last executing test programs: 27.60558316s ago: executing program 2 (id=2347): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xc2}, 0x11c985, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000002000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000010000000fbffffffffffffffd10654e6a1007b8af8ff00000000bfa200040000000007020000f8ffffffb703001408000000b70400000000000085050000030000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) (async) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x3, 0x80, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x104101, 0x4, 0x0, 0x4, 0x20, 0x0, 0x1, 0x0, 0x40000, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) socket$kcm(0xa, 0x7, 0x106) (async) perf_event_open(0x0, 0x0, 0x8004, 0xffffffffffffffff, 0xd) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004000) (async) socket$kcm(0x2, 0x922000000001, 0x106) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x749}, [@map_val={0x18, 0x2, 0x2, 0x0, r1}, @alu={0x7, 0x0, 0x7, 0xb, 0xa, 0x40, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x401}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x80000000}, @alu={0x4, 0x1, 0x4, 0x8, 0x0, 0xfffffffffffffff8, 0x4}, @ldst={0x2, 0x3, 0x0, 0x7, 0x6, 0x100, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0xb1, &(0x7f0000000500)=""/177, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x5, 0x10001, 0x921}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, r1, r3, r1, r3, 0xffffffffffffffff, r3, r1], &(0x7f00000006c0)=[{0x3, 0x4, 0x7, 0x4}, {0x0, 0x5, 0x3, 0x6}, {0x1, 0x2, 0x8, 0xb}], 0x10, 0xc}, 0x94) (async) write$cgroup_subtree(r10, &(0x7f0000000900)=ANY=[@ANYRESOCT], 0x31) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r8}, 0xc) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1k\xfc\x9e\x98\xac;#\xdb\x0f!/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#'}, 0x30) 27.440659265s ago: executing program 2 (id=2351): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000805000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000500), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r5, 0xffffffff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) sendmsg$kcm(r4, 0x0, 0x0) socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 27.136478054s ago: executing program 2 (id=2353): socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x50000000, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, 0x0) socket$kcm(0x2, 0x3, 0x2) 26.898758512s ago: executing program 2 (id=2356): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x30}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) (async) r2 = socket$kcm(0x25, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3c, 0x0, 0x0) (async) write$cgroup_pid(r2, 0x0, 0x0) (async) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010000) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 26.701019008s ago: executing program 2 (id=2360): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'cpuset'}]}, 0x8) (fail_nth: 1) 26.255118192s ago: executing program 2 (id=2363): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120004", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000400000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe2b8c7c2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 21.573059058s ago: executing program 3 (id=2398): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000004b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.278619407s ago: executing program 3 (id=2400): r0 = syz_clone(0x3000400, &(0x7f0000000080)="e8510ac3140e42c0c8d6293b3125a9ca71093e0bd3505514eab59346b11d6411c36becba8728889812779ecb6c36e33c3b89266007dbd3d7a23d86ac5383a4caa2d07e1b1b04e2cde24837d4750fb67d60f3070f96b9d106d023c6380e84f61d79a0084b521703cba4b3c2b5c07fcb5695d4bd46df3bb7c5ad11c4477f3c40e9f67b8a870c0b4514c846a6929f887b3c6ae49136dd5f26e190c03f3e9679cf4a5b33153682483586a388f6e82b5acb", 0xaf, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001380)="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") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xbf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x20000000000000, 0x3fff8000}, 0x0, 0x32, 0x40000006, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x66}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, r5, 0x2, 0xffffffffffffffff, 0x1) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) write$cgroup_pid(r2, &(0x7f0000000000)=r5, 0x12) close(r3) socket$kcm(0x2, 0x5, 0x0) r8 = socket$kcm(0x25, 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="1c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0x3) socket$kcm(0xa, 0x2, 0x73) write$cgroup_subtree(r9, 0x0, 0xfe33) sendmsg$inet(r8, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x4044850) 20.838631691s ago: executing program 3 (id=2406): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'freezer'}, {0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'rdma'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x4, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x0, 0x1, 0x2, 0x4, 0x18, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x2, 0x0, 0x8, 0xffffffffffffffff, 0x4}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbd, &(0x7f0000000400)=""/189, 0x41000, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x2, 0x5, 0xdd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000680)=[{0x1, 0x5, 0xb, 0x5}, {0x2, 0x1, 0xd, 0x2}, {0x4, 0x1, 0x1}], 0x10, 0x3ff}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x4, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x0, 0x1, 0x2, 0x4, 0x18, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x2, 0x0, 0x8, 0xffffffffffffffff, 0x4}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbd, &(0x7f0000000400)=""/189, 0x41000, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x2, 0x5, 0xdd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000680)=[{0x1, 0x5, 0xb, 0x5}, {0x2, 0x1, 0xd, 0x2}, {0x4, 0x1, 0x1}], 0x10, 0x3ff}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x8000) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map, r2, 0x13, 0x10, 0xffffffffffffffff, @void, @value=r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map, r2, 0x13, 0x10, 0xffffffffffffffff, @void, @value=r3}, 0x20) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000008000000ff000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1814000000ec000000000006be34000000000018110000", @ANYRES16=r4, @ANYRES8=r4, @ANYRES16=r4, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000200)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) 20.55357381s ago: executing program 1 (id=2407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) socketpair(0x1d, 0x2, 0x6, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r4, @ANYBLOB, @ANYRES16=r2, @ANYBLOB="95115e71a67f9482234aac832309ba6e079dbd00f9a31dbdf513d10060779f1108ade44aa20115cca211ce958d738c5704f3796ea68db189c408514bd89586e850bb3204659c4dd602243da67379ae8e3b4aded39e2fb42794c8fc091179fa31f43726c92e4cd5789078379966193db547a8bc2f05e1a37385ad0089ac3bf534153a37d4a87260b71e7657284262f2eba928b7340850789ab97840fe4265e1cbd11e27632cf2dad4a005fca4cbf0c529a7d12368d40c336accb0f8c21a3d42752d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x40047459, &(0x7f0000000640)) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 20.425820514s ago: executing program 1 (id=2409): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="f4003b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b5181847fb40000003f00", 0x28}], 0x1}, 0x0) 20.300392167s ago: executing program 3 (id=2411): socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x37, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, 0x0) socket$kcm(0x2, 0x3, 0x2) 20.193145001s ago: executing program 1 (id=2412): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x40, 0x10000, 0x9, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) (fail_nth: 4) 20.162607242s ago: executing program 0 (id=2413): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1880000000000000000000000000000004000000bb7f1a00c600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 19.660091787s ago: executing program 0 (id=2414): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r3, @ANYRES8=r3], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0xf8ff, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.659486367s ago: executing program 3 (id=2415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2a, 0x2, 0x0) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, 0x0, 0x0) recvmsg(r2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0xd2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18000000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 19.404219086s ago: executing program 1 (id=2416): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x2d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="f3973a7d47e0c3d8724061bf584819cfbebe7efce4c2a500167ca2656b6a3f8504a4692385bad34c9eba56a748135464a15a9bc491e37b40abbb1fa9bcc626b11d864223ae31782cc45ddd6ae482599cfc73922fc6520b85", 0x58}], 0x1, 0x0, 0x0, 0x24040000}, 0x2000) 19.304650008s ago: executing program 0 (id=2417): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x3e8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000187100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 19.140440503s ago: executing program 1 (id=2418): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800fff7000000e4950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdfa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db440000800000000015000000000000", 0x1c}], 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpuset'}]}, 0x8) 18.980023099s ago: executing program 0 (id=2419): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000a05000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) socketpair(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000500), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r5, 0xffffffff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) sendmsg$kcm(r4, 0x0, 0x0) socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 17.546135133s ago: executing program 1 (id=2420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x49, 0x0, 0x300) socket$kcm(0x1e, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x8178, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)='bT', 0x0, 0x5}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r11, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32, @ANYBLOB="00000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 17.424357487s ago: executing program 3 (id=2421): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feff", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffffffffffe2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xfff, 0x3d, &(0x7f0000000580)=""/61, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xc, 0x1, 0xf31}, 0x10, 0x23b99, r0, 0x2, 0x0, &(0x7f0000000e00)=[{0x4, 0x2, 0xc}, {0x2, 0x2, 0x7, 0x4}], 0x10, 0x264b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x48, 0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb735}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, &(0x7f0000000180)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) 15.873419106s ago: executing program 0 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000007f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 15.809900878s ago: executing program 0 (id=2423): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feff", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffffffffffe2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xfff, 0x3d, &(0x7f0000000580)=""/61, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xc, 0x1, 0xf31}, 0x10, 0x23b99, r0, 0x2, 0x0, &(0x7f0000000e00)=[{0x4, 0x2, 0xc}, {0x2, 0x2, 0x7, 0x4}], 0x10, 0x264b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x48, 0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb735}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, &(0x7f0000000180)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) (fail_nth: 3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) 2.187470881s ago: executing program 32 (id=2420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x49, 0x0, 0x300) socket$kcm(0x1e, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x8178, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)='bT', 0x0, 0x5}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r11, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32, @ANYBLOB="00000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.051661306s ago: executing program 33 (id=2421): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feff", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffffffffffe2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xfff, 0x3d, &(0x7f0000000580)=""/61, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xc, 0x1, 0xf31}, 0x10, 0x23b99, r0, 0x2, 0x0, &(0x7f0000000e00)=[{0x4, 0x2, 0xc}, {0x2, 0x2, 0x7, 0x4}], 0x10, 0x264b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x48, 0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb735}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, &(0x7f0000000180)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 34 (id=2423): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feff", 0x7}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffffffffffe2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xfff, 0x3d, &(0x7f0000000580)=""/61, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xc, 0x1, 0xf31}, 0x10, 0x23b99, r0, 0x2, 0x0, &(0x7f0000000e00)=[{0x4, 0x2, 0xc}, {0x2, 0x2, 0x7, 0x4}], 0x10, 0x264b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x48, 0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb735}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, &(0x7f0000000180)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) (fail_nth: 3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 2] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.520334][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.533295][ T5777] team0: Port device team_slave_1 added [ 67.551009][ T5776] team0: Port device team_slave_1 added [ 67.587008][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.607667][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.636133][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.643375][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.669810][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.713002][ T5772] hsr_slave_0: entered promiscuous mode [ 67.719696][ T5772] hsr_slave_1: entered promiscuous mode [ 67.748802][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.755772][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.782527][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.802222][ T5775] team0: Port device team_slave_0 added [ 67.811168][ T5775] team0: Port device team_slave_1 added [ 67.832112][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.839185][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.865356][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.915387][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.922471][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.949021][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.964603][ T5777] hsr_slave_0: entered promiscuous mode [ 67.972065][ T5777] hsr_slave_1: entered promiscuous mode [ 67.979042][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.987516][ T5777] Cannot create hsr debugfs directory [ 67.998409][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.005372][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.031541][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.048389][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.055369][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.081431][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.201981][ T5775] hsr_slave_0: entered promiscuous mode [ 68.208722][ T5775] hsr_slave_1: entered promiscuous mode [ 68.214929][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.222706][ T5775] Cannot create hsr debugfs directory [ 68.268764][ T5776] hsr_slave_0: entered promiscuous mode [ 68.275849][ T5776] hsr_slave_1: entered promiscuous mode [ 68.282474][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.290119][ T5776] Cannot create hsr debugfs directory [ 68.327121][ T5779] Bluetooth: hci0: command tx timeout [ 68.397060][ T5779] Bluetooth: hci2: command tx timeout [ 68.400837][ T5785] Bluetooth: hci3: command tx timeout [ 68.402719][ T5779] Bluetooth: hci1: command tx timeout [ 68.525869][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.558730][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.570853][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.591451][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.655522][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.674705][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.684696][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.698802][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.782656][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.794312][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.839321][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.850447][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.890540][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.948746][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.960782][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.971205][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.994944][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.002676][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.040322][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.047735][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.071921][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.100467][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.107625][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.141177][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.184880][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.192076][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.216018][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.223212][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.292838][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.344613][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.383274][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.390461][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.412352][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.419542][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.458786][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.521725][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.533782][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.581283][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.643168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.650376][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.678819][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.685960][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.777402][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.788740][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.821446][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.910361][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.960662][ T5772] veth0_vlan: entered promiscuous mode [ 70.008935][ T5772] veth1_vlan: entered promiscuous mode [ 70.034490][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.111288][ T5777] veth0_vlan: entered promiscuous mode [ 70.148919][ T5777] veth1_vlan: entered promiscuous mode [ 70.158647][ T5772] veth0_macvtap: entered promiscuous mode [ 70.173045][ T5776] veth0_vlan: entered promiscuous mode [ 70.190097][ T5772] veth1_macvtap: entered promiscuous mode [ 70.218845][ T5776] veth1_vlan: entered promiscuous mode [ 70.231218][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.263020][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.280835][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.294820][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.304993][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.313894][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.323060][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.335464][ T5777] veth0_macvtap: entered promiscuous mode [ 70.346139][ T5777] veth1_macvtap: entered promiscuous mode [ 70.397874][ T5779] Bluetooth: hci0: command tx timeout [ 70.400465][ T5776] veth0_macvtap: entered promiscuous mode [ 70.417946][ T5776] veth1_macvtap: entered promiscuous mode [ 70.435682][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.447366][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.459990][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.471778][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.483150][ T5780] Bluetooth: hci3: command tx timeout [ 70.488671][ T5780] Bluetooth: hci2: command tx timeout [ 70.494788][ T5779] Bluetooth: hci1: command tx timeout [ 70.496911][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.513472][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.540838][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.552718][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.565480][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.576996][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.589932][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.603341][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.613965][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.626237][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.644774][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.658458][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.669297][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.679170][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.689741][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.701535][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.731246][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.741345][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.751842][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.761134][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.783342][ T5775] veth0_vlan: entered promiscuous mode [ 70.830572][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.844909][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.902342][ T5775] veth1_vlan: entered promiscuous mode [ 70.924602][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.942838][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.994215][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.002519][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.034993][ T5775] veth0_macvtap: entered promiscuous mode [ 71.083486][ T5775] veth1_macvtap: entered promiscuous mode [ 71.105863][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.127237][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.130749][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.155277][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.184670][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.212386][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.222546][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.233118][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.243586][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.254557][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.279793][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.318806][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.331048][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.343420][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.370975][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.372432][ T5839] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 71.399211][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.423818][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.446108][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.466375][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.479383][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.490727][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.496880][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.507444][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519179][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610168][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.619959][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726622][ C1] hrtimer: interrupt took 44951 ns [ 71.806307][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.834740][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.930180][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.951637][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.220262][ T5857] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 72.322972][ T5857] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 72.478847][ T5779] Bluetooth: hci0: command tx timeout [ 72.546636][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 72.558343][ T5779] Bluetooth: hci1: command tx timeout [ 72.578333][ T5780] Bluetooth: hci2: command tx timeout [ 72.585088][ T5780] Bluetooth: hci3: command tx timeout [ 72.644040][ T5861] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 72.830351][ T5861] team0: Device hsr_slave_0 failed to register rx_handler [ 72.999909][ T5877] Zero length message leads to an empty skb [ 73.061596][ T5861] syz.0.1 (5861) used greatest stack depth: 18568 bytes left [ 73.422631][ T5889] warning: `syz.3.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.450452][ T5892] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 74.561581][ T5785] Bluetooth: hci0: command tx timeout [ 74.636842][ T5785] Bluetooth: hci1: command tx timeout [ 74.636871][ T5780] Bluetooth: hci2: command tx timeout [ 74.647675][ T5779] Bluetooth: hci3: command tx timeout [ 74.884835][ T5896] netlink: 'syz.1.20': attribute type 39 has an invalid length. [ 75.466268][ T5900] syzkaller0: entered promiscuous mode [ 75.472587][ T5900] syzkaller0: entered allmulticast mode [ 77.839807][ T5912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.875461][ T5926] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 77.897046][ T5926] netlink: 152 bytes leftover after parsing attributes in process `syz.2.33'. [ 77.969167][ T5926] .`: renamed from bond0 (while UP) [ 78.878805][ T5949] netlink: 44 bytes leftover after parsing attributes in process `syz.1.42'. [ 79.369672][ T5968] syz.2.49: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 79.396960][ T5968] CPU: 1 PID: 5968 Comm: syz.2.49 Not tainted syzkaller #0 [ 79.404220][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.414305][ T5968] Call Trace: [ 79.417598][ T5968] [ 79.420545][ T5968] dump_stack_lvl+0x18c/0x250 [ 79.425256][ T5968] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.431429][ T5968] ? show_regs_print_info+0x20/0x20 [ 79.436628][ T5968] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.442785][ T5968] warn_alloc+0x246/0x340 [ 79.447115][ T5968] ? stack_trace_save+0xaa/0x100 [ 79.452048][ T5968] ? zone_watermark_ok_safe+0x230/0x230 [ 79.457608][ T5968] ? kasan_set_track+0x5f/0x70 [ 79.462381][ T5968] ? kasan_set_track+0x4e/0x70 [ 79.467142][ T5968] ? __kasan_kmalloc+0x8f/0xa0 [ 79.471899][ T5968] ? xsk_init_queue+0xad/0x100 [ 79.476653][ T5968] ? xsk_setsockopt+0x4e5/0x760 [ 79.481497][ T5968] ? do_sock_setsockopt+0x175/0x1a0 [ 79.486687][ T5968] ? __x64_sys_setsockopt+0x182/0x200 [ 79.492057][ T5968] __vmalloc_node_range+0x126/0x1330 [ 79.497359][ T5968] ? free_vm_area+0x50/0x50 [ 79.501871][ T5968] vmalloc_user+0x74/0x80 [ 79.506195][ T5968] ? xskq_create+0xbf/0x170 [ 79.510691][ T5968] xskq_create+0xbf/0x170 [ 79.515019][ T5968] xsk_init_queue+0xad/0x100 [ 79.519612][ T5968] xsk_setsockopt+0x4e5/0x760 [ 79.524287][ T5968] ? xsk_poll+0x680/0x680 [ 79.528615][ T5968] ? __fget_files+0x1c/0x4b0 [ 79.533210][ T5968] ? __fget_files+0x28/0x4b0 [ 79.537800][ T5968] ? __fget_files+0x28/0x4b0 [ 79.542386][ T5968] ? aa_sock_opt_perm+0x74/0x100 [ 79.547327][ T5968] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 79.552875][ T5968] ? security_socket_setsockopt+0x7e/0xa0 [ 79.558591][ T5968] ? xsk_poll+0x680/0x680 [ 79.562915][ T5968] do_sock_setsockopt+0x175/0x1a0 [ 79.567949][ T5968] ? __fdget+0x180/0x210 [ 79.572192][ T5968] __x64_sys_setsockopt+0x182/0x200 [ 79.577392][ T5968] do_syscall_64+0x55/0xb0 [ 79.581803][ T5968] ? clear_bhb_loop+0x40/0x90 [ 79.586474][ T5968] ? clear_bhb_loop+0x40/0x90 [ 79.591148][ T5968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.597039][ T5968] RIP: 0033:0x7f00bff9ce59 [ 79.601466][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.621085][ T5968] RSP: 002b:00007f00c0ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.629500][ T5968] RAX: ffffffffffffffda RBX: 00007f00c0215fa0 RCX: 00007f00bff9ce59 [ 79.637466][ T5968] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 79.645429][ T5968] RBP: 00007f00c0032d6f R08: 0000000000000004 R09: 0000000000000000 [ 79.653397][ T5968] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 79.661367][ T5968] R13: 00007f00c0216038 R14: 00007f00c0215fa0 R15: 00007ffc78b535b8 [ 79.669352][ T5968] [ 79.694596][ T5968] Mem-Info: [ 79.698244][ T5968] active_anon:5646 inactive_anon:0 isolated_anon:0 [ 79.698244][ T5968] active_file:1083 inactive_file:39947 isolated_file:0 [ 79.698244][ T5968] unevictable:768 dirty:1550 writeback:0 [ 79.698244][ T5968] slab_reclaimable:10004 slab_unreclaimable:90800 [ 79.698244][ T5968] mapped:23960 shmem:1361 pagetables:555 [ 79.698244][ T5968] sec_pagetables:0 bounce:0 [ 79.698244][ T5968] kernel_misc_reclaimable:0 [ 79.698244][ T5968] free:1362036 free_pcp:14656 free_cma:0 [ 79.745903][ T5968] Node 0 active_anon:22584kB inactive_anon:0kB active_file:4332kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95840kB dirty:6196kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10544kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 79.781518][ T5968] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 79.861548][ T5968] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.890637][ T5968] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 79.913452][ T5968] Node 0 DMA32 free:1539788kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22548kB inactive_anon:0kB active_file:4332kB inactive_file:158764kB unevictable:1536kB writepending:6196kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:37848kB local_pcp:17532kB free_cma:0kB [ 79.996889][ T5968] lowmem_reserve[]: 0 0 0 0 0 [ 80.002548][ T5968] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 80.030548][ T5968] lowmem_reserve[]: 0 0 0 0 0 [ 80.035617][ T5968] Node 1 Normal free:3892772kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:9280kB free_cma:0kB [ 80.071893][ T5968] lowmem_reserve[]: 0 0 0 0 0 [ 80.077273][ T5968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.092787][ T5968] Node 0 DMA32: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 3*64kB (UM) 2*128kB (UM) 1*256kB (E) 2*512kB (ME) 2*1024kB (UM) 2*2048kB (ME) 374*4096kB (M) = 1539852kB [ 80.110313][ T5968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.122124][ T5968] Node 1 Normal: 213*4kB (UE) 44*8kB (UE) 31*16kB (UE) 30*32kB (UE) 15*64kB (UME) 4*128kB (UME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3892772kB [ 80.140113][ T5968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.150481][ T5968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.166438][ T5968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.176275][ T5968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.185817][ T5968] 42398 total pagecache pages [ 80.190849][ T5968] 0 pages in swap cache [ 80.195167][ T5968] Free swap = 124996kB [ 80.199927][ T5968] Total swap = 124996kB [ 80.204263][ T5968] 2097051 pages RAM [ 80.208395][ T5968] 0 pages HighMem/MovableOnly [ 80.213143][ T5968] 416933 pages reserved [ 80.217961][ T5968] 0 pages cma reserved [ 80.604463][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.614642][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.648704][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.667414][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.267575][ T5997] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 81.310563][ T5997] netlink: 'syz.2.58': attribute type 39 has an invalid length. [ 81.690641][ T6004] netlink: 'syz.3.62': attribute type 4 has an invalid length. [ 81.715238][ T6004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.62'. [ 81.769309][ T6004] .`: renamed from bond0 (while UP) [ 81.841967][ T23] cfg80211: failed to load regulatory.db [ 81.899556][ T6013] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.67'. [ 81.928663][ T6013] openvswitch: netlink: IP tunnel dst address not specified [ 82.224468][ T6026] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 82.232672][ T6026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.73'. [ 82.739182][ T6049] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 82.752886][ T6049] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 82.782769][ T6049] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.83'. [ 83.172680][ T6069] FAULT_INJECTION: forcing a failure. [ 83.172680][ T6069] name failslab, interval 1, probability 0, space 0, times 1 [ 83.186158][ T6069] CPU: 0 PID: 6069 Comm: syz.2.93 Not tainted syzkaller #0 [ 83.193390][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.203466][ T6069] Call Trace: [ 83.206808][ T6069] [ 83.209754][ T6069] dump_stack_lvl+0x18c/0x250 [ 83.214455][ T6069] ? show_regs_print_info+0x20/0x20 [ 83.219679][ T6069] ? load_image+0x420/0x420 [ 83.224205][ T6069] ? __might_sleep+0xe0/0xe0 [ 83.228820][ T6069] ? __lock_acquire+0x7d40/0x7d40 [ 83.233869][ T6069] should_fail_ex+0x39d/0x4d0 [ 83.238576][ T6069] should_failslab+0x9/0x20 [ 83.243093][ T6069] slab_pre_alloc_hook+0x59/0x310 [ 83.248132][ T6069] kmem_cache_alloc_node+0x60/0x320 [ 83.253355][ T6069] ? __alloc_skb+0x103/0x2c0 [ 83.257970][ T6069] __alloc_skb+0x103/0x2c0 [ 83.262436][ T6069] alloc_skb_with_frags+0xca/0x7b0 [ 83.267655][ T6069] ? release_sock+0x2f/0x1c0 [ 83.272266][ T6069] ? reacquire_held_locks+0x30e/0x5b0 [ 83.277660][ T6069] ? release_sock+0x2f/0x1c0 [ 83.282269][ T6069] sock_alloc_send_pskb+0x883/0x9a0 [ 83.287485][ T6069] ? sock_kzfree_s+0x50/0x50 [ 83.292083][ T6069] ? lock_chain_count+0x20/0x20 [ 83.296938][ T6069] ? pn_socket_bind+0x3ff/0x530 [ 83.301804][ T6069] ? __local_bh_enable_ip+0x13a/0x1c0 [ 83.307175][ T6069] ? lockdep_hardirqs_on+0x98/0x150 [ 83.312389][ T6069] pn_sendmsg+0x1df/0x3e0 [ 83.316723][ T6069] ? pn_init+0x40/0x40 [ 83.320781][ T6069] ? pn_socket_bind+0x3ff/0x530 [ 83.325623][ T6069] ? pn_socket_bind+0x3ff/0x530 [ 83.330479][ T6069] pn_socket_sendmsg+0x1df/0x240 [ 83.335441][ T6069] ? pn_socket_ioctl+0x350/0x350 [ 83.340417][ T6069] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.345719][ T6069] ? security_socket_sendmsg+0x80/0xa0 [ 83.351184][ T6069] ? pn_socket_ioctl+0x350/0x350 [ 83.356129][ T6069] ____sys_sendmsg+0x5ba/0x960 [ 83.360897][ T6069] ? __lock_acquire+0x7d40/0x7d40 [ 83.365919][ T6069] ? __asan_memset+0x22/0x40 [ 83.370503][ T6069] ? __sys_sendmsg_sock+0x30/0x30 [ 83.375520][ T6069] ? __import_iovec+0x3fa/0x850 [ 83.380369][ T6069] ? import_iovec+0x73/0xa0 [ 83.384864][ T6069] ___sys_sendmsg+0x2a6/0x360 [ 83.389548][ T6069] ? get_pid_task+0x20/0x1e0 [ 83.394148][ T6069] ? __sys_sendmsg+0x2a0/0x2a0 [ 83.398914][ T6069] ? __lock_acquire+0x7d40/0x7d40 [ 83.403957][ T6069] __se_sys_sendmsg+0x1c2/0x2b0 [ 83.408818][ T6069] ? __x64_sys_sendmsg+0x80/0x80 [ 83.413770][ T6069] ? lockdep_hardirqs_on+0x98/0x150 [ 83.419000][ T6069] do_syscall_64+0x55/0xb0 [ 83.423409][ T6069] ? clear_bhb_loop+0x40/0x90 [ 83.428080][ T6069] ? clear_bhb_loop+0x40/0x90 [ 83.432758][ T6069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.438658][ T6069] RIP: 0033:0x7f00bff9ce59 [ 83.443081][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.462686][ T6069] RSP: 002b:00007f00c0ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.471097][ T6069] RAX: ffffffffffffffda RBX: 00007f00c0215fa0 RCX: 00007f00bff9ce59 [ 83.479064][ T6069] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 83.487034][ T6069] RBP: 00007f00c0ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.495016][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.503010][ T6069] R13: 00007f00c0216038 R14: 00007f00c0215fa0 R15: 00007ffc78b535b8 [ 83.510996][ T6069] [ 83.544781][ T6068] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 83.552993][ T6068] netlink: 7946 bytes leftover after parsing attributes in process `syz.1.92'. [ 83.923645][ T6089] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 83.934299][ T6089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.102'. [ 84.829159][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.504519][ T6136] syzkaller0: entered promiscuous mode [ 85.510413][ T6136] syzkaller0: entered allmulticast mode [ 87.390452][ T6158] netlink: 'syz.2.129': attribute type 21 has an invalid length. [ 87.398503][ T6158] netlink: 156 bytes leftover after parsing attributes in process `syz.2.129'. [ 88.097520][ T6187] netlink: 'syz.1.139': attribute type 21 has an invalid length. [ 88.105386][ T6187] netlink: 156 bytes leftover after parsing attributes in process `syz.1.139'. [ 88.172496][ T6189] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 88.187102][ T6189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.141'. [ 88.265940][ T6189] .`: renamed from bond0 (while UP) [ 88.804891][ T6208] delete_channel: no stack [ 89.245405][ T6234] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 89.291005][ T6234] team0: Port device veth0_to_bond added [ 89.433948][ T6239] syzkaller0: entered promiscuous mode [ 89.442862][ T6239] syzkaller0: entered allmulticast mode [ 91.413309][ T6275] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.180'. [ 91.729423][ T6285] netlink: 539 bytes leftover after parsing attributes in process `syz.0.184'. [ 92.278013][ T6306] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 92.292667][ T6307] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 92.301311][ T6306] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.194'. [ 92.324034][ T6307] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.194'. [ 92.406953][ T6311] netlink: 830 bytes leftover after parsing attributes in process `syz.0.196'. [ 92.599316][ T6322] netlink: 'syz.2.198': attribute type 21 has an invalid length. [ 92.619984][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.198'. [ 92.640980][ T6322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'. [ 92.787848][ T6323] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 93.904718][ T6346] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.209'. [ 95.775668][ T6396] vcan0: entered allmulticast mode [ 95.807985][ T6396] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 95.881809][ T6396] veth0_macvtap: left promiscuous mode [ 96.150030][ T6401] delete_channel: no stack [ 96.982480][ T6431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.243'. [ 97.653949][ T6442] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.247'. [ 100.082272][ T6506] netlink: 'syz.1.275': attribute type 39 has an invalid length. [ 100.101157][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.719487][ T6506] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.824119][ T6515] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 100.849681][ T6515] netlink: 152 bytes leftover after parsing attributes in process `syz.3.276'. [ 102.126176][ T6560] sit0: entered allmulticast mode [ 102.157588][ T6560] sit0: entered promiscuous mode [ 102.635105][ T6582] netlink: 'syz.2.302': attribute type 4 has an invalid length. [ 102.666814][ T6582] netlink: 152 bytes leftover after parsing attributes in process `syz.2.302'. [ 102.961736][ T6595] netlink: 'syz.1.308': attribute type 21 has an invalid length. [ 103.029521][ T6595] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 103.710577][ T6619] netlink: 'syz.0.317': attribute type 21 has an invalid length. [ 103.747650][ T6619] netlink: 128 bytes leftover after parsing attributes in process `syz.0.317'. [ 103.925780][ T6614] syzkaller0: entered promiscuous mode [ 103.939684][ T6614] syzkaller0: entered allmulticast mode [ 104.317121][ T6641] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 104.398376][ T6642] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 104.406082][ T6642] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.325'. [ 104.501432][ T6641] veth0_vlan: left promiscuous mode [ 104.550107][ T6641] veth0_vlan: entered promiscuous mode [ 104.609482][ T6641] team0: Device veth0_vlan failed to register rx_handler [ 104.794437][ T6657] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.806870][ T6657] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.831843][ T6655] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.862848][ T6657] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.964424][ T6655] netlink: 'syz.1.330': attribute type 10 has an invalid length. [ 104.972547][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.984006][ T6655] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 105.238723][ T6679] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.339'. [ 105.433094][ T6687] syzkaller0: entered promiscuous mode [ 105.439216][ T6687] syzkaller0: entered allmulticast mode [ 106.696216][ T6689] netlink: 'syz.3.344': attribute type 39 has an invalid length. [ 106.732302][ T6694] netlink: 'syz.0.346': attribute type 39 has an invalid length. [ 106.740725][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'. [ 106.765261][ T6694] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 108.497844][ T6726] netlink: 'syz.0.356': attribute type 4 has an invalid length. [ 108.528088][ T6726] __nla_validate_parse: 2 callbacks suppressed [ 108.529626][ T6726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.356'. [ 108.548550][ T6724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.355'. [ 108.658510][ T6728] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 108.741247][ T6733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.749163][ T6733] IPv6: NLM_F_CREATE should be set when creating new route [ 108.756682][ T6733] IPv6: NLM_F_CREATE should be set when creating new route [ 108.764320][ T6733] IPv6: NLM_F_CREATE should be set when creating new route [ 108.856939][ T6733] netlink: 'syz.0.359': attribute type 9 has an invalid length. [ 108.878192][ T6733] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.359'. [ 108.995041][ T6742] netlink: 'syz.2.363': attribute type 8 has an invalid length. [ 109.033329][ T6742] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 109.071701][ T6742] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 109.081335][ T6742] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.363'. [ 109.104001][ T6744] netlink: 152 bytes leftover after parsing attributes in process `syz.1.364'. [ 109.113536][ T6739] netlink: 'syz.0.359': attribute type 9 has an invalid length. [ 109.127194][ T6743] delete_channel: no stack [ 109.135738][ T6739] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.359'. [ 109.591264][ T6758] netlink: 'syz.2.371': attribute type 153 has an invalid length. [ 109.603082][ T6758] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.371'. [ 112.647375][ T6799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.384'. [ 113.281235][ T6827] syzkaller0: entered promiscuous mode [ 113.290954][ T6827] syzkaller0: entered allmulticast mode [ 114.632889][ T6836] validate_nla: 1 callbacks suppressed [ 114.632922][ T6836] netlink: 'syz.0.401': attribute type 4 has an invalid length. [ 114.651722][ T6836] netlink: 152 bytes leftover after parsing attributes in process `syz.0.401'. [ 115.380487][ T6857] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.407'. [ 115.390529][ T6857] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.407'. [ 115.400331][ T6848] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.407'. [ 115.428137][ T6857] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.407'. [ 115.588156][ T6867] netlink: 'syz.3.414': attribute type 4 has an invalid length. [ 115.636804][ T6867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.414'. [ 115.921008][ T6882] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 115.954276][ T6882] netlink: 'syz.3.423': attribute type 4 has an invalid length. [ 115.976820][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 116.007517][ T6883] netlink: 'syz.3.423': attribute type 4 has an invalid length. [ 116.028192][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 116.296880][ T6897] netlink: set zone limit has 8 unknown bytes [ 116.900633][ T6902] netlink: 188 bytes leftover after parsing attributes in process `syz.3.428'. [ 117.108127][ T6901] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 117.116372][ T6901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.427'. [ 117.167177][ T6901] .`: renamed from bond0 (while UP) [ 117.780276][ T6934] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 117.789288][ T6934] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 117.828385][ T6931] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 118.111885][ T6934] netlink: 'syz.2.440': attribute type 39 has an invalid length. [ 119.673945][ T6994] syzkaller0: entered promiscuous mode [ 119.687882][ T6994] syzkaller0: entered allmulticast mode [ 122.799128][ T7032] netlink: 'syz.3.478': attribute type 9 has an invalid length. [ 122.821712][ T7032] __nla_validate_parse: 2 callbacks suppressed [ 122.821727][ T7032] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.478'. [ 122.934899][ T7038] netlink: 128 bytes leftover after parsing attributes in process `syz.1.481'. [ 122.973346][ T7038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.070424][ T7032] netlink: 'syz.3.478': attribute type 9 has an invalid length. [ 123.078986][ T7032] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.478'. [ 123.911484][ T7056] delete_channel: no stack [ 123.916174][ T7071] syzkaller0: entered promiscuous mode [ 123.949519][ T7071] syzkaller0: entered allmulticast mode [ 125.084695][ T7086] netlink: 'syz.2.498': attribute type 9 has an invalid length. [ 125.097410][ T7086] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.498'. [ 126.300447][ T7087] netlink: 'syz.2.498': attribute type 9 has an invalid length. [ 126.312480][ T7087] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.498'. [ 126.475927][ T7098] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 126.491921][ T7098] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.503'. [ 126.502051][ T7098] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 126.526061][ T7096] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 126.564544][ T7096] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.503'. [ 126.586545][ T7096] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 126.699799][ T7109] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 126.737214][ T7109] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.507'. [ 127.159562][ T7125] netlink: 156 bytes leftover after parsing attributes in process `syz.2.513'. [ 127.892278][ T7163] cgroup: fork rejected by pids controller in /syz1 [ 128.524302][ T7275] netlink: 'syz.3.534': attribute type 9 has an invalid length. [ 128.569046][ T7275] netlink: 7 bytes leftover after parsing attributes in process `syz.3.534'. [ 128.762458][ T2960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.919908][ T2960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.043465][ T2960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.323545][ T2960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.541923][ T7297] netlink: 'syz.3.541': attribute type 4 has an invalid length. [ 129.563335][ T7297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.541'. [ 129.573816][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.583516][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.595899][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.607832][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.626905][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.634504][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.654190][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 131.052975][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.065561][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.076301][ T7298] bridge_slave_0: entered allmulticast mode [ 131.088687][ T7298] bridge_slave_0: entered promiscuous mode [ 131.207126][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.224867][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.246942][ T7298] bridge_slave_1: entered allmulticast mode [ 131.262980][ T7298] bridge_slave_1: entered promiscuous mode [ 131.439771][ T7346] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 131.555802][ T7346] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.767370][ T5780] Bluetooth: hci0: command tx timeout [ 132.044582][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.084627][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.128313][ T7363] netlink: 'syz.2.557': attribute type 41 has an invalid length. [ 132.136274][ T7363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.557'. [ 132.282641][ T2960] hsr_slave_0: left promiscuous mode [ 132.309298][ T2960] hsr_slave_1: left promiscuous mode [ 132.344502][ T2960] bridge_slave_1: left allmulticast mode [ 132.376309][ T2960] bridge_slave_1: left promiscuous mode [ 132.386461][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.432353][ T2960] bridge_slave_0: left allmulticast mode [ 132.446669][ T2960] bridge_slave_0: left promiscuous mode [ 132.460446][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.518144][ T2960] veth1_macvtap: left promiscuous mode [ 132.524244][ T2960] veth1_vlan: left promiscuous mode [ 132.541263][ T2960] veth0_vlan: left promiscuous mode [ 132.682837][ T7389] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.563'. [ 133.043345][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055337][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.379477][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 133.419029][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 133.458590][ T2960] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.495231][ T2960] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.521349][ T2960] team0 (unregistering): Port device veth0_to_bond removed [ 133.765074][ T2960] .` (unregistering): Released all slaves [ 133.846992][ T5780] Bluetooth: hci0: command tx timeout [ 133.942870][ T7298] team0: Port device team_slave_0 added [ 133.970261][ T7298] team0: Port device team_slave_1 added [ 134.070603][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.085734][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.113558][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.182871][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.210545][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.277623][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.468778][ T7298] hsr_slave_0: entered promiscuous mode [ 134.494919][ T7298] hsr_slave_1: entered promiscuous mode [ 134.563968][ T7425] netlink: 'syz.0.573': attribute type 33 has an invalid length. [ 134.614081][ T7425] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.573'. [ 135.917010][ T5780] Bluetooth: hci0: command tx timeout [ 136.414590][ T7473] netlink: 'syz.2.584': attribute type 2 has an invalid length. [ 136.422487][ T7473] netlink: 'syz.2.584': attribute type 8 has an invalid length. [ 136.432123][ T7473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.584'. [ 136.441736][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.457756][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.465986][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.475166][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.731120][ T7480] syzkaller0: entered promiscuous mode [ 136.738079][ T7480] syzkaller0: entered allmulticast mode [ 136.790042][ T7485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.587'. [ 137.999926][ T5780] Bluetooth: hci0: command tx timeout [ 138.452619][ T7493] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 138.467693][ T7493] netlink: 55 bytes leftover after parsing attributes in process `syz.2.591'. [ 139.009826][ T7494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.591'. [ 139.035836][ T7494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.058161][ T7298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.079828][ T7298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.094630][ T7298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.159516][ T7298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.420240][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.462001][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.486646][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.493865][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.528360][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.535526][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.717199][ T7529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.602'. [ 139.732591][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.760548][ T7529] pim6reg1: entered promiscuous mode [ 139.765904][ T7529] pim6reg1: entered allmulticast mode [ 140.220282][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.367582][ T7298] veth0_vlan: entered promiscuous mode [ 140.382948][ T7298] veth1_vlan: entered promiscuous mode [ 140.470418][ T7298] veth0_macvtap: entered promiscuous mode [ 140.487261][ T7298] veth1_macvtap: entered promiscuous mode [ 140.519683][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.546679][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.560473][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.571512][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.585507][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.595744][ T7557] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 140.618257][ T7557] netlink: 55 bytes leftover after parsing attributes in process `syz.3.607'. [ 140.996553][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.008876][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.021222][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.039841][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.081030][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.111408][ T7559] netlink: 128 bytes leftover after parsing attributes in process `syz.3.607'. [ 141.146278][ T7559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.211358][ T7298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.220986][ T7298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.257883][ T7298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.267829][ T7298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.363748][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.385644][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.512180][ T7594] syzkaller0: entered promiscuous mode [ 142.526784][ T7594] syzkaller0: entered allmulticast mode [ 142.555422][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.573679][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.523751][ T7619] syzkaller0: entered promiscuous mode [ 144.535464][ T7619] syzkaller0: entered allmulticast mode [ 148.488039][ T7636] netlink: 14 bytes leftover after parsing attributes in process `syz.3.622'. [ 148.499982][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.554316][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.577620][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.585084][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.656515][ T7649] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 148.665034][ T7649] netlink: 55 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.010627][ T7651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.027432][ T7651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.052521][ T7677] netlink: 'syz.0.627': attribute type 2 has an invalid length. [ 149.060982][ T7677] netlink: 'syz.0.627': attribute type 8 has an invalid length. [ 149.069070][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.627'. [ 149.082055][ T7674] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.627'. [ 150.365971][ T7712] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 150.376374][ T7712] netlink: 55 bytes leftover after parsing attributes in process `syz.0.639'. [ 150.699176][ T7713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.639'. [ 150.731146][ T7713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.250614][ T7733] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 151.285540][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.317700][ T7733] bond0: (slave team0): Enslaving as an active interface with an up link [ 151.379265][ T7740] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.651'. [ 151.515483][ T7744] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 151.535150][ T7744] netlink: 152 bytes leftover after parsing attributes in process `syz.2.653'. [ 152.017867][ T7761] syz.1.657 uses obsolete (PF_INET,SOCK_PACKET) [ 152.245361][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.501451][ T7770] netlink: 'syz.2.661': attribute type 2 has an invalid length. [ 152.511628][ T7770] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.661'. [ 152.650597][ T7777] syzkaller0: entered promiscuous mode [ 152.659121][ T7777] syzkaller0: entered allmulticast mode [ 154.405340][ T7800] netlink: 6 bytes leftover after parsing attributes in process `syz.1.673'. [ 154.434713][ T7800] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.761091][ T7812] netlink: 'syz.0.677': attribute type 41 has an invalid length. [ 154.839577][ T7812] netlink: 'syz.0.677': attribute type 41 has an invalid length. [ 154.956528][ T7817] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 154.967200][ T7817] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 155.007524][ T7817] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 155.037452][ T7817] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 155.045701][ T7819] netlink: 'syz.2.679': attribute type 9 has an invalid length. [ 155.066800][ T7819] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.679'. [ 155.164244][ T7827] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 155.200481][ T7827] netlink: 152 bytes leftover after parsing attributes in process `syz.0.682'. [ 156.761330][ T7866] netlink: 'syz.3.699': attribute type 9 has an invalid length. [ 156.781201][ T7866] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.699'. [ 157.129644][ T7881] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 157.156748][ T7881] netlink: 152 bytes leftover after parsing attributes in process `syz.2.705'. [ 159.401462][ T7939] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.729'. [ 159.459395][ T7941] netlink: 100 bytes leftover after parsing attributes in process `syz.1.729'. [ 159.678770][ T7945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.731'. [ 159.811218][ T7945] .`: renamed from bond0 (while UP) [ 159.878282][ T7947] tap0: tun_chr_ioctl cmd 1074025677 [ 159.883801][ T7947] tap0: linktype set to 825 [ 161.827931][ T7988] syzkaller0: entered promiscuous mode [ 161.833582][ T7988] syzkaller0: entered allmulticast mode [ 162.722242][ T8009] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.754'. [ 164.584076][ T8053] validate_nla: 3 callbacks suppressed [ 164.584120][ T8053] netlink: 'syz.2.773': attribute type 4 has an invalid length. [ 164.600996][ T8053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.773'. [ 164.929186][ T8075] netlink: 'syz.0.779': attribute type 23 has an invalid length. [ 165.110355][ T8082] syzkaller0: entered promiscuous mode [ 165.116095][ T8082] syzkaller0: entered allmulticast mode [ 168.809497][ T8135] netlink: 'syz.2.796': attribute type 21 has an invalid length. [ 168.838045][ T8135] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 168.869925][ T8135] netlink: 100 bytes leftover after parsing attributes in process `syz.2.796'. [ 169.297763][ T8149] netlink: 'syz.1.804': attribute type 21 has an invalid length. [ 169.311594][ T8149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.804'. [ 169.331008][ T8149] netlink: 'syz.1.804': attribute type 5 has an invalid length. [ 169.348695][ T8149] netlink: 'syz.1.804': attribute type 6 has an invalid length. [ 169.376810][ T8149] netlink: 3 bytes leftover after parsing attributes in process `syz.1.804'. [ 173.953930][ T8211] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 173.972943][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.826'. [ 173.985411][ T8211] team0: entered promiscuous mode [ 173.992494][ T8211] team_slave_0: entered promiscuous mode [ 174.020688][ T8211] team_slave_1: entered promiscuous mode [ 174.065621][ T8211] team0: entered allmulticast mode [ 174.084726][ T8211] team_slave_0: entered allmulticast mode [ 174.123875][ T8211] team_slave_1: entered allmulticast mode [ 174.147600][ T8211] bridge0: port 3(team0) entered blocking state [ 174.168975][ T8211] bridge0: port 3(team0) entered disabled state [ 174.195850][ T8211] bridge0: port 3(team0) entered blocking state [ 174.202555][ T8211] bridge0: port 3(team0) entered forwarding state [ 175.916006][ T8247] netlink: 'syz.0.840': attribute type 2 has an invalid length. [ 175.928218][ T8247] netlink: 'syz.0.840': attribute type 8 has an invalid length. [ 175.936094][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.840'. [ 177.576126][ T8288] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 177.612777][ T8288] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 177.653312][ T8291] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 178.610866][ T8343] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 178.620485][ T8343] netlink: 164 bytes leftover after parsing attributes in process `syz.1.878'. [ 178.898827][ T8353] netlink: 'syz.3.882': attribute type 3 has an invalid length. [ 178.914670][ T8353] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.882'. [ 180.442134][ T8405] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.902'. [ 180.462182][ T8405] bridge_slave_1: default FDB implementation only supports local addresses [ 181.061608][ T8439] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 181.173295][ T8439] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.246401][ T8439] syz.1.915 (8439) used greatest stack depth: 17832 bytes left [ 181.603397][ T8461] netlink: 'syz.3.925': attribute type 16 has an invalid length. [ 181.626777][ T8461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.925'. [ 183.330049][ T8508] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 183.339825][ T8508] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.940'. [ 183.795705][ T8529] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 183.809570][ T8529] netlink: 55 bytes leftover after parsing attributes in process `syz.2.951'. [ 183.818869][ T8529] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 183.831860][ T8529] netlink: 55 bytes leftover after parsing attributes in process `syz.2.951'. [ 183.868467][ T8534] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 183.885156][ T8534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.952'. [ 184.113178][ T8539] syzkaller0: entered promiscuous mode [ 184.119975][ T8539] syzkaller0: entered allmulticast mode [ 186.510863][ T8546] netlink: 54779 bytes leftover after parsing attributes in process `syz.1.954'. [ 186.520454][ T8551] netlink: 'syz.3.957': attribute type 21 has an invalid length. [ 186.530617][ T8551] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 186.538473][ T8551] netlink: 100 bytes leftover after parsing attributes in process `syz.3.957'. [ 188.106110][ T8586] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 188.128198][ T8586] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.971'. [ 190.078805][ T8602] netlink: 'syz.3.977': attribute type 12 has an invalid length. [ 190.087130][ T8602] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.977'. [ 190.311512][ T8616] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.982'. [ 190.494349][ T8620] netlink: 'syz.2.984': attribute type 4 has an invalid length. [ 190.504740][ T8620] netlink: 152 bytes leftover after parsing attributes in process `syz.2.984'. [ 191.438996][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 191.439465][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 191.445047][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 191.628674][ T8640] netlink: 'syz.1.990': attribute type 12 has an invalid length. [ 191.664092][ T8640] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.990'. [ 193.142691][ T8679] netlink: 'syz.0.1006': attribute type 4 has an invalid length. [ 193.158000][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1006'. [ 193.592683][ T8695] netlink: 'syz.2.1014': attribute type 46 has an invalid length. [ 193.606159][ T8695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'. [ 193.709640][ T8700] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1014'. [ 194.686775][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.693133][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.960705][ T8705] Ÿë: port 1(veth0_to_team) entered blocking state [ 195.967800][ T8705] Ÿë: port 1(veth0_to_team) entered disabled state [ 195.974583][ T8705] veth0_to_team: entered allmulticast mode [ 195.987029][ T8705] veth0_to_team: entered promiscuous mode [ 196.465967][ T8730] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 196.496099][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1024'. [ 196.509858][ T8730] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 196.526663][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1024'. [ 196.583425][ T8730] netlink: 'syz.3.1024': attribute type 21 has an invalid length. [ 196.621124][ T8730] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1024'. [ 196.881399][ T8750] netlink: 'syz.1.1031': attribute type 4 has an invalid length. [ 196.897292][ T8750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1031'. [ 197.195147][ T8759] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1034'. [ 197.301261][ T8763] netlink: 'syz.3.1034': attribute type 28 has an invalid length. [ 197.343124][ T8763] netlink: 'syz.3.1034': attribute type 29 has an invalid length. [ 197.375798][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1034'. [ 197.468521][ T8747] Ÿë: port 1(gretap0) entered blocking state [ 197.477490][ T8747] Ÿë: port 1(gretap0) entered disabled state [ 197.483860][ T8747] gretap0: entered allmulticast mode [ 197.490957][ T8747] gretap0: entered promiscuous mode [ 197.510575][ T8747] Ÿë: port 2(veth0_to_team) entered blocking state [ 197.528629][ T8747] Ÿë: port 2(veth0_to_team) entered disabled state [ 197.535578][ T8747] veth0_to_team: entered allmulticast mode [ 197.545304][ T8747] veth0_to_team: entered promiscuous mode [ 198.667793][ T8793] Ÿë: port 1(gretap0) entered blocking state [ 198.676146][ T8793] Ÿë: port 1(gretap0) entered disabled state [ 198.682541][ T8793] gretap0: entered allmulticast mode [ 198.691789][ T8793] gretap0: entered promiscuous mode [ 198.721643][ T8793] Ÿë: port 2(veth0_to_team) entered blocking state [ 198.728625][ T8793] Ÿë: port 2(veth0_to_team) entered disabled state [ 198.735444][ T8793] veth0_to_team: entered allmulticast mode [ 198.743778][ T8793] veth0_to_team: entered promiscuous mode [ 202.004528][ T8823] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1056'. [ 202.034594][ T8823] syz.3.1056[8823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.035692][ T8823] syz.3.1056[8823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.092723][ T8827] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1059'. [ 202.149714][ T8827] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 202.187302][ T8827] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 202.806318][ T8857] Ÿë: port 1(gretap0) entered blocking state [ 202.823498][ T8857] Ÿë: port 1(gretap0) entered disabled state [ 202.844028][ T8857] gretap0: entered allmulticast mode [ 202.860358][ T8857] gretap0: entered promiscuous mode [ 202.916207][ T8845] Ÿë: port 2(veth0_to_team) entered blocking state [ 202.925202][ T8845] Ÿë: port 2(veth0_to_team) entered disabled state [ 202.933072][ T8845] veth0_to_team: entered allmulticast mode [ 202.962862][ T8845] veth0_to_team: entered promiscuous mode [ 203.096102][ T8862] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1073'. [ 203.126575][ T8862] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 203.160110][ T8862] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.444304][ T8878] syzkaller0: entered promiscuous mode [ 203.456741][ T8878] syzkaller0: entered allmulticast mode [ 203.705910][ T8887] netlink: 'syz.3.1083': attribute type 3 has an invalid length. [ 203.716135][ T8887] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1083'. [ 207.725297][ T8924] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 207.746368][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1095'. [ 212.605769][ T8980] netlink: 'syz.1.1120': attribute type 17 has an invalid length. [ 212.614958][ T8980] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1120'. [ 212.629659][ T8980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.832211][ T8991] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 213.026029][ T9000] netlink: 'syz.2.1128': attribute type 4 has an invalid length. [ 213.047008][ T9000] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1128'. [ 213.460755][ T9020] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1135'. [ 213.672216][ T9039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1143'. [ 214.228072][ T9059] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1152'. [ 214.653737][ T9070] netlink: 'syz.3.1155': attribute type 4 has an invalid length. [ 214.663100][ T9070] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1155'. [ 215.531782][ T9102] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1170'. [ 215.589686][ T9102] netlink: zone id is out of range [ 215.605598][ T9102] netlink: zone id is out of range [ 215.623777][ T9102] netlink: zone id is out of range [ 215.640000][ T9102] netlink: zone id is out of range [ 215.652173][ T9102] netlink: zone id is out of range [ 215.667777][ T9102] netlink: zone id is out of range [ 215.695584][ T9102] netlink: zone id is out of range [ 215.735566][ T9102] netlink: zone id is out of range [ 216.061019][ T9118] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1176'. [ 216.099326][ T9118] sit0: entered allmulticast mode [ 216.167798][ T9118] sit0: entered promiscuous mode [ 216.671511][ T9130] syzkaller0: entered promiscuous mode [ 216.687163][ T9130] syzkaller0: entered allmulticast mode [ 219.829637][ T9201] netlink: 'syz.2.1208': attribute type 4 has an invalid length. [ 219.858838][ T9201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1208'. [ 221.007171][ T9259] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 221.015187][ T9259] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1232'. [ 221.114408][ T9263] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 221.129125][ T9263] veth0_macvtap: left promiscuous mode [ 221.396089][ T9265] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1235'. [ 223.352486][ T9306] netlink: 'syz.1.1250': attribute type 29 has an invalid length. [ 223.401761][ T9306] netlink: 'syz.1.1250': attribute type 29 has an invalid length. [ 223.722100][ T9324] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 223.733012][ T9324] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1256'. [ 224.177555][ T9340] netlink: 'syz.0.1265': attribute type 11 has an invalid length. [ 224.199764][ T9340] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1265'. [ 224.265019][ T9344] syzkaller0: entered promiscuous mode [ 224.274709][ T9344] syzkaller0: entered allmulticast mode [ 225.903957][ T9348] netlink: 14078 bytes leftover after parsing attributes in process `syz.1.1268'. [ 225.913713][ T9349] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1268'. [ 226.255488][ T9364] netlink: 'syz.2.1274': attribute type 29 has an invalid length. [ 226.276972][ T9364] netlink: 'syz.2.1274': attribute type 29 has an invalid length. [ 226.303378][ T9364] netlink: 'syz.2.1274': attribute type 29 has an invalid length. [ 226.323074][ T9364] netlink: 'syz.2.1274': attribute type 29 has an invalid length. [ 226.382805][ T9370] netlink: 'syz.0.1277': attribute type 4 has an invalid length. [ 226.391962][ T9370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1277'. [ 227.699968][ T9403] syzkaller0: left promiscuous mode [ 227.708678][ T9403] syzkaller0: left allmulticast mode [ 228.692407][ T9417] syzkaller0: entered promiscuous mode [ 228.730913][ T9417] syzkaller0: entered allmulticast mode [ 230.301420][ T9431] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 230.675586][ T9452] netlink: 'syz.0.1303': attribute type 29 has an invalid length. [ 230.776384][ T9452] netlink: 'syz.0.1303': attribute type 29 has an invalid length. [ 231.807416][ T9498] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 231.840655][ T9498] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1319'. [ 232.630492][ T9529] syzkaller0: entered promiscuous mode [ 232.637383][ T9529] syzkaller0: entered allmulticast mode [ 234.421540][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 234.436965][ T9541] netlink: 'syz.3.1333': attribute type 21 has an invalid length. [ 235.209259][ T9587] syzkaller0: entered promiscuous mode [ 235.227255][ T9587] syzkaller0: entered allmulticast mode [ 235.402449][ T9600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1354'. [ 235.440457][ T9601] netlink: 'syz.1.1355': attribute type 4 has an invalid length. [ 235.470051][ T9601] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1355'. [ 235.770769][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1359'. [ 236.522418][ T9657] netlink: 'syz.1.1376': attribute type 21 has an invalid length. [ 236.976315][ T9686] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1387'. [ 237.674928][ T9721] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 237.837518][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.869591][ T9721] .`: (slave team0): Enslaving as an active interface with an up link [ 238.100182][ T9729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1402'. [ 239.585818][ T9766] syzkaller0: entered promiscuous mode [ 239.601633][ T9766] syzkaller0: entered allmulticast mode [ 239.622313][ T9768] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 239.630781][ T9768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1418'. [ 242.281361][ T9823] netlink: 'syz.0.1438': attribute type 39 has an invalid length. [ 243.973413][ T9884] netlink: 'syz.3.1460': attribute type 19 has an invalid length. [ 244.271464][ T9898] netlink: 'syz.3.1464': attribute type 3 has an invalid length. [ 244.280045][ T9898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1464'. [ 244.296398][ T9898] netlink: 'syz.3.1464': attribute type 25 has an invalid length. [ 244.306093][ T9898] netlink: 'syz.3.1464': attribute type 9 has an invalid length. [ 244.653460][ T9916] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1473'. [ 245.069888][ T9933] netlink: 'syz.3.1478': attribute type 4 has an invalid length. [ 245.086998][ T9933] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1478'. [ 245.626409][ T9964] netlink: 'syz.1.1488': attribute type 9 has an invalid length. [ 245.646847][ T9964] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1488'. [ 247.916397][T10069] netlink: 'syz.3.1531': attribute type 4 has an invalid length. [ 247.924960][T10069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1531'. [ 247.977607][T10067] netlink: 'syz.1.1529': attribute type 9 has an invalid length. [ 247.986345][T10067] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1529'. [ 248.442058][T10083] netlink: 'syz.1.1545': attribute type 39 has an invalid length. [ 249.962294][T10118] TCP: TCP_TX_DELAY enabled [ 250.233534][T10118] mac80211_hwsim hwsim6 .3ãc¤±: renamed from wlan1 (while UP) [ 250.317414][T10118] netlink: 'syz.3.1550': attribute type 3 has an invalid length. [ 250.325833][T10118] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1550'. [ 250.539545][T10136] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1556'. [ 250.551171][T10136] team_slave_0: left promiscuous mode [ 250.557899][T10136] team_slave_0: left allmulticast mode [ 250.597735][T10136] team0: Port device team_slave_0 removed [ 250.605336][T10136] net_ratelimit: 333 callbacks suppressed [ 250.605402][T10136] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.635583][T10143] netlink: 'syz.3.1558': attribute type 27 has an invalid length. [ 250.644760][T10143] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1558'. [ 251.221904][T10174] netlink: 'syz.3.1572': attribute type 4 has an invalid length. [ 251.237521][T10174] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1572'. [ 251.366494][T10176] netlink: 'syz.0.1573': attribute type 10 has an invalid length. [ 251.447885][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.459258][T10176] .`: (slave team0): Enslaving as an active interface with an up link [ 251.469480][T10183] netlink: 'syz.2.1574': attribute type 9 has an invalid length. [ 251.498445][T10183] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1574'. [ 251.803884][T10199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1579'. [ 251.815784][T10199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.881247][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 253.300246][T10240] netlink: 'syz.0.1593': attribute type 29 has an invalid length. [ 253.309379][T10240] netlink: 'syz.0.1593': attribute type 29 has an invalid length. [ 254.087634][T10249] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1597'. [ 254.202049][T10255] netlink: 'syz.0.1594': attribute type 9 has an invalid length. [ 254.210629][T10255] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1594'. [ 254.325573][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1605'. [ 254.580646][T10269] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1608'. [ 255.390837][T10291] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 255.413036][T10291] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1617'. [ 255.924405][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.930982][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.685398][T10335] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 257.704797][T10335] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1634'. [ 258.148044][T10339] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1637'. [ 258.209528][T10341] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 258.251746][T10339] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 258.260260][T10339] netlink: 'syz.1.1637': attribute type 3 has an invalid length. [ 258.269326][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1637'. [ 258.509117][T10355] netlink: 'syz.0.1643': attribute type 25 has an invalid length. [ 258.527138][T10355] netlink: 'syz.0.1643': attribute type 6 has an invalid length. [ 258.568920][T10355] netlink: 'syz.0.1643': attribute type 10 has an invalid length. [ 258.586673][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.605692][T10355] bridge_slave_1: left allmulticast mode [ 258.612405][T10355] bridge_slave_1: left promiscuous mode [ 258.621294][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.632683][T10355] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.120133][T10369] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1650'. [ 259.151127][T10369] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 259.179521][T10376] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 259.199438][T10376] netlink: 'syz.0.1650': attribute type 3 has an invalid length. [ 259.213818][T10376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1650'. [ 259.416443][T10383] netlink: 'syz.2.1655': attribute type 25 has an invalid length. [ 259.439371][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.447629][T10383] bridge_slave_1: left allmulticast mode [ 259.453332][T10383] bridge_slave_1: left promiscuous mode [ 259.460212][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.477295][T10383] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.992830][T10407] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1664'. [ 260.016555][T10407] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 260.064252][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1664'. [ 260.400961][T10421] validate_nla: 4 callbacks suppressed [ 260.400975][T10421] netlink: 'syz.1.1667': attribute type 25 has an invalid length. [ 260.414672][T10421] netlink: 'syz.1.1667': attribute type 6 has an invalid length. [ 260.431769][T10421] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 260.443295][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.455601][T10421] bridge_slave_1: left allmulticast mode [ 260.461392][T10421] bridge_slave_1: left promiscuous mode [ 260.468009][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.483025][T10421] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.741963][T10427] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 260.783153][T10427] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1669'. [ 261.062501][T10441] syzkaller0: entered promiscuous mode [ 261.080706][T10441] syzkaller0: entered allmulticast mode [ 262.235907][T10484] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 262.263149][T10484] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1691'. [ 264.604971][T10548] syzkaller0: entered promiscuous mode [ 264.613668][T10548] syzkaller0: entered allmulticast mode [ 264.660429][T10555] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1721'. [ 266.394889][T10561] netlink: 'syz.2.1724': attribute type 4 has an invalid length. [ 266.404876][T10561] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1724'. [ 266.429263][T10579] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 266.448829][T10579] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1729'. [ 266.471434][T10579] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 266.970061][T10605] netlink: 'syz.1.1740': attribute type 2 has an invalid length. [ 266.997023][T10604] netlink: 'syz.1.1740': attribute type 2 has an invalid length. [ 267.010643][T10606] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 267.011237][T10605] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1740'. [ 267.030011][T10604] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1740'. [ 267.050754][T10606] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1737'. [ 267.070064][T10610] netlink: 'syz.3.1737': attribute type 39 has an invalid length. [ 267.833780][T10639] netlink: 'syz.1.1751': attribute type 4 has an invalid length. [ 267.851878][T10639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1751'. [ 267.853975][T10643] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1752'. [ 268.050912][T10650] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.060234][T10650] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1756'. [ 268.658362][T10674] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1763'. [ 268.678310][T10674] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1763'. [ 269.372039][T10699] syzkaller0: entered promiscuous mode [ 269.388322][T10699] syzkaller0: entered allmulticast mode [ 271.654645][T10743] __nla_validate_parse: 2 callbacks suppressed [ 271.654663][T10743] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1788'. [ 271.670384][T10743] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 272.159156][T10771] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1801'. [ 272.764408][T10793] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 272.777091][T10793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1809'. [ 273.113527][T10815] netlink: 'syz.1.1817': attribute type 3 has an invalid length. [ 273.131324][T10815] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 273.140904][T10815] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1817'. [ 275.082053][T10845] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 275.096772][T10845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1832'. [ 275.429878][T10862] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1840'. [ 275.612104][T10870] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1844'. [ 275.623382][T10870] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 277.772860][T10899] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 277.808020][T10899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1854'. [ 278.404349][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.962273][T10933] netlink: 'syz.2.1868': attribute type 9 has an invalid length. [ 278.988744][T10933] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1868'. [ 279.296883][T10945] netlink: 'syz.2.1874': attribute type 4 has an invalid length. [ 279.315241][T10945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1874'. [ 279.364554][T10945] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1874'. [ 283.740608][T11007] syzkaller0: entered promiscuous mode [ 283.746151][T11007] syzkaller0: entered allmulticast mode [ 285.763546][T11019] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 285.772725][T11019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1898'. [ 286.330207][T11042] netlink: 'syz.3.1907': attribute type 2 has an invalid length. [ 286.344546][T11042] netlink: 'syz.3.1907': attribute type 8 has an invalid length. [ 286.353162][T11042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1907'. [ 286.705980][T11054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.726987][T11054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.746932][T11054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.755033][T11054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.537947][T11072] netlink: 'syz.1.1917': attribute type 2 has an invalid length. [ 287.546194][T11072] netlink: 'syz.1.1917': attribute type 8 has an invalid length. [ 287.554273][T11072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 287.657645][T11076] netlink: 'syz.3.1921': attribute type 10 has an invalid length. [ 287.701566][T11076] team0: Device hsr_slave_0 failed to register rx_handler [ 289.183004][T11097] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1929'. [ 289.195607][T11094] netlink: 'syz.3.1928': attribute type 4 has an invalid length. [ 289.204949][T11094] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1928'. [ 289.473038][T11106] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 289.487857][T11106] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1932'. [ 289.733794][T11121] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1938'. [ 289.754572][T11121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.599645][T11147] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1949'. [ 290.666446][T11147] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1949'. [ 290.788056][T11155] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1952'. [ 291.090402][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1956'. [ 291.106926][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1956'. [ 291.530680][T11190] cgroup: fork rejected by pids controller in /syz0 [ 291.741287][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.850994][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.960397][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.062606][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.267782][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.278296][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.289130][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.307009][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.317372][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.324892][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.056385][T11324] netlink: 'syz.3.1974': attribute type 12 has an invalid length. [ 293.422017][T11304] chnl_net:caif_netlink_parms(): no params data found [ 293.555428][ T49] gretap0 (unregistering): left allmulticast mode [ 293.577404][ T49] gretap0 (unregistering): left promiscuous mode [ 293.594133][ T49] Ÿë: port 1(gretap0) entered disabled state [ 293.864835][T11354] syzkaller0: entered promiscuous mode [ 293.872184][T11354] syzkaller0: entered allmulticast mode [ 293.921332][T11368] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1983'. [ 294.398251][ T5779] Bluetooth: hci2: command tx timeout [ 295.736725][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.760306][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.786304][T11304] bridge_slave_0: entered allmulticast mode [ 295.814508][T11304] bridge_slave_0: entered promiscuous mode [ 295.860468][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.873178][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.881522][T11304] bridge_slave_1: entered allmulticast mode [ 295.890261][T11304] bridge_slave_1: entered promiscuous mode [ 295.973733][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.009745][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.241248][T11304] team0: Port device team_slave_0 added [ 296.260290][T11304] team0: Port device team_slave_1 added [ 296.295100][ T49] veth0_to_team: left allmulticast mode [ 296.308383][ T49] veth0_to_team: left promiscuous mode [ 296.314130][ T49] Ÿë: port 2(veth0_to_team) entered disabled state [ 296.476708][ T5779] Bluetooth: hci2: command tx timeout [ 297.595661][ T49] hsr_slave_0: left promiscuous mode [ 297.601846][ T49] hsr_slave_1: left promiscuous mode [ 297.607731][ T49] bridge_slave_0: left allmulticast mode [ 297.613372][ T49] bridge_slave_0: left promiscuous mode [ 297.619227][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.638446][ T49] veth1_macvtap: left promiscuous mode [ 297.644046][ T49] veth0_macvtap: left promiscuous mode [ 298.024096][ T49] team0 (unregistering): Port device team_slave_1 removed [ 298.069796][ T49] team0 (unregistering): Port device team_slave_0 removed [ 298.110869][ T49] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.151326][ T49] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.199574][ T49] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 298.450738][ T49] .` (unregistering): (slave team0): Releasing backup interface [ 298.489536][ T49] .` (unregistering): Released all slaves [ 298.557331][ T5779] Bluetooth: hci2: command tx timeout [ 298.594012][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.609957][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.636814][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.723585][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.744402][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.778291][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.814689][T11439] netlink: 'syz.1.1998': attribute type 10 has an invalid length. [ 298.855419][T11439] wlan1: mtu less than device minimum [ 298.988618][T11304] hsr_slave_0: entered promiscuous mode [ 298.999993][T11304] hsr_slave_1: entered promiscuous mode [ 299.012303][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.024748][T11304] Cannot create hsr debugfs directory [ 300.643346][ T5779] Bluetooth: hci2: command tx timeout [ 301.848559][T11304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.862213][T11304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.873823][T11304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.884945][T11304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.004313][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.032640][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.050918][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.058128][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.078874][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.086034][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.348237][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.395740][T11304] veth0_vlan: entered promiscuous mode [ 302.409987][T11304] veth1_vlan: entered promiscuous mode [ 302.458579][T11304] veth0_macvtap: entered promiscuous mode [ 302.469148][T11304] veth1_macvtap: entered promiscuous mode [ 302.499662][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.512120][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.524428][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.536138][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.554988][T11304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.569339][T11304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.581490][T11304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.595207][T11304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.692165][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.703995][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.745374][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.753507][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.092284][T11534] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.141648][T11534] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2013'. [ 303.314677][T11548] netlink: 'syz.0.2015': attribute type 4 has an invalid length. [ 303.346843][T11548] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2015'. [ 303.437654][T11548] .`: renamed from bond0 (while UP) [ 304.175278][T11585] syzkaller0: entered promiscuous mode [ 304.186878][T11585] syzkaller0: entered allmulticast mode [ 306.393760][T11608] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2032'. [ 306.968754][T11634] netlink: 'syz.2.2043': attribute type 29 has an invalid length. [ 307.008466][T11634] netlink: 'syz.2.2043': attribute type 29 has an invalid length. [ 307.032099][T11639] netlink: 'syz.2.2043': attribute type 29 has an invalid length. [ 307.074468][T11646] netlink: 'syz.2.2043': attribute type 29 has an invalid length. [ 307.111656][T11641] netlink: 'syz.2.2043': attribute type 29 has an invalid length. [ 307.190923][T11645] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 307.319149][T11645] team0: Port device wlan1 added [ 309.045114][T11681] netlink: 'syz.0.2052': attribute type 4 has an invalid length. [ 309.095790][T11681] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2052'. [ 314.000948][T11761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2082'. [ 314.106918][T11766] netlink: 'syz.2.2084': attribute type 4 has an invalid length. [ 314.114935][T11766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2084'. [ 314.419157][T11781] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 314.430204][T11781] bridge0: port 3(team0) entered disabled state [ 314.447141][T11781] team0: Device bridge0 is already an upper device of the team interface [ 314.569266][T11789] syzkaller0: entered promiscuous mode [ 314.575113][T11789] syzkaller0: entered allmulticast mode [ 315.192608][T11816] syzkaller0: entered promiscuous mode [ 315.213490][T11816] syzkaller0: entered allmulticast mode [ 317.337533][T11857] syzkaller0: entered promiscuous mode [ 317.343428][T11857] syzkaller0: entered allmulticast mode [ 317.363831][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370624][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.074908][T11892] netlink: 'syz.1.2134': attribute type 4 has an invalid length. [ 319.097059][T11892] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2134'. [ 319.611312][T11917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.179109][T11962] netlink: 'syz.1.2163': attribute type 4 has an invalid length. [ 321.198002][T11962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2163'. [ 321.453016][T11976] netlink: 'syz.1.2168': attribute type 29 has an invalid length. [ 321.499184][T11976] netlink: 'syz.1.2168': attribute type 29 has an invalid length. [ 322.457692][T12019] netlink: 'syz.1.2186': attribute type 4 has an invalid length. [ 322.473649][T12019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2186'. [ 322.888659][T12027] syzkaller0: entered promiscuous mode [ 322.907879][T12027] syzkaller0: entered allmulticast mode [ 325.398179][T12046] syzkaller0: entered promiscuous mode [ 325.403812][T12046] syzkaller0: entered allmulticast mode [ 325.496859][T12048] netlink: 'syz.2.2198': attribute type 10 has an invalid length. [ 325.518176][T12048] veth1_macvtap: left promiscuous mode [ 325.688829][T12060] netlink: 'syz.3.2201': attribute type 64 has an invalid length. [ 325.702740][T12060] netlink: 'syz.3.2201': attribute type 64 has an invalid length. [ 325.721468][T12055] netlink: 'syz.3.2201': attribute type 64 has an invalid length. [ 326.018993][T12074] netlink: 'syz.0.2210': attribute type 4 has an invalid length. [ 326.037923][T12074] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2210'. [ 326.813905][T12117] syzkaller0: entered promiscuous mode [ 326.830928][T12117] syzkaller0: entered allmulticast mode [ 327.677685][T12152] netlink: 'syz.2.2239': attribute type 1 has an invalid length. [ 327.686107][T12152] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2239'. [ 328.904755][T12162] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 328.919726][T12162] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2245'. [ 329.269020][T12175] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2248'. [ 329.773859][T12185] netlink: 'syz.1.2252': attribute type 9 has an invalid length. [ 329.796291][T12185] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2252'. [ 329.905740][T12185] netlink: 'syz.1.2252': attribute type 9 has an invalid length. [ 329.931662][T12185] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2252'. [ 330.288448][T12205] delete_channel: no stack [ 330.341916][T12211] syzkaller0: entered promiscuous mode [ 330.348326][T12212] dccp_invalid_packet: P.Data Offset(0) too small [ 330.357696][T12211] syzkaller0: entered allmulticast mode [ 332.165374][T12230] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 332.175046][T12230] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2271'. [ 333.267766][T12272] syzkaller0: entered promiscuous mode [ 333.288227][T12272] syzkaller0: entered allmulticast mode [ 335.321288][T12307] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2306'. [ 335.764718][T12329] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 335.787691][T12329] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 335.808760][T12328] netlink: 'syz.2.2313': attribute type 4 has an invalid length. [ 335.828531][T12328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2313'. [ 335.840497][T12329] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 335.849967][T12325] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 335.861829][T12325] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 336.367950][T12352] syzkaller0: entered promiscuous mode [ 336.373493][T12352] syzkaller0: entered allmulticast mode [ 338.274423][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2337'. [ 338.287003][T12386] netlink: 'syz.3.2337': attribute type 41 has an invalid length. [ 338.304826][T12386] netlink: 'syz.3.2337': attribute type 41 has an invalid length. [ 338.336167][T12393] netlink: 'syz.1.2339': attribute type 4 has an invalid length. [ 338.346549][T12393] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2339'. [ 339.625907][T12448] netlink: 'syz.3.2359': attribute type 14 has an invalid length. [ 339.634206][T12448] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2359'. [ 339.723426][T12446] syzkaller0: entered promiscuous mode [ 339.729352][T12446] syzkaller0: entered allmulticast mode [ 339.741407][T12453] FAULT_INJECTION: forcing a failure. [ 339.741407][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 339.781317][T12453] CPU: 1 PID: 12453 Comm: syz.2.2360 Not tainted syzkaller #0 [ 339.788841][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.798930][T12453] Call Trace: [ 339.802226][T12453] [ 339.805178][T12453] dump_stack_lvl+0x18c/0x250 [ 339.809904][T12453] ? show_regs_print_info+0x20/0x20 [ 339.815128][T12453] ? load_image+0x420/0x420 [ 339.819657][T12453] ? __might_sleep+0xe0/0xe0 [ 339.824271][T12453] ? __lock_acquire+0x7d40/0x7d40 [ 339.829327][T12453] should_fail_ex+0x39d/0x4d0 [ 339.834034][T12453] should_failslab+0x9/0x20 [ 339.838560][T12453] slab_pre_alloc_hook+0x59/0x310 [ 339.843611][T12453] ? kernfs_fop_write_iter+0x159/0x520 [ 339.849094][T12453] ? kernfs_fop_write_iter+0x159/0x520 [ 339.854580][T12453] __kmem_cache_alloc_node+0x53/0x250 [ 339.859987][T12453] ? kernfs_fop_write_iter+0x159/0x520 [ 339.865481][T12453] __kmalloc+0xa4/0x230 [ 339.869671][T12453] kernfs_fop_write_iter+0x159/0x520 [ 339.874989][T12453] vfs_write+0x46c/0x990 [ 339.879261][T12453] ? file_end_write+0x250/0x250 [ 339.884149][T12453] ? __fget_files+0x43d/0x4b0 [ 339.888860][T12453] ? __fdget_pos+0x2a3/0x330 [ 339.893462][T12453] ? ksys_write+0x75/0x260 [ 339.897881][T12453] ksys_write+0x150/0x260 [ 339.902210][T12453] ? __ia32_sys_read+0x90/0x90 [ 339.906975][T12453] ? lockdep_hardirqs_on+0x98/0x150 [ 339.912176][T12453] do_syscall_64+0x55/0xb0 [ 339.916587][T12453] ? clear_bhb_loop+0x40/0x90 [ 339.921260][T12453] ? clear_bhb_loop+0x40/0x90 [ 339.925935][T12453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.931828][T12453] RIP: 0033:0x7f00bff9ce59 [ 339.936250][T12453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.955876][T12453] RSP: 002b:00007f00c0ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.964298][T12453] RAX: ffffffffffffffda RBX: 00007f00c0215fa0 RCX: 00007f00bff9ce59 [ 339.972275][T12453] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 0000000000000004 [ 339.980240][T12453] RBP: 00007f00c0ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.988210][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.996179][T12453] R13: 00007f00c0216038 R14: 00007f00c0215fa0 R15: 00007ffc78b535b8 [ 340.004164][T12453] [ 342.077256][T12458] netlink: 'syz.2.2363': attribute type 4 has an invalid length. [ 342.085035][T12458] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2363'. [ 342.742948][T12483] netlink: 'syz.0.2374': attribute type 2 has an invalid length. [ 342.753728][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.763385][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.773920][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.777736][T12483] netlink: 'syz.0.2374': attribute type 4 has an invalid length. [ 342.800439][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.812671][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.832062][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.164307][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.376393][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.497587][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.523892][T12524] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2386'. [ 343.550947][T12484] chnl_net:caif_netlink_parms(): no params data found [ 343.560845][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'. [ 343.641800][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.775230][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.782798][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.790109][T12484] bridge_slave_0: entered allmulticast mode [ 343.797578][T12484] bridge_slave_0: entered promiscuous mode [ 343.818213][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.826854][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.834089][T12484] bridge_slave_1: entered allmulticast mode [ 343.841948][T12484] bridge_slave_1: entered promiscuous mode [ 343.914162][T12484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.937222][T12484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.949714][T12540] netlink: 'syz.1.2390': attribute type 19 has an invalid length. [ 343.959812][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2390'. [ 344.111613][T12484] team0: Port device team_slave_0 added [ 344.142206][T12484] team0: Port device team_slave_1 added [ 344.324218][T12554] FAULT_INJECTION: forcing a failure. [ 344.324218][T12554] name failslab, interval 1, probability 0, space 0, times 0 [ 344.350632][T12484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.379658][T12554] CPU: 1 PID: 12554 Comm: syz.1.2395 Not tainted syzkaller #0 [ 344.387183][T12554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.397263][T12554] Call Trace: [ 344.400561][T12554] [ 344.403504][T12554] dump_stack_lvl+0x18c/0x250 [ 344.408214][T12554] ? show_regs_print_info+0x20/0x20 [ 344.413443][T12554] ? load_image+0x420/0x420 [ 344.417973][T12554] ? __might_sleep+0xe0/0xe0 [ 344.420920][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.422570][T12554] ? __lock_acquire+0x7d40/0x7d40 [ 344.422600][T12554] should_fail_ex+0x39d/0x4d0 [ 344.458199][T12554] should_failslab+0x9/0x20 [ 344.462739][T12554] slab_pre_alloc_hook+0x59/0x310 [ 344.467788][T12554] ? __lock_acquire+0x7d40/0x7d40 [ 344.469023][T12484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.472833][T12554] kmem_cache_alloc_node+0x60/0x320 [ 344.472862][T12554] ? __alloc_skb+0x103/0x2c0 [ 344.485884][T12484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.488526][T12554] __alloc_skb+0x103/0x2c0 [ 344.488555][T12554] netlink_sendmsg+0x66a/0xbf0 [ 344.488580][T12554] ? netlink_getsockopt+0x590/0x590 [ 344.493200][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.500068][T12554] ? aa_sock_msg_perm+0x94/0x150 [ 344.500092][T12554] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.500111][T12554] ? security_socket_sendmsg+0x80/0xa0 [ 344.500128][T12554] ? netlink_getsockopt+0x590/0x590 [ 344.504643][T12484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.509267][T12554] ____sys_sendmsg+0x5ba/0x960 [ 344.509296][T12554] ? __asan_memset+0x22/0x40 [ 344.509316][T12554] ? __sys_sendmsg_sock+0x30/0x30 [ 344.509331][T12554] ? __import_iovec+0x5f2/0x850 [ 344.509353][T12554] ? import_iovec+0x73/0xa0 [ 344.509370][T12554] ___sys_sendmsg+0x2a6/0x360 [ 344.509387][T12554] ? get_pid_task+0x20/0x1e0 [ 344.509411][T12554] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.509447][T12554] ? lock_chain_count+0x20/0x20 [ 344.509488][T12554] __se_sys_sendmsg+0x1c2/0x2b0 [ 344.509510][T12554] ? __x64_sys_sendmsg+0x80/0x80 [ 344.509541][T12554] ? lockdep_hardirqs_on+0x98/0x150 [ 344.509565][T12554] do_syscall_64+0x55/0xb0 [ 344.509581][T12554] ? clear_bhb_loop+0x40/0x90 [ 344.509596][T12554] ? clear_bhb_loop+0x40/0x90 [ 344.509612][T12554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.509634][T12554] RIP: 0033:0x7f55e199ce59 [ 344.509651][T12554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.673345][T12554] RSP: 002b:00007f55e280a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.681782][T12554] RAX: ffffffffffffffda RBX: 00007f55e1c15fa0 RCX: 00007f55e199ce59 [ 344.689787][T12554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 344.697798][T12554] RBP: 00007f55e280a090 R08: 0000000000000000 R09: 0000000000000000 [ 344.705799][T12554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.713966][T12554] R13: 00007f55e1c16038 R14: 00007f55e1c15fa0 R15: 00007ffeb8fa3c48 [ 344.721973][T12554] [ 344.746373][T12565] netlink: 'syz.0.2396': attribute type 29 has an invalid length. [ 344.748141][T12484] hsr_slave_0: entered promiscuous mode [ 344.786090][T12484] hsr_slave_1: entered promiscuous mode [ 344.800185][T12484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.816830][T12484] Cannot create hsr debugfs directory [ 344.877259][ T5779] Bluetooth: hci4: command tx timeout [ 344.895919][T12565] netlink: 'syz.0.2396': attribute type 29 has an invalid length. [ 344.917011][T12572] netlink: 'syz.1.2397': attribute type 14 has an invalid length. [ 344.928055][T12572] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2397'. [ 345.511361][T12593] FAULT_INJECTION: forcing a failure. [ 345.511361][T12593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 345.546800][T12593] CPU: 0 PID: 12593 Comm: syz.0.2405 Not tainted syzkaller #0 [ 345.554317][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.564367][T12593] Call Trace: [ 345.567639][T12593] [ 345.570567][T12593] dump_stack_lvl+0x18c/0x250 [ 345.575247][T12593] ? show_regs_print_info+0x20/0x20 [ 345.580443][T12593] ? load_image+0x420/0x420 [ 345.584947][T12593] ? __lock_acquire+0x7d40/0x7d40 [ 345.589973][T12593] ? snprintf+0xe9/0x140 [ 345.594221][T12593] should_fail_ex+0x39d/0x4d0 [ 345.598907][T12593] _copy_to_user+0x2f/0xa0 [ 345.603320][T12593] simple_read_from_buffer+0xe7/0x150 [ 345.608714][T12593] proc_fail_nth_read+0x1e8/0x260 [ 345.613742][T12593] ? proc_fault_inject_write+0x360/0x360 [ 345.619375][T12593] ? fsnotify_perm+0x271/0x5e0 [ 345.624133][T12593] ? proc_fault_inject_write+0x360/0x360 [ 345.629764][T12593] vfs_read+0x28b/0x970 [ 345.633923][T12593] ? kernel_read+0x1e0/0x1e0 [ 345.638509][T12593] ? __fget_files+0x28/0x4b0 [ 345.643093][T12593] ? __fget_files+0x28/0x4b0 [ 345.647681][T12593] ? __fget_files+0x43d/0x4b0 [ 345.652364][T12593] ? __fdget_pos+0x2a3/0x330 [ 345.656954][T12593] ? ksys_read+0x75/0x260 [ 345.661285][T12593] ksys_read+0x150/0x260 [ 345.665526][T12593] ? vfs_write+0x990/0x990 [ 345.669944][T12593] ? lockdep_hardirqs_on+0x98/0x150 [ 345.675146][T12593] do_syscall_64+0x55/0xb0 [ 345.679558][T12593] ? clear_bhb_loop+0x40/0x90 [ 345.684228][T12593] ? clear_bhb_loop+0x40/0x90 [ 345.688898][T12593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.694794][T12593] RIP: 0033:0x7fadbd55d68e [ 345.699204][T12593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.718807][T12593] RSP: 002b:00007fadbe4eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.727220][T12593] RAX: ffffffffffffffda RBX: 00007fadbe4eb6c0 RCX: 00007fadbd55d68e [ 345.735186][T12593] RDX: 000000000000000f RSI: 00007fadbe4eb0a0 RDI: 0000000000000005 [ 345.743155][T12593] RBP: 00007fadbe4eb090 R08: 0000000000000000 R09: 0000000000000000 [ 345.751121][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.759092][T12593] R13: 00007fadbd816038 R14: 00007fadbd815fa0 R15: 00007fffbef06778 [ 345.767069][T12593] [ 345.798751][ T12] gretap0 (unregistering): left allmulticast mode [ 345.805242][ T12] gretap0 (unregistering): left promiscuous mode [ 345.812251][ T12] Ÿë: port 1(gretap0) entered disabled state [ 346.266352][T12618] FAULT_INJECTION: forcing a failure. [ 346.266352][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.282770][T12618] CPU: 1 PID: 12618 Comm: syz.1.2412 Not tainted syzkaller #0 [ 346.290282][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.300361][T12618] Call Trace: [ 346.303659][T12618] [ 346.306612][T12618] dump_stack_lvl+0x18c/0x250 [ 346.311318][T12618] ? show_regs_print_info+0x20/0x20 [ 346.316542][T12618] ? load_image+0x420/0x420 [ 346.321072][T12618] ? __might_fault+0xaa/0x120 [ 346.325772][T12618] ? __lock_acquire+0x7d40/0x7d40 [ 346.330826][T12618] should_fail_ex+0x39d/0x4d0 [ 346.335529][T12618] _copy_from_iter+0x1d9/0x12e0 [ 346.340402][T12618] ? __virt_addr_valid+0x18c/0x540 [ 346.345532][T12618] ? __lock_acquire+0x7d40/0x7d40 [ 346.350561][T12618] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 346.355933][T12618] ? copyout_mc+0x70/0x70 [ 346.360263][T12618] ? __virt_addr_valid+0x18c/0x540 [ 346.365371][T12618] ? __virt_addr_valid+0x18c/0x540 [ 346.370477][T12618] ? __virt_addr_valid+0x469/0x540 [ 346.375587][T12618] ? __check_object_size+0x506/0xa20 [ 346.380868][T12618] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 346.386585][T12618] ? skb_put+0x11b/0x210 [ 346.390830][T12618] tun_get_user+0x15db/0x3ca0 [ 346.395512][T12618] ? aa_file_perm+0x11b/0xee0 [ 346.400191][T12618] ? rcu_read_unlock+0xa0/0xa0 [ 346.404967][T12618] ? tun_get+0x1c/0x2e0 [ 346.409123][T12618] ? __lock_acquire+0x7d40/0x7d40 [ 346.414149][T12618] ? tun_get+0x1c/0x2e0 [ 346.418309][T12618] tun_chr_write_iter+0x119/0x200 [ 346.423334][T12618] vfs_write+0x46c/0x990 [ 346.427584][T12618] ? file_end_write+0x250/0x250 [ 346.432440][T12618] ? __fget_files+0x43d/0x4b0 [ 346.437120][T12618] ? __fdget_pos+0x1d8/0x330 [ 346.441709][T12618] ? ksys_write+0x75/0x260 [ 346.446132][T12618] ksys_write+0x150/0x260 [ 346.450460][T12618] ? __ia32_sys_read+0x90/0x90 [ 346.455221][T12618] ? lockdep_hardirqs_on+0x98/0x150 [ 346.460418][T12618] do_syscall_64+0x55/0xb0 [ 346.464828][T12618] ? clear_bhb_loop+0x40/0x90 [ 346.469496][T12618] ? clear_bhb_loop+0x40/0x90 [ 346.474169][T12618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.480065][T12618] RIP: 0033:0x7f55e199ce59 [ 346.484473][T12618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.504438][T12618] RSP: 002b:00007f55e280a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.512858][T12618] RAX: ffffffffffffffda RBX: 00007f55e1c15fa0 RCX: 00007f55e199ce59 [ 346.520825][T12618] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000004 [ 346.528796][T12618] RBP: 00007f55e280a090 R08: 0000000000000000 R09: 0000000000000000 [ 346.536759][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.544727][T12618] R13: 00007f55e1c16038 R14: 00007f55e1c15fa0 R15: 00007ffeb8fa3c48 [ 346.552703][T12618] [ 346.961570][ T5779] Bluetooth: hci4: command tx timeout [ 347.296952][T12484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.354943][ T12] veth0_to_team: left allmulticast mode [ 347.374105][ T12] veth0_to_team: left promiscuous mode [ 347.390876][ T12] Ÿë: port 2(veth0_to_team) entered disabled state [ 347.431154][ T12] hsr_slave_0: left promiscuous mode [ 347.442409][ T12] hsr_slave_1: left promiscuous mode [ 347.460520][ T12] bridge0: port 3(team0) entered disabled state [ 347.481528][ T12] bridge_slave_0: left allmulticast mode [ 347.493363][ T12] bridge_slave_0: left promiscuous mode [ 347.499798][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.242653][ T12] team_slave_1 (unregistering): left promiscuous mode [ 348.251545][ T12] team_slave_1 (unregistering): left allmulticast mode [ 348.266486][ T12] team0 (unregistering): Port device team_slave_1 removed [ 348.361306][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.402684][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.444642][ T12] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 348.692913][ T12] .` (unregistering): Released all slaves [ 348.773243][T12484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.790872][T12484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.811851][T12484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.037357][ T5779] Bluetooth: hci4: command tx timeout [ 351.116766][ T5779] Bluetooth: hci4: command tx timeout [ 365.162309][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.173841][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.185808][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.195874][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.205008][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.212518][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.221961][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.232834][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.242225][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.250791][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.259784][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 365.288527][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.563138][T12663] chnl_net:caif_netlink_parms(): no params data found [ 365.749582][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.774618][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.782618][T12663] bridge_slave_0: entered allmulticast mode [ 365.796027][T12663] bridge_slave_0: entered promiscuous mode [ 365.805392][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.818272][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.825829][T12663] bridge_slave_1: entered allmulticast mode [ 365.840523][T12663] bridge_slave_1: entered promiscuous mode [ 365.895368][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.914716][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.966153][T12663] team0: Port device team_slave_0 added [ 365.979873][T12663] team0: Port device team_slave_1 added [ 366.034563][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.041734][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.073838][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.093259][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.103365][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.136041][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.827778][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.842719][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.851094][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.865925][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.874134][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 366.891621][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.356929][ T5779] Bluetooth: hci1: command tx timeout [ 367.363901][ T51] Bluetooth: hci5: command tx timeout [ 368.956802][ T51] Bluetooth: hci6: command tx timeout [ 369.436811][ T51] Bluetooth: hci5: command tx timeout [ 369.442414][ T51] Bluetooth: hci1: command tx timeout [ 371.036820][ T51] Bluetooth: hci6: command tx timeout [ 371.516914][ T5779] Bluetooth: hci5: command tx timeout [ 371.523049][ T51] Bluetooth: hci1: command tx timeout [ 373.116795][ T51] Bluetooth: hci6: command tx timeout [ 373.596806][ T5779] Bluetooth: hci5: command tx timeout [ 373.602280][ T51] Bluetooth: hci1: command tx timeout [ 375.196773][ T51] Bluetooth: hci6: command tx timeout [ 402.897815][ T5779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.915399][ T5779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.923699][ T5779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.938332][ T5779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.946048][ T5779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 402.953543][ T5779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 405.037099][ T51] Bluetooth: hci7: command tx timeout [ 407.117028][ T51] Bluetooth: hci7: command tx timeout [ 409.197105][ T51] Bluetooth: hci7: command tx timeout [ 411.277060][ T51] Bluetooth: hci7: command tx timeout [ 425.510431][ T5780] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 425.526422][ T5780] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 425.536179][ T5780] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 425.549737][ T5780] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 425.560701][ T5780] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 425.570812][ T5780] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 425.647922][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.657880][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.666916][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.675119][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.684464][ T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 425.692145][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 427.106231][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 427.115437][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 427.136832][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 427.145881][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 427.154320][ T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 427.162087][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 427.676834][ T51] Bluetooth: hci8: command tx timeout [ 427.756810][ T51] Bluetooth: hci9: command tx timeout [ 429.196804][ T51] Bluetooth: hci10: command tx timeout [ 429.762200][ T51] Bluetooth: hci8: command tx timeout [ 429.836868][ T51] Bluetooth: hci9: command tx timeout [ 431.276751][ T51] Bluetooth: hci10: command tx timeout [ 431.836815][ T51] Bluetooth: hci8: command tx timeout [ 431.916779][ T51] Bluetooth: hci9: command tx timeout [ 433.356749][ T51] Bluetooth: hci10: command tx timeout [ 433.922008][ T51] Bluetooth: hci8: command tx timeout [ 433.996914][ T51] Bluetooth: hci9: command tx timeout [ 435.436834][ T51] Bluetooth: hci10: command tx timeout [ 454.066651][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 454.073660][ C1] rcu: 0-...!: (0 ticks this GP) idle=045c/1/0x4000000000000000 softirq=41106/41106 fqs=0 [ 454.084742][ C1] rcu: (detected by 1, t=10502 jiffies, g=51649, q=1551 ncpus=2) [ 454.092583][ C1] Sending NMI from CPU 1 to CPUs 0: [ 454.097805][ C0] NMI backtrace for cpu 0 [ 454.097815][ C0] CPU: 0 PID: 12650 Comm: syz.1.2420 Not tainted syzkaller #0 [ 454.097828][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.097836][ C0] RIP: 0010:kasan_check_range+0x7c/0x290 [ 454.097928][ C0] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 8d 01 00 00 49 ff c3 [ 454.097938][ C0] RSP: 0018:ffffc900036568c8 EFLAGS: 00000002 [ 454.097951][ C0] RAX: dffffc0000000001 RBX: dffffc0000000001 RCX: ffffffff84297cda [ 454.097962][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90003656940 [ 454.097971][ C0] RBP: ffffc900036569c0 R08: ffffc90003656947 R09: 1ffff920006cad28 [ 454.097980][ C0] R10: dffffc0000000000 R11: fffff520006cad28 R12: 0000000000000001 [ 454.097989][ C0] R13: 1ffff920006cad24 R14: fffff520006cad29 R15: 1ffff920006cad28 [ 454.098000][ C0] FS: 00007f55e280a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 454.098012][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.098021][ C0] CR2: 00002000000029c0 CR3: 000000005deca000 CR4: 00000000003506f0 [ 454.098034][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.098042][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 454.098050][ C0] Call Trace: [ 454.098057][ C0] [ 454.098074][ C0] llist_add_batch+0xda/0x1f0 [ 454.098115][ C0] ? perf_event_output_forward+0x330/0x3e0 [ 454.098133][ C0] ? find_next_clump8+0x1a0/0x1a0 [ 454.098146][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 454.098163][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 454.098192][ C0] __irq_work_queue_local+0xaf/0x3b0 [ 454.098215][ C0] irq_work_queue+0x99/0x140 [ 454.098235][ C0] __perf_event_overflow+0x4f1/0x630 [ 454.098263][ C0] perf_swevent_event+0x319/0x570 [ 454.098285][ C0] ? perf_tp_event+0x1520/0x1520 [ 454.098303][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 454.098319][ C0] ? perf_tp_event+0x13d7/0x1520 [ 454.098349][ C0] perf_tp_event+0x5f9/0x1520 [ 454.098379][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 454.098504][ C0] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 454.098533][ C0] perf_trace_preemptirq_template+0x269/0x330 [ 454.098557][ C0] ? asm_sysvec_irq_work+0x1a/0x20 [ 454.098693][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 454.098712][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 454.098735][ C0] ? lock_chain_count+0x20/0x20 [ 454.098755][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.098772][ C0] ? asm_sysvec_irq_work+0x1a/0x20 [ 454.098795][ C0] trace_irq_enable+0xbb/0xe0 [ 454.098815][ C0] trace_hardirqs_on+0x18/0x40 [ 454.098832][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 454.098850][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 454.098866][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 454.098877][ C0] RSP: 0018:ffffc90003657038 EFLAGS: 00000282 [ 454.098889][ C0] RAX: 643f9e345144a800 RBX: 0000000000000000 RCX: 643f9e345144a800 [ 454.098898][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 454.098908][ C0] RBP: ffffc90003657090 R08: ffffffff911cd537 R09: 1ffffffff2239aa6 [ 454.098919][ C0] R10: dffffc0000000000 R11: fffffbfff2239aa7 R12: ffff888065955a00 [ 454.098929][ C0] R13: dffffc0000000000 R14: ffff888065951e00 R15: ffff8880b8e3cb48 [ 454.098962][ C0] ? finish_task_switch+0x265/0x8f0 [ 454.098988][ C0] __schedule+0x155b/0x45a0 [ 454.099066][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 454.099093][ C0] ? asan.module_dtor+0x20/0x20 [ 454.099107][ C0] ? mark_lock+0x94/0x320 [ 454.099128][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 454.099160][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 454.099182][ C0] preempt_schedule_irq+0xbf/0x150 [ 454.099199][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 454.099229][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 454.099251][ C0] irqentry_exit+0x67/0x70 [ 454.099314][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.099334][ C0] RIP: 0010:__pte_offset_map_lock+0x3f/0x1d0 [ 454.099349][ C0] Code: 49 89 d7 49 89 f4 65 48 8b 04 25 28 00 00 00 48 89 44 24 38 e8 02 5f b7 ff 48 c7 44 24 30 00 00 00 00 48 8d 54 24 30 4c 89 e7 <4c> 89 fe e8 29 fb ff ff 48 85 c0 0f 84 6b 01 00 00 48 89 5c 24 18 [ 454.099360][ C0] RSP: 0018:ffffc90003657428 EFLAGS: 00000246 [ 454.099371][ C0] RAX: ffffffff81cfcc8e RBX: ffffc900036575e0 RCX: 0000000000080000 [ 454.099381][ C0] RDX: ffffc90003657458 RSI: 000000000007ffff RDI: ffff88804ed57010 [ 454.099390][ C0] RBP: ffffc90003657668 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 454.099400][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88804ed57010 [ 454.099411][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 000020000053a000 [ 454.099432][ C0] ? __pte_offset_map_lock+0x2e/0x1d0 [ 454.099455][ C0] ? __pte_offset_map_lock+0x2e/0x1d0 [ 454.099489][ C0] handle_mm_fault+0x216f/0x4c00 [ 454.099508][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 454.099543][ C0] ? numa_migrate_prep+0x350/0x350 [ 454.099582][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 454.099602][ C0] do_user_addr_fault+0x730/0x12c0 [ 454.099642][ C0] exc_page_fault+0x64/0x100 [ 454.099666][ C0] asm_exc_page_fault+0x26/0x30 [ 454.099689][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 454.099718][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 454.099729][ C0] RSP: 0018:ffffc90003657818 EFLAGS: 00050206 [ 454.099739][ C0] RAX: ffffffff84284301 RBX: 0000000000008000 RCX: 0000000000006140 [ 454.099749][ C0] RDX: 0000000000000001 RSI: 000020000053a000 RDI: ffff8880311e9ec0 [ 454.099758][ C0] RBP: ffffc90003657970 R08: ffff8880311effff R09: 1ffff1100623dfff [ 454.099768][ C0] R10: dffffc0000000000 R11: ffffed100623e000 R12: ffff8880311e8000 [ 454.099778][ C0] R13: 0000200000538140 R14: ffffc90003657c18 R15: 1ffff920006caf83 [ 454.099799][ C0] ? _copy_from_iter+0x1b1/0x12e0 [ 454.099829][ C0] _copy_from_iter+0x24e/0x12e0 [ 454.099849][ C0] ? __virt_addr_valid+0x18c/0x540 [ 454.099869][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 454.099885][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.099909][ C0] ? copyout_mc+0x70/0x70 [ 454.099927][ C0] ? __virt_addr_valid+0x18c/0x540 [ 454.099946][ C0] ? __virt_addr_valid+0x18c/0x540 [ 454.099963][ C0] ? __virt_addr_valid+0x469/0x540 [ 454.099985][ C0] ? __check_object_size+0x506/0xa20 [ 454.100008][ C0] kcm_sendmsg+0xd95/0x28b0 [ 454.100134][ C0] ? kcm_getsockopt+0x280/0x280 [ 454.100155][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 454.100194][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 454.100210][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 454.100232][ C0] sock_write_iter+0x2df/0x420 [ 454.100301][ C0] ? sock_read_iter+0x3e0/0x3e0 [ 454.100336][ C0] ? common_file_perm+0x198/0x1f0 [ 454.100367][ C0] vfs_write+0x46c/0x990 [ 454.100396][ C0] ? file_end_write+0x250/0x250 [ 454.100423][ C0] ? __fget_files+0x43d/0x4b0 [ 454.100461][ C0] ? __fdget_pos+0x1d8/0x330 [ 454.100482][ C0] ? ksys_write+0x75/0x260 [ 454.100504][ C0] ksys_write+0x150/0x260 [ 454.100527][ C0] ? __ia32_sys_read+0x90/0x90 [ 454.100553][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 454.100577][ C0] do_syscall_64+0x55/0xb0 [ 454.100592][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.100603][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.100619][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.100637][ C0] RIP: 0033:0x7f55e199ce59 [ 454.100652][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.100663][ C0] RSP: 002b:00007f55e280a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 454.100676][ C0] RAX: ffffffffffffffda RBX: 00007f55e1c15fa0 RCX: 00007f55e199ce59 [ 454.100685][ C0] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000007 [ 454.100695][ C0] RBP: 00007f55e1a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 454.100703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.100712][ C0] R13: 00007f55e1c16038 R14: 00007f55e1c15fa0 R15: 00007ffeb8fa3c48 [ 454.100745][ C0] [ 454.100803][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g51649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 454.925930][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=24728 [ 454.933833][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g51649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 454.945206][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 454.955177][ C1] rcu: RCU grace-period kthread stack dump: [ 454.961068][ C1] task:rcu_preempt state:I stack:26952 pid:17 ppid:2 flags:0x00004000 [ 454.970288][ C1] Call Trace: [ 454.973582][ C1] [ 454.976530][ C1] __schedule+0x1553/0x45a0 [ 454.981072][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 454.986987][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 454.992896][ C1] ? asan.module_dtor+0x20/0x20 [ 454.997760][ C1] ? enqueue_timer+0x23d/0x550 [ 455.002539][ C1] ? __mod_timer+0x984/0xdb0 [ 455.007156][ C1] schedule+0xbd/0x170 [ 455.011241][ C1] schedule_timeout+0x188/0x2d0 [ 455.016110][ C1] ? console_conditional_schedule+0x40/0x40 [ 455.022019][ C1] ? update_process_times+0x1b0/0x1b0 [ 455.027416][ C1] ? prepare_to_swait_event+0x339/0x360 [ 455.032980][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 455.037843][ C1] ? rcu_gp_init+0x1162/0x1560 [ 455.042624][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 455.047483][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 455.053480][ C1] ? rcu_gp_init+0x1560/0x1560 [ 455.058253][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 455.063119][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.068360][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 455.073597][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 455.078209][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 455.083338][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 455.088286][ C1] ? __kthread_parkme+0x162/0x1c0 [ 455.093330][ C1] kthread+0x2fa/0x390 [ 455.097413][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 455.102539][ C1] ? kthread_blkcg+0xd0/0xd0 [ 455.107143][ C1] ret_from_fork+0x48/0x80 [ 455.111576][ C1] ? kthread_blkcg+0xd0/0xd0 [ 455.116180][ C1] ret_from_fork_asm+0x11/0x20 [ 455.120981][ C1] [ 455.124014][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 455.130341][ C1] Sending NMI from CPU 1 to CPUs 0: [ 455.135560][ C0] NMI backtrace for cpu 0 [ 455.135568][ C0] CPU: 0 PID: 12650 Comm: syz.1.2420 Not tainted syzkaller #0 [ 455.135582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.135590][ C0] RIP: 0010:perf_trace_buf_alloc+0x1b1/0x290 [ 455.135612][ C0] Code: 00 89 c6 e8 11 cd f7 ff 83 fd 07 0f 87 a9 00 00 00 e8 53 c9 f7 ff 4e 8d 3c fd 30 da a7 8c 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 55 09 50 00 4d 03 37 48 63 c3 4a 8d 7c 30 f8 ba [ 455.135624][ C0] RSP: 0018:ffffc90003656e40 EFLAGS: 00000046 [ 455.135637][ C0] RAX: 1ffffffff194fb46 RBX: 0000000000000014 RCX: ffff888065955a00 [ 455.135647][ C0] RDX: 0000000040000002 RSI: 0000000000000000 RDI: 0000000000000008 [ 455.135656][ C0] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 455.135665][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffffffff8ca7da30 [ 455.135675][ C0] R13: dffffc0000000000 R14: 0000607f46e9c000 R15: ffffffff8ca7da30 [ 455.135685][ C0] FS: 00007f55e280a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 455.135697][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.135707][ C0] CR2: 00002000000029c0 CR3: 000000005deca000 CR4: 00000000003506f0 [ 455.135720][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.135728][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 455.135736][ C0] Call Trace: [ 455.135743][ C0] [ 455.135757][ C0] perf_trace_preemptirq_template+0x144/0x330 [ 455.135779][ C0] ? asm_sysvec_irq_work+0x1a/0x20 [ 455.135802][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 455.135820][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 455.135843][ C0] ? lock_chain_count+0x20/0x20 [ 455.135862][ C0] ? rcu_is_watching+0x15/0xb0 [ 455.135879][ C0] ? asm_sysvec_irq_work+0x1a/0x20 [ 455.135902][ C0] trace_irq_enable+0xbb/0xe0 [ 455.135921][ C0] trace_hardirqs_on+0x18/0x40 [ 455.135938][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 455.135957][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 455.135972][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 455.135983][ C0] RSP: 0018:ffffc90003657038 EFLAGS: 00000282 [ 455.135993][ C0] RAX: 643f9e345144a800 RBX: 0000000000000000 RCX: 643f9e345144a800 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.136002][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 455.136012][ C0] RBP: ffffc90003657090 R08: ffffffff911cd537 R09: 1ffffffff2239aa6 [ 455.136022][ C0] R10: dffffc0000000000 R11: fffffbfff2239aa7 R12: ffff888065955a00 [ 455.136032][ C0] R13: dffffc0000000000 R14: ffff888065951e00 R15: ffff8880b8e3cb48 [ 455.136065][ C0] ? finish_task_switch+0x265/0x8f0 [ 455.136091][ C0] __schedule+0x155b/0x45a0 [ 455.136130][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 455.136158][ C0] ? asan.module_dtor+0x20/0x20 [ 455.136171][ C0] ? mark_lock+0x94/0x320 [ 455.136192][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 455.136223][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 455.136245][ C0] preempt_schedule_irq+0xbf/0x150 [ 455.136262][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 455.136291][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 455.136312][ C0] irqentry_exit+0x67/0x70 [ 455.136330][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 455.136348][ C0] RIP: 0010:__pte_offset_map_lock+0x3f/0x1d0 [ 455.136363][ C0] Code: 49 89 d7 49 89 f4 65 48 8b 04 25 28 00 00 00 48 89 44 24 38 e8 02 5f b7 ff 48 c7 44 24 30 00 00 00 00 48 8d 54 24 30 4c 89 e7 <4c> 89 fe e8 29 fb ff ff 48 85 c0 0f 84 6b 01 00 00 48 89 5c 24 18 [ 455.136373][ C0] RSP: 0018:ffffc90003657428 EFLAGS: 00000246 [ 455.136384][ C0] RAX: ffffffff81cfcc8e RBX: ffffc900036575e0 RCX: 0000000000080000 [ 455.136399][ C0] RDX: ffffc90003657458 RSI: 000000000007ffff RDI: ffff88804ed57010 [ 455.136409][ C0] RBP: ffffc90003657668 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 455.136419][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88804ed57010 [ 455.136429][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 000020000053a000 [ 455.136450][ C0] ? __pte_offset_map_lock+0x2e/0x1d0 [ 455.136474][ C0] ? __pte_offset_map_lock+0x2e/0x1d0 [ 455.136502][ C0] handle_mm_fault+0x216f/0x4c00 [ 455.136521][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 455.136556][ C0] ? numa_migrate_prep+0x350/0x350 [ 455.136594][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 455.136613][ C0] do_user_addr_fault+0x730/0x12c0 [ 455.136653][ C0] exc_page_fault+0x64/0x100 [ 455.136676][ C0] asm_exc_page_fault+0x26/0x30 [ 455.136694][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 455.136711][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 455.136721][ C0] RSP: 0018:ffffc90003657818 EFLAGS: 00050206 [ 455.136732][ C0] RAX: ffffffff84284301 RBX: 0000000000008000 RCX: 0000000000006140 [ 455.136741][ C0] RDX: 0000000000000001 RSI: 000020000053a000 RDI: ffff8880311e9ec0 [ 455.136750][ C0] RBP: ffffc90003657970 R08: ffff8880311effff R09: 1ffff1100623dfff [ 455.136760][ C0] R10: dffffc0000000000 R11: ffffed100623e000 R12: ffff8880311e8000 [ 455.136770][ C0] R13: 0000200000538140 R14: ffffc90003657c18 R15: 1ffff920006caf83 [ 455.136791][ C0] ? _copy_from_iter+0x1b1/0x12e0 [ 455.136822][ C0] _copy_from_iter+0x24e/0x12e0 [ 455.136841][ C0] ? __virt_addr_valid+0x18c/0x540 [ 455.136861][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 455.136877][ C0] ? rcu_is_watching+0x15/0xb0 [ 455.136902][ C0] ? copyout_mc+0x70/0x70 [ 455.136920][ C0] ? __virt_addr_valid+0x18c/0x540 [ 455.136938][ C0] ? __virt_addr_valid+0x18c/0x540 [ 455.136956][ C0] ? __virt_addr_valid+0x469/0x540 [ 455.136977][ C0] ? __check_object_size+0x506/0xa20 [ 455.136999][ C0] kcm_sendmsg+0xd95/0x28b0 [ 455.137072][ C0] ? kcm_getsockopt+0x280/0x280 [ 455.137093][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 455.137114][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 455.137130][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 455.137152][ C0] sock_write_iter+0x2df/0x420 [ 455.137176][ C0] ? sock_read_iter+0x3e0/0x3e0 [ 455.137210][ C0] ? common_file_perm+0x198/0x1f0 [ 455.137241][ C0] vfs_write+0x46c/0x990 [ 455.137269][ C0] ? file_end_write+0x250/0x250 [ 455.137295][ C0] ? __fget_files+0x43d/0x4b0 [ 455.137327][ C0] ? __fdget_pos+0x1d8/0x330 [ 455.137342][ C0] ? ksys_write+0x75/0x260 [ 455.137364][ C0] ksys_write+0x150/0x260 [ 455.137387][ C0] ? __ia32_sys_read+0x90/0x90 [ 455.137417][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 455.137441][ C0] do_syscall_64+0x55/0xb0 [ 455.137456][ C0] ? clear_bhb_loop+0x40/0x90 [ 455.137467][ C0] ? clear_bhb_loop+0x40/0x90 [ 455.137483][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.137501][ C0] RIP: 0033:0x7f55e199ce59 [ 455.137515][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.137526][ C0] RSP: 002b:00007f55e280a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.137538][ C0] RAX: ffffffffffffffda RBX: 00007f55e1c15fa0 RCX: 00007f55e199ce59 [ 455.137548][ C0] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000007 [ 455.137557][ C0] RBP: 00007f55e1a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 455.137565][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.137573][ C0] R13: 00007f55e1c16038 R14: 00007f55e1c15fa0 R15: 00007ffeb8fa3c48 [ 455.137606][ C0]