sctp_do_sm+0x1e4/0x5a20 [ 419.644750][T12493] ? __pfx_sctp_pname+0x10/0x10 [ 419.644793][T12493] ? kasan_save_track+0x3e/0x80 [ 419.644825][T12493] ? sctp_stream_init_ext+0x57/0x180 [ 419.644850][T12493] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 419.644870][T12493] ? sctp_sendmsg+0x1941/0x2810 [ 419.644890][T12493] ? __sock_sendmsg+0x19c/0x270 [ 419.644915][T12493] ? ____sys_sendmsg+0x505/0x830 [ 419.644939][T12493] ? __x64_sys_sendmsg+0x19b/0x260 [ 419.644960][T12493] ? do_syscall_64+0xfa/0x3b0 [ 419.644976][T12493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.645009][T12493] ? __pfx_sctp_do_sm+0x10/0x10 [ 419.645228][T12493] ? __kasan_kmalloc+0x93/0xb0 [ 419.645244][T12493] ? __genradix_ptr+0x1e1/0x220 [ 419.645305][T12493] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 419.645358][T12493] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 419.645382][T12493] ? __asan_memcpy+0x40/0x70 [ 419.645455][T12493] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 419.645548][T12493] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 419.645580][T12493] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 419.645618][T12493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 419.645648][T12493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 419.645671][T12493] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 419.645704][T12493] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 419.645730][T12493] ? security_sctp_bind_connect+0x7e/0x2e0 [ 419.645771][T12493] sctp_sendmsg+0x1941/0x2810 [ 419.645856][T12493] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.645881][T12493] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 419.645923][T12493] ? aa_sk_perm+0x81e/0x950 [ 419.645978][T12493] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.646025][T12493] ? sock_rps_record_flow+0x19/0x410 [ 419.646062][T12493] ? inet_sendmsg+0x2f4/0x370 [ 419.646082][T12493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.646125][T12493] __sock_sendmsg+0x19c/0x270 [ 419.646179][T12493] ____sys_sendmsg+0x505/0x830 [ 419.646238][T12493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.646313][T12493] ? import_iovec+0x74/0xa0 [ 419.646358][T12493] ___sys_sendmsg+0x21f/0x2a0 [ 419.646401][T12493] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.646608][T12493] ? __fget_files+0x2a/0x420 [ 419.646632][T12493] ? __fget_files+0x3a0/0x420 [ 419.646709][T12493] __x64_sys_sendmsg+0x19b/0x260 [ 419.646756][T12493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.646831][T12493] ? __pfx_ksys_write+0x10/0x10 [ 419.646883][T12493] ? do_syscall_64+0xbe/0x3b0 [ 419.646925][T12493] do_syscall_64+0xfa/0x3b0 [ 419.646943][T12493] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.646977][T12493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.647000][T12493] ? clear_bhb_loop+0x60/0xb0 [ 419.647041][T12493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.647062][T12493] RIP: 0033:0x7f9a6458e929 [ 419.647086][T12493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.647104][T12493] RSP: 002b:00007f9a6544a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.647125][T12493] RAX: ffffffffffffffda RBX: 00007f9a647b6160 RCX: 00007f9a6458e929 [ 419.647140][T12493] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 419.647153][T12493] RBP: 00007f9a6544a090 R08: 0000000000000000 R09: 0000000000000000 [ 419.647166][T12493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.647179][T12493] R13: 0000000000000001 R14: 00007f9a647b6160 R15: 00007ffef726c358 [ 419.647265][T12493] [ 420.125631][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.183322][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.207878][T12287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.217900][T12287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.227375][T12287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.236749][T12287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.404650][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.420894][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.508425][T12315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.520906][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.529126][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.589812][T12315] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.639450][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.646703][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.686155][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.693367][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.707309][T12508] FAULT_INJECTION: forcing a failure. [ 420.707309][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 420.727270][T12508] CPU: 1 UID: 0 PID: 12508 Comm: syz.3.1625 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 420.727297][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.727310][T12508] Call Trace: [ 420.727318][T12508] [ 420.727327][T12508] dump_stack_lvl+0x189/0x250 [ 420.727368][T12508] ? __pfx____ratelimit+0x10/0x10 [ 420.727399][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.727430][T12508] ? __pfx__printk+0x10/0x10 [ 420.727459][T12508] ? __pfx___might_resched+0x10/0x10 [ 420.727495][T12508] should_fail_ex+0x414/0x560 [ 420.727526][T12508] should_failslab+0xa8/0x100 [ 420.727551][T12508] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.727571][T12508] ? sctp_association_new+0x89/0x25f0 [ 420.727596][T12508] ? __asan_memcpy+0x40/0x70 [ 420.727628][T12508] sctp_association_new+0x89/0x25f0 [ 420.727654][T12508] ? sctp_do_bind+0x657/0x940 [ 420.727685][T12508] ? __ipv6_addr_type+0x10c/0x2f0 [ 420.727720][T12508] sctp_connect_new_asoc+0x2c5/0x690 [ 420.727750][T12508] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 420.727773][T12508] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.727811][T12508] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 420.727838][T12508] ? security_sctp_bind_connect+0x7e/0x2e0 [ 420.727864][T12508] sctp_sendmsg+0x155c/0x2810 [ 420.727904][T12508] ? __pfx_sctp_sendmsg+0x10/0x10 [ 420.727932][T12508] ? aa_sk_perm+0x81e/0x950 [ 420.727962][T12508] ? __pfx_aa_sk_perm+0x10/0x10 [ 420.727989][T12508] ? sock_rps_record_flow+0x19/0x410 [ 420.728012][T12508] ? inet_sendmsg+0x2f4/0x370 [ 420.728036][T12508] __sock_sendmsg+0x19c/0x270 [ 420.728071][T12508] ____sys_sendmsg+0x505/0x830 [ 420.728107][T12508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.728143][T12508] ? import_iovec+0x74/0xa0 [ 420.728169][T12508] ___sys_sendmsg+0x21f/0x2a0 [ 420.728197][T12508] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.728266][T12508] ? __fget_files+0x2a/0x420 [ 420.728287][T12508] ? __fget_files+0x3a0/0x420 [ 420.728319][T12508] __x64_sys_sendmsg+0x19b/0x260 [ 420.728352][T12508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.728387][T12508] ? __pfx_ksys_write+0x10/0x10 [ 420.728403][T12508] ? rcu_is_watching+0x15/0xb0 [ 420.728439][T12508] ? do_syscall_64+0xbe/0x3b0 [ 420.728462][T12508] do_syscall_64+0xfa/0x3b0 [ 420.728479][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.728507][T12508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.728526][T12508] ? clear_bhb_loop+0x60/0xb0 [ 420.728550][T12508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.728569][T12508] RIP: 0033:0x7f9d6018e929 [ 420.728587][T12508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.728605][T12508] RSP: 002b:00007f9d60f65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.728625][T12508] RAX: ffffffffffffffda RBX: 00007f9d603b5fa0 RCX: 00007f9d6018e929 [ 420.728641][T12508] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 420.728653][T12508] RBP: 00007f9d60f65090 R08: 0000000000000000 R09: 0000000000000000 [ 420.728666][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.728677][T12508] R13: 0000000000000000 R14: 00007f9d603b5fa0 R15: 00007ffd6f2bd3c8 [ 420.728709][T12508] [ 421.149819][T12315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.648279][T12315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.735758][T12315] veth0_vlan: entered promiscuous mode [ 421.769027][T12315] veth1_vlan: entered promiscuous mode [ 421.837465][T12315] veth0_macvtap: entered promiscuous mode [ 421.850160][T12315] veth1_macvtap: entered promiscuous mode [ 421.880461][T12315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.896814][T12315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.911869][T12315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.922686][T12315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.931995][T12315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.942115][T12315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.703296][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.919938][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.939903][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.963617][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.999175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.007261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.041936][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.131130][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.408128][ T36] bridge_slave_1: left allmulticast mode [ 423.414044][ T36] bridge_slave_1: left promiscuous mode [ 423.419711][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.429765][ T36] bridge_slave_0: left allmulticast mode [ 423.436195][ T36] bridge_slave_0: left promiscuous mode [ 423.441940][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.716564][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.729036][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.738930][ T36] bond0 (unregistering): Released all slaves [ 423.958289][ T36] hsr_slave_0: left promiscuous mode [ 423.965348][ T36] hsr_slave_1: left promiscuous mode [ 423.971400][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.983054][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.992000][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.002599][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.022791][ T36] veth1_macvtap: left promiscuous mode [ 424.028534][ T36] veth0_macvtap: left promiscuous mode [ 424.034988][ T36] veth1_vlan: left promiscuous mode [ 424.040318][ T36] veth0_vlan: left promiscuous mode [ 424.360203][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.369161][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.382584][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.408440][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.419078][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.585994][ T36] team0 (unregistering): Port device team_slave_1 removed [ 424.620878][ T36] team0 (unregistering): Port device team_slave_0 removed [ 425.192841][T12534] chnl_net:caif_netlink_parms(): no params data found [ 425.280119][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.290829][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.298822][T12534] bridge_slave_0: entered allmulticast mode [ 425.306736][T12534] bridge_slave_0: entered promiscuous mode [ 425.318644][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.326611][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.335033][T12534] bridge_slave_1: entered allmulticast mode [ 425.341932][T12534] bridge_slave_1: entered promiscuous mode [ 425.374632][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.387325][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.418572][T12534] team0: Port device team_slave_0 added [ 425.426910][T12534] team0: Port device team_slave_1 added [ 425.457488][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.464575][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.491620][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.519410][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.536708][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.543820][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.570739][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.611123][T12534] hsr_slave_0: entered promiscuous mode [ 425.617411][T12534] hsr_slave_1: entered promiscuous mode [ 425.682373][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.803385][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.848733][T12547] netlink: 'syz.4.1634': attribute type 7 has an invalid length. [ 426.009404][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.344161][ T36] bridge_slave_1: left allmulticast mode [ 426.356581][ T36] bridge_slave_1: left promiscuous mode [ 426.362373][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.458380][ T36] bridge_slave_0: left allmulticast mode [ 426.464254][ T36] bridge_slave_0: left promiscuous mode [ 426.469754][ T5845] Bluetooth: hci1: command tx timeout [ 426.471121][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.501588][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 426.504658][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.511010][T12562] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1642'. [ 426.532588][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 426.548592][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.556514][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.575222][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.583061][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.724601][T12575] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 426.732490][T12575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1645'. [ 426.931554][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.942644][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.952796][ T36] bond0 (unregistering): Released all slaves [ 427.193189][T12534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.226702][T12534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.267681][T12534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.282162][T12534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.405740][ T36] hsr_slave_0: left promiscuous mode [ 427.411880][ T36] hsr_slave_1: left promiscuous mode [ 427.418893][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.430038][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.439787][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.447325][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.471254][ T36] veth1_macvtap: left promiscuous mode [ 427.477731][ T36] veth0_macvtap: left promiscuous mode [ 427.484347][ T36] veth1_vlan: left promiscuous mode [ 427.489809][ T36] veth0_vlan: left promiscuous mode [ 427.950956][ T36] team0 (unregistering): Port device team_slave_1 removed [ 427.988137][ T36] team0 (unregistering): Port device team_slave_0 removed [ 428.344135][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 428.356590][T12612] netlink: 125488 bytes leftover after parsing attributes in process `syz.3.1656'. [ 428.367865][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 428.514125][ T51] Bluetooth: hci1: command tx timeout [ 428.679283][ T51] Bluetooth: hci3: command tx timeout [ 428.813439][T12570] chnl_net:caif_netlink_parms(): no params data found [ 428.898780][T12534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.084571][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.091745][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.119988][T12570] bridge_slave_0: entered allmulticast mode [ 429.128439][T12570] bridge_slave_0: entered promiscuous mode [ 429.137656][T12570] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.145009][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.152351][T12570] bridge_slave_1: entered allmulticast mode [ 429.160730][T12570] bridge_slave_1: entered promiscuous mode [ 429.223065][T12534] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.281449][T12570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.350412][T12570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.456831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.464057][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.497917][T12651] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1670'. [ 429.531935][T12651] FAULT_INJECTION: forcing a failure. [ 429.531935][T12651] name failslab, interval 1, probability 0, space 0, times 0 [ 429.564641][T12651] CPU: 1 UID: 0 PID: 12651 Comm: syz.1.1670 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 429.564670][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.564687][T12651] Call Trace: [ 429.564696][T12651] [ 429.564707][T12651] dump_stack_lvl+0x189/0x250 [ 429.564750][T12651] ? __pfx____ratelimit+0x10/0x10 [ 429.564779][T12651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.564809][T12651] ? __pfx__printk+0x10/0x10 [ 429.564848][T12651] ? __pfx___might_resched+0x10/0x10 [ 429.564873][T12651] ? fs_reclaim_acquire+0x7d/0x100 [ 429.564910][T12651] should_fail_ex+0x414/0x560 [ 429.564952][T12651] should_failslab+0xa8/0x100 [ 429.564981][T12651] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 429.565005][T12651] ? __alloc_skb+0x112/0x2d0 [ 429.565040][T12651] __alloc_skb+0x112/0x2d0 [ 429.565078][T12651] ovs_ct_limit_cmd_del+0x101/0x770 [ 429.565114][T12651] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 429.565143][T12651] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 429.565195][T12651] genl_family_rcv_msg_doit+0x212/0x300 [ 429.565246][T12651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.565314][T12651] ? bpf_lsm_capable+0x9/0x20 [ 429.565332][T12651] ? security_capable+0x7e/0x2e0 [ 429.565380][T12651] genl_rcv_msg+0x60e/0x790 [ 429.565432][T12651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.565463][T12651] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 429.565491][T12651] ? perf_trace_lock_acquire+0x335/0x410 [ 429.565559][T12651] netlink_rcv_skb+0x205/0x470 [ 429.565589][T12651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.565627][T12651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.565703][T12651] ? down_read+0x1ad/0x2e0 [ 429.565741][T12651] genl_rcv+0x28/0x40 [ 429.565768][T12651] netlink_unicast+0x758/0x8d0 [ 429.565825][T12651] netlink_sendmsg+0x805/0xb30 [ 429.565879][T12651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.565916][T12651] ? aa_sock_msg_perm+0x94/0x160 [ 429.565952][T12651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.565977][T12651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.566008][T12651] __sock_sendmsg+0x21c/0x270 [ 429.566051][T12651] ____sys_sendmsg+0x505/0x830 [ 429.566097][T12651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.566153][T12651] ? import_iovec+0x74/0xa0 [ 429.566189][T12651] ___sys_sendmsg+0x21f/0x2a0 [ 429.566226][T12651] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.566357][T12651] ? __fget_files+0x2a/0x420 [ 429.566380][T12651] ? __fget_files+0x3a0/0x420 [ 429.566436][T12651] __x64_sys_sendmsg+0x19b/0x260 [ 429.566471][T12651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.566528][T12651] ? __pfx_ksys_write+0x10/0x10 [ 429.566545][T12651] ? rcu_is_watching+0x15/0xb0 [ 429.566592][T12651] ? do_syscall_64+0xbe/0x3b0 [ 429.566625][T12651] do_syscall_64+0xfa/0x3b0 [ 429.566643][T12651] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.566674][T12651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.566695][T12651] ? clear_bhb_loop+0x60/0xb0 [ 429.566736][T12651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.566762][T12651] RIP: 0033:0x7f9a6458e929 [ 429.566784][T12651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.566803][T12651] RSP: 002b:00007f9a6548c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.566824][T12651] RAX: ffffffffffffffda RBX: 00007f9a647b5fa0 RCX: 00007f9a6458e929 [ 429.566840][T12651] RDX: 0000000010049014 RSI: 0000200000000140 RDI: 0000000000000004 [ 429.566854][T12651] RBP: 00007f9a6548c090 R08: 0000000000000000 R09: 0000000000000000 [ 429.566867][T12651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.566880][T12651] R13: 0000000000000000 R14: 00007f9a647b5fa0 R15: 00007ffef726c358 [ 429.566941][T12651] [ 429.979287][T12570] team0: Port device team_slave_0 added [ 429.990940][T12570] team0: Port device team_slave_1 added [ 430.021075][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.028297][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.122808][T12570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.135769][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.166187][T12570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.271097][T12570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.279056][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.305166][T12570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.493493][T12570] hsr_slave_0: entered promiscuous mode [ 430.501688][T12570] hsr_slave_1: entered promiscuous mode [ 430.508196][T12570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.516059][T12570] Cannot create hsr debugfs directory [ 430.594725][ T51] Bluetooth: hci1: command tx timeout [ 430.761646][ T51] Bluetooth: hci3: command tx timeout [ 430.797149][T12686] netlink: 'syz.1.1682': attribute type 2 has an invalid length. [ 431.077526][T12692] netlink: 'syz.1.1684': attribute type 2 has an invalid length. [ 431.286216][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.457347][T12534] veth0_vlan: entered promiscuous mode [ 431.478718][T12534] veth1_vlan: entered promiscuous mode [ 431.489324][T12708] FAULT_INJECTION: forcing a failure. [ 431.489324][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 431.577189][T12708] CPU: 1 UID: 0 PID: 12708 Comm: syz.3.1688 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 431.577218][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.577231][T12708] Call Trace: [ 431.577240][T12708] [ 431.577249][T12708] dump_stack_lvl+0x189/0x250 [ 431.577283][T12708] ? __pfx____ratelimit+0x10/0x10 [ 431.577312][T12708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.577340][T12708] ? __pfx__printk+0x10/0x10 [ 431.577365][T12708] ? __pfx___might_resched+0x10/0x10 [ 431.577392][T12708] ? fs_reclaim_acquire+0x7d/0x100 [ 431.577419][T12708] should_fail_ex+0x414/0x560 [ 431.577447][T12708] should_failslab+0xa8/0x100 [ 431.577469][T12708] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 431.577488][T12708] ? __d_alloc+0x31/0x6f0 [ 431.577517][T12708] __d_alloc+0x31/0x6f0 [ 431.577547][T12708] d_alloc_pseudo+0x1f/0xb0 [ 431.577573][T12708] alloc_file_pseudo+0xcc/0x210 [ 431.577608][T12708] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 431.577646][T12708] anon_inode_getfd+0xca/0x1b0 [ 431.577674][T12708] map_create+0xdb6/0x1150 [ 431.577701][T12708] ? security_bpf+0x7e/0x300 [ 431.577724][T12708] __sys_bpf+0x67e/0x860 [ 431.577747][T12708] ? __pfx___sys_bpf+0x10/0x10 [ 431.577779][T12708] ? ksys_write+0x22a/0x250 [ 431.577796][T12708] ? __pfx_ksys_write+0x10/0x10 [ 431.577810][T12708] ? rcu_is_watching+0x15/0xb0 [ 431.577841][T12708] __x64_sys_bpf+0x7c/0x90 [ 431.577860][T12708] do_syscall_64+0xfa/0x3b0 [ 431.577875][T12708] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.577898][T12708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.577914][T12708] ? clear_bhb_loop+0x60/0xb0 [ 431.577934][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.577949][T12708] RIP: 0033:0x7f9d6018e929 [ 431.577964][T12708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.577979][T12708] RSP: 002b:00007f9d60f44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.577998][T12708] RAX: ffffffffffffffda RBX: 00007f9d603b6080 RCX: 00007f9d6018e929 [ 431.578011][T12708] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 431.578022][T12708] RBP: 00007f9d60f44090 R08: 0000000000000000 R09: 0000000000000000 [ 431.578033][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.578043][T12708] R13: 0000000000000000 R14: 00007f9d603b6080 R15: 00007ffd6f2bd3c8 [ 431.578069][T12708] [ 431.640143][T12570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.841462][T12712] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 431.848552][T12534] veth0_macvtap: entered promiscuous mode [ 431.858409][T12712] veth0_vlan: left promiscuous mode [ 431.880887][T12712] veth0_vlan: entered promiscuous mode [ 431.909989][T12712] team0: Device veth0_vlan failed to register rx_handler [ 431.959801][T12534] veth1_macvtap: entered promiscuous mode [ 431.969938][T12570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.987791][T12570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.000908][T12570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.082510][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.099463][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.117897][T12534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.128717][T12534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.137984][T12534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.149823][T12728] FAULT_INJECTION: forcing a failure. [ 432.149823][T12728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.163540][T12534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.174481][T12728] CPU: 1 UID: 0 PID: 12728 Comm: syz.1.1694 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 432.174512][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.174531][T12728] Call Trace: [ 432.174540][T12728] [ 432.174549][T12728] dump_stack_lvl+0x189/0x250 [ 432.174583][T12728] ? __pfx____ratelimit+0x10/0x10 [ 432.174613][T12728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.174643][T12728] ? __pfx__printk+0x10/0x10 [ 432.174665][T12728] ? __might_fault+0xb0/0x130 [ 432.174696][T12728] should_fail_ex+0x414/0x560 [ 432.174726][T12728] _copy_from_user+0x2d/0xb0 [ 432.174747][T12728] ___sys_sendmsg+0x158/0x2a0 [ 432.174776][T12728] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.174844][T12728] ? __fget_files+0x2a/0x420 [ 432.174865][T12728] ? __fget_files+0x3a0/0x420 [ 432.174901][T12728] __x64_sys_sendmsg+0x19b/0x260 [ 432.174930][T12728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.174982][T12728] do_syscall_64+0xfa/0x3b0 [ 432.175003][T12728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.175022][T12728] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.175042][T12728] ? clear_bhb_loop+0x60/0xb0 [ 432.175067][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.175087][T12728] RIP: 0033:0x7f9a6458e929 [ 432.175105][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.175124][T12728] RSP: 002b:00007f9a6548c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.175145][T12728] RAX: ffffffffffffffda RBX: 00007f9a647b5fa0 RCX: 00007f9a6458e929 [ 432.175161][T12728] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 432.175174][T12728] RBP: 00007f9a6548c090 R08: 0000000000000000 R09: 0000000000000000 [ 432.175188][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.175200][T12728] R13: 0000000000000000 R14: 00007f9a647b5fa0 R15: 00007ffef726c358 [ 432.175232][T12728] [ 432.191420][T12730] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 432.388719][T12738] FAULT_INJECTION: forcing a failure. [ 432.388719][T12738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.454173][T12738] CPU: 0 UID: 0 PID: 12738 Comm: syz.3.1697 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 432.454201][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.454215][T12738] Call Trace: [ 432.454223][T12738] [ 432.454232][T12738] dump_stack_lvl+0x189/0x250 [ 432.454266][T12738] ? __pfx____ratelimit+0x10/0x10 [ 432.454294][T12738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.454322][T12738] ? __pfx__printk+0x10/0x10 [ 432.454354][T12738] should_fail_ex+0x414/0x560 [ 432.454384][T12738] _copy_to_user+0x31/0xb0 [ 432.454408][T12738] simple_read_from_buffer+0xe1/0x170 [ 432.454434][T12738] proc_fail_nth_read+0x1df/0x250 [ 432.454460][T12738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.454487][T12738] ? rw_verify_area+0x258/0x650 [ 432.454515][T12738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.454540][T12738] vfs_read+0x200/0x980 [ 432.454575][T12738] ? __pfx___mutex_lock+0x10/0x10 [ 432.454595][T12738] ? __pfx_vfs_read+0x10/0x10 [ 432.454632][T12738] ? __fget_files+0x2a/0x420 [ 432.454659][T12738] ? __fget_files+0x3a0/0x420 [ 432.454683][T12738] ? __fget_files+0x2a/0x420 [ 432.454714][T12738] ksys_read+0x145/0x250 [ 432.454734][T12738] ? __pfx_ksys_read+0x10/0x10 [ 432.454760][T12738] ? rcu_is_watching+0x15/0xb0 [ 432.454795][T12738] ? do_syscall_64+0xbe/0x3b0 [ 432.454817][T12738] do_syscall_64+0xfa/0x3b0 [ 432.454834][T12738] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.454862][T12738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.454882][T12738] ? clear_bhb_loop+0x60/0xb0 [ 432.454906][T12738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.454926][T12738] RIP: 0033:0x7f9d6018d33c [ 432.454943][T12738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 432.454961][T12738] RSP: 002b:00007f9d60f65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.454982][T12738] RAX: ffffffffffffffda RBX: 00007f9d603b5fa0 RCX: 00007f9d6018d33c [ 432.454997][T12738] RDX: 000000000000000f RSI: 00007f9d60f650a0 RDI: 0000000000000004 [ 432.455010][T12738] RBP: 00007f9d60f65090 R08: 0000000000000000 R09: 0000000000000000 [ 432.455023][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.455035][T12738] R13: 0000000000000000 R14: 00007f9d603b5fa0 R15: 00007ffd6f2bd3c8 [ 432.455067][T12738] [ 432.518862][T12570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.684216][ T51] Bluetooth: hci1: command tx timeout [ 432.705757][T12730] veth0_vlan: left promiscuous mode [ 432.782728][T12730] veth0_vlan: entered promiscuous mode [ 432.821351][T12730] team0: Device veth0_vlan failed to register rx_handler [ 432.834152][ T51] Bluetooth: hci3: command tx timeout [ 432.858848][T12746] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 432.912296][T12746] team0: Port device wlan1 added [ 433.075962][T12570] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.096609][T12750] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1702'. [ 433.108572][T12750] net_ratelimit: 75 callbacks suppressed [ 433.108590][T12750] netlink: zone id is out of range [ 433.121502][T12750] netlink: zone id is out of range [ 433.130312][T12750] netlink: zone id is out of range [ 433.135911][T12750] netlink: zone id is out of range [ 433.141057][T12750] netlink: zone id is out of range [ 433.147821][T12750] netlink: zone id is out of range [ 433.152974][T12750] netlink: zone id is out of range [ 433.166729][T12750] netlink: zone id is out of range [ 433.172778][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.173709][T12750] netlink: zone id is out of range [ 433.179971][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.185801][T12750] netlink: zone id is out of range [ 433.327362][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.347003][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.390197][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.397343][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.533101][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.551666][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.230421][T12570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.924062][ T51] Bluetooth: hci3: command tx timeout [ 437.346266][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.354976][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.363288][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.372286][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.380781][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.394512][ T5845] Bluetooth: hci1: command tx timeout [ 440.543132][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.553679][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.127816][ T5845] Bluetooth: hci1: command tx timeout [ 444.204045][ T5845] Bluetooth: hci1: command tx timeout [ 446.273812][ T5845] Bluetooth: hci1: command tx timeout [ 449.265384][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.282834][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.290870][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.302626][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.310780][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.315691][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.324734][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.332487][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.344991][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.353094][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 450.410455][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.424756][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.433424][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.446621][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.456663][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.394317][ T51] Bluetooth: hci5: command tx timeout [ 452.433732][ T51] Bluetooth: hci6: command tx timeout [ 452.514214][ T51] Bluetooth: hci7: command tx timeout [ 453.476309][ T51] Bluetooth: hci5: command tx timeout [ 454.523983][ T51] Bluetooth: hci6: command tx timeout [ 454.604141][ T51] Bluetooth: hci7: command tx timeout [ 455.564065][ T51] Bluetooth: hci5: command tx timeout [ 456.593981][ T51] Bluetooth: hci6: command tx timeout [ 456.674132][ T51] Bluetooth: hci7: command tx timeout [ 457.633865][ T51] Bluetooth: hci5: command tx timeout [ 458.674111][ T51] Bluetooth: hci6: command tx timeout [ 458.754301][ T51] Bluetooth: hci7: command tx timeout [ 487.833586][ C1] sched: DL replenish lagged too much [ 488.185386][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.338349][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.772327][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 488.787042][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 488.795472][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 488.804742][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 488.812469][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 488.886708][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.105534][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.566922][ T42] bridge_slave_1: left allmulticast mode [ 489.572618][ T42] bridge_slave_1: left promiscuous mode [ 489.578545][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.588812][ T42] bridge_slave_0: left allmulticast mode [ 489.598108][ T42] bridge_slave_0: left promiscuous mode [ 489.604280][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.946774][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.958217][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.968530][ T42] bond0 (unregistering): Released all slaves [ 490.146071][T12793] chnl_net:caif_netlink_parms(): no params data found [ 490.391644][T12806] chnl_net:caif_netlink_parms(): no params data found [ 490.434071][T12804] chnl_net:caif_netlink_parms(): no params data found [ 490.511270][ T42] hsr_slave_0: left promiscuous mode [ 490.520946][ T42] hsr_slave_1: left promiscuous mode [ 490.527114][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.534938][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.542726][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.550220][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.566196][ T42] veth1_macvtap: left promiscuous mode [ 490.571739][ T42] veth0_macvtap: left promiscuous mode [ 490.577427][ T42] veth1_vlan: left promiscuous mode [ 490.582706][ T42] veth0_vlan: left promiscuous mode [ 490.834745][ T5845] Bluetooth: hci8: command tx timeout [ 490.999836][ T42] team0 (unregistering): Port device team_slave_1 removed [ 491.036992][ T42] team0 (unregistering): Port device team_slave_0 removed [ 491.419437][T12793] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.426932][T12793] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.434302][T12793] bridge_slave_0: entered allmulticast mode [ 491.441600][T12793] bridge_slave_0: entered promiscuous mode [ 491.453146][T12793] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.460361][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.467575][T12793] bridge_slave_1: entered allmulticast mode [ 491.476722][T12793] bridge_slave_1: entered promiscuous mode [ 491.554369][T12797] chnl_net:caif_netlink_parms(): no params data found [ 491.641819][T12793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.695713][T12793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.762289][T12804] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.769675][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.777094][T12804] bridge_slave_0: entered allmulticast mode [ 491.785202][T12804] bridge_slave_0: entered promiscuous mode [ 491.792590][T12810] chnl_net:caif_netlink_parms(): no params data found [ 491.833115][T12804] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.840586][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.848350][T12804] bridge_slave_1: entered allmulticast mode [ 491.860427][T12804] bridge_slave_1: entered promiscuous mode [ 491.887781][T12793] team0: Port device team_slave_0 added [ 491.898525][T12793] team0: Port device team_slave_1 added [ 491.904768][T12806] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.911865][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.919316][T12806] bridge_slave_0: entered allmulticast mode [ 491.927136][T12806] bridge_slave_0: entered promiscuous mode [ 492.011379][T12806] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.018600][T12806] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.026123][T12806] bridge_slave_1: entered allmulticast mode [ 492.033160][T12806] bridge_slave_1: entered promiscuous mode [ 492.082393][T12804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.097562][T12804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.121130][T12793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.128615][T12793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.155048][T12793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.170586][T12806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.209016][T12793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.216022][T12793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.242054][T12793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.282608][T12806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.292631][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.299993][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.307304][T12797] bridge_slave_0: entered allmulticast mode [ 492.315766][T12797] bridge_slave_0: entered promiscuous mode [ 492.338455][T12804] team0: Port device team_slave_0 added [ 492.355672][T12804] team0: Port device team_slave_1 added [ 492.399702][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.409908][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.417419][T12797] bridge_slave_1: entered allmulticast mode [ 492.425264][T12797] bridge_slave_1: entered promiscuous mode [ 492.471545][T12793] hsr_slave_0: entered promiscuous mode [ 492.478200][T12793] hsr_slave_1: entered promiscuous mode [ 492.539446][T12804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.549779][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.576358][T12804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.588939][T12804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.596139][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.622814][T12804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.636880][T12806] team0: Port device team_slave_0 added [ 492.645908][T12806] team0: Port device team_slave_1 added [ 492.669909][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.683164][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.692663][T12810] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.701071][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.708520][T12810] bridge_slave_0: entered allmulticast mode [ 492.716408][T12810] bridge_slave_0: entered promiscuous mode [ 492.800937][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.808325][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.816670][T12810] bridge_slave_1: entered allmulticast mode [ 492.824213][T12810] bridge_slave_1: entered promiscuous mode [ 492.858773][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.865977][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.893207][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.907809][T12797] team0: Port device team_slave_0 added [ 492.915197][ T5845] Bluetooth: hci8: command tx timeout [ 492.921720][T12797] team0: Port device team_slave_1 added [ 492.982685][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.990269][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.017715][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.062913][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.076211][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.098776][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.107007][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.133688][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.219731][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.226911][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.255507][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.271982][T12804] hsr_slave_0: entered promiscuous mode [ 493.278661][T12804] hsr_slave_1: entered promiscuous mode [ 493.284923][T12804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.292485][T12804] Cannot create hsr debugfs directory [ 493.308620][T12810] team0: Port device team_slave_0 added [ 493.317628][T12810] team0: Port device team_slave_1 added [ 493.343277][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.444790][T12806] hsr_slave_0: entered promiscuous mode [ 493.451356][T12806] hsr_slave_1: entered promiscuous mode [ 493.458005][T12806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.466004][T12806] Cannot create hsr debugfs directory [ 493.520401][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.528505][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.555098][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.612965][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.641010][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.648298][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.681007][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.706009][T12797] hsr_slave_0: entered promiscuous mode [ 493.712266][T12797] hsr_slave_1: entered promiscuous mode [ 493.719852][T12797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.727482][T12797] Cannot create hsr debugfs directory [ 493.762139][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.852798][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.942755][T12810] hsr_slave_0: entered promiscuous mode [ 493.949106][T12810] hsr_slave_1: entered promiscuous mode [ 493.956524][T12810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.964554][T12810] Cannot create hsr debugfs directory [ 494.341383][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.402146][T12793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.457214][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.474675][T12793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.484962][T12793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.496749][T12793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.543231][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.625888][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.642667][T12804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 494.653305][T12804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 494.669835][T12804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 494.702704][T12804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 494.786827][T12797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.816234][T12797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 494.863356][T12797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 494.878983][T12797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.949772][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.994178][ T5845] Bluetooth: hci8: command tx timeout [ 495.000807][T12806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 495.045806][T12806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 495.069454][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.100186][T12806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 495.136529][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.154667][T12806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 495.201362][T12793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.226693][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.327390][T12793] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.432782][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.440032][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.493383][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.500607][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.603383][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.638960][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.671067][T12793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.700082][ T42] bridge_slave_1: left allmulticast mode [ 495.706653][ T42] bridge_slave_1: left promiscuous mode [ 495.712530][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.724755][ T42] bridge_slave_0: left promiscuous mode [ 495.730439][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.743028][ T42] dummy0: left allmulticast mode [ 495.748606][ T42] bridge0: port 3(dummy0) entered disabled state [ 495.758026][ T42] bridge_slave_1: left allmulticast mode [ 495.764855][ T42] bridge_slave_1: left promiscuous mode [ 495.770513][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.782604][ T42] bond0: left allmulticast mode [ 495.787960][ T42] €Â0: left allmulticast mode [ 495.792923][ T42] bridge0: port 3(bond0) entered disabled state [ 495.802719][ T42] bridge_slave_1: left allmulticast mode [ 495.808588][ T42] bridge_slave_1: left promiscuous mode [ 495.814784][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.823442][ T42] bridge_slave_0: left allmulticast mode [ 495.829599][ T42] bridge_slave_0: left promiscuous mode [ 495.835380][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.847042][ T42] bridge_slave_1: left allmulticast mode [ 495.852710][ T42] bridge_slave_1: left promiscuous mode [ 495.858869][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.869022][ T42] bridge_slave_0: left allmulticast mode [ 495.875747][ T42] bridge_slave_0: left promiscuous mode [ 495.881438][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.171322][ T42]  (unregistering): (slave bridge0): Releasing backup interface [ 496.181891][ T42] bridge0 (unregistering): left promiscuous mode [ 496.319083][ T42]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.328999][ T42] bond_slave_0: left promiscuous mode [ 496.337533][ T42]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.346355][ T42] bond_slave_1: left promiscuous mode [ 496.353929][ T42]  (unregistering): (slave macvlan0): Releasing backup interface [ 496.363524][ T42]  (unregistering): Released all slaves [ 496.525637][ T42]  (unregistering): (slave geneve0): Releasing backup interface [ 496.661402][ T42]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.670334][ T42] bond_slave_0: left promiscuous mode [ 496.678076][ T42]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.688120][ T42] bond_slave_1: left promiscuous mode [ 496.694735][ T42]  (unregistering): Released all slaves [ 497.001805][ T42] bond0 (unregistering): (slave €Â0): Releasing backup interface [ 497.011669][ T42] €Â0: left promiscuous mode [ 497.017555][ T42] bond0 (unregistering): Released all slaves [ 497.079071][ T5845] Bluetooth: hci8: command tx timeout [ 497.279417][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.290278][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.300256][ T42] bond0 (unregistering): Released all slaves [ 497.329144][T12804] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.351924][T12806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.369199][T12810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.458553][T12810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.492546][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.499792][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.545686][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.552861][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.602479][T12810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.639509][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.742393][T12810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.781807][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.797571][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.804775][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.837749][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.844967][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.890546][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.897679][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.922521][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.929652][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.353397][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.440934][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.483823][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.491076][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.562413][ T42] [ 498.564781][ T42] ====================================================== [ 498.571799][ T42] WARNING: possible circular locking dependency detected [ 498.578820][ T42] 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 Not tainted [ 498.585417][ T42] ------------------------------------------------------ [ 498.592443][ T42] kworker/u8:3/42 is trying to acquire lock: [ 498.598416][ T42] ffff88807e01ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 498.608000][ T42] [ 498.608000][ T42] but task is already holding lock: [ 498.615356][ T42] ffff888027958768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 498.625707][ T42] [ 498.625707][ T42] which lock already depends on the new lock. [ 498.625707][ T42] [ 498.636096][ T42] [ 498.636096][ T42] the existing dependency chain (in reverse order) is: [ 498.645099][ T42] [ 498.645099][ T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 498.652832][ T42] lock_acquire+0x120/0x360 [ 498.657857][ T42] __mutex_lock+0x182/0xe80 [ 498.662877][ T42] ieee80211_open+0xed/0x1f0 [ 498.667980][ T42] __dev_open+0x46d/0x880 [ 498.672822][ T42] netif_open+0xaa/0x170 [ 498.677579][ T42] dev_open+0x125/0x260 [ 498.682249][ T42] team_add_slave+0xb36/0x2840 [ 498.687529][ T42] do_set_master+0x533/0x6d0 [ 498.692634][ T42] do_setlink+0xcf0/0x41c0 [ 498.697565][ T42] rtnl_newlink+0x160b/0x1c70 [ 498.702755][ T42] rtnetlink_rcv_msg+0x7cf/0xb70 [ 498.708210][ T42] netlink_rcv_skb+0x205/0x470 [ 498.713488][ T42] netlink_unicast+0x758/0x8d0 [ 498.718769][ T42] netlink_sendmsg+0x805/0xb30 [ 498.724047][ T42] __sock_sendmsg+0x21c/0x270 [ 498.729245][ T42] ____sys_sendmsg+0x505/0x830 [ 498.734610][ T42] ___sys_sendmsg+0x21f/0x2a0 [ 498.739806][ T42] __x64_sys_sendmsg+0x19b/0x260 [ 498.745261][ T42] do_syscall_64+0xfa/0x3b0 [ 498.750278][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.756686][ T42] [ 498.756686][ T42] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 498.764860][ T42] validate_chain+0xb9b/0x2140 [ 498.770140][ T42] __lock_acquire+0xab9/0xd20 [ 498.775335][ T42] lock_acquire+0x120/0x360 [ 498.780355][ T42] __mutex_lock+0x182/0xe80 [ 498.785368][ T42] team_del_slave+0x32/0x1c0 [ 498.790469][ T42] team_device_event+0x285/0xa20 [ 498.795925][ T42] notifier_call_chain+0x1b3/0x3e0 [ 498.801559][ T42] unregister_netdevice_many_notify+0x15d8/0x2320 [ 498.808496][ T42] unregister_netdevice_queue+0x33c/0x380 [ 498.814741][ T42] _cfg80211_unregister_wdev+0x165/0x590 [ 498.820895][ T42] ieee80211_remove_interfaces+0x49a/0x6d0 [ 498.827227][ T42] ieee80211_unregister_hw+0x5d/0x2c0 [ 498.833125][ T42] mac80211_hwsim_del_radio+0x275/0x460 [ 498.839189][ T42] hwsim_exit_net+0x584/0x640 [ 498.844399][ T42] ops_undo_list+0x49a/0x990 [ 498.849508][ T42] cleanup_net+0x4c5/0x800 [ 498.854443][ T42] process_scheduled_works+0xae1/0x17b0 [ 498.860507][ T42] worker_thread+0x8a0/0xda0 [ 498.865608][ T42] kthread+0x70e/0x8a0 [ 498.870190][ T42] ret_from_fork+0x3f9/0x770 [ 498.875296][ T42] ret_from_fork_asm+0x1a/0x30 [ 498.880599][ T42] [ 498.880599][ T42] other info that might help us debug this: [ 498.880599][ T42] [ 498.890819][ T42] Possible unsafe locking scenario: [ 498.890819][ T42] [ 498.898255][ T42] CPU0 CPU1 [ 498.903613][ T42] ---- ---- [ 498.908963][ T42] lock(&rdev->wiphy.mtx); [ 498.913463][ T42] lock(team->team_lock_key#2); [ 498.920923][ T42] lock(&rdev->wiphy.mtx); [ 498.927943][ T42] lock(team->team_lock_key#2); [ 498.932880][ T42] [ 498.932880][ T42] *** DEADLOCK *** [ 498.932880][ T42] [ 498.941011][ T42] 5 locks held by kworker/u8:3/42: [ 498.946109][ T42] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 498.956998][ T42] #1: ffffc90000b27bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 498.967533][ T42] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 498.976849][ T42] #3: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 498.986688][ T42] #4: ffff888027958768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 498.997478][ T42] [ 498.997478][ T42] stack backtrace: [ 499.003357][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted 6.16.0-rc2-syzkaller-gfa6f092cc0a0 #0 PREEMPT(full) [ 499.003377][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.003389][ T42] Workqueue: netns cleanup_net [ 499.003411][ T42] Call Trace: [ 499.003419][ T42] [ 499.003427][ T42] dump_stack_lvl+0x189/0x250 [ 499.003454][ T42] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.003478][ T42] ? __pfx__printk+0x10/0x10 [ 499.003496][ T42] ? print_lock_name+0xde/0x100 [ 499.003513][ T42] print_circular_bug+0x2ee/0x310 [ 499.003532][ T42] check_noncircular+0x134/0x160 [ 499.003551][ T42] validate_chain+0xb9b/0x2140 [ 499.003570][ T42] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.003600][ T42] __lock_acquire+0xab9/0xd20 [ 499.003625][ T42] ? team_del_slave+0x32/0x1c0 [ 499.003643][ T42] lock_acquire+0x120/0x360 [ 499.003663][ T42] ? team_del_slave+0x32/0x1c0 [ 499.003680][ T42] ? __mutex_trylock_common+0x153/0x260 [ 499.003698][ T42] __mutex_lock+0x182/0xe80 [ 499.003713][ T42] ? team_del_slave+0x32/0x1c0 [ 499.003728][ T42] ? rcu_is_watching+0x15/0xb0 [ 499.003754][ T42] ? team_del_slave+0x32/0x1c0 [ 499.003769][ T42] ? __pfx___mutex_lock+0x10/0x10 [ 499.003784][ T42] ? bond_netdev_event+0xd9/0xe80 [ 499.003802][ T42] ? __pfx___mutex_lock+0x10/0x10 [ 499.003822][ T42] ? __pfx_bond_netdev_event+0x10/0x10 [ 499.003842][ T42] team_del_slave+0x32/0x1c0 [ 499.003858][ T42] team_device_event+0x285/0xa20 [ 499.003878][ T42] notifier_call_chain+0x1b3/0x3e0 [ 499.003906][ T42] unregister_netdevice_many_notify+0x15d8/0x2320 [ 499.003937][ T42] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 499.003960][ T42] ? call_rcu+0x6dd/0x990 [ 499.003974][ T42] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.004006][ T42] unregister_netdevice_queue+0x33c/0x380 [ 499.004030][ T42] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 499.004056][ T42] _cfg80211_unregister_wdev+0x165/0x590 [ 499.004077][ T42] ieee80211_remove_interfaces+0x49a/0x6d0 [ 499.004094][ T42] ? __pfx_synchronize_rcu+0x10/0x10 [ 499.004111][ T42] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 499.004127][ T42] ? rcu_is_watching+0x15/0xb0 [ 499.004153][ T42] ieee80211_unregister_hw+0x5d/0x2c0 [ 499.004176][ T42] mac80211_hwsim_del_radio+0x275/0x460 [ 499.004196][ T42] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 499.004217][ T42] hwsim_exit_net+0x584/0x640 [ 499.004242][ T42] ? __pfx_hwsim_exit_net+0x10/0x10 [ 499.004266][ T42] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 499.004287][ T42] ops_undo_list+0x49a/0x990 [ 499.004307][ T42] ? __pfx_ops_undo_list+0x10/0x10 [ 499.004328][ T42] cleanup_net+0x4c5/0x800 [ 499.004346][ T42] ? __pfx_cleanup_net+0x10/0x10 [ 499.004365][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.004401][ T42] ? process_scheduled_works+0x9ef/0x17b0 [ 499.004425][ T42] ? process_scheduled_works+0x9ef/0x17b0 [ 499.004448][ T42] process_scheduled_works+0xae1/0x17b0 [ 499.004482][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.004511][ T42] worker_thread+0x8a0/0xda0 [ 499.004535][ T42] kthread+0x70e/0x8a0 [ 499.004553][ T42] ? __pfx_worker_thread+0x10/0x10 [ 499.004577][ T42] ? __pfx_kthread+0x10/0x10 [ 499.004595][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.004616][ T42] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.004638][ T42] ? __pfx_kthread+0x10/0x10 [ 499.004655][ T42] ret_from_fork+0x3f9/0x770 [ 499.004681][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 499.004705][ T42] ? __switch_to_asm+0x39/0x70 [ 499.004721][ T42] ? __switch_to_asm+0x33/0x70 [ 499.004737][ T42] ? __pfx_kthread+0x10/0x10 [ 499.004755][ T42] ret_from_fork_asm+0x1a/0x30 [ 499.004777][ T42] [ 499.370456][ T42] team0: Port device wlan1 removed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.705483][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.717140][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.725563][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.733211][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.742912][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.020167][T12890] chnl_net:caif_netlink_parms(): no params data found [ 500.059488][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.066898][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.074462][T12890] bridge_slave_0: entered allmulticast mode [ 500.081104][T12890] bridge_slave_0: entered promiscuous mode [ 500.088545][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.097280][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.104520][T12890] bridge_slave_1: entered allmulticast mode [ 500.111055][T12890] bridge_slave_1: entered promiscuous mode [ 500.130022][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.141007][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.162055][T12890] team0: Port device team_slave_0 added [ 500.169569][T12890] team0: Port device team_slave_1 added [ 500.186813][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.194618][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.220750][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.232207][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.239487][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.266800][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.295897][T12890] hsr_slave_0: entered promiscuous mode [ 500.302237][T12890] hsr_slave_1: entered promiscuous mode [ 500.308396][T12890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.316118][T12890] Cannot create hsr debugfs directory [ 500.636163][T12890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.645627][T12890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.655205][T12890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.664706][T12890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.687784][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.694933][T12890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.702269][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.709447][T12890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.742808][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.758736][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.766816][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.777847][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.788995][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.796089][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.807415][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.814600][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.930642][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.960398][T12890] veth0_vlan: entered promiscuous mode [ 500.969127][T12890] veth1_vlan: entered promiscuous mode [ 500.988388][T12890] veth0_macvtap: entered promiscuous mode [ 500.997308][T12890] veth1_macvtap: entered promiscuous mode [ 501.009841][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.022419][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.034904][T12890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.044338][T12890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.053049][T12890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.061919][T12890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.088260][T12890] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 501.105487][T12890] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 501.113487][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.122758][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.139820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.147767][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.225953][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.233405][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.241973][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.250240][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.260633][ T42] hsr_slave_0: left promiscuous mode [ 501.266636][ T42] hsr_slave_1: left promiscuous mode [ 501.272280][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.280167][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.294346][ T42] veth0_macvtap: left promiscuous mode [ 501.299867][ T42] veth1_vlan: left promiscuous mode [ 501.306676][ T42] veth1_macvtap: left promiscuous mode [ 501.312394][ T42] veth1_vlan: left promiscuous mode [ 501.319305][ T42] veth1_macvtap: left promiscuous mode [ 501.325346][ T42] veth0_macvtap: left promiscuous mode [ 501.330865][ T42] veth1_vlan: left promiscuous mode [ 501.477845][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.484435][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.567589][ T42] team0 (unregistering): Port device team_slave_1 removed [ 501.590096][ T42] team0 (unregistering): Port device team_slave_0 removed [ 501.818877][ T42] team0 (unregistering): Port device team_slave_1 removed [ 501.842639][ T42] team0 (unregistering): Port device team_slave_0 removed [ 502.049252][ T42] team0 (unregistering): Port device team_slave_1 removed [ 502.060207][ T42] team0 (unregistering): Port device team_slave_0 removed [ 502.221891][ T42] team0 (unregistering): Port device team_slave_1 removed [ 502.235994][ T42] team0 (unregistering): Port device team_slave_0 removed [ 503.857084][ T42] bridge_slave_1: left allmulticast mode [ 503.863435][ T42] bridge_slave_1: left promiscuous mode [ 503.870516][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.880103][ T42] bridge_slave_0: left allmulticast mode [ 503.886769][ T42] bridge_slave_0: left promiscuous mode [ 503.892420][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.901509][ T42] bridge_slave_1: left allmulticast mode [ 503.907548][ T42] bridge_slave_1: left promiscuous mode [ 503.913172][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.921536][ T42] bridge_slave_0: left allmulticast mode [ 503.927347][ T42] bridge_slave_0: left promiscuous mode [ 503.932983][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.941855][ T42] bridge_slave_1: left allmulticast mode [ 503.947678][ T42] bridge_slave_1: left promiscuous mode [ 503.953316][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.961925][ T42] bridge_slave_0: left allmulticast mode [ 503.967797][ T42] bridge_slave_0: left promiscuous mode [ 503.973733][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.982240][ T42] bridge_slave_1: left allmulticast mode [ 503.988241][ T42] bridge_slave_1: left promiscuous mode [ 503.994031][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.001872][ T42] bridge_slave_0: left allmulticast mode [ 504.007630][ T42] bridge_slave_0: left promiscuous mode [ 504.013280][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.022331][ T42] bridge_slave_1: left allmulticast mode [ 504.028157][ T42] bridge_slave_1: left promiscuous mode [ 504.034527][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.042577][ T42] bridge_slave_0: left allmulticast mode [ 504.048523][ T42] bridge_slave_0: left promiscuous mode [ 504.054495][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.171979][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.182061][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.192274][ T42] bond0 (unregistering): Released all slaves [ 504.282883][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.292597][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.302832][ T42] bond0 (unregistering): Released all slaves [ 504.375501][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.386922][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.397385][ T42] bond0 (unregistering): Released all slaves [ 504.460729][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.470567][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.480110][ T42] bond0 (unregistering): Released all slaves [ 504.539650][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.549381][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.559134][ T42] bond0 (unregistering): Released all slaves [ 504.659204][ T42] hsr_slave_0: left promiscuous mode [ 504.665172][ T42] hsr_slave_1: left promiscuous mode [ 504.670746][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.678809][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.689453][ T42] hsr_slave_0: left promiscuous mode [ 504.695256][ T42] hsr_slave_1: left promiscuous mode [ 504.700823][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.708456][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.717808][ T42] hsr_slave_0: left promiscuous mode [ 504.723395][ T42] hsr_slave_1: left promiscuous mode [ 504.729196][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.737067][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.746946][ T42] hsr_slave_0: left promiscuous mode [ 504.752552][ T42] hsr_slave_1: left promiscuous mode [ 504.758971][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.766534][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.776538][ T42] hsr_slave_0: left promiscuous mode [ 504.782111][ T42] hsr_slave_1: left promiscuous mode [ 504.787936][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.795677][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.950816][ T42] team0 (unregistering): Port device team_slave_1 removed [ 504.972723][ T42] team0 (unregistering): Port device team_slave_0 removed [ 505.123224][ T42] team0 (unregistering): Port device team_slave_1 removed [ 505.144074][ T42] team0 (unregistering): Port device team_slave_0 removed [ 505.266874][ T42] team0 (unregistering): Port device team_slave_1 removed [ 505.288849][ T42] team0 (unregistering): Port device team_slave_0 removed [ 505.416407][ T42] team0 (unregistering): Port device team_slave_1 removed [ 505.440468][ T42] team0 (unregistering): Port device team_slave_0 removed [ 505.580017][ T42] team0 (unregistering): Port device team_slave_1 removed [ 505.600583][ T42] team0 (unregistering): Port device team_slave_0 removed [ 506.778664][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.817026][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.857063][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.907305][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.989593][ T42] bridge_slave_1: left allmulticast mode [ 506.995444][ T42] bridge_slave_1: left promiscuous mode [ 507.001110][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.009910][ T42] bridge_slave_0: left allmulticast mode [ 507.015772][ T42] bridge_slave_0: left promiscuous mode [ 507.021416][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.101211][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.111511][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.121495][ T42] bond0 (unregistering): Released all slaves [ 507.291638][ T42] hsr_slave_0: left promiscuous mode [ 507.297467][ T42] hsr_slave_1: left promiscuous mode [ 507.303034][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.310476][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.318074][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.325734][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.335585][ T42] veth1_macvtap: left promiscuous mode [ 507.341068][ T42] veth0_macvtap: left promiscuous mode [ 507.346840][ T42] veth1_vlan: left promiscuous mode [ 507.352087][ T42] veth0_vlan: left promiscuous mode [ 507.437466][ T42] team0 (unregistering): Port device team_slave_1 removed [ 507.449688][ T42] team0 (unregistering): Port device team_slave_0 removed