last executing test programs: 1m6.78716535s ago: executing program 3 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r1, 0x0, 0x200000000000000}, 0x38) 1m6.57961767s ago: executing program 3 (id=239): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x6, 0xfffff000) 1m6.35562768s ago: executing program 3 (id=240): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x3, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40004000000000041144c00000e00e2030001000000ddff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c990", 0x11}], 0x1, 0x0, 0x34000}, 0x0) recvmsg$kcm(r2, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x9) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x8, 0x0, 0x62) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x11, 0x65, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20000000) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r1, r3}, 0xc) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffdf9, &(0x7f0000000500)=[{&(0x7f0000000140)="2e0000001100ff00040f46ecdb4cb9cca7480ef441000000e374c5ff4ef59205d6bd6efb446009000e000a001000", 0x2e}], 0x1}, 0x0) 1m5.902559808s ago: executing program 3 (id=243): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x5}, 0x80, 0x0}, 0x0) 54.398208718s ago: executing program 4 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000000000007eee05e8f7a058d0000"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000006c0)={0x0, &(0x7f0000000580)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000030000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0x55, 0x0, &(0x7f0000000640)="f9ad484c429d29fcdd3a0dd7780e59a45251c75dd50ff658478eb8977e25d8539116024be2a805b5c41509bd08f3a66a22980c05daaee0d5fccf9e19dd448f3769b84c1c1e624cc34ddfc73d18097db871b2310e68", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cc, 0x300) ioctl$TUNSETLINK(r2, 0x400454cd, 0x110) ioctl$SIOCSIFHWADDR(r3, 0x8934, &(0x7f0000000440)={'bond_slave_1\x00', @multicast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f0000003040)=""/4091, 0xffb}, {&(0x7f00000006c0)=""/257, 0x101}, {&(0x7f0000000280)=""/102, 0x66}], 0x5}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000900)="b1c61c83ff7c78864f87018e422213a98246939c5d503479815171ccfefc1d0b78d2d30cc46e1c7f847841d941f07c1245752dbc510f85a71abad17d055d749915982310912431088a938ff496c8690e684ac2b2537b7ab71933a516e91e67b5a3cab33c584e6f6754ce0b03b43915b3435991cbc7903360ca4c86d55ec3349a6a4ce4d117ef22107806ae197caa93f184b9f117ce28356b26c651641b2d69a965daac037ad079140993ea886fbf28d744a54f0dbfbcd1ccf6af6d737f63a0116b79a57dc7ef5b8c23387a8f140df892946870ed", 0xd4}, {&(0x7f0000000a00)="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", 0xfb}, {&(0x7f0000000b00)="9f050354c4c66c0247487944d4e69175d24821aeb281419f5f672e9c51d4b9fc79758d9480f46dcb8684c6b98b72f17dc787af8886226dc53004c0c85261d8f4852ed14c9cbb8443746cf9dc8ccff853c39df7b3c9710589a6d250ddfb1178c42e57ff3f32b23fb2b761dd7ebef412b50791583022fcdf3b79a76058bdcab64317650dbd7d81bd1a435a88f1b4c441d707e0062ca1736b8b52545db36fa4e812bc2e793eb9ba6ada22c96e9d03d8add8f81eb44d71957d50672516efd1", 0xbd}, {&(0x7f0000000bc0)="79e86df5edde3364ec9b151a2f9b1e3dcfbdb977c9b5191345e911749d7f4006869787ac96929a8c1d516602d9af9b01747c488cf61e19249edd24aebf160d28bc038c116352ea5ffcc687a70040f812cd170cb26e4171fff4cc026b5ca30fc6e0f80e7213cdafaa48c441db9fcca433108208781defb396a3ca2916c74a2fc349be361cfb05860ed79c7d654619503380a9664bdbb0c97cd608d569ca8b6df4a1012efc43cc65cea740874fee24a995d11529299844706b3462cd7fe1fb52cb20257948e64946c2a990f8e4696df432e4a7111fdb551fcc9f317ed8dd3be119f6fb5f640b47c9273dd6bba950ce1f", 0xef}], 0x4, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r7, r4, r1, r5]}}], 0x28}, 0x20004083) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = socket$kcm(0xa, 0x6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r9, 0x10d, 0xa, &(0x7f0000000000)=r10, 0x11) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 53.089224287s ago: executing program 4 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)=' \x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 52.83232343s ago: executing program 4 (id=307): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x4, 0x0) 52.392015553s ago: executing program 4 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[], &(0x7f0000000600)=""/152, 0x56, 0x98, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x4, 0xc, &(0x7f00000006c0)='\x00\x00\x00\x00', &(0x7f00000001c0)=""/12, 0x40060ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="ed4e81f782db44aa040200180000806cecffff1400194a635b0e668f5c4d23441ec0d8bcf6112d38a16a817b71731530c0a06e5ed1e331cf5467ef0c3f27217e02c05b0cb88047129d21ce1ccf38127e7b01723b2fdb1fa71f5d1e5733beb9329e9c9373b06ef59273932c6e1b931f699b15097cfdacd12ed28b84acf6262c6ccafdf38c3d8d8a48e4871598ad09912ab95b86f289476117ade0ab7a5502ff61e324915ab646a67d87837b8b7d027f6085e6a117e3a7b7fc420aa0d9c913a528b320cbdf66152b6199b854e7e2f9", 0xce}], 0x1}, 0x0) 52.114313731s ago: executing program 4 (id=312): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075e87700f5cb32ecedc564480b79373e5f16bf7d3516477674ba19e0525b3c6cff85fc25aeaf06a2223ec719f7a5bc44c560cb77f207b03e65d3b4a3b903e363806f804cdbf94955d025a81926f1c9288285f3ccf56859"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) recvmsg(r1, &(0x7f0000000000)={0x0, 0xfffffe36, 0x0}, 0x40000104) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x7, [@enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x2, 0x4}, {0x7, 0x5, 0x4}, {0x2, 0x5, 0x10001}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0x8}, @union={0x8, 0x4, 0x0, 0x5, 0x0, 0xd2, [{0xd, 0x4, 0x1}, {0x5, 0x0, 0x2}, {0xd, 0x1, 0xfffffff9}, {0x2, 0x2, 0x614}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x4}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @var={0x5, 0x0, 0x0, 0xe, 0x4}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x7}, {0x2, 0x9}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}]}, {0x0, [0x5f, 0x30, 0x61, 0x3e, 0x2e]}}, &(0x7f0000000400)=""/172, 0x11b, 0xac, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r13, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r15, &(0x7f0000000000)='p', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x17, &(0x7f00000002c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2dd}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xb4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x1000, 0x7d, &(0x7f0000000380)=""/125, 0x41100, 0x42, '\x00', r10, @fallback=0x5, r11, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x9, 0x8}, 0x10, r12, r13, 0x3, &(0x7f00000007c0)=[r14, r3, r4, r0, r4, r0, r4, r4, r15, r4], &(0x7f0000000800)=[{0x4, 0x3, 0xd, 0x5}, {0x1, 0x5, 0xb, 0xc}, {0x3, 0x3, 0x8}], 0x10, 0xba30, @void, @value}, 0x94) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 42.982522814s ago: executing program 3 (id=243): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x5}, 0x80, 0x0}, 0x0) 28.240438891s ago: executing program 4 (id=312): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075e87700f5cb32ecedc564480b79373e5f16bf7d3516477674ba19e0525b3c6cff85fc25aeaf06a2223ec719f7a5bc44c560cb77f207b03e65d3b4a3b903e363806f804cdbf94955d025a81926f1c9288285f3ccf56859"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) recvmsg(r1, &(0x7f0000000000)={0x0, 0xfffffe36, 0x0}, 0x40000104) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x7, [@enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x2, 0x4}, {0x7, 0x5, 0x4}, {0x2, 0x5, 0x10001}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0x8}, @union={0x8, 0x4, 0x0, 0x5, 0x0, 0xd2, [{0xd, 0x4, 0x1}, {0x5, 0x0, 0x2}, {0xd, 0x1, 0xfffffff9}, {0x2, 0x2, 0x614}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x4}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @var={0x5, 0x0, 0x0, 0xe, 0x4}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x7}, {0x2, 0x9}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}]}, {0x0, [0x5f, 0x30, 0x61, 0x3e, 0x2e]}}, &(0x7f0000000400)=""/172, 0x11b, 0xac, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r13, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r15, &(0x7f0000000000)='p', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x17, &(0x7f00000002c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2dd}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xb4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x1000, 0x7d, &(0x7f0000000380)=""/125, 0x41100, 0x42, '\x00', r10, @fallback=0x5, r11, 0x8, &(0x7f0000000700)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x9, 0x8}, 0x10, r12, r13, 0x3, &(0x7f00000007c0)=[r14, r3, r4, r0, r4, r0, r4, r4, r15, r4], &(0x7f0000000800)=[{0x4, 0x3, 0xd, 0x5}, {0x1, 0x5, 0xb, 0xc}, {0x3, 0x3, 0x8}], 0x10, 0xba30, @void, @value}, 0x94) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 27.604954566s ago: executing program 3 (id=243): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x5}, 0x80, 0x0}, 0x0) 23.489323811s ago: executing program 1 (id=430): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x3a9002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0xb, 0xa, 0x3f00000, &(0x7f00000000c0)) write$cgroup_type(r1, &(0x7f0000000080), 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000082005007a0104dea70016f5910020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a077e850f824664e5916277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c958775730d16a4683f5aeb4edbb57a5025e4ca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x5, 0x0, 0x4) 22.575472943s ago: executing program 1 (id=434): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ec", 0x1}, {0x0}], 0x308}, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x41) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r5 = perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffd6c, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8dc, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x2, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000480)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000180)=0x4, 0x12) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 21.964017215s ago: executing program 1 (id=440): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f6043ecd466eb0509f77340b626a668abfdaaec8181e2f32df2739e8fe23ffbc9ea9b3c4e1ab2e7337e61c9ae7ad6aa9fc959c3e42ff096df567760ce61d384f3d976f8abb84336e8545851a293600d34dd77ba6325498af8b0a5fa91f04ea015be832c2ee72e25ea2ffbd83e9363819de4fe8f2b74c0c8c6b5a40b9fc06298b2ff62871f2a2c2504cc1d8fceb2c0c8c779a97b2dfcee74b658c4935630724695a827ab2280786788de977adc91836f793a98719285a75400f7dfb4fe05eec25e10058b0c38ffc0f873248af2cba2c8ea498f8c77b50d571913ae3ebef7d8394a7e677", 0xe3}, {&(0x7f00000001c0)="879eaf7aa146e53c1f20fe3e4433897f95c49b83c344256d360cde9445fd716dac3729a55145f2da7fe6e25e29646326d17812e7b14eb9108f690238e6fa59eced803bf3c1f0687f2a755db6f796191855b726dcb9c37e903c7c", 0x5a}, {&(0x7f0000000240)="9562f2e04c5d933a1e7cc586f0213d8f1bed4f14a72ab9d5bd1e0f53b92180fd6d513676d6d53062b63a2954e9ad0c95c6b05115c0aae2eb2b825c8c7d527a0d454bb7b27ef79047d7c9a8291669569285b1a8b444d4c9ae99c8d908b6b8d498bbfd0df0b55260e79da8689b65dd2b0b7a027dd72f0e67fb2235c8eafd5840282eb92b643d9ffc8404fcce9c8fe6c7d9b574db2c86658eeecfa82b0ae009c86cc64ba7006c3cde68ef478f3d4136d00fdc3d56a76abe75e2d708d9eca14e3c820f1d2810c4b2d7da8087d24ac23eb6f3495eb8918c27fc1dde58b35778786e2fd7c0a4efbf64d137d7347d8cbb", 0xed}, {&(0x7f0000000340)="d6affe2201b7dd7c5e9716a6f5723886728442a717f327ff79d070c65462b1a3af", 0x21}], 0x4, &(0x7f00000009c0)=[{0x108, 0x6, 0x8, "600ad5899e9fb41f5ec5382884991293d048168b806956fe0f1961da39e6f39360d07671dec54da7c67dd2d8ec058812efb84f445525a8e56e9c2df502f767add8e14e09e5173a8a59e4d8d0c9ac568e347bca0f96bd7cbfb10906a1936af64d0fedf9ece5db792ecbeae4586ee1c94d4032e07ac6b7cf98e0b6810b2659cc850f38cb58372b78483d8adafcb5b8827ba07b4c9532f366f98514cbf76cf898c4b08237e4c3ce35533622abf03ed1804bd555ab6993692041ad26bade74f72bc39667b7d95ac818bf6fab4a988441fb107035ab28951580f947bd2754b71133a14dcfc131369dd17b5823619bb736a434b76b0ff1"}, {0x100, 0x88, 0x60000000, "a7ae151d37c579a45a6bcf228d498bdc1ec46efc5b17b29cd1ad7f49b7ee9c4a7acba2027801a549bf0082e005af44a98af7e98fc796eb29618afb631468cc0aff851b4124a2833b208d19f37bf219a43cf4cf9e1e8c42f3601702e72383ced68ca1cc00866d93ac22684330f67d1803e3d69d4b02a6865b19f66d40e4eb33435a857e982d44af5fe0b8802a343cc3221894ea740c7cff41f6d753b3056c7057135c785a85e745c6e023bc3492d2d5c3cf2b85b4bbf2dc9c4e585873db3c29c073030fd6ced1081dc6b222887b03def39c4cdc9205e12da6ad3f5475a3654bc37d3781522902525f62"}, {0x20, 0x101, 0x4, "17d8a05b465e302b3b885985"}, {0x88, 0x0, 0x7, "36f3f731c9bb5cdcf10ccdaec3ec75c238c4827906c2fa0bf68412eb1a7b83d3a8e1fcd572c4696c507aa1257ab982c51e979886fb217c30fd7c2c36de891329da5a6b2a69cb7daeaf10a89024aaa919689b7d9cf9e679af127d6d3ed2aba1b9983f878136169f1fa22d4d69dd6ba2c683437d17e9"}], 0x2b0}, 0x8000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 21.432457574s ago: executing program 1 (id=441): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xffffffff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg$unix(r7, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x8000004, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r10}, 0x8) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfffffda1, &(0x7f0000000080)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000101ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4008010) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x55, 0x80, 0x1, 0x8, 0x0, 0x405, 0x12220, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0c, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10, 0x100000000a, 0x2, 0x2, 0x2, 0x3, 0x2, 0x0, 0xd, 0x0, 0x200}, 0x0, 0x0, r5, 0x2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r12, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) r15 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r15, 0x84, 0x7d, &(0x7f0000000000)=r16, 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 20.124584249s ago: executing program 1 (id=448): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 19.83875206s ago: executing program 1 (id=450): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x1c105, 0x32, 0xfffffbff, 0x2, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872430dfaeda) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x2018, 0x0, 0x0, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x2018, 0x0, 0x0, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) (async) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000140)={'virt_wifi0\x00', @multicast}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500031101400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002a00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000050000000000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002a00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000050000000000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r5, &(0x7f0000000380)="cd475916b462527f175bf7363a7602dff40ca826fb"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0044001c000000000000e7ffffff000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.978497671s ago: executing program 0 (id=463): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.293940991s ago: executing program 0 (id=466): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x5}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0) 4.746698262s ago: executing program 32 (id=450): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x1c105, 0x32, 0xfffffbff, 0x2, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872430dfaeda) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x2018, 0x0, 0x0, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x2018, 0x0, 0x0, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) (async) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000140)={'virt_wifi0\x00', @multicast}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500031101400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002a00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000050000000000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002a00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000050000000000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r5, &(0x7f0000000380)="cd475916b462527f175bf7363a7602dff40ca826fb"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0044001c000000000000e7ffffff000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.287919223s ago: executing program 0 (id=470): r0 = getpid() socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000040000000400000001800000000800", @ANYRES32, @ANYBLOB="000296881000000000800000edff0073cb000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x12008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x20002, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x200000000000015c, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = perf_event_open(&(0x7f0000001ac0)={0x1, 0x80, 0x5, 0x0, 0x9, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x13, 0x57}, 0x0, 0x0, 0x510a}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000f40)='lo\x00\x96o\xd6I\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8efp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x0f\x00\x00\x00\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\fh\x9aZu\rO\xe4\xadg\xff~*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00k\x0f/D\xb67\xea\x8b\x8f\x1b98\xff\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xf0\xad\xbb\xb4\xb7\xa2@b\x02j\x1e\x1e\nJ@\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xff\xee\xea\x9f\xbc\xc8\xd8J\x85\x88-\xf4\xd8\xcf\x00XV\xfd\x90\xcc\xe0%D\x00\xc8\xdb\xe3,\'&3\x14\x89\x9a\xcc\xd1maqS<\xd8\x807\xd4\x1e\x94\xccQ2&J\x80\xd0\x80\xbaF\xd2\xeb\xd5\xad\x02\f\x9b\xd6\xb2E\x1f\xee\xff\xb9\xf9\xbc\x92\x8b\xbd.\x1e\x9b\x1a\x91\xc5\x1b\xd0De\x7f\xe1\x916\xee_\xa4\x99\xc8\x7f%\xef_\'\xcf\x1a(\x01\x88\xda\xfd\x83\xbd\xbc\x12\x8e\xff\xda\xc51E\xf6\x9b\xfe\xf6}XV\xc2\xccN\xcel\xd5\xb7\x9c\aoYlE\xbe\x90\x9a,\xad\xf7\xce2r\xc3S\xca\xdf\x8d\x8d\x81|\x1d3\x89\x82tv\x8b|m\xdaO\v!\xde\xd4\xa3\x12\xf0jq\x10e\x9a\x8e\xac>xl\x0f\x05a\x04\x00\xf0\xde\xfd\x89&k<@\xfb\xbd\xd8h5`\vVPt]\xbd\xeb\xcc`\x92\xa0y]0\xbe\xca\x10&\xe9\xe0\x1a\xcd\xc7?z\x8b2\x19>\n\x842J\xfdM\xe1Fa\xba\xa2\x96\xa3\xe1\xc2t\xfe\xa2\xccS\f0\xef\xcd\x9c\xb8\x14~d\x134\xdf\xd6\x10\xb6\'\xa1,\x94\xe33#?\xab\xdcZ\xa5A\xe3\'M\xb0\xad$\x90`\x98\xa4Je\xc6\xb9\b^&\xdfeSV\xd2*\x9c\x82\x00Rd\xf2\xee6\xedI\xd8ng?\r\xa8\xfaA\x17\xd3\xb2s\x1d\xa0\xe3\xbf:\x9b.\x9a\xe5f\xa6\xdd?#K+\xb5\xe48l\t1~`\x1a\x1c\x1fYh\n\xfb\x9bE3\xdc\x8d\xc2\xa8\xedl\xb6Y\x19\x8f\xe3\xb4{z>\xee\xea\x1f\xb8M 0\xe7\x93\x9a\x108\x8bAd!\xae\a\x8b\xaf\xf9\xb3\x02\xf9>QMt\xd9\xd0\xdd\xa8k;\xc3;\xd03\xb6\xbe~k\xe8\xce\xb9 \xba\xb2\x83\xa0\x1f\xe7\x9d\xd4\x8d\'0\xc0\xc8\x90r\xa6\x15\rM\xb2\xe5SCQ\xf6\xf23\xd7\xdd\xf9ix\xba\xe8\xb1\x99~\xf6Y\xa4H]{\xd5\xe3\x976Sb\xb2x\x8d\x9c\xb8U\v\xb3J\x92\x8bx\x87') r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x25, &(0x7f0000000000), 0x20000010) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="c00e020023000b02d25a806f8c639cf90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x2e}, {&(0x7f0000000440)="6a086478235c00ea588d01d13b99934d1140195094634eb75684ffe214c8e1e0be6b27cbd971ba0ecb331a5ca9e068ca67f705bfcf5d81956f6f22bea0b37368dfc0d7d756fb64b0e47a3c76d3390746458063", 0x53}, {&(0x7f0000000580)="abcae18fc352d2a527ac700e308403f0b82f5c817608951cbab320382dbbad65d5b471f32237f0c2889f6ab5c4858e27f94e681d2c232719fc66a528ff60ec629217248d11420fec70983a01f82583192890f65059a4535fba1fc87cb0fafe8b9d3118622ec68764df19e87f722e400ace3d74ceb06f06e5f3908a4ab46cd924967a61e8bae3e8fd18d02b8a2ba4e0a28681e09396381592a6a7a01d34ed1c167fdd48fd2dbedce3f3e64736bbde12cdac2a90288844e635b3f39209fad514ee6e17b5", 0xc3}, {&(0x7f0000000300)="081849b2dcdcd5886ec32de9c6b9829a58de6c279b352efb8d31040fca43c945f1fda00ec88f5215c0bcf79c3467241844", 0x31}, {&(0x7f0000000780)="34d9eb2dc8259bd1321420ad9c8a3f1bd1455c844e929ac35266335273d52801ecb768c1fb565137fcbfec733b8eeb2f6b51c94b9289cc9ce099894d43e7100c681a72864918b60b30b1c55bbe2a4f82114808576f41f6106e67743b49fc1c28b81092b1adf0b57ed67f656c1345ed67a98522cc0f2c8ff63a2026778a7df98a906c622fb380ac91d8562047930002fe33c2af8fa9f72ae302c734550ff08a798d0a4e8609f4bccbd78df612970a2af2b1b8", 0xb2}, {&(0x7f0000000a80)="ed26d5652266708dd535eef8b4599f934075f899946a512b0deb7262cbaa930a05e6525293362a5f2409ae2aefc07dc668e085d9f4cac94f6c3d648a646b204f6fda618b98a6aa9ec733ddfb10ed1f891bba99510e89c80ff35e33e65c462fd8515bea96f0e79c4af0485148471a55b5e76c14834233b5651c6a171b9653a35853260000000000000000cc40f1c981aec89b856c2837e894", 0x98}], 0x6}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000080)=r7) close(r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000b000000000000000000000008500000028000000180100002020642500000000002020207b1af8ff00000000bfe100000000000007010000f8ffffffb702000008000000b70300000000000085e100007000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.157248702s ago: executing program 2 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.852733291s ago: executing program 2 (id=472): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 3.054330578s ago: executing program 2 (id=473): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210d, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x9393146b1dcb840f, 0x32, 0xfffffbfe, 0x4, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfd7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x12341000, &(0x7f0000000440)="c68680dbd5b0f7d0e1772a8608b3af2b0218b42e3a2fe0e5f71838ea19709c497ef2", 0x22, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="67a9d8e67e6d7978c383235434971c92e5a648b244739df2b74b141bfb1cb982078951d2fa7440147ea4d75297f458a2d7248f5ddce81ed82b2281ec9ddb66a60929714bc7c29f1e8a6ce9351e8bfecdf4a142ba23bff11227c87216ca811160d65b0f14ccb3421971abb877d43070c243bf9b9c4c0b") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000002a684c3700000000b00600000000009500000000000000e8e0fd9d0859a37597ba587fcfeb368920c999e96acd26b80f3126c779fca7bf858bab68835cf2b8cfdb8afc2819f1aca85f8b401b72d4a5a4fd28d9577328229b39af2896721f97aed8fd94ac30751a0c18d1a4cbf629b2b87d35c0cd51b091ea3077317682ba9f849db91b792c237ec383"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x801) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d10000009510000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000280)="59fb339accdecfc023062c12d8886a5a10990dea12a5d557a6318f18e48813a3adc85105ebe4f4e49b8acb6ab0f9cae3d18823", &(0x7f0000000300)=""/41}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.413439072s ago: executing program 2 (id=474): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) 2.221466665s ago: executing program 2 (id=475): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r6}) 1.716012094s ago: executing program 0 (id=476): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 772.815184ms ago: executing program 0 (id=477): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f6043ecd466eb0509f77340b626a668abfdaaec8181e2f32df2739e8fe23ffbc9ea9b3c4e1ab2e7337e61c9ae7ad6aa9fc959c3e42ff096df567760ce61d384f3d976f8abb84336e8545851a293600d34dd77ba6325498af8b0a5fa91f04ea015be832c2ee72e25ea2ffbd83e9363819de4fe8f2b74c0c8c6b5a40b9fc06298b2ff62871f2a2c2504cc1d8fceb2c0c8c779a97b2dfcee74b658c4935630724695a827ab2280786788de977adc91836f793a98719285a75400f7dfb4fe05eec25e10058b0c38ffc0f873248af2cba2c8ea498f8c77b50d571913ae3ebef7d8394a7e677", 0xe3}, {&(0x7f00000001c0)="879eaf7aa146e53c1f20fe3e4433897f95c49b83c344256d360cde9445fd716dac3729a55145f2da7fe6e25e29646326d17812e7b14eb9108f690238e6fa59eced803bf3c1f0687f2a755db6f796191855b726dcb9c37e903c7c", 0x5a}, {&(0x7f0000000240)="9562f2e04c5d933a1e7cc586f0213d8f1bed4f14a72ab9d5bd1e0f53b92180fd6d513676d6d53062b63a2954e9ad0c95c6b05115c0aae2eb2b825c8c7d527a0d454bb7b27ef79047d7c9a8291669569285b1a8b444d4c9ae99c8d908b6b8d498bbfd0df0b55260e79da8689b65dd2b0b7a027dd72f0e67fb2235c8eafd5840282eb92b643d9ffc8404fcce9c8fe6c7d9b574db2c86658eeecfa82b0ae009c86cc64ba7006c3cde68ef478f3d4136d00fdc3d56a76abe75e2d708d9eca14e3c820f1d2810c4b2d7da8087d24ac23eb6f3495eb8918c27fc1dde58b35778786e2fd7c0a4efbf64d137d7347d8cbb", 0xed}, {&(0x7f0000000340)="d6affe2201b7dd7c5e9716a6f5723886728442a717f327ff79d070c65462b1a3af", 0x21}], 0x4, &(0x7f00000009c0)=[{0x108, 0x6, 0x8, "600ad5899e9fb41f5ec5382884991293d048168b806956fe0f1961da39e6f39360d07671dec54da7c67dd2d8ec058812efb84f445525a8e56e9c2df502f767add8e14e09e5173a8a59e4d8d0c9ac568e347bca0f96bd7cbfb10906a1936af64d0fedf9ece5db792ecbeae4586ee1c94d4032e07ac6b7cf98e0b6810b2659cc850f38cb58372b78483d8adafcb5b8827ba07b4c9532f366f98514cbf76cf898c4b08237e4c3ce35533622abf03ed1804bd555ab6993692041ad26bade74f72bc39667b7d95ac818bf6fab4a988441fb107035ab28951580f947bd2754b71133a14dcfc131369dd17b5823619bb736a434b76b0ff1"}, {0x100, 0x88, 0x60000000, "a7ae151d37c579a45a6bcf228d498bdc1ec46efc5b17b29cd1ad7f49b7ee9c4a7acba2027801a549bf0082e005af44a98af7e98fc796eb29618afb631468cc0aff851b4124a2833b208d19f37bf219a43cf4cf9e1e8c42f3601702e72383ced68ca1cc00866d93ac22684330f67d1803e3d69d4b02a6865b19f66d40e4eb33435a857e982d44af5fe0b8802a343cc3221894ea740c7cff41f6d753b3056c7057135c785a85e745c6e023bc3492d2d5c3cf2b85b4bbf2dc9c4e585873db3c29c073030fd6ced1081dc6b222887b03def39c4cdc9205e12da6ad3f5475a3654bc37d3781522902525f62"}, {0x20, 0x101, 0x4, "17d8a05b465e302b3b885985"}, {0x88, 0x0, 0x7, "36f3f731c9bb5cdcf10ccdaec3ec75c238c4827906c2fa0bf68412eb1a7b83d3a8e1fcd572c4696c507aa1257ab982c51e979886fb217c30fd7c2c36de891329da5a6b2a69cb7daeaf10a89024aaa919689b7d9cf9e679af127d6d3ed2aba1b9983f878136169f1fa22d4d69dd6ba2c683437d17e9"}], 0x2b0}, 0x8000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 203.500878ms ago: executing program 2 (id=478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000}, @exit, @alu={0x4, 0x0, 0xdf5be928ef897bb1, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b70500000000000079108e00000000001d0a000010a6000095000000000000009afaca45cb0eed726502801fb214f006869c79d511826454d135e93880f25ace63908039ad4695dc63e57ea4464c21cd4f5beedf93fcbdd2262492d61814661f4620"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xca, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe, &(0x7f0000000540), &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x45, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x56, 0x1, 0xff, 0x0, 0x0, 0x210e, 0x91, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010fb7e, 0x2, @perf_config_ext={0x1, 0x4}, 0x110145, 0x32, 0x4, 0x5, 0xa64a, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000001480)}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f0000001580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x20010) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="97eb00001400e39020", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x28, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x3f}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x9, 0x0, 0x2, 0xfffffffffffffffc, 0x8}, @generic={0x8, 0x8, 0xd, 0x1ff, 0x9}]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x50, &(0x7f00000003c0)=""/80, 0x41100, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x2, 0x5f, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x4, 0x1, 0x2}, {0x5, 0x1, 0xb, 0x5}, {0x5, 0x2, 0x2, 0x6}, {0x0, 0x4, 0x0, 0x9}, {0x2, 0x1, 0x10, 0x8}], 0x10, 0x7, @void, @value}, 0x94) 0s ago: executing program 0 (id=479): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210f, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14005, 0x32, 0xfffffbff, 0x1, 0x2, 0x7, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x39b0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = getpid() perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x4, 0x9, 0xd1, 0xe, 0x0, 0x3, 0x24, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x9}, 0x14140, 0x2, 0x4, 0x1, 0x100000001, 0x9, 0x0, 0x0, 0x858d, 0x0, 0xffffffffffffffff}, r2, 0xf, r0, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000200)=@can, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/254, 0xfe}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x6}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000002010007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000002000000000000001000000730168000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): rsing attributes in process `syz.4.5'. [ 82.697753][ T5979] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 82.760512][ T5984] FAULT_INJECTION: forcing a failure. [ 82.760512][ T5984] name failslab, interval 1, probability 0, space 0, times 1 [ 82.832164][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.2.20 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 82.832191][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.832204][ T5984] Call Trace: [ 82.832211][ T5984] [ 82.832219][ T5984] dump_stack_lvl+0x241/0x360 [ 82.832261][ T5984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.832283][ T5984] ? __pfx__printk+0x10/0x10 [ 82.832310][ T5984] ? __pfx___might_resched+0x10/0x10 [ 82.832337][ T5984] should_fail_ex+0x424/0x570 [ 82.832362][ T5984] should_failslab+0xac/0x100 [ 82.832388][ T5984] kmem_cache_alloc_noprof+0x78/0x390 [ 82.832410][ T5984] ? copy_mm+0x173/0x22c0 [ 82.832433][ T5984] copy_mm+0x173/0x22c0 [ 82.832467][ T5984] ? __pfx_perf_trace_lock+0x10/0x10 [ 82.832496][ T5984] ? __pfx_copy_mm+0x10/0x10 [ 82.832523][ T5984] ? __raw_spin_lock_init+0x45/0x100 [ 82.832547][ T5984] ? __init_rwsem+0x122/0x160 [ 82.832569][ T5984] ? copy_signal+0x500/0x630 [ 82.832589][ T5984] copy_process+0x17de/0x3d10 [ 82.832626][ T5984] ? copy_process+0xa07/0x3d10 [ 82.832655][ T5984] ? __pfx_copy_process+0x10/0x10 [ 82.832673][ T5984] ? perf_trace_lock+0x13d/0x4a0 [ 82.832704][ T5984] kernel_clone+0x242/0x930 [ 82.832719][ T5984] ? vfs_write+0xb29/0xd10 [ 82.832737][ T5984] ? __pfx_kernel_clone+0x10/0x10 [ 82.832761][ T5984] ? __mutex_unlock_slowpath+0x229/0x800 [ 82.832792][ T5984] __x64_sys_clone+0x268/0x2e0 [ 82.832812][ T5984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.832836][ T5984] ? __pfx___x64_sys_clone+0x10/0x10 [ 82.832853][ T5984] ? perf_trace_preemptirq_template+0xfa/0x400 [ 82.832885][ T5984] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 82.832916][ T5984] ? do_syscall_64+0xb6/0x230 [ 82.832940][ T5984] do_syscall_64+0xf3/0x230 [ 82.832960][ T5984] ? clear_bhb_loop+0x45/0xa0 [ 82.832990][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.833012][ T5984] RIP: 0033:0x7fd2b3d8e169 [ 82.833031][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.833043][ T5984] RSP: 002b:00007fd2b4c35fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 82.833062][ T5984] RAX: ffffffffffffffda RBX: 00007fd2b3fb5fa0 RCX: 00007fd2b3d8e169 [ 82.833074][ T5984] RDX: 00002000000007c0 RSI: 0000000000000000 RDI: 0000000024144480 [ 82.833084][ T5984] RBP: 00007fd2b4c36090 R08: 0000000000000000 R09: 0000000000000000 [ 82.833094][ T5984] R10: 0000200000000800 R11: 0000000000000202 R12: 0000000000000001 [ 82.833104][ T5984] R13: 0000000000000000 R14: 00007fd2b3fb5fa0 R15: 00007fffb0a7f808 [ 82.833135][ T5984] [ 83.267595][ T5846] Bluetooth: hci1: command tx timeout [ 83.326367][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21'. [ 83.532026][ T5997] netlink: 'syz.3.22': attribute type 39 has an invalid length. [ 83.767704][ T6002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.784765][ T6000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.805093][ T6002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 84.290152][ T6006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.297750][ T6006] IPv6: NLM_F_CREATE should be set when creating new route [ 84.305219][ T6006] IPv6: NLM_F_CREATE should be set when creating new route [ 84.312559][ T6006] IPv6: NLM_F_CREATE should be set when creating new route [ 84.500211][ T6001] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.25'. [ 84.593916][ T6005] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 84.984428][ T6013] netlink: 'syz.1.29': attribute type 21 has an invalid length. [ 85.103686][ T6013] netlink: 'syz.1.29': attribute type 15 has an invalid length. [ 85.169154][ T6013] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.178056][ T6013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.185301][ T6013] IPv6: NLM_F_CREATE should be set when creating new route [ 85.192630][ T6013] IPv6: NLM_F_CREATE should be set when creating new route [ 85.199986][ T6013] IPv6: NLM_F_CREATE should be set when creating new route [ 85.606797][ T6028] __nla_validate_parse: 1 callbacks suppressed [ 85.606815][ T6028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33'. [ 85.640974][ T6030] FAULT_INJECTION: forcing a failure. [ 85.640974][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 85.654221][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.2.34 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 85.654246][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.654255][ T6030] Call Trace: [ 85.654263][ T6030] [ 85.654270][ T6030] dump_stack_lvl+0x241/0x360 [ 85.654302][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.654327][ T6030] ? __pfx__printk+0x10/0x10 [ 85.654366][ T6030] should_fail_ex+0x424/0x570 [ 85.654392][ T6030] should_failslab+0xac/0x100 [ 85.654418][ T6030] __kmalloc_cache_noprof+0x73/0x370 [ 85.654440][ T6030] ? sctp_add_bind_addr+0x89/0x3a0 [ 85.654467][ T6030] sctp_add_bind_addr+0x89/0x3a0 [ 85.654494][ T6030] sctp_copy_local_addr_list+0x313/0x500 [ 85.654519][ T6030] ? sctp_copy_local_addr_list+0xad/0x500 [ 85.654542][ T6030] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 85.654568][ T6030] ? sctp_v6_is_any+0x60/0x70 [ 85.654593][ T6030] ? sctp_copy_one_addr+0x94/0x360 [ 85.654631][ T6030] sctp_bind_addr_copy+0xad/0x3b0 [ 85.654654][ T6030] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 85.654679][ T6030] sctp_connect_new_asoc+0x337/0x700 [ 85.654701][ T6030] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 85.654716][ T6030] ? sctp_sendmsg+0xf30/0x3620 [ 85.654741][ T6030] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 85.654755][ T6030] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 85.654779][ T6030] sctp_sendmsg+0x2009/0x3620 [ 85.654824][ T6030] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.654846][ T6030] ? aa_sk_perm+0x96f/0xac0 [ 85.654888][ T6030] ? inet_sendmsg+0x330/0x390 [ 85.654918][ T6030] __sock_sendmsg+0x1a6/0x270 [ 85.654945][ T6030] ____sys_sendmsg+0x523/0x860 [ 85.654977][ T6030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.654992][ T6030] ? __fget_files+0x2a/0x420 [ 85.655013][ T6030] ? __fget_files+0x2a/0x420 [ 85.655041][ T6030] __sys_sendmsg+0x271/0x360 [ 85.655067][ T6030] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.655125][ T6030] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 85.655170][ T6030] ? do_syscall_64+0xb6/0x230 [ 85.655195][ T6030] do_syscall_64+0xf3/0x230 [ 85.655216][ T6030] ? clear_bhb_loop+0x45/0xa0 [ 85.655238][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.655254][ T6030] RIP: 0033:0x7fd2b3d8e169 [ 85.655269][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.655281][ T6030] RSP: 002b:00007fd2b4c36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.655299][ T6030] RAX: ffffffffffffffda RBX: 00007fd2b3fb5fa0 RCX: 00007fd2b3d8e169 [ 85.655311][ T6030] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000003 [ 85.655321][ T6030] RBP: 00007fd2b4c36090 R08: 0000000000000000 R09: 0000000000000000 [ 85.655331][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.655340][ T6030] R13: 0000000000000000 R14: 00007fd2b3fb5fa0 R15: 00007fffb0a7f808 [ 85.655372][ T6030] [ 85.959591][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33'. [ 86.525850][ T6048] FAULT_INJECTION: forcing a failure. [ 86.525850][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 86.731209][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.2.39 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 86.731235][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.731245][ T6048] Call Trace: [ 86.731251][ T6048] [ 86.731259][ T6048] dump_stack_lvl+0x241/0x360 [ 86.731294][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.731319][ T6048] ? __pfx__printk+0x10/0x10 [ 86.731345][ T6048] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 86.731366][ T6048] ? __pfx___might_resched+0x10/0x10 [ 86.731394][ T6048] should_fail_ex+0x424/0x570 [ 86.731419][ T6048] should_failslab+0xac/0x100 [ 86.731445][ T6048] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 86.731468][ T6048] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 86.731498][ T6048] ? rxrpc_setsockopt+0x46a/0x9d0 [ 86.731522][ T6048] rxrpc_server_keyring+0x78/0x1f0 [ 86.731550][ T6048] rxrpc_setsockopt+0x46a/0x9d0 [ 86.731572][ T6048] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 86.731591][ T6048] ? aa_sock_opt_perm+0x79/0x120 [ 86.731620][ T6048] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 86.731636][ T6048] do_sock_setsockopt+0x3b1/0x710 [ 86.731662][ T6048] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 86.731677][ T6048] ? __fget_files+0x2a/0x420 [ 86.731697][ T6048] ? __fget_files+0x39d/0x420 [ 86.731711][ T6048] ? __fget_files+0x2a/0x420 [ 86.731736][ T6048] __x64_sys_setsockopt+0x1ee/0x280 [ 86.731763][ T6048] do_syscall_64+0xf3/0x230 [ 86.731784][ T6048] ? clear_bhb_loop+0x45/0xa0 [ 86.731805][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.731820][ T6048] RIP: 0033:0x7fd2b3d8e169 [ 86.731835][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.731847][ T6048] RSP: 002b:00007fd2b4c15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.731866][ T6048] RAX: ffffffffffffffda RBX: 00007fd2b3fb6080 RCX: 00007fd2b3d8e169 [ 86.731878][ T6048] RDX: 0000000000000002 RSI: 0000000000000110 RDI: 0000000000000004 [ 86.731887][ T6048] RBP: 00007fd2b4c15090 R08: 0000000000000034 R09: 0000000000000000 [ 86.731897][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.731906][ T6048] R13: 0000000000000000 R14: 00007fd2b3fb6080 R15: 00007fffb0a7f808 [ 86.731938][ T6048] [ 86.998553][ T6047] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 87.015378][ T1209] cfg80211: failed to load regulatory.db [ 87.261167][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.333673][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.369916][ T6051] netlink: 'syz.4.41': attribute type 21 has an invalid length. [ 87.414184][ T6051] netlink: 164 bytes leftover after parsing attributes in process `syz.4.41'. [ 87.429565][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.430213][ T6063] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.41'. [ 87.488565][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.835647][ T6074] warning: `syz.1.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.253493][ T6090] syz.3.53 uses obsolete (PF_INET,SOCK_PACKET) [ 90.217526][ T6117] veth0_vlan: entered allmulticast mode [ 90.685991][ T6124] FAULT_INJECTION: forcing a failure. [ 90.685991][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 90.704880][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.2.63 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 90.704912][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.704922][ T6124] Call Trace: [ 90.704929][ T6124] [ 90.704936][ T6124] dump_stack_lvl+0x241/0x360 [ 90.704970][ T6124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.704994][ T6124] ? __pfx__printk+0x10/0x10 [ 90.705023][ T6124] ? __pfx___might_resched+0x10/0x10 [ 90.705051][ T6124] should_fail_ex+0x424/0x570 [ 90.705078][ T6124] should_failslab+0xac/0x100 [ 90.705105][ T6124] kmem_cache_alloc_noprof+0x78/0x390 [ 90.705128][ T6124] ? alloc_empty_file+0x56/0x1d0 [ 90.705160][ T6124] alloc_empty_file+0x56/0x1d0 [ 90.705186][ T6124] alloc_file_pseudo+0x206/0x320 [ 90.705211][ T6124] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 90.705247][ T6124] anon_inode_getfd+0xce/0x1e0 [ 90.705279][ T6124] btf_new_fd+0x7fb/0xcf0 [ 90.705316][ T6124] ? __pfx_btf_new_fd+0x10/0x10 [ 90.705349][ T6124] ? bpf_btf_load+0xcf/0x1a0 [ 90.705372][ T6124] __sys_bpf+0x72f/0x8b0 [ 90.705393][ T6124] ? __pfx___sys_bpf+0x10/0x10 [ 90.705407][ T6124] ? perf_trace_run_bpf_submit+0x10b/0x180 [ 90.705471][ T6124] __x64_sys_bpf+0x7c/0x90 [ 90.705499][ T6124] do_syscall_64+0xf3/0x230 [ 90.705521][ T6124] ? clear_bhb_loop+0x45/0xa0 [ 90.705543][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.705559][ T6124] RIP: 0033:0x7fd2b3d8e169 [ 90.705577][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.705589][ T6124] RSP: 002b:00007fd2b4c36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.705606][ T6124] RAX: ffffffffffffffda RBX: 00007fd2b3fb5fa0 RCX: 00007fd2b3d8e169 [ 90.705618][ T6124] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 90.705628][ T6124] RBP: 00007fd2b4c36090 R08: 0000000000000000 R09: 0000000000000000 [ 90.705637][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.705646][ T6124] R13: 0000000000000000 R14: 00007fd2b3fb5fa0 R15: 00007fffb0a7f808 [ 90.705682][ T6124] [ 91.276391][ T6129] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 91.304753][ T6139] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 91.379118][ T6141] netlink: 14 bytes leftover after parsing attributes in process `syz.2.69'. [ 91.545637][ T6148] netlink: 'syz.1.70': attribute type 3 has an invalid length. [ 91.558537][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.70'. [ 91.901293][ T6160] netlink: 10 bytes leftover after parsing attributes in process `syz.1.75'. [ 91.910713][ T6160] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 92.449823][ T6162] delete_channel: no stack [ 93.084161][ T6193] netlink: 195564 bytes leftover after parsing attributes in process `syz.4.83'. [ 93.121764][ T6193] netlink: 'syz.4.83': attribute type 3 has an invalid length. [ 93.144070][ T6193] netlink: 195564 bytes leftover after parsing attributes in process `syz.4.83'. [ 93.413315][ T6203] netlink: 156 bytes leftover after parsing attributes in process `syz.3.89'. [ 93.706347][ T6210] netlink: 'syz.4.90': attribute type 6 has an invalid length. [ 93.714263][ T6210] netlink: 168 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.379397][ T6217] Dead loop on virtual device ip6_vti0, fix it urgently! [ 94.541290][ T6217] netlink: 'syz.2.93': attribute type 3 has an invalid length. [ 94.558598][ T6221] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 94.571495][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 94.581975][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.93'. [ 94.591155][ T6220] bond_slave_1: entered promiscuous mode [ 94.597475][ T6220] bond_slave_1: entered allmulticast mode [ 94.874294][ T5846] Bluetooth: hci0: ISO packet for unknown connection handle 7 [ 94.889727][ T6230] Zero length message leads to an empty skb [ 95.061982][ T6238] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 96.132345][ T6256] FAULT_INJECTION: forcing a failure. [ 96.132345][ T6256] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.181963][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.3.107 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 96.181989][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.181999][ T6256] Call Trace: [ 96.182007][ T6256] [ 96.182014][ T6256] dump_stack_lvl+0x241/0x360 [ 96.182047][ T6256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.182070][ T6256] ? __pfx__printk+0x10/0x10 [ 96.182107][ T6256] should_fail_ex+0x424/0x570 [ 96.182130][ T6256] _copy_from_user+0x2d/0xb0 [ 96.182156][ T6256] generic_map_update_batch+0x53b/0x8e0 [ 96.182192][ T6256] ? __pfx_generic_map_update_batch+0x10/0x10 [ 96.182215][ T6256] ? bpf_map_do_batch+0x19b/0x660 [ 96.182235][ T6256] ? kasan_check_range+0x86/0x2a0 [ 96.182262][ T6256] ? __pfx_generic_map_update_batch+0x10/0x10 [ 96.182305][ T6256] bpf_map_do_batch+0x39a/0x660 [ 96.182330][ T6256] __sys_bpf+0x3c1/0x8b0 [ 96.182349][ T6256] ? __pfx___sys_bpf+0x10/0x10 [ 96.182382][ T6256] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 96.182412][ T6256] __x64_sys_bpf+0x7c/0x90 [ 96.182436][ T6256] do_syscall_64+0xf3/0x230 [ 96.182458][ T6256] ? clear_bhb_loop+0x45/0xa0 [ 96.182478][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.182494][ T6256] RIP: 0033:0x7fe27bf8e169 [ 96.182509][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.182521][ T6256] RSP: 002b:00007fe27cd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.182539][ T6256] RAX: ffffffffffffffda RBX: 00007fe27c1b5fa0 RCX: 00007fe27bf8e169 [ 96.182551][ T6256] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 96.182561][ T6256] RBP: 00007fe27cd52090 R08: 0000000000000000 R09: 0000000000000000 [ 96.182572][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.182581][ T6256] R13: 0000000000000000 R14: 00007fe27c1b5fa0 R15: 00007ffc723aeb08 [ 96.182608][ T6256] [ 96.257539][ T6251] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.105'. [ 96.912944][ T6267] netlink: 'syz.4.108': attribute type 21 has an invalid length. [ 100.432435][ T6267] netlink: 'syz.4.108': attribute type 6 has an invalid length. [ 100.441696][ T6267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.108'. [ 100.867774][ T6282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.115'. [ 100.922062][ T6282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.115'. [ 100.968472][ T6282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.115'. [ 101.277941][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.117'. [ 101.291003][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.117'. [ 101.305458][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.117'. [ 101.383648][ T6290] netlink: 'syz.4.116': attribute type 29 has an invalid length. [ 101.392649][ T6290] netlink: 'syz.4.116': attribute type 29 has an invalid length. [ 101.866242][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.126'. [ 101.984814][ T6318] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 102.037216][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 102.265612][ T6328] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 102.379551][ T6328] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.133'. [ 103.174024][ T6332] netlink: 'syz.1.134': attribute type 12 has an invalid length. [ 103.957708][ T6331] syz.0.132 (6331) used greatest stack depth: 18760 bytes left [ 104.281931][ T6345] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 104.690737][ T6366] FAULT_INJECTION: forcing a failure. [ 104.690737][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.721950][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.0.146 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 104.721975][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.721984][ T6366] Call Trace: [ 104.721991][ T6366] [ 104.721999][ T6366] dump_stack_lvl+0x241/0x360 [ 104.722029][ T6366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.722051][ T6366] ? __pfx__printk+0x10/0x10 [ 104.722088][ T6366] should_fail_ex+0x424/0x570 [ 104.722111][ T6366] _copy_from_user+0x2d/0xb0 [ 104.722135][ T6366] generic_map_update_batch+0x59f/0x8e0 [ 104.722172][ T6366] ? __pfx_generic_map_update_batch+0x10/0x10 [ 104.722191][ T6366] ? __fget_files+0x39d/0x420 [ 104.722205][ T6366] ? __fget_files+0x2a/0x420 [ 104.722230][ T6366] ? __pfx_generic_map_update_batch+0x10/0x10 [ 104.722249][ T6366] bpf_map_do_batch+0x39a/0x660 [ 104.722271][ T6366] __sys_bpf+0x3c1/0x8b0 [ 104.722291][ T6366] ? __pfx___sys_bpf+0x10/0x10 [ 104.722305][ T6366] ? bpf_trace_run2+0x39f/0x550 [ 104.722349][ T6366] ? trace_sys_enter+0x74/0x120 [ 104.722367][ T6366] ? rcu_is_watching+0x15/0xb0 [ 104.722393][ T6366] __x64_sys_bpf+0x7c/0x90 [ 104.722415][ T6366] do_syscall_64+0xf3/0x230 [ 104.722436][ T6366] ? clear_bhb_loop+0x45/0xa0 [ 104.722456][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.722470][ T6366] RIP: 0033:0x7fa05e78e169 [ 104.722484][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.722496][ T6366] RSP: 002b:00007fa05f5c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.722514][ T6366] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 104.722525][ T6366] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 104.722535][ T6366] RBP: 00007fa05f5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.722544][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.722553][ T6366] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 104.722585][ T6366] [ 105.450473][ T6379] FAULT_INJECTION: forcing a failure. [ 105.450473][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.513637][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.1.150 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 105.513666][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.513677][ T6379] Call Trace: [ 105.513687][ T6379] [ 105.513699][ T6379] dump_stack_lvl+0x241/0x360 [ 105.513754][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.513788][ T6379] ? __pfx__printk+0x10/0x10 [ 105.513884][ T6379] should_fail_ex+0x424/0x570 [ 105.513937][ T6379] _copy_from_user+0x2d/0xb0 [ 105.513973][ T6379] copy_from_sockptr+0x57/0xb0 [ 105.514014][ T6379] do_ip_setsockopt+0x1e0c/0x39c0 [ 105.514089][ T6379] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 105.514139][ T6379] ? aa_sk_perm+0x96f/0xac0 [ 105.514197][ T6379] ? ksys_write+0x24e/0x2d0 [ 105.514227][ T6379] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.514296][ T6379] ip_setsockopt+0x63/0x100 [ 105.514333][ T6379] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.514361][ T6379] do_sock_setsockopt+0x3b1/0x710 [ 105.514418][ T6379] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.514434][ T6379] ? __fget_files+0x2a/0x420 [ 105.514479][ T6379] ? __fget_files+0x39d/0x420 [ 105.514497][ T6379] ? __fget_files+0x2a/0x420 [ 105.514564][ T6379] __x64_sys_setsockopt+0x1ee/0x280 [ 105.514632][ T6379] do_syscall_64+0xf3/0x230 [ 105.514662][ T6379] ? clear_bhb_loop+0x45/0xa0 [ 105.514708][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.514726][ T6379] RIP: 0033:0x7fae6538e169 [ 105.514749][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.514763][ T6379] RSP: 002b:00007fae661f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.514782][ T6379] RAX: ffffffffffffffda RBX: 00007fae655b5fa0 RCX: 00007fae6538e169 [ 105.514795][ T6379] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.514806][ T6379] RBP: 00007fae661f6090 R08: 000000000000000c R09: 0000000000000000 [ 105.514817][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.514827][ T6379] R13: 0000000000000000 R14: 00007fae655b5fa0 R15: 00007ffc05bac818 [ 105.514922][ T6379] [ 108.145369][ T6424] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 108.221922][ T6435] __nla_validate_parse: 3 callbacks suppressed [ 108.221943][ T6435] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.169'. [ 108.261921][ T6431] netlink: 'syz.1.168': attribute type 10 has an invalid length. [ 108.270563][ T6430] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.169'. [ 108.280842][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'. [ 108.322015][ T6431] dummy0: entered promiscuous mode [ 108.342294][ T6431] dummy0: entered allmulticast mode [ 108.373373][ T6431] bridge0: port 3(dummy0) entered blocking state [ 108.406286][ T6431] bridge0: port 3(dummy0) entered disabled state [ 108.415392][ T6439] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 108.422170][ T6431] bridge0: port 3(dummy0) entered blocking state [ 108.429758][ T6431] bridge0: port 3(dummy0) entered forwarding state [ 108.447712][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.171'. [ 108.459864][ T6439] dummy0: entered promiscuous mode [ 108.465023][ T6439] dummy0: entered allmulticast mode [ 108.474598][ T6439] FAULT_INJECTION: forcing a failure. [ 108.474598][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 108.489003][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.3.171 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 108.489026][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.489036][ T6439] Call Trace: [ 108.489044][ T6439] [ 108.489051][ T6439] dump_stack_lvl+0x241/0x360 [ 108.489085][ T6439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.489118][ T6439] ? __pfx__printk+0x10/0x10 [ 108.489146][ T6439] ? perf_trace_lock+0x13d/0x4a0 [ 108.489175][ T6439] should_fail_ex+0x424/0x570 [ 108.489201][ T6439] should_failslab+0xac/0x100 [ 108.489227][ T6439] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 108.489251][ T6439] ? __alloc_skb+0x1c2/0x480 [ 108.489274][ T6439] __alloc_skb+0x1c2/0x480 [ 108.489288][ T6439] ? rtnl_prop_list_size+0x1e/0x1e0 [ 108.489317][ T6439] ? __pfx___alloc_skb+0x10/0x10 [ 108.489335][ T6439] ? if_nlmsg_size+0x5b9/0x820 [ 108.489356][ T6439] ? if_nlmsg_size+0x5b9/0x820 [ 108.489379][ T6439] rtmsg_ifinfo_build_skb+0x84/0x260 [ 108.489412][ T6439] rtmsg_ifinfo+0x91/0x1b0 [ 108.489442][ T6439] __dev_notify_flags+0xf9/0x410 [ 108.489468][ T6439] ? __pfx___dev_notify_flags+0x10/0x10 [ 108.489482][ T6439] ? __dev_change_flags+0x57b/0x700 [ 108.489507][ T6439] ? __pfx___dev_change_flags+0x10/0x10 [ 108.489533][ T6439] ? __pfx_validate_linkmsg+0x10/0x10 [ 108.489557][ T6439] netif_change_flags+0xf0/0x1a0 [ 108.489581][ T6439] do_setlink+0xee3/0x4390 [ 108.489611][ T6439] ? _printk+0xd5/0x120 [ 108.489636][ T6439] ? __nla_validate_parse+0x2877/0x32e0 [ 108.489666][ T6439] ? __pfx_do_setlink+0x10/0x10 [ 108.489686][ T6439] ? __lock_acquire+0xad5/0xd80 [ 108.489718][ T6439] ? __pfx___mutex_trylock_common+0x10/0x10 [ 108.489746][ T6439] ? rcu_is_watching+0x15/0xb0 [ 108.489767][ T6439] ? trace_contention_end+0x3c/0x120 [ 108.489789][ T6439] ? __mutex_lock+0x380/0x10c0 [ 108.489813][ T6439] ? __pfx_aa_get_newest_label+0x10/0x10 [ 108.489845][ T6439] ? rcu_is_watching+0x15/0xb0 [ 108.489863][ T6439] ? rtnl_setlink+0x6d4/0xc00 [ 108.489886][ T6439] ? __pfx___mutex_lock+0x10/0x10 [ 108.489920][ T6439] ? ns_capable+0x8a/0xf0 [ 108.489948][ T6439] rtnl_setlink+0x855/0xc00 [ 108.489969][ T6439] ? __sys_sendmsg+0x271/0x360 [ 108.489994][ T6439] ? __pfx_rtnl_setlink+0x10/0x10 [ 108.490027][ T6439] ? perf_trace_preemptirq_template+0xfa/0x400 [ 108.490046][ T6439] ? kasan_quarantine_put+0x3d/0x230 [ 108.490173][ T6439] ? __pfx_rtnl_setlink+0x10/0x10 [ 108.490199][ T6439] rtnetlink_rcv_msg+0x80f/0xd70 [ 108.490219][ T6439] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 108.490248][ T6439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.490281][ T6439] ? ref_tracker_free+0x63e/0x7e0 [ 108.490308][ T6439] netlink_rcv_skb+0x208/0x480 [ 108.490335][ T6439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.490360][ T6439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.490407][ T6439] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.490434][ T6439] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.490461][ T6439] netlink_unicast+0x7f8/0x9a0 [ 108.490494][ T6439] ? __pfx_netlink_unicast+0x10/0x10 [ 108.490518][ T6439] ? skb_put+0x114/0x1f0 [ 108.490541][ T6439] netlink_sendmsg+0x8c3/0xcd0 [ 108.490581][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.490610][ T6439] ? aa_sock_msg_perm+0x91/0x160 [ 108.490641][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.490661][ T6439] __sock_sendmsg+0x221/0x270 [ 108.490689][ T6439] ____sys_sendmsg+0x523/0x860 [ 108.490720][ T6439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.490735][ T6439] ? __fget_files+0x2a/0x420 [ 108.490756][ T6439] ? __fget_files+0x2a/0x420 [ 108.490784][ T6439] __sys_sendmsg+0x271/0x360 [ 108.490810][ T6439] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.490873][ T6439] ? perf_trace_preemptirq_template+0xfa/0x400 [ 108.490915][ T6439] ? do_syscall_64+0xb6/0x230 [ 108.490940][ T6439] do_syscall_64+0xf3/0x230 [ 108.490960][ T6439] ? clear_bhb_loop+0x45/0xa0 [ 108.490982][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.490997][ T6439] RIP: 0033:0x7fe27bf8e169 [ 108.491013][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.491025][ T6439] RSP: 002b:00007fe27cd52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.491041][ T6439] RAX: ffffffffffffffda RBX: 00007fe27c1b5fa0 RCX: 00007fe27bf8e169 [ 108.491052][ T6439] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.491061][ T6439] RBP: 00007fe27cd52090 R08: 0000000000000000 R09: 0000000000000000 [ 108.491070][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.491079][ T6439] R13: 0000000000000000 R14: 00007fe27c1b5fa0 R15: 00007ffc723aeb08 [ 108.491116][ T6439] [ 108.492321][ T6439] bridge0: port 4(dummy0) entered blocking state [ 108.848688][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.170'. [ 108.860963][ T6439] bridge0: port 4(dummy0) entered disabled state [ 108.993684][ T6439] bridge0: port 4(dummy0) entered blocking state [ 109.000186][ T6439] bridge0: port 4(dummy0) entered forwarding state [ 109.022204][ T6452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.173'. [ 109.075605][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.125613][ T5846] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 109.435685][ T6451] bridge_slave_0 (unregistering): left allmulticast mode [ 109.486731][ T6451] bridge_slave_0 (unregistering): left promiscuous mode [ 109.542078][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.799232][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.173'. [ 110.275630][ T6485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.576250][ T6494] netlink: 'syz.3.183': attribute type 46 has an invalid length. [ 110.686318][ T6494] netlink: 55 bytes leftover after parsing attributes in process `syz.3.183'. [ 113.164282][ T6526] FAULT_INJECTION: forcing a failure. [ 113.164282][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.192027][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.191 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 113.192053][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.192063][ T6526] Call Trace: [ 113.192070][ T6526] [ 113.192077][ T6526] dump_stack_lvl+0x241/0x360 [ 113.192110][ T6526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.192152][ T6526] should_fail_ex+0x424/0x570 [ 113.192175][ T6526] _copy_from_user+0x2d/0xb0 [ 113.192200][ T6526] __sys_bpf+0x1c5/0x8b0 [ 113.192221][ T6526] ? __pfx___sys_bpf+0x10/0x10 [ 113.192267][ T6526] __x64_sys_bpf+0x7c/0x90 [ 113.192292][ T6526] do_syscall_64+0xf3/0x230 [ 113.192314][ T6526] ? clear_bhb_loop+0x45/0xa0 [ 113.192334][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.192349][ T6526] RIP: 0033:0x7fa05e78e169 [ 113.192365][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.192377][ T6526] RSP: 002b:00007fa05f5a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.192395][ T6526] RAX: ffffffffffffffda RBX: 00007fa05e9b6080 RCX: 00007fa05e78e169 [ 113.192407][ T6526] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 113.192418][ T6526] RBP: 00007fa05f5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.192427][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.192437][ T6526] R13: 0000000000000000 R14: 00007fa05e9b6080 R15: 00007fff83745238 [ 113.192463][ T6526] [ 113.957158][ T6541] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 115.055942][ T6564] netlink: 'syz.0.202': attribute type 3 has an invalid length. [ 115.064054][ T6564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.202'. [ 115.906414][ T6541] team0 (unregistering): Port device team_slave_0 removed [ 115.935184][ T6541] team0 (unregistering): Port device team_slave_1 removed [ 116.683576][ T6577] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 118.378064][ T6600] netlink: 168900 bytes leftover after parsing attributes in process `syz.1.214'. [ 119.003530][ T6616] FAULT_INJECTION: forcing a failure. [ 119.003530][ T6616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.016939][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.1.219 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 119.016963][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.016976][ T6616] Call Trace: [ 119.016984][ T6616] [ 119.016991][ T6616] dump_stack_lvl+0x241/0x360 [ 119.017036][ T6616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.017059][ T6616] ? __pfx__printk+0x10/0x10 [ 119.017099][ T6616] should_fail_ex+0x424/0x570 [ 119.017131][ T6616] _copy_from_user+0x2d/0xb0 [ 119.017157][ T6616] generic_map_update_batch+0x53b/0x8e0 [ 119.017197][ T6616] ? __pfx_generic_map_update_batch+0x10/0x10 [ 119.017218][ T6616] ? __fget_files+0x39d/0x420 [ 119.017232][ T6616] ? __fget_files+0x2a/0x420 [ 119.017259][ T6616] ? __pfx_generic_map_update_batch+0x10/0x10 [ 119.017279][ T6616] bpf_map_do_batch+0x39a/0x660 [ 119.017306][ T6616] __sys_bpf+0x3c1/0x8b0 [ 119.017321][ T6616] ? rcu_is_watching+0x15/0xb0 [ 119.017345][ T6616] ? __pfx___sys_bpf+0x10/0x10 [ 119.017360][ T6616] ? preempt_schedule_irq+0x145/0x1c0 [ 119.017416][ T6616] __x64_sys_bpf+0x7c/0x90 [ 119.017442][ T6616] do_syscall_64+0xf3/0x230 [ 119.017464][ T6616] ? clear_bhb_loop+0x45/0xa0 [ 119.017485][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.017501][ T6616] RIP: 0033:0x7fae6538e169 [ 119.017521][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.017534][ T6616] RSP: 002b:00007fae661d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.017558][ T6616] RAX: ffffffffffffffda RBX: 00007fae655b6080 RCX: 00007fae6538e169 [ 119.017570][ T6616] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 119.017581][ T6616] RBP: 00007fae661d5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.017591][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.017600][ T6616] R13: 0000000000000000 R14: 00007fae655b6080 R15: 00007ffc05bac818 [ 119.017632][ T6616] [ 119.688408][ T6622] netlink: 830 bytes leftover after parsing attributes in process `syz.1.222'. [ 120.009095][ T6636] netlink: 14 bytes leftover after parsing attributes in process `syz.4.225'. [ 120.134709][ T5846] Bluetooth: hci0: ISO packet for unknown connection handle 3847 [ 120.259723][ T6642] netlink: 'syz.4.225': attribute type 2 has an invalid length. [ 120.376897][ T6642] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.225'. [ 120.502595][ T6647] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 120.515327][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.227'. [ 120.536975][ T6647] batadv0: entered promiscuous mode [ 120.571869][ T6647] batadv0: entered allmulticast mode [ 120.596931][ T6647] bridge0: port 1(batadv0) entered blocking state [ 120.612181][ T6647] bridge0: port 1(batadv0) entered disabled state [ 120.623266][ T6647] bridge0: port 1(batadv0) entered blocking state [ 120.629913][ T6647] bridge0: port 1(batadv0) entered forwarding state [ 120.809986][ T3521] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.819455][ T3521] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.932328][ T6663] FAULT_INJECTION: forcing a failure. [ 120.932328][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 120.946392][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.4.233 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 120.946416][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.946426][ T6663] Call Trace: [ 120.946433][ T6663] [ 120.946440][ T6663] dump_stack_lvl+0x241/0x360 [ 120.946468][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.946485][ T6663] ? __pfx__printk+0x10/0x10 [ 120.946506][ T6663] ? __pfx___might_resched+0x10/0x10 [ 120.946527][ T6663] should_fail_ex+0x424/0x570 [ 120.946547][ T6663] should_failslab+0xac/0x100 [ 120.946567][ T6663] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 120.946587][ T6663] ? __alloc_skb+0x1c2/0x480 [ 120.946598][ T6663] ? lockdep_hardirqs_on+0x9d/0x150 [ 120.946619][ T6663] __alloc_skb+0x1c2/0x480 [ 120.946633][ T6663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.946657][ T6663] ? __pfx___alloc_skb+0x10/0x10 [ 120.946671][ T6663] ? pfkey_broadcast+0x40/0x400 [ 120.946683][ T6663] ? pfkey_broadcast+0x3e3/0x400 [ 120.946702][ T6663] pfkey_sendmsg+0xdbe/0x1140 [ 120.946730][ T6663] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.946745][ T6663] ? tomoyo_socket_sendmsg_permission+0x130/0x420 [ 120.946788][ T6663] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.946807][ T6663] ? __import_iovec+0x585/0x830 [ 120.946830][ T6663] ? aa_sock_msg_perm+0x91/0x160 [ 120.946856][ T6663] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.946872][ T6663] __sock_sendmsg+0x221/0x270 [ 120.946904][ T6663] ____sys_sendmsg+0x523/0x860 [ 120.946929][ T6663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.946942][ T6663] ? __fget_files+0x2a/0x420 [ 120.946960][ T6663] ? __fget_files+0x2a/0x420 [ 120.946983][ T6663] __sys_sendmsg+0x271/0x360 [ 120.947005][ T6663] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.947018][ T6663] ? ktime_get+0x3e/0x200 [ 120.947069][ T6663] ? perf_trace_preemptirq_template+0xfa/0x400 [ 120.947105][ T6663] ? do_syscall_64+0xb6/0x230 [ 120.947126][ T6663] do_syscall_64+0xf3/0x230 [ 120.947145][ T6663] ? clear_bhb_loop+0x45/0xa0 [ 120.947165][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.947180][ T6663] RIP: 0033:0x7f8dd638e169 [ 120.947195][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.947207][ T6663] RSP: 002b:00007f8dd41f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.947223][ T6663] RAX: ffffffffffffffda RBX: 00007f8dd65b5fa0 RCX: 00007f8dd638e169 [ 120.947234][ T6663] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 120.947243][ T6663] RBP: 00007f8dd41f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.947253][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.947262][ T6663] R13: 0000000000000000 R14: 00007f8dd65b5fa0 R15: 00007ffd8b2de318 [ 120.947289][ T6663] [ 121.290937][ T6665] netlink: 14 bytes leftover after parsing attributes in process `syz.4.233'. [ 121.657214][ T6676] netlink: 152 bytes leftover after parsing attributes in process `syz.2.237'. [ 121.704474][ T6676] netlink: 6 bytes leftover after parsing attributes in process `syz.2.237'. [ 122.255557][ T6688] netlink: 'syz.4.241': attribute type 12 has an invalid length. [ 122.268395][ T6688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.241'. [ 122.858157][ T6694] netlink: 22 bytes leftover after parsing attributes in process `syz.0.244'. [ 123.679515][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.688806][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.698777][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.708650][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.718720][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.034906][ T1163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.964243][ T1163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.598410][ T1163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.747212][ T5854] Bluetooth: hci0: command tx timeout [ 125.882356][ T1163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.948072][ T6741] netlink: 'syz.4.255': attribute type 33 has an invalid length. [ 125.960152][ T6741] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.255'. [ 126.122059][ T6706] chnl_net:caif_netlink_parms(): no params data found [ 126.538420][ T6759] Illegal XDP return value 32768 on prog (id 180) dev N/A, expect packet loss! [ 126.564522][ T1163] bridge0: port 4(dummy0) entered disabled state [ 126.639000][ T1163] bridge0: port 3(batadv0) entered disabled state [ 126.659745][ T1163] bridge_slave_1: left allmulticast mode [ 126.665595][ T1163] bridge_slave_1: left promiscuous mode [ 126.690074][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.714662][ T6763] netlink: 741 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.737863][ T1163] bridge_slave_0: left allmulticast mode [ 126.744534][ T6763] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.767157][ T1163] bridge_slave_0: left promiscuous mode [ 126.777594][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.807480][ T6763] netlink: 741 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.868535][ T6771] netlink: 10 bytes leftover after parsing attributes in process `syz.0.262'. [ 126.914485][ T6771] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 126.921255][ T6772] netlink: 'syz.4.263': attribute type 10 has an invalid length. [ 127.827370][ T5854] Bluetooth: hci0: command tx timeout [ 128.540654][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.552559][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.565391][ T1163] bond0 (unregistering): Released all slaves [ 128.595782][ T6772] team0: Port device macvlan0 added [ 128.627305][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.634505][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.676157][ T6706] bridge_slave_0: entered allmulticast mode [ 128.713178][ T6706] bridge_slave_0: entered promiscuous mode [ 128.743069][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.767246][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.785569][ T6706] bridge_slave_1: entered allmulticast mode [ 128.821301][ T6706] bridge_slave_1: entered promiscuous mode [ 128.821703][ T6785] FAULT_INJECTION: forcing a failure. [ 128.821703][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 128.854756][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.4.270 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 128.854781][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.854791][ T6785] Call Trace: [ 128.854798][ T6785] [ 128.854805][ T6785] dump_stack_lvl+0x241/0x360 [ 128.854837][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.854859][ T6785] ? __pfx__printk+0x10/0x10 [ 128.854879][ T6785] ? __lock_acquire+0xad5/0xd80 [ 128.854904][ T6785] should_fail_ex+0x424/0x570 [ 128.854924][ T6785] should_failslab+0xac/0x100 [ 128.854947][ T6785] kmem_cache_alloc_noprof+0x78/0x390 [ 128.854967][ T6785] ? skb_clone+0x20c/0x390 [ 128.854989][ T6785] skb_clone+0x20c/0x390 [ 128.855019][ T6785] __netlink_deliver_tap+0x3c4/0x7f0 [ 128.855053][ T6785] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.855072][ T6785] netlink_deliver_tap+0x19d/0x1b0 [ 128.855095][ T6785] netlink_unicast+0x7c6/0x9a0 [ 128.855123][ T6785] ? __pfx_netlink_unicast+0x10/0x10 [ 128.855145][ T6785] ? skb_put+0x114/0x1f0 [ 128.855165][ T6785] netlink_sendmsg+0x8c3/0xcd0 [ 128.855201][ T6785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.855227][ T6785] ? aa_sock_msg_perm+0x91/0x160 [ 128.855253][ T6785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.855274][ T6785] __sock_sendmsg+0x221/0x270 [ 128.855299][ T6785] ____sys_sendmsg+0x523/0x860 [ 128.855324][ T6785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.855339][ T6785] ? __fget_files+0x2a/0x420 [ 128.855357][ T6785] ? __fget_files+0x2a/0x420 [ 128.855382][ T6785] __sys_sendmsg+0x271/0x360 [ 128.855405][ T6785] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.855476][ T6785] ? do_syscall_64+0xb6/0x230 [ 128.855501][ T6785] do_syscall_64+0xf3/0x230 [ 128.855521][ T6785] ? clear_bhb_loop+0x45/0xa0 [ 128.855542][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.855557][ T6785] RIP: 0033:0x7f8dd638e169 [ 128.855572][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.855585][ T6785] RSP: 002b:00007f8dd41f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.855603][ T6785] RAX: ffffffffffffffda RBX: 00007f8dd65b5fa0 RCX: 00007f8dd638e169 [ 128.855615][ T6785] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 128.855626][ T6785] RBP: 00007f8dd41f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.855636][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.855645][ T6785] R13: 0000000000000000 R14: 00007f8dd65b5fa0 R15: 00007ffd8b2de318 [ 128.855672][ T6785] [ 128.866931][ T6793] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 128.879021][ T6785] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 128.930097][ T6797] netlink: 'syz.0.269': attribute type 4 has an invalid length. [ 128.937109][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.270'. [ 129.320005][ T6785] batadv0: entered promiscuous mode [ 129.325283][ T6785] batadv0: entered allmulticast mode [ 129.344998][ T6785] bridge0: port 3(batadv0) entered blocking state [ 129.354650][ T6785] bridge0: port 3(batadv0) entered disabled state [ 129.371145][ T6785] bridge0: port 3(batadv0) entered blocking state [ 129.377768][ T6785] bridge0: port 3(batadv0) entered forwarding state [ 129.402155][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.448576][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.693951][ T6824] FAULT_INJECTION: forcing a failure. [ 129.693951][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.727625][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.1.275 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 129.727651][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.727668][ T6824] Call Trace: [ 129.727675][ T6824] [ 129.727682][ T6824] dump_stack_lvl+0x241/0x360 [ 129.727715][ T6824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.727738][ T6824] ? __pfx__printk+0x10/0x10 [ 129.727776][ T6824] should_fail_ex+0x424/0x570 [ 129.727799][ T6824] _copy_from_iter+0x211/0x1c70 [ 129.727838][ T6824] ? __pfx__copy_from_iter+0x10/0x10 [ 129.727863][ T6824] ? rcu_is_watching+0x15/0xb0 [ 129.727884][ T6824] ? trace_kmalloc+0x1f/0xd0 [ 129.727903][ T6824] ? kernfs_fop_write_iter+0x15a/0x510 [ 129.727929][ T6824] kernfs_fop_write_iter+0x1a1/0x510 [ 129.727957][ T6824] vfs_write+0x70f/0xd10 [ 129.727983][ T6824] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 129.728007][ T6824] ? __pfx_vfs_write+0x10/0x10 [ 129.728029][ T6824] ? __fget_files+0x2a/0x420 [ 129.728048][ T6824] ? __fget_files+0x2a/0x420 [ 129.728072][ T6824] ksys_write+0x19d/0x2d0 [ 129.728092][ T6824] ? __pfx_ksys_write+0x10/0x10 [ 129.728116][ T6824] ? do_syscall_64+0xb6/0x230 [ 129.728137][ T6824] do_syscall_64+0xf3/0x230 [ 129.728155][ T6824] ? clear_bhb_loop+0x45/0xa0 [ 129.728175][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.728189][ T6824] RIP: 0033:0x7fae6538e169 [ 129.728203][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.728216][ T6824] RSP: 002b:00007fae661d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.728234][ T6824] RAX: ffffffffffffffda RBX: 00007fae655b6080 RCX: 00007fae6538e169 [ 129.728245][ T6824] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000004 [ 129.728255][ T6824] RBP: 00007fae661d5090 R08: 0000000000000000 R09: 0000000000000000 [ 129.728264][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.728272][ T6824] R13: 0000000000000000 R14: 00007fae655b6080 R15: 00007ffc05bac818 [ 129.728294][ T6824] [ 129.907162][ T5854] Bluetooth: hci0: command tx timeout [ 129.952985][ T3578] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 129.962366][ T3578] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 130.018075][ T6706] team0: Port device team_slave_0 added [ 130.035260][ T6706] team0: Port device team_slave_1 added [ 130.662550][ T6834] netlink: 'syz.1.278': attribute type 21 has an invalid length. [ 130.729376][ T6834] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.052551][ T1163] hsr_slave_0: left promiscuous mode [ 131.064545][ T1163] hsr_slave_1: left promiscuous mode [ 131.071018][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.078713][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.087271][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.095187][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.116377][ T1163] veth1_macvtap: left promiscuous mode [ 131.122599][ T1163] veth0_macvtap: left promiscuous mode [ 131.129438][ T1163] veth1_vlan: left promiscuous mode [ 131.135617][ T1163] veth0_vlan: left promiscuous mode [ 131.312409][ T6854] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 131.332787][ T6854] netlink: 192668 bytes leftover after parsing attributes in process `syz.0.283'. [ 131.979312][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.986341][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.017536][ T5854] Bluetooth: hci0: command tx timeout [ 132.087333][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.113224][ T6857] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 132.135187][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 132.157777][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.164774][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.191479][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.409446][ T6866] netlink: 10 bytes leftover after parsing attributes in process `syz.0.288'. [ 132.437446][ T6866] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.455661][ T6862] netlink: 'syz.1.286': attribute type 12 has an invalid length. [ 132.465098][ T6862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.286'. [ 132.513924][ T6706] hsr_slave_0: entered promiscuous mode [ 132.515243][ T6866] netlink: 'syz.0.288': attribute type 2 has an invalid length. [ 132.532643][ T6706] hsr_slave_1: entered promiscuous mode [ 132.562353][ T6866] netlink: 'syz.0.288': attribute type 8 has an invalid length. [ 132.582556][ T6706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.608125][ T6866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.288'. [ 132.620418][ T6706] Cannot create hsr debugfs directory [ 132.705618][ T6880] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 132.783644][ T6880] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.807251][ T6880] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.824591][ T6880] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.835554][ T6880] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.865812][ T6880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.884709][ T6880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.893994][ T6880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.903217][ T6880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.927585][ T6880] team0: Port device geneve1 added [ 133.032449][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039405][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.306480][ T6900] FAULT_INJECTION: forcing a failure. [ 133.306480][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 133.330782][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.0.294 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 133.330808][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.330817][ T6900] Call Trace: [ 133.330825][ T6900] [ 133.330832][ T6900] dump_stack_lvl+0x241/0x360 [ 133.330868][ T6900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.330892][ T6900] ? __pfx__printk+0x10/0x10 [ 133.330933][ T6900] should_fail_ex+0x424/0x570 [ 133.330958][ T6900] should_failslab+0xac/0x100 [ 133.330984][ T6900] kmem_cache_alloc_noprof+0x78/0x390 [ 133.331007][ T6900] ? skb_clone+0x20c/0x390 [ 133.331033][ T6900] skb_clone+0x20c/0x390 [ 133.331057][ T6900] __netlink_deliver_tap+0x3c4/0x7f0 [ 133.331097][ T6900] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.331119][ T6900] netlink_deliver_tap+0x19d/0x1b0 [ 133.331145][ T6900] netlink_unicast+0x7c6/0x9a0 [ 133.331177][ T6900] ? __pfx_netlink_unicast+0x10/0x10 [ 133.331202][ T6900] ? skb_put+0x114/0x1f0 [ 133.331225][ T6900] netlink_sendmsg+0x8c3/0xcd0 [ 133.331265][ T6900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.331295][ T6900] ? aa_sock_msg_perm+0x91/0x160 [ 133.331326][ T6900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.331347][ T6900] __sock_sendmsg+0x221/0x270 [ 133.331374][ T6900] ____sys_sendmsg+0x523/0x860 [ 133.331405][ T6900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.331421][ T6900] ? __fget_files+0x2a/0x420 [ 133.331441][ T6900] ? __fget_files+0x2a/0x420 [ 133.331469][ T6900] __sys_sendmsg+0x271/0x360 [ 133.331495][ T6900] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.331564][ T6900] ? perf_trace_preemptirq_template+0xfa/0x400 [ 133.331606][ T6900] ? do_syscall_64+0xb6/0x230 [ 133.331633][ T6900] do_syscall_64+0xf3/0x230 [ 133.331654][ T6900] ? clear_bhb_loop+0x45/0xa0 [ 133.331675][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.331694][ T6900] RIP: 0033:0x7fa05e78e169 [ 133.331710][ T6900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.331723][ T6900] RSP: 002b:00007fa05f5a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.331741][ T6900] RAX: ffffffffffffffda RBX: 00007fa05e9b6080 RCX: 00007fa05e78e169 [ 133.331753][ T6900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 133.331763][ T6900] RBP: 00007fa05f5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 133.331773][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.331783][ T6900] R13: 0000000000000000 R14: 00007fa05e9b6080 R15: 00007fff83745238 [ 133.331815][ T6900] [ 133.331969][ T6900] netlink: 'syz.0.294': attribute type 4 has an invalid length. [ 133.627820][ T6900] netlink: 192668 bytes leftover after parsing attributes in process `syz.0.294'. [ 134.613810][ T6927] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 134.824968][ T6934] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 134.843003][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.301'. [ 134.866760][ T5854] Bluetooth: hci4: ISO packet for unknown connection handle 10 [ 134.923184][ T6934] bridge0: port 4(vlan1) entered blocking state [ 134.948024][ T6934] bridge0: port 4(vlan1) entered disabled state [ 134.983256][ T6934] vlan1: entered allmulticast mode [ 135.010007][ T6934] veth0_vlan: entered allmulticast mode [ 135.023307][ T6934] vlan1: entered promiscuous mode [ 135.029916][ T6934] bridge0: port 4(vlan1) entered blocking state [ 135.036397][ T6934] bridge0: port 4(vlan1) entered forwarding state [ 135.886396][ T6971] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.309'. [ 135.961238][ T6706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.043882][ T6706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.103902][ T6706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.175705][ T6706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.482532][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.554941][ T6706] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.604237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.611536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.659514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.666675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.161153][ T7004] cgroup: fork rejected by pids controller in /syz2 [ 138.358113][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.366676][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.383217][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.397788][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.406120][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.703281][ T7198] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 138.731743][ T7198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 140.467885][ T5846] Bluetooth: hci2: command tx timeout [ 141.390926][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.512487][ T7241] delete_channel: no stack [ 141.645747][ T6706] veth0_vlan: entered promiscuous mode [ 141.671437][ T6706] veth1_vlan: entered promiscuous mode [ 141.839544][ T6706] veth0_macvtap: entered promiscuous mode [ 141.880845][ T6706] veth1_macvtap: entered promiscuous mode [ 141.914374][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.924938][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.939706][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.952944][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.988137][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.003889][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.014194][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.029398][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.042766][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.090256][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.101559][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.113578][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.125183][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.135656][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.153681][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.177395][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.207254][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.220628][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.237940][ T7128] chnl_net:caif_netlink_parms(): no params data found [ 142.263839][ T7258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.328'. [ 142.281610][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.328'. [ 142.333408][ T6706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.351064][ T6706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.373703][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.375000][ T6706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.382675][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.398781][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.407134][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.414949][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.424482][ T6706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.442946][ T7260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.328'. [ 142.547942][ T5846] Bluetooth: hci2: command tx timeout [ 142.822397][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.836278][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.849742][ T7128] bridge_slave_0: entered allmulticast mode [ 142.865062][ T7128] bridge_slave_0: entered promiscuous mode [ 142.872732][ T7270] netlink: 'syz.1.330': attribute type 21 has an invalid length. [ 142.906952][ T7270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.330'. [ 142.916938][ T7270] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 142.931795][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.941470][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.951993][ T7128] bridge_slave_1: entered allmulticast mode [ 142.962155][ T7128] bridge_slave_1: entered promiscuous mode [ 143.084594][ T7275] FAULT_INJECTION: forcing a failure. [ 143.084594][ T7275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.098346][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.0.331 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 143.098370][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.098379][ T7275] Call Trace: [ 143.098386][ T7275] [ 143.098393][ T7275] dump_stack_lvl+0x241/0x360 [ 143.098425][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.098459][ T7275] ? __pfx__printk+0x10/0x10 [ 143.098492][ T7275] should_fail_ex+0x424/0x570 [ 143.098514][ T7275] prepare_alloc_pages+0x220/0x610 [ 143.098541][ T7275] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 143.098564][ T7275] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.098588][ T7275] ? lockdep_hardirqs_on+0x9d/0x150 [ 143.098620][ T7275] alloc_pages_mpol+0x339/0x690 [ 143.098648][ T7275] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.098673][ T7275] ? percpu_ref_get_many+0x19/0x140 [ 143.098699][ T7275] alloc_pages_noprof+0x121/0x190 [ 143.098723][ T7275] pgd_alloc+0x38/0x260 [ 143.098746][ T7275] mm_init+0x607/0xf40 [ 143.098762][ T7275] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 143.098783][ T7275] ? copy_mm+0x18f/0x22c0 [ 143.098805][ T7275] copy_mm+0x1c0/0x22c0 [ 143.098835][ T7275] ? __lock_acquire+0xad5/0xd80 [ 143.098858][ T7275] ? __pfx_copy_mm+0x10/0x10 [ 143.098884][ T7275] ? __raw_spin_lock_init+0x45/0x100 [ 143.098907][ T7275] ? __init_rwsem+0x122/0x160 [ 143.098929][ T7275] ? copy_signal+0x500/0x630 [ 143.098949][ T7275] copy_process+0x17de/0x3d10 [ 143.098981][ T7275] ? copy_process+0xa07/0x3d10 [ 143.099008][ T7275] ? __pfx_copy_process+0x10/0x10 [ 143.099043][ T7275] kernel_clone+0x242/0x930 [ 143.099061][ T7275] ? vfs_write+0xb29/0xd10 [ 143.099083][ T7275] ? __pfx_kernel_clone+0x10/0x10 [ 143.099112][ T7275] ? __mutex_unlock_slowpath+0x229/0x800 [ 143.099138][ T7275] __x64_sys_clone+0x268/0x2e0 [ 143.099156][ T7275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.099180][ T7275] ? __pfx___x64_sys_clone+0x10/0x10 [ 143.099197][ T7275] ? __fget_files+0x2a/0x420 [ 143.099237][ T7275] ? do_syscall_64+0xb6/0x230 [ 143.099260][ T7275] do_syscall_64+0xf3/0x230 [ 143.099280][ T7275] ? clear_bhb_loop+0x45/0xa0 [ 143.099300][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.099316][ T7275] RIP: 0033:0x7fa05e78e169 [ 143.099331][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.099343][ T7275] RSP: 002b:00007fa05f5c5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 143.099361][ T7275] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 143.099372][ T7275] RDX: 00002000000007c0 RSI: 0000000000000000 RDI: 0000000024144480 [ 143.099382][ T7275] RBP: 00007fa05f5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.099390][ T7275] R10: 0000200000000800 R11: 0000000000000202 R12: 0000000000000001 [ 143.099400][ T7275] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 143.099428][ T7275] [ 143.557466][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.565335][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.945411][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.982355][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.055073][ T7280] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.333'. [ 144.064915][ T7280] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.333'. [ 144.338732][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 144.364206][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.334'. [ 144.376382][ T7128] team0: Port device team_slave_0 added [ 144.401751][ T7128] team0: Port device team_slave_1 added [ 144.422944][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.433838][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.451563][ T7285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 144.471219][ T5846] Bluetooth: hci4: command tx timeout [ 144.570588][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.585117][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.627673][ T5846] Bluetooth: hci2: command tx timeout [ 144.643622][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.663378][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 144.807924][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.814928][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.876135][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.890306][ T7296] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.337'. [ 145.126143][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 145.364227][ T7128] hsr_slave_0: entered promiscuous mode [ 145.398480][ T7128] hsr_slave_1: entered promiscuous mode [ 145.417790][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.425417][ T7128] Cannot create hsr debugfs directory [ 146.033558][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.047229][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.077620][ T7261] bridge_slave_0: entered allmulticast mode [ 146.085628][ T7261] bridge_slave_0: entered promiscuous mode [ 146.126164][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.153461][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.177367][ T7261] bridge_slave_1: entered allmulticast mode [ 146.185627][ T7261] bridge_slave_1: entered promiscuous mode [ 146.557968][ T5846] Bluetooth: hci4: command tx timeout [ 146.584223][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.695901][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.708460][ T5846] Bluetooth: hci2: command tx timeout [ 147.169976][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.180737][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.189147][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.198141][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.205940][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.639901][ T5854] Bluetooth: hci4: command tx timeout [ 148.859222][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.345'. [ 148.902346][ T7261] team0: Port device team_slave_0 added [ 148.928584][ T7261] team0: Port device team_slave_1 added [ 149.322927][ T5854] Bluetooth: hci0: command tx timeout [ 149.475536][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.518411][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.562061][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.592419][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.605542][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.639307][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.781019][ T7128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.974819][ T7261] hsr_slave_0: entered promiscuous mode [ 149.986179][ T7261] hsr_slave_1: entered promiscuous mode [ 149.995814][ T7261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.995919][ T7338] FAULT_INJECTION: forcing a failure. [ 149.995919][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 150.010198][ T7261] Cannot create hsr debugfs directory [ 150.028159][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.0.347 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 150.028182][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.028191][ T7338] Call Trace: [ 150.028198][ T7338] [ 150.028205][ T7338] dump_stack_lvl+0x241/0x360 [ 150.028237][ T7338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.028261][ T7338] ? __pfx__printk+0x10/0x10 [ 150.028296][ T7338] should_fail_ex+0x424/0x570 [ 150.028320][ T7338] should_failslab+0xac/0x100 [ 150.028346][ T7338] __kmalloc_cache_noprof+0x73/0x370 [ 150.028368][ T7338] ? sctp_add_bind_addr+0x89/0x3a0 [ 150.028403][ T7338] sctp_add_bind_addr+0x89/0x3a0 [ 150.028430][ T7338] sctp_copy_local_addr_list+0x313/0x500 [ 150.028455][ T7338] ? sctp_copy_local_addr_list+0xad/0x500 [ 150.028478][ T7338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 150.028503][ T7338] ? sctp_v6_is_any+0x60/0x70 [ 150.028528][ T7338] ? sctp_copy_one_addr+0x94/0x360 [ 150.028554][ T7338] sctp_bind_addr_copy+0xad/0x3b0 [ 150.028577][ T7338] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 150.028601][ T7338] sctp_connect_new_asoc+0x337/0x700 [ 150.028622][ T7338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 150.028635][ T7338] ? sctp_sendmsg+0xf30/0x3620 [ 150.028659][ T7338] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 150.028673][ T7338] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 150.028695][ T7338] sctp_sendmsg+0x2009/0x3620 [ 150.028735][ T7338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 150.028755][ T7338] ? aa_sk_perm+0x96f/0xac0 [ 150.028796][ T7338] ? inet_sendmsg+0x330/0x390 [ 150.028820][ T7338] __sock_sendmsg+0x1a6/0x270 [ 150.028846][ T7338] ____sys_sendmsg+0x523/0x860 [ 150.028875][ T7338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.028890][ T7338] ? __fget_files+0x2a/0x420 [ 150.028910][ T7338] ? __fget_files+0x2a/0x420 [ 150.028935][ T7338] __sys_sendmsg+0x271/0x360 [ 150.028959][ T7338] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.029011][ T7338] ? perf_trace_preemptirq_template+0x2d4/0x400 [ 150.029052][ T7338] ? do_syscall_64+0xb6/0x230 [ 150.029076][ T7338] do_syscall_64+0xf3/0x230 [ 150.029097][ T7338] ? clear_bhb_loop+0x45/0xa0 [ 150.029117][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.029132][ T7338] RIP: 0033:0x7fa05e78e169 [ 150.029147][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.029160][ T7338] RSP: 002b:00007fa05f5c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.029178][ T7338] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 150.029190][ T7338] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000003 [ 150.029201][ T7338] RBP: 00007fa05f5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.029211][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.029220][ T7338] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 150.029250][ T7338] [ 150.368654][ T7128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.567721][ T7347] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 150.575421][ T7347] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.349'. [ 150.699310][ T7128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.707270][ T5854] Bluetooth: hci4: command tx timeout [ 150.778811][ T7128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.887795][ T7351] FAULT_INJECTION: forcing a failure. [ 150.887795][ T7351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.906911][ T7351] CPU: 1 UID: 0 PID: 7351 Comm: syz.0.351 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 150.906936][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.906945][ T7351] Call Trace: [ 150.906952][ T7351] [ 150.906959][ T7351] dump_stack_lvl+0x241/0x360 [ 150.906995][ T7351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.907017][ T7351] ? __pfx__printk+0x10/0x10 [ 150.907053][ T7351] should_fail_ex+0x424/0x570 [ 150.907078][ T7351] _copy_from_user+0x2d/0xb0 [ 150.907101][ T7351] rxrpc_server_keyring+0xae/0x1f0 [ 150.907129][ T7351] rxrpc_setsockopt+0x46a/0x9d0 [ 150.907151][ T7351] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 150.907170][ T7351] ? aa_sock_opt_perm+0x79/0x120 [ 150.907199][ T7351] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 150.907215][ T7351] do_sock_setsockopt+0x3b1/0x710 [ 150.907242][ T7351] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 150.907257][ T7351] ? __fget_files+0x2a/0x420 [ 150.907279][ T7351] ? __fget_files+0x39d/0x420 [ 150.907293][ T7351] ? __fget_files+0x2a/0x420 [ 150.907328][ T7351] __x64_sys_setsockopt+0x1ee/0x280 [ 150.907349][ T7351] do_syscall_64+0xf3/0x230 [ 150.907369][ T7351] ? clear_bhb_loop+0x45/0xa0 [ 150.907391][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.907407][ T7351] RIP: 0033:0x7fa05e78e169 [ 150.907422][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.907435][ T7351] RSP: 002b:00007fa05f5c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.907453][ T7351] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 150.907465][ T7351] RDX: 0000000000000002 RSI: 0000000000000110 RDI: 0000000000000004 [ 150.907474][ T7351] RBP: 00007fa05f5c6090 R08: 0000000000000034 R09: 0000000000000000 [ 150.907485][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.907494][ T7351] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 150.907528][ T7351] [ 151.141633][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 151.347913][ T5854] Bluetooth: hci0: command tx timeout [ 151.379987][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.394290][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.401997][ T7326] bridge_slave_0: entered allmulticast mode [ 151.416934][ T7326] bridge_slave_0: entered promiscuous mode [ 151.458341][ T7261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.484969][ T7128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.497443][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.505337][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.519551][ T7326] bridge_slave_1: entered allmulticast mode [ 151.527551][ T7326] bridge_slave_1: entered promiscuous mode [ 151.534561][ T7128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.591896][ T7261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.665948][ T7128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.688928][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.713716][ T7261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.732122][ T7128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.750858][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.801160][ T7261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.856148][ T7326] team0: Port device team_slave_0 added [ 151.872378][ T7326] team0: Port device team_slave_1 added [ 151.969636][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.976623][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.006649][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.027671][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.034734][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.061770][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.201960][ T7326] hsr_slave_0: entered promiscuous mode [ 152.208711][ T7326] hsr_slave_1: entered promiscuous mode [ 152.214944][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.222941][ T7326] Cannot create hsr debugfs directory [ 152.351917][ T7373] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 152.365134][ T7373] netlink: 'syz.0.356': attribute type 16 has an invalid length. [ 152.378817][ T7373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.356'. [ 152.442016][ T7261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.486185][ T7261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.518660][ T7261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.532674][ T7261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.831838][ T7326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.969956][ T7326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.034967][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.129113][ T7326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.193098][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.265965][ T7326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.330429][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.337650][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.351865][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.359105][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.416042][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.445430][ T5854] Bluetooth: hci0: command tx timeout [ 153.525312][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.603154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.610381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.635347][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.642747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.879706][ T7326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.185464][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.205636][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.224573][ T7407] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.367'. [ 154.418409][ T7326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.446540][ T7326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.528375][ T7326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.704483][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.770408][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.889712][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.370'. [ 154.911574][ T7422] netlink: 'syz.1.370': attribute type 21 has an invalid length. [ 154.971785][ T7422] netlink: 'syz.1.370': attribute type 39 has an invalid length. [ 154.985771][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.099960][ T7261] veth0_vlan: entered promiscuous mode [ 155.471480][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.371'. [ 155.492975][ T7261] veth1_vlan: entered promiscuous mode [ 155.508965][ T5854] Bluetooth: hci0: command tx timeout [ 155.519242][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.579961][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.587186][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.610055][ T7261] veth0_macvtap: entered promiscuous mode [ 155.623384][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.630624][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.710537][ T7261] veth1_macvtap: entered promiscuous mode [ 155.735787][ T7434] netlink: 'syz.1.372': attribute type 21 has an invalid length. [ 155.776337][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.776362][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.776373][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.776385][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.776395][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.776407][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.776417][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.776429][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.776441][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.776453][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.781937][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.793764][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.793790][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.793800][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.793813][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.793823][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.793835][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.793845][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.793857][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.793868][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.793880][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.800371][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.812276][ T7261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812312][ T7261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812337][ T7261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812362][ T7261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.648000][ T7128] veth0_vlan: entered promiscuous mode [ 156.858119][ T7128] veth1_vlan: entered promiscuous mode [ 156.999200][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.022970][ T7326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.038746][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.160080][ T7128] veth0_macvtap: entered promiscuous mode [ 157.198546][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.231091][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.251598][ T7128] veth1_macvtap: entered promiscuous mode [ 157.276884][ T7447] bridge0: port 4(vlan1) entered disabled state [ 157.287648][ T7450] netlink: 'syz.1.376': attribute type 3 has an invalid length. [ 157.295332][ T7450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.376'. [ 157.399961][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.437194][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.467587][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.492702][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.502767][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.513836][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.525123][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.538399][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.548908][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.559527][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.569682][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.580317][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.592160][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.700184][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.759547][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.791613][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.805698][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.817402][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.831048][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.842318][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.853813][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.866403][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.883202][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.893950][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.914990][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.927511][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.942327][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.002840][ T7128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.025157][ T7128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.055151][ T7128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.087931][ T7128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.302736][ T7326] veth0_vlan: entered promiscuous mode [ 158.390779][ T7326] veth1_vlan: entered promiscuous mode [ 158.504654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.525339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.560415][ T7482] FAULT_INJECTION: forcing a failure. [ 158.560415][ T7482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.575762][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.1.386 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 158.575788][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.575798][ T7482] Call Trace: [ 158.575806][ T7482] [ 158.575813][ T7482] dump_stack_lvl+0x241/0x360 [ 158.575845][ T7482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.575868][ T7482] ? __pfx__printk+0x10/0x10 [ 158.575903][ T7482] should_fail_ex+0x424/0x570 [ 158.575926][ T7482] _copy_to_user+0x31/0xb0 [ 158.575953][ T7482] simple_read_from_buffer+0xc4/0x170 [ 158.575982][ T7482] proc_fail_nth_read+0x1ef/0x260 [ 158.576003][ T7482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.576018][ T7482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.576035][ T7482] ? vfs_read+0x176/0xb90 [ 158.576051][ T7482] ? vfs_read+0x207/0xb90 [ 158.576070][ T7482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.576088][ T7482] vfs_read+0x21f/0xb90 [ 158.576112][ T7482] ? __pfx___mutex_lock+0x10/0x10 [ 158.576135][ T7482] ? __pfx_vfs_read+0x10/0x10 [ 158.576156][ T7482] ? __fget_files+0x2a/0x420 [ 158.576173][ T7482] ? __fget_files+0x39d/0x420 [ 158.576186][ T7482] ? __fget_files+0x2a/0x420 [ 158.576211][ T7482] ksys_read+0x19d/0x2d0 [ 158.576232][ T7482] ? __pfx_ksys_read+0x10/0x10 [ 158.576257][ T7482] ? do_syscall_64+0xb6/0x230 [ 158.576281][ T7482] do_syscall_64+0xf3/0x230 [ 158.576301][ T7482] ? clear_bhb_loop+0x45/0xa0 [ 158.576321][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.576337][ T7482] RIP: 0033:0x7fae6538cb7c [ 158.576352][ T7482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.576365][ T7482] RSP: 002b:00007fae661f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.576385][ T7482] RAX: ffffffffffffffda RBX: 00007fae655b5fa0 RCX: 00007fae6538cb7c [ 158.576397][ T7482] RDX: 000000000000000f RSI: 00007fae661f60a0 RDI: 000000000000000a [ 158.576407][ T7482] RBP: 00007fae661f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.576418][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.576428][ T7482] R13: 0000000000000000 R14: 00007fae655b5fa0 R15: 00007ffc05bac818 [ 158.576456][ T7482] [ 158.918963][ T7481] netlink: 'syz.2.385': attribute type 33 has an invalid length. [ 158.958057][ T7481] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.385'. [ 158.974562][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.989730][ T7326] veth0_macvtap: entered promiscuous mode [ 159.002978][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.049168][ T7326] veth1_macvtap: entered promiscuous mode [ 159.220235][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.262470][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.276783][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.288725][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.294246][ T7495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.389'. [ 159.299154][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.318612][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.328493][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.339252][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.350877][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.361507][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.373167][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.383765][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.393821][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.404890][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.416962][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.506219][ T7494] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.390'. [ 159.520627][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.534726][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.548538][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.566311][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.579422][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.592532][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.602992][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.614436][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.624750][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.640714][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.651087][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.662047][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.680411][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.691192][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.703863][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.744989][ T7326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.764674][ T7326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.784279][ T7326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.794693][ T7326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.812756][ T7501] netlink: 10 bytes leftover after parsing attributes in process `syz.2.392'. [ 159.828244][ T7501] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.998594][ T7189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.031239][ T7189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.127846][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.145947][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.996037][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.008579][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.016604][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.038049][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.046824][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.123251][ T7527] netlink: 'syz.1.400': attribute type 33 has an invalid length. [ 161.188744][ T7527] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.400'. [ 161.724746][ T7545] delete_channel: no stack [ 161.739806][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.749377][ T7522] chnl_net:caif_netlink_parms(): no params data found [ 161.767530][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.775966][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.805384][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.813253][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.053638][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.061244][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.069407][ T7522] bridge_slave_0: entered allmulticast mode [ 162.086140][ T7522] bridge_slave_0: entered promiscuous mode [ 162.645099][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.675268][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.718847][ T7522] bridge_slave_1: entered allmulticast mode [ 162.763922][ T7522] bridge_slave_1: entered promiscuous mode [ 162.911673][ T7572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.919023][ T7572] IPv6: NLM_F_CREATE should be set when creating new route [ 163.015072][ T7580] netlink: 'syz.2.414': attribute type 33 has an invalid length. [ 163.023793][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.414'. [ 163.075397][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 163.114088][ T7522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.123886][ T5846] Bluetooth: hci0: command tx timeout [ 163.196385][ T7522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.339359][ T7522] team0: Port device team_slave_0 added [ 163.424844][ T7522] team0: Port device team_slave_1 added [ 163.606096][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.618989][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.628422][ T7551] bridge_slave_0: entered allmulticast mode [ 163.636143][ T7551] bridge_slave_0: entered promiscuous mode [ 163.694514][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.701890][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.737628][ T7522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.781447][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.795184][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.802989][ T7551] bridge_slave_1: entered allmulticast mode [ 163.839673][ T7551] bridge_slave_1: entered promiscuous mode [ 163.908009][ T5854] Bluetooth: hci2: command tx timeout [ 163.948510][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.965802][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.018091][ T7522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.065849][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.102397][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.277626][ T7522] hsr_slave_0: entered promiscuous mode [ 164.295982][ T7522] hsr_slave_1: entered promiscuous mode [ 164.303643][ T7522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.312955][ T7522] Cannot create hsr debugfs directory [ 164.330562][ T7551] team0: Port device team_slave_0 added [ 164.357393][ T7551] team0: Port device team_slave_1 added [ 164.406862][ T7614] netlink: 'syz.0.425': attribute type 33 has an invalid length. [ 164.428619][ T7614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.425'. [ 164.624533][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.666923][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.690743][ T7624] syz.0.429: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.737045][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.761727][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.0.429 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 164.761756][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.761768][ T7624] Call Trace: [ 164.761776][ T7624] [ 164.761784][ T7624] dump_stack_lvl+0x241/0x360 [ 164.761817][ T7624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.761840][ T7624] ? __pfx__printk+0x10/0x10 [ 164.761869][ T7624] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 164.761894][ T7624] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 164.761922][ T7624] warn_alloc+0x27c/0x410 [ 164.761943][ T7624] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 164.761960][ T7624] ? __pfx_warn_alloc+0x10/0x10 [ 164.761985][ T7624] ? kasan_save_track+0x3f/0x80 [ 164.762004][ T7624] ? __kasan_kmalloc+0x9d/0xb0 [ 164.762026][ T7624] ? xsk_setsockopt+0x4f9/0x840 [ 164.762042][ T7624] ? do_sock_setsockopt+0x3b1/0x710 [ 164.762058][ T7624] ? __x64_sys_setsockopt+0x1ee/0x280 [ 164.762072][ T7624] ? do_syscall_64+0xf3/0x230 [ 164.762093][ T7624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.762120][ T7624] __vmalloc_node_range_noprof+0x128/0x1390 [ 164.762165][ T7624] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.762187][ T7624] ? __kasan_kmalloc+0x9d/0xb0 [ 164.762213][ T7624] vmalloc_user_noprof+0x74/0x80 [ 164.762230][ T7624] ? xskq_create+0xb6/0x170 [ 164.762247][ T7624] xskq_create+0xb6/0x170 [ 164.762268][ T7624] xsk_init_queue+0xa1/0x100 [ 164.762288][ T7624] xsk_setsockopt+0x4f9/0x840 [ 164.762308][ T7624] ? __pfx_xsk_setsockopt+0x10/0x10 [ 164.762326][ T7624] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.762346][ T7624] ? lockdep_hardirqs_on+0x9d/0x150 [ 164.762370][ T7624] ? aa_sock_opt_perm+0x79/0x120 [ 164.762397][ T7624] ? __pfx_xsk_setsockopt+0x10/0x10 [ 164.762413][ T7624] do_sock_setsockopt+0x3b1/0x710 [ 164.762438][ T7624] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 164.762454][ T7624] ? __fget_files+0x2a/0x420 [ 164.762475][ T7624] ? __fget_files+0x39d/0x420 [ 164.762489][ T7624] ? __fget_files+0x2a/0x420 [ 164.762514][ T7624] __x64_sys_setsockopt+0x1ee/0x280 [ 164.762539][ T7624] do_syscall_64+0xf3/0x230 [ 164.762558][ T7624] ? clear_bhb_loop+0x45/0xa0 [ 164.762575][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.762590][ T7624] RIP: 0033:0x7fa05e78e169 [ 164.762606][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.762620][ T7624] RSP: 002b:00007fa05f5c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.762639][ T7624] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 164.762650][ T7624] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 164.762661][ T7624] RBP: 00007fa05e810a68 R08: 0000000000000004 R09: 0000000000000000 [ 164.762672][ T7624] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 164.762682][ T7624] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 164.762711][ T7624] [ 164.762742][ T7624] Mem-Info: [ 164.839423][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.848061][ T7624] active_anon:4747 inactive_anon:0 isolated_anon:0 [ 164.848061][ T7624] active_file:15710 inactive_file:38348 isolated_file:0 [ 164.848061][ T7624] unevictable:768 dirty:132 writeback:0 [ 164.848061][ T7624] slab_reclaimable:10167 slab_unreclaimable:108652 [ 164.848061][ T7624] mapped:28784 shmem:1417 pagetables:812 [ 164.848061][ T7624] sec_pagetables:0 bounce:0 [ 164.848061][ T7624] kernel_misc_reclaimable:0 [ 164.848061][ T7624] free:1318321 free_pcp:430 free_cma:0 [ 164.864926][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.886893][ T7624] Node 0 active_anon:18888kB inactive_anon:0kB active_file:62840kB inactive_file:153320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115136kB dirty:528kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13584kB pagetables:3248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.999266][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.097080][ T7635] netlink: 'syz.1.430': attribute type 2 has an invalid length. [ 165.137371][ T7624] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.187481][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 165.304865][ T5854] Bluetooth: hci0: command tx timeout [ 165.315889][ T7624] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.344222][ T7631] netlink: 763 bytes leftover after parsing attributes in process `syz.1.430'. [ 165.356397][ T7624] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 165.377886][ T7624] Node 0 DMA32 free:1352084kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19276kB inactive_anon:0kB active_file:62840kB inactive_file:153228kB unevictable:1536kB writepending:540kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:1036kB local_pcp:328kB free_cma:0kB [ 165.419102][ T7624] lowmem_reserve[]: 0 0 0 0 0 [ 165.424353][ T7624] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.453009][ T7624] lowmem_reserve[]: 0 0 0 0 0 [ 165.465861][ T7624] Node 1 Normal free:3906268kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.526271][ T7624] lowmem_reserve[]: 0 0 0 0 0 [ 165.531332][ T7624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.544361][ T7624] Node 0 DMA32: 34*4kB (UME) 333*8kB (UME) 563*16kB (UME) 578*32kB (UME) 228*64kB (UME) 35*128kB (UME) 23*256kB (UME) 10*512kB (UME) 11*1024kB (UM) 3*2048kB (UE) 311*4096kB (M) = 1351648kB [ 165.563415][ T7624] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.580265][ T7522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.617105][ T7624] Node 1 Normal: 201*4kB (UME) 43*8kB (UME) 41*16kB (UME) 204*32kB (UME) 102*64kB (UME) 32*128kB (UME) 15*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3906316kB [ 165.659324][ T7624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.675203][ T7624] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.686598][ T7624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.696501][ T7624] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.706110][ T7624] 55481 total pagecache pages [ 165.711266][ T7624] 0 pages in swap cache [ 165.719035][ T7624] Free swap = 124996kB [ 165.723222][ T7624] Total swap = 124996kB [ 165.727688][ T7624] 2097051 pages RAM [ 165.731639][ T7624] 0 pages HighMem/MovableOnly [ 165.736322][ T7624] 428585 pages reserved [ 165.740803][ T7624] 0 pages cma reserved [ 165.997413][ T5854] Bluetooth: hci2: command tx timeout [ 166.013561][ T7522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.132243][ T7551] hsr_slave_0: entered promiscuous mode [ 166.141598][ T7551] hsr_slave_1: entered promiscuous mode [ 166.157853][ T7551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.175113][ T7551] Cannot create hsr debugfs directory [ 166.241936][ T7650] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 166.277448][ T7650] netlink: 2 bytes leftover after parsing attributes in process `syz.2.438'. [ 166.372373][ T7522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.399510][ T7654] netlink: 'syz.0.439': attribute type 33 has an invalid length. [ 166.451030][ T7654] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.439'. [ 166.604762][ T7650] batadv_slave_1: entered promiscuous mode [ 166.612108][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.620640][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.648054][ T7650] bridge0: port 3(batadv_slave_1) entered blocking state [ 166.655881][ T7650] bridge0: port 3(batadv_slave_1) entered disabled state [ 166.694998][ T7650] batadv_slave_1: entered allmulticast mode [ 166.715893][ T7650] bridge0: port 3(batadv_slave_1) entered blocking state [ 166.723431][ T7650] bridge0: port 3(batadv_slave_1) entered forwarding state [ 166.810335][ T7522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.951549][ T7662] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 167.347402][ T5854] Bluetooth: hci0: command tx timeout [ 168.005672][ T7522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.068777][ T5854] Bluetooth: hci2: command tx timeout [ 168.132746][ T7551] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.176008][ T7522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.209472][ T7679] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.445'. [ 168.362793][ T7551] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.420296][ T7522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.448186][ T7522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.566809][ T7551] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.932851][ T7692] netlink: 'syz.0.452': attribute type 33 has an invalid length. [ 168.967122][ T7692] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.046802][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.128363][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.175348][ T7522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.185910][ T7522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.222916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.230211][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.268205][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.275445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.577410][ T5854] Bluetooth: hci0: command tx timeout [ 170.406156][ T5854] Bluetooth: hci2: command tx timeout [ 170.843215][ T7551] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.124577][ T7704] FAULT_INJECTION: forcing a failure. [ 171.124577][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.152239][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.0.455 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 171.152267][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.152277][ T7704] Call Trace: [ 171.152284][ T7704] [ 171.152292][ T7704] dump_stack_lvl+0x241/0x360 [ 171.152326][ T7704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.152351][ T7704] ? __pfx__printk+0x10/0x10 [ 171.152392][ T7704] should_fail_ex+0x424/0x570 [ 171.152418][ T7704] _copy_from_user+0x2d/0xb0 [ 171.152444][ T7704] generic_map_update_batch+0x59f/0x8e0 [ 171.152484][ T7704] ? __pfx_generic_map_update_batch+0x10/0x10 [ 171.152505][ T7704] ? __fget_files+0x39d/0x420 [ 171.152520][ T7704] ? __fget_files+0x2a/0x420 [ 171.152547][ T7704] ? __pfx_generic_map_update_batch+0x10/0x10 [ 171.152568][ T7704] bpf_map_do_batch+0x39a/0x660 [ 171.152595][ T7704] __sys_bpf+0x3c1/0x8b0 [ 171.152616][ T7704] ? __pfx___sys_bpf+0x10/0x10 [ 171.152653][ T7704] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 171.152686][ T7704] __x64_sys_bpf+0x7c/0x90 [ 171.152713][ T7704] do_syscall_64+0xf3/0x230 [ 171.152735][ T7704] ? clear_bhb_loop+0x45/0xa0 [ 171.152757][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.152773][ T7704] RIP: 0033:0x7fa05e78e169 [ 171.152789][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.152803][ T7704] RSP: 002b:00007fa05f5c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.152822][ T7704] RAX: ffffffffffffffda RBX: 00007fa05e9b5fa0 RCX: 00007fa05e78e169 [ 171.152834][ T7704] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 171.152845][ T7704] RBP: 00007fa05f5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.152856][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.152866][ T7704] R13: 0000000000000000 R14: 00007fa05e9b5fa0 R15: 00007fff83745238 [ 171.152898][ T7704] [ 174.197773][ T7706] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 180.810737][ T7706] team0: Port device wlan1 added [ 180.941322][ T7522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.511613][ T7551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.653969][ T7551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.902475][ T7731] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.462'. [ 182.029193][ T7551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.094469][ T7551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.271709][ T7736] netlink: 'syz.0.463': attribute type 33 has an invalid length. [ 182.303496][ T7736] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.463'. [ 182.989564][ T7522] veth0_vlan: entered promiscuous mode [ 183.175306][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.205931][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.302651][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.309929][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.372488][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.379749][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.542087][ T7522] veth1_vlan: entered promiscuous mode [ 183.818484][ T7522] veth0_macvtap: entered promiscuous mode [ 183.855067][ T7522] veth1_macvtap: entered promiscuous mode [ 183.951057][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.171118][ T7761] netlink: 168 bytes leftover after parsing attributes in process `syz.0.470'. [ 184.184263][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.226846][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.320813][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.395859][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.461761][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.473408][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.484300][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.495950][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.507612][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.522355][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.563673][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.597363][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.641151][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.681888][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.715021][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.769571][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.840240][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.857541][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.877417][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.889050][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.897762][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.045463][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.110877][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.157389][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.217039][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.262257][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.347664][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.435295][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.472875][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.498845][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.521091][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.536585][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.557344][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.576265][ T7522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.594289][ T7522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.616078][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.974464][ T7522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.011527][ T7522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.038858][ T7522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.068977][ T7774] netlink: 132 bytes leftover after parsing attributes in process `syz.2.475'. [ 186.105785][ T7522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.099502][ T5846] Bluetooth: hci5: command tx timeout [ 187.188092][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.244548][ T7778] netlink: 'syz.0.476': attribute type 33 has an invalid length. [ 187.263019][ T7778] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.476'. [ 190.189127][ T5846] Bluetooth: hci5: command tx timeout [ 251.300019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.306407][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.337127][ T5846] Bluetooth: hci5: command tx timeout [ 251.356973][ C0] sched: DL replenish lagged too much [ 263.851310][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 263.858582][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 263.864656][ T55] Bluetooth: hci5: command tx timeout [ 332.486150][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.1.450:7685] [ 332.486189][ C1] Modules linked in: [ 332.486206][ C1] irq event stamp: 15850959 [ 332.486213][ C1] hardirqs last enabled at (15850958): [] irqentry_exit+0x63/0x90 [ 332.486239][ C1] hardirqs last disabled at (15850959): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 332.486258][ C1] softirqs last enabled at (2220666): [] __irq_exit_rcu+0xfb/0x220 [ 332.486277][ C1] softirqs last disabled at (2220669): [] __irq_exit_rcu+0xfb/0x220 [ 332.486305][ C1] CPU: 1 UID: 0 PID: 7685 Comm: syz.1.450 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 332.486324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.486335][ C1] RIP: 0010:unwind_get_return_address+0x56/0x90 [ 332.486357][ C1] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 6b 94 bf 00 48 8b 3b e8 53 bb 1e 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 50 94 bf 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 332.486370][ C1] RSP: 0018:ffffc90000a08240 EFLAGS: 00000246 [ 332.486384][ C1] RAX: 0000000000000001 RBX: ffffc90000a082a8 RCX: ffffffff91bfe000 [ 332.486396][ C1] RDX: ffffffff91dba501 RSI: ffffffff8e4fde6a RDI: ffffffff810014ca [ 332.486408][ C1] RBP: ffffc90000a082f0 R08: ffffc900041deeb8 R09: 0000000000000000 [ 332.486419][ C1] R10: ffffc90000a082b0 R11: fffff52000141058 R12: ffff888025bdda00 [ 332.486431][ C1] R13: ffffffff81aee8b0 R14: dffffc0000000000 R15: 1ffff92000141055 [ 332.486443][ C1] FS: 0000000000000000(0000) GS:ffff888125093000(0000) knlGS:0000000000000000 [ 332.486456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.486467][ C1] CR2: 00007fd9b8c47d58 CR3: 000000005487a000 CR4: 00000000003526f0 [ 332.486481][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.486491][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 332.486501][ C1] Call Trace: [ 332.486509][ C1] [ 332.486522][ C1] arch_stack_walk+0xff/0x150 [ 332.486564][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.486602][ C1] stack_trace_save+0x11a/0x1d0 [ 332.486637][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.486671][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.486699][ C1] ? kernel_text_address+0xa7/0xe0 [ 332.486720][ C1] ? __kernel_text_address+0xd/0x40 [ 332.486749][ C1] kasan_save_track+0x3f/0x80 [ 332.486768][ C1] ? kasan_save_track+0x3f/0x80 [ 332.486784][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 332.486801][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 332.486822][ C1] ? ref_tracker_alloc+0x159/0x4c0 [ 332.486838][ C1] ? dst_init+0xee/0x490 [ 332.486854][ C1] ? dst_alloc+0x14f/0x190 [ 332.486870][ C1] ? icmp6_dst_alloc+0x77/0x420 [ 332.486888][ C1] ? ndisc_send_skb+0x3fd/0x1560 [ 332.486903][ C1] ? addrconf_rs_timer+0x380/0x680 [ 332.486924][ C1] ? call_timer_fn+0x189/0x650 [ 332.486940][ C1] ? __run_timer_base+0x66e/0x8e0 [ 332.486952][ C1] ? run_timer_softirq+0xb7/0x170 [ 332.486966][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 332.486981][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 332.486995][ C1] ? irq_exit_rcu+0x9/0x30 [ 332.487014][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.487151][ C1] __kasan_kmalloc+0x9d/0xb0 [ 332.487179][ C1] __kmalloc_cache_noprof+0x236/0x370 [ 332.487202][ C1] ? ref_tracker_alloc+0x159/0x4c0 [ 332.487236][ C1] ref_tracker_alloc+0x159/0x4c0 [ 332.487266][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 332.487350][ C1] dst_init+0xee/0x490 [ 332.487367][ C1] ? dst_alloc+0x12b/0x190 [ 332.487392][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 332.487414][ C1] dst_alloc+0x14f/0x190 [ 332.487449][ C1] icmp6_dst_alloc+0x77/0x420 [ 332.487471][ C1] ? icmpv6_flow_init+0x63/0x120 [ 332.487503][ C1] ndisc_send_skb+0x3fd/0x1560 [ 332.487536][ C1] ? ndisc_send_skb+0x1ef/0x1560 [ 332.487583][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 332.487600][ C1] ? irqentry_exit+0x63/0x90 [ 332.487617][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.487676][ C1] ? __ndisc_fill_addr_option+0xe8/0x140 [ 332.487707][ C1] ? ndisc_send_rs+0x439/0x5c0 [ 332.487742][ C1] addrconf_rs_timer+0x380/0x680 [ 332.487787][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.487845][ C1] call_timer_fn+0x189/0x650 [ 332.487866][ C1] ? call_timer_fn+0xc2/0x650 [ 332.487882][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.487907][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 332.487936][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.487962][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.487988][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.488020][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.488036][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.488057][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.488088][ C1] __run_timer_base+0x66e/0x8e0 [ 332.488143][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 332.488181][ C1] ? run_timer_softirq+0x22/0x170 [ 332.488223][ C1] run_timer_softirq+0xb7/0x170 [ 332.488245][ C1] handle_softirqs+0x2d6/0x9b0 [ 332.488291][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 332.488321][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 332.488354][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 332.488391][ C1] __irq_exit_rcu+0xfb/0x220 [ 332.488412][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 332.488467][ C1] irq_exit_rcu+0x9/0x30 [ 332.488482][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.488502][ C1] [ 332.488507][ C1] [ 332.488518][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.488535][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 332.488559][ C1] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 332.488573][ C1] RSP: 0018:ffffc900041def78 EFLAGS: 00000293 [ 332.488587][ C1] RAX: ffffffff81f62178 RBX: 0000000000000000 RCX: ffff888025bdda00 [ 332.488598][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.488608][ C1] RBP: ffffc900041df240 R08: ffffffff81f630ab R09: 0000000000000000 [ 332.488618][ C1] R10: ffffc900041df048 R11: fffff5200083be0b R12: dffffc0000000000 [ 332.488630][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900041df040 [ 332.488662][ C1] ? perf_swevent_event+0xcb/0x730 [ 332.488683][ C1] ? perf_tp_event+0x808/0x1660 [ 332.488727][ C1] perf_tp_event+0x808/0x1660 [ 332.488788][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 332.488937][ C1] ? perf_trace_run_bpf_submit+0x100/0x180 [ 332.488983][ C1] perf_trace_run_bpf_submit+0x100/0x180 [ 332.489036][ C1] perf_trace_lock_acquire+0x402/0x520 [ 332.489091][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 332.489115][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 332.489166][ C1] lock_acquire+0x2c6/0x2f0 [ 332.489185][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 332.489217][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 332.489244][ C1] ? task_work_run+0x251/0x310 [ 332.489265][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 332.489286][ C1] unwind_next_frame+0xd5/0x23b0 [ 332.489305][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 332.489343][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 332.489372][ C1] ? task_work_run+0x251/0x310 [ 332.489396][ C1] ? task_work_run+0x251/0x310 [ 332.489426][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.489454][ C1] arch_stack_walk+0x11e/0x150 [ 332.489494][ C1] ? task_work_run+0x251/0x310 [ 332.489536][ C1] stack_trace_save+0x11a/0x1d0 [ 332.489571][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.489609][ C1] ? perf_trace_lock+0x13d/0x4a0 [ 332.489650][ C1] save_stack+0xfc/0x1f0 [ 332.489673][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 332.489697][ C1] ? __pfx_save_stack+0x10/0x10 [ 332.489716][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 332.489730][ C1] ? vfree+0x1c3/0x360 [ 332.489750][ C1] ? kcov_close+0x28/0x50 [ 332.489763][ C1] ? __fput+0x3e9/0x9f0 [ 332.489776][ C1] ? task_work_run+0x251/0x310 [ 332.489833][ C1] ? page_ext_put+0x97/0xc0 [ 332.489873][ C1] __reset_page_owner+0x76/0x1e0 [ 332.489905][ C1] __free_frozen_pages+0xde8/0x10a0 [ 332.489953][ C1] vfree+0x1c3/0x360 [ 332.490005][ C1] kcov_close+0x28/0x50 [ 332.490021][ C1] ? __pfx_kcov_close+0x10/0x10 [ 332.490035][ C1] __fput+0x3e9/0x9f0 [ 332.490087][ C1] task_work_run+0x251/0x310 [ 332.490132][ C1] ? __pfx_task_work_run+0x10/0x10 [ 332.490154][ C1] ? do_exit+0xa0c/0x27f0 [ 332.490185][ C1] ? do_exit+0xa0c/0x27f0 [ 332.490221][ C1] do_exit+0xa11/0x27f0 [ 332.490279][ C1] ? __pfx_do_exit+0x10/0x10 [ 332.490320][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.490379][ C1] do_group_exit+0x207/0x2c0 [ 332.490419][ C1] get_signal+0x1696/0x1730 [ 332.490484][ C1] ? __pfx_get_signal+0x10/0x10 [ 332.490502][ C1] ? perf_trace_run_bpf_submit+0x100/0x180 [ 332.490552][ C1] arch_do_signal_or_restart+0x98/0x840 [ 332.490584][ C1] ? syscall_exit_to_user_mode+0x66/0x340 [ 332.490607][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.490674][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 332.490706][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 332.490738][ C1] do_syscall_64+0x100/0x230 [ 332.490763][ C1] ? clear_bhb_loop+0x45/0xa0 [ 332.490790][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.490806][ C1] RIP: 0033:0x7fae6538e169 [ 332.490825][ C1] Code: Unable to access opcode bytes at 0x7fae6538e13f. [ 332.490833][ C1] RSP: 002b:00007fae661f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.490849][ C1] RAX: 0000000000000000 RBX: 00007fae655b5fa0 RCX: 00007fae6538e169 [ 332.490860][ C1] RDX: 0000200000000140 RSI: 0000000000008b1b RDI: 0000000000000009 [ 332.490871][ C1] RBP: 00007fae65410a68 R08: 0000000000000000 R09: 0000000000000000 [ 332.490881][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.490890][ C1] R13: 0000000000000000 R14: 00007fae655b5fa0 R15: 00007ffc05bac818 [ 332.490948][ C1] [ 332.490965][ C1] Sending NMI from CPU 1 to CPUs 0: [ 333.460464][ C0] NMI backtrace for cpu 0 [ 333.460482][ C0] CPU: 0 UID: 0 PID: 7190 Comm: kworker/u8:66 Not tainted 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 333.460500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.460510][ C0] Workqueue: events_unbound toggle_allocation_gate [ 333.460536][ C0] RIP: 0010:smp_call_function_many_cond+0x1bac/0x2d40 [ 333.460556][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 18 e3 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 c8 de 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 333.460569][ C0] RSP: 0018:ffffc900031ff640 EFLAGS: 00000293 [ 333.460581][ C0] RAX: ffffffff81b7768d RBX: 1ffff110170e7e91 RCX: ffff88806b533c00 [ 333.460592][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 333.460601][ C0] RBP: ffffc900031ff840 R08: ffffffff81b77658 R09: 1ffffffff20bfc2e [ 333.460612][ C0] R10: dffffc0000000000 R11: fffffbfff20bfc2f R12: ffff8880b863ad08 [ 333.460623][ C0] R13: ffff8880b873f488 R14: ffff8880b863ad00 R15: 0000000000000001 [ 333.460633][ C0] FS: 0000000000000000(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000 [ 333.460645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.460655][ C0] CR2: 00007f37fe6b2bd0 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 333.460669][ C0] DR0: 0000000000000082 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.460677][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 333.460687][ C0] Call Trace: [ 333.460693][ C0] [ 333.460701][ C0] ? __text_poke+0xb83/0xe20 [ 333.460724][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 333.460750][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 333.460777][ C0] ? __pfx___text_poke+0x10/0x10 [ 333.460803][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 333.460822][ C0] ? __pfx___might_resched+0x10/0x10 [ 333.460845][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 333.460869][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 333.460890][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 333.460910][ C0] text_poke_bp_batch+0x354/0xb30 [ 333.460933][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.460956][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 333.460972][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 333.460999][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 333.461022][ C0] text_poke_finish+0x30/0x50 [ 333.461041][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 333.461055][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 333.461075][ C0] static_key_disable+0x1a/0x20 [ 333.461090][ C0] toggle_allocation_gate+0x1b1/0x250 [ 333.461109][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 333.461128][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 333.461161][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 333.461177][ C0] process_scheduled_works+0xac3/0x18e0 [ 333.461219][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.461245][ C0] ? assign_work+0x367/0x3d0 [ 333.461266][ C0] worker_thread+0x870/0xd50 [ 333.461297][ C0] ? __kthread_parkme+0x1a8/0x200 [ 333.461318][ C0] ? __pfx_worker_thread+0x10/0x10 [ 333.461335][ C0] kthread+0x7b7/0x940 [ 333.461356][ C0] ? __pfx_worker_thread+0x10/0x10 [ 333.461374][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461391][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461409][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461428][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461446][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.461460][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.461477][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461497][ C0] ret_from_fork+0x4b/0x80 [ 333.461510][ C0] ? __pfx_kthread+0x10/0x10 [ 333.461530][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.461558][ C0] [ 333.462471][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 333.831582][ C1] CPU: 1 UID: 0 PID: 7685 Comm: syz.1.450 Tainted: G L 6.15.0-rc2-syzkaller-g82303a059aab #0 PREEMPT(full) [ 333.844518][ C1] Tainted: [L]=SOFTLOCKUP [ 333.848839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.858906][ C1] Call Trace: [ 333.862193][ C1] [ 333.865044][ C1] dump_stack_lvl+0x241/0x360 [ 333.869739][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.874951][ C1] ? __pfx__printk+0x10/0x10 [ 333.879561][ C1] ? vscnprintf+0x5d/0x90 [ 333.883896][ C1] panic+0x349/0x880 [ 333.887802][ C1] ? watchdog_timer_fn+0x928/0x970 [ 333.892931][ C1] ? __pfx_panic+0x10/0x10 [ 333.897371][ C1] ? irq_work_queue+0xd1/0x150 [ 333.902136][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.908116][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.914104][ C1] watchdog_timer_fn+0x96b/0x970 [ 333.919051][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 333.924606][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 333.930500][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.936836][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 333.942302][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 333.947768][ C1] __hrtimer_run_queues+0x55c/0xd40 [ 333.953010][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 333.958745][ C1] ? read_tsc+0x9/0x20 [ 333.962816][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 333.968897][ C1] hrtimer_interrupt+0x403/0xa40 [ 333.973890][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 333.979881][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 333.985516][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.991498][ C1] RIP: 0010:unwind_get_return_address+0x56/0x90 [ 333.997747][ C1] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 6b 94 bf 00 48 8b 3b e8 53 bb 1e 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 50 94 bf 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 334.017364][ C1] RSP: 0018:ffffc90000a08240 EFLAGS: 00000246 [ 334.023438][ C1] RAX: 0000000000000001 RBX: ffffc90000a082a8 RCX: ffffffff91bfe000 [ 334.031406][ C1] RDX: ffffffff91dba501 RSI: ffffffff8e4fde6a RDI: ffffffff810014ca [ 334.039378][ C1] RBP: ffffc90000a082f0 R08: ffffc900041deeb8 R09: 0000000000000000 [ 334.047350][ C1] R10: ffffc90000a082b0 R11: fffff52000141058 R12: ffff888025bdda00 [ 334.055319][ C1] R13: ffffffff81aee8b0 R14: dffffc0000000000 R15: 1ffff92000141055 [ 334.063299][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.069482][ C1] ? orc_lookup_end+0xc40/0xc40 [ 334.074339][ C1] ? no_hash_pointers_enable+0x71/0xe0 [ 334.079809][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.085977][ C1] arch_stack_walk+0xff/0x150 [ 334.090680][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.096846][ C1] stack_trace_save+0x11a/0x1d0 [ 334.101708][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 334.107089][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.113247][ C1] ? kernel_text_address+0xa7/0xe0 [ 334.118359][ C1] ? __kernel_text_address+0xd/0x40 [ 334.123562][ C1] kasan_save_track+0x3f/0x80 [ 334.128266][ C1] ? kasan_save_track+0x3f/0x80 [ 334.133113][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 334.137874][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 334.143507][ C1] ? ref_tracker_alloc+0x159/0x4c0 [ 334.148615][ C1] ? dst_init+0xee/0x490 [ 334.152854][ C1] ? dst_alloc+0x14f/0x190 [ 334.157268][ C1] ? icmp6_dst_alloc+0x77/0x420 [ 334.162123][ C1] ? ndisc_send_skb+0x3fd/0x1560 [ 334.167067][ C1] ? addrconf_rs_timer+0x380/0x680 [ 334.172194][ C1] ? call_timer_fn+0x189/0x650 [ 334.176960][ C1] ? __run_timer_base+0x66e/0x8e0 [ 334.181998][ C1] ? run_timer_softirq+0xb7/0x170 [ 334.187024][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 334.191959][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 334.196724][ C1] ? irq_exit_rcu+0x9/0x30 [ 334.201140][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.207032][ C1] __kasan_kmalloc+0x9d/0xb0 [ 334.211631][ C1] __kmalloc_cache_noprof+0x236/0x370 [ 334.217007][ C1] ? ref_tracker_alloc+0x159/0x4c0 [ 334.222130][ C1] ref_tracker_alloc+0x159/0x4c0 [ 334.227074][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 334.232588][ C1] dst_init+0xee/0x490 [ 334.236656][ C1] ? dst_alloc+0x12b/0x190 [ 334.241075][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 334.245930][ C1] dst_alloc+0x14f/0x190 [ 334.250184][ C1] icmp6_dst_alloc+0x77/0x420 [ 334.254863][ C1] ? icmpv6_flow_init+0x63/0x120 [ 334.259814][ C1] ndisc_send_skb+0x3fd/0x1560 [ 334.264586][ C1] ? ndisc_send_skb+0x1ef/0x1560 [ 334.269547][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 334.274744][ C1] ? irqentry_exit+0x63/0x90 [ 334.279335][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.284558][ C1] ? __ndisc_fill_addr_option+0xe8/0x140 [ 334.290201][ C1] ? ndisc_send_rs+0x439/0x5c0 [ 334.294981][ C1] addrconf_rs_timer+0x380/0x680 [ 334.299957][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.305446][ C1] call_timer_fn+0x189/0x650 [ 334.310037][ C1] ? call_timer_fn+0xc2/0x650 [ 334.314710][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.320172][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 334.325287][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.330788][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.336251][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.341718][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.346921][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.352140][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 334.357610][ C1] __run_timer_base+0x66e/0x8e0 [ 334.362485][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 334.367880][ C1] ? run_timer_softirq+0x22/0x170 [ 334.372924][ C1] run_timer_softirq+0xb7/0x170 [ 334.377781][ C1] handle_softirqs+0x2d6/0x9b0 [ 334.382564][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 334.387336][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 334.392632][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 334.397842][ C1] __irq_exit_rcu+0xfb/0x220 [ 334.402431][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 334.407650][ C1] irq_exit_rcu+0x9/0x30 [ 334.411885][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.417526][ C1] [ 334.420454][ C1] [ 334.423383][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.429364][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 334.435521][ C1] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 334.455140][ C1] RSP: 0018:ffffc900041def78 EFLAGS: 00000293 [ 334.461250][ C1] RAX: ffffffff81f62178 RBX: 0000000000000000 RCX: ffff888025bdda00 [ 334.469243][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.477229][ C1] RBP: ffffc900041df240 R08: ffffffff81f630ab R09: 0000000000000000 [ 334.485227][ C1] R10: ffffc900041df048 R11: fffff5200083be0b R12: dffffc0000000000 [ 334.493205][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900041df040 [ 334.501189][ C1] ? perf_swevent_event+0xcb/0x730 [ 334.506304][ C1] ? perf_tp_event+0x808/0x1660 [ 334.511171][ C1] perf_tp_event+0x808/0x1660 [ 334.515874][ C1] ? __pfx_perf_tp_event+0x10/0x10 [ 334.521072][ C1] ? perf_trace_run_bpf_submit+0x100/0x180 [ 334.526898][ C1] perf_trace_run_bpf_submit+0x100/0x180 [ 334.532556][ C1] perf_trace_lock_acquire+0x402/0x520 [ 334.538042][ C1] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 334.544024][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 334.549328][ C1] lock_acquire+0x2c6/0x2f0 [ 334.553863][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 334.559012][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 334.564141][ C1] ? task_work_run+0x251/0x310 [ 334.568911][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 334.574030][ C1] unwind_next_frame+0xd5/0x23b0 [ 334.578978][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 334.584107][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 334.589226][ C1] ? task_work_run+0x251/0x310 [ 334.593994][ C1] ? task_work_run+0x251/0x310 [ 334.598771][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.604932][ C1] arch_stack_walk+0x11e/0x150 [ 334.609710][ C1] ? task_work_run+0x251/0x310 [ 334.614501][ C1] stack_trace_save+0x11a/0x1d0 [ 334.619368][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 334.624756][ C1] ? perf_trace_lock+0x13d/0x4a0 [ 334.629708][ C1] save_stack+0xfc/0x1f0 [ 334.633961][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 334.639257][ C1] ? __pfx_save_stack+0x10/0x10 [ 334.644111][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 334.649478][ C1] ? vfree+0x1c3/0x360 [ 334.653553][ C1] ? kcov_close+0x28/0x50 [ 334.657878][ C1] ? __fput+0x3e9/0x9f0 [ 334.662029][ C1] ? task_work_run+0x251/0x310 [ 334.666820][ C1] ? page_ext_put+0x97/0xc0 [ 334.671335][ C1] __reset_page_owner+0x76/0x1e0 [ 334.676370][ C1] __free_frozen_pages+0xde8/0x10a0 [ 334.681620][ C1] vfree+0x1c3/0x360 [ 334.685561][ C1] kcov_close+0x28/0x50 [ 334.689733][ C1] ? __pfx_kcov_close+0x10/0x10 [ 334.694592][ C1] __fput+0x3e9/0x9f0 [ 334.698601][ C1] task_work_run+0x251/0x310 [ 334.703214][ C1] ? __pfx_task_work_run+0x10/0x10 [ 334.708326][ C1] ? do_exit+0xa0c/0x27f0 [ 334.712662][ C1] ? do_exit+0xa0c/0x27f0 [ 334.717002][ C1] do_exit+0xa11/0x27f0 [ 334.721185][ C1] ? __pfx_do_exit+0x10/0x10 [ 334.725875][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.731107][ C1] do_group_exit+0x207/0x2c0 [ 334.735712][ C1] get_signal+0x1696/0x1730 [ 334.740249][ C1] ? __pfx_get_signal+0x10/0x10 [ 334.745098][ C1] ? perf_trace_run_bpf_submit+0x100/0x180 [ 334.750928][ C1] arch_do_signal_or_restart+0x98/0x840 [ 334.756484][ C1] ? syscall_exit_to_user_mode+0x66/0x340 [ 334.762208][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.768434][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 334.774162][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 334.779727][ C1] do_syscall_64+0x100/0x230 [ 334.784330][ C1] ? clear_bhb_loop+0x45/0xa0 [ 334.789018][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.794910][ C1] RIP: 0033:0x7fae6538e169 [ 334.799327][ C1] Code: Unable to access opcode bytes at 0x7fae6538e13f. [ 334.806340][ C1] RSP: 002b:00007fae661f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.814759][ C1] RAX: 0000000000000000 RBX: 00007fae655b5fa0 RCX: 00007fae6538e169 [ 334.822730][ C1] RDX: 0000200000000140 RSI: 0000000000008b1b RDI: 0000000000000009 [ 334.830703][ C1] RBP: 00007fae65410a68 R08: 0000000000000000 R09: 0000000000000000 [ 334.838674][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.846678][ C1] R13: 0000000000000000 R14: 00007fae655b5fa0 R15: 00007ffc05bac818 [ 334.854709][ C1] [ 334.858006][ C1] Kernel Offset: disabled [ 334.862333][ C1] Rebooting in 86400 seconds..