last executing test programs: 4.28091296s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180880ffa10000000000000000000001851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3.888831996s ago: executing program 3 (id=442): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x2}, 0x104941, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) (fail_nth: 9) 3.208709988s ago: executing program 0 (id=445): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x4}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r2}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x4, 0x8, 0x3, 0x1, 0x0, 0x8000, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0xcce, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001}) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x7, 0x10, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1838d, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000162, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) 2.855340725s ago: executing program 3 (id=447): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x200101a2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000003000000090000000000000000040000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100000001006cfe6684ee4970d5ac74d02a6768000021000000000000000000dc6700000000"], 0x50) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x8580, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xf, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0), 0x8) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 2.829309983s ago: executing program 0 (id=449): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000300)=r2, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'bond0\x00'}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7fffffff, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB="00e5ff4effffffffff0000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r10}, &(0x7f0000000900), &(0x7f0000000940)=r9}, 0x20) 2.756024442s ago: executing program 4 (id=450): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x200000000000004, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2, 0x922000000001, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000001dc0)={&(0x7f00000006c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000740)=""/141, 0x8d}], 0x1}, 0x0) syz_clone(0x20500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000058c0)="df6d", 0x2}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000009000000000000000000000000711047000000f100950000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0fa3", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.748815963s ago: executing program 2 (id=451): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x10001, 0x7ffd, 0x27b6, 0x1, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004, 0x0, 0x0, @void, @value=0x8000000, @void, @value}, 0x50) 2.517571413s ago: executing program 1 (id=453): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x1}, 0x1040c6, 0x4, 0x0, 0x9, 0x0, 0xffffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 2.481759959s ago: executing program 2 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10210, 0xfa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000000400000004000000ffffffff00000000", @ANYRESDEC=r1, @ANYBLOB="00000000000000000100"/19, @ANYRES64=r1, @ANYRES32=r1], 0x48) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0}, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000039c0d584e590e3f6b7361b1a20000008983fefff0ffffff180000000f0000000000000000000005a4060002000000de5afeff000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000), 0xff7b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048880) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00002113006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2.4098124s ago: executing program 1 (id=455): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x28, 0x5, 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xee, 0x1, 0xf, 0x0, 0x0, 0x0, 0x1a089, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x201b, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x2) close(r6) socketpair$unix(0x1, 0x3, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed5156", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r0) 2.197701399s ago: executing program 2 (id=456): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000340), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf3, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x356, '\x00', r0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20048005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x122) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bc02, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14105, 0xf6a, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.196070662s ago: executing program 1 (id=457): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x2}, 0x460d, 0x32, 0xfffffbff, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x5, 0x7, 0x3, 0x10, 0x0, 0x7, 0x620c4, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_config_ext={0xf4, 0x1ff}, 0x4000, 0x2, 0x3, 0x2, 0x3c2a, 0x4, 0x9, 0x0, 0x6, 0x0, 0x9}, r2, 0xf, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000c40)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x3d, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x40080c5}, 0x4000) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x9ba68ab93330003d, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x37, 0x2012, 0xffffffffffffffff, @value}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0xf7, 0x9f, 0x1, 0x0, 0x80000001, 0x40000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x800, 0x8000, 0x9, 0x8, 0x9, 0x7, 0x9, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r0, 0x2) 2.062752054s ago: executing program 4 (id=458): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x2000000, 0x34, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x40000) 1.86324527s ago: executing program 3 (id=459): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x39, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180080fe0000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 1.845186188s ago: executing program 4 (id=460): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) 1.844116863s ago: executing program 0 (id=461): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x907b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1161a5, 0x2e, 0x2, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f9, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.664512857s ago: executing program 3 (id=462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x12, &(0x7f0000000300)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000280)=r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_bp={0x0, 0x2}, 0x104941, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x7, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d5c000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000020000000400001102000000ffffffff020000000000001202000000000061"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b56d25a80648c2590f90324fc60", 0x14}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[0x0], &(0x7f0000000800), 0x0, 0x400000e, &(0x7f0000000a40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7788, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x0, 0x1, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x8e, &(0x7f00000006c0)=""/142, 0x41100, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x0, 0x0, &(0x7f0000000a80), 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000008d080000711209000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 1.656390688s ago: executing program 2 (id=463): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b00000500303061302e00"/55], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xee, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x11c51d, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) syz_clone(0x8104000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="d50a000000070000000000000000000018000000000000000000000400001000950000000000000800d40ddbe832a5f265c7e822248c912bc98ce669f0284727bde320ff1b9560bcdd9c44fd4d321cecb73ff8f185fc8f81da8d4de20a1c8b659c00558638b917846564dd837dd7c02c544c5e1acf807027db1e88e83603b6b02b90303e788e684db17d45d3d32e17cb83cc0464f959245f21c784c702dc9341f2bf11872f0133fbe9420debd4d2251934968c9658cef563057cfbc1db594aa220f2e99cee2680141c9ea88281247a328fc8389995faba82984349af0bcf3fe4cdfe94820e15d811b8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.613518523s ago: executing program 1 (id=464): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) (fail_nth: 8) 1.080860279s ago: executing program 0 (id=465): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80", @ANYBLOB="be04d63d"], 0xfe33) 1.074782514s ago: executing program 1 (id=466): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7f, 0x7}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESOCT=r2], 0x2) 1.016823486s ago: executing program 3 (id=467): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x2}, 0x460d, 0x32, 0xfffffbff, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1], 0x50) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x13125, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600149b000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3025310b, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x30000}, {0x20}, {}, {}, {0x6}]}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffefc) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.012860034s ago: executing program 4 (id=468): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0xfffffffffffffe79, 0x56, 0xc0, 0x0, 0x0, 0x0, 0x7fef, 0x100082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) gettid() r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000062000000080000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x2000c001) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=0x1, 0x16, 0x0, 0x40, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1400000016000000", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1cc593d0d2b9a15ee7", @ANYRES64=r4], 0x20) socket$kcm(0x28, 0x5, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 858.578219ms ago: executing program 0 (id=469): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x6}, {0x5, 0x1000}], 0x10, 0x1, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0xa892, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0x6, 0x3, 0x2, 0x0, 0x5, 0x0, 0xb}, 0x0, 0x9, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000080)="b5fb6b998870a172cca313", 0xb}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r2) 857.647132ms ago: executing program 1 (id=470): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x200101a2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000003000000090000000000000000040000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100000001006cfe6684ee4970d5ac74d02a6768000021000000000000000000dc6700000000"], 0x50) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x8580, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xf, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0), 0x8) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 392.018006ms ago: executing program 4 (id=471): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x10001, 0x7ffd, 0x27b6, 0x1, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004, 0x0, 0x0, @void, @value, @void, @value=0x2000000}, 0x50) 302.517358ms ago: executing program 0 (id=472): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0xffffffffffffff64}, 0x200101a2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0), 0x8) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) write$cgroup_devices(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100a7f20c608fa6671000002020207b1af8ff00000000bfa10000000000000745010000f8ffffffb702000008000000b703ea642ad3000085000000b00000009500000000000000e679e4e581c6bf69d96db6d4fb0beb076cc5a3b2a7a114741b3e8b7d83d5c027491328eadc3da0ba7b030c7ca4574741b986ea1aade21d1ca94a99d009ba1308cdf9a8a756ba6a44dee73d45ce3cdc90fa3c72e2705e4b07e6446fd7a9caa1dad178a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 167.163768ms ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @void, @value}, 0x94) 426.967µs ago: executing program 4 (id=474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40503c2b, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 2 (id=475): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 86.576122][ T5825] cgroup: Unknown subsys name 'net' [ 86.770945][ T5825] cgroup: Unknown subsys name 'cpuset' [ 86.780517][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.524584][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.248667][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.258945][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.267011][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.278083][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.287093][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.295354][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.331106][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.342833][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.353376][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.367324][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.487791][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.516978][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.524778][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.534105][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.542915][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.569382][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.579624][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.588937][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.602671][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.607582][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.619700][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.620324][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.635872][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.647638][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.660360][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.105170][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.295699][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.465522][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.639875][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.649802][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.659475][ T5835] bridge_slave_0: entered allmulticast mode [ 92.668190][ T5835] bridge_slave_0: entered promiscuous mode [ 92.684294][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.691571][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.698912][ T5835] bridge_slave_1: entered allmulticast mode [ 92.706417][ T5835] bridge_slave_1: entered promiscuous mode [ 92.754247][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 92.835765][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.845227][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.895040][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.929496][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.937458][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.944657][ T5840] bridge_slave_0: entered allmulticast mode [ 92.953176][ T5840] bridge_slave_0: entered promiscuous mode [ 93.015982][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.023276][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.030942][ T5847] bridge_slave_0: entered allmulticast mode [ 93.039729][ T5847] bridge_slave_0: entered promiscuous mode [ 93.048474][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.055702][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.063415][ T5847] bridge_slave_1: entered allmulticast mode [ 93.071128][ T5847] bridge_slave_1: entered promiscuous mode [ 93.079213][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.086386][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.094057][ T5840] bridge_slave_1: entered allmulticast mode [ 93.101556][ T5840] bridge_slave_1: entered promiscuous mode [ 93.187424][ T5835] team0: Port device team_slave_0 added [ 93.234610][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.245877][ T5835] team0: Port device team_slave_1 added [ 93.275855][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.289440][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.301145][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.343556][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.350945][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.358634][ T5848] bridge_slave_0: entered allmulticast mode [ 93.365873][ T5848] bridge_slave_0: entered promiscuous mode [ 93.374329][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.381616][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.388156][ T5838] Bluetooth: hci0: command tx timeout [ 93.390176][ T5848] bridge_slave_1: entered allmulticast mode [ 93.401709][ T5848] bridge_slave_1: entered promiscuous mode [ 93.467000][ T5838] Bluetooth: hci1: command tx timeout [ 93.502285][ T5840] team0: Port device team_slave_0 added [ 93.512048][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.519203][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.546303][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.589163][ T5847] team0: Port device team_slave_0 added [ 93.597353][ T5840] team0: Port device team_slave_1 added [ 93.605970][ T5847] team0: Port device team_slave_1 added [ 93.613025][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.620162][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.632032][ T5838] Bluetooth: hci2: command tx timeout [ 93.646493][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.656871][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.671173][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.678639][ T5845] bridge_slave_0: entered allmulticast mode [ 93.685993][ T5845] bridge_slave_0: entered promiscuous mode [ 93.696239][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.706631][ T51] Bluetooth: hci3: command tx timeout [ 93.712460][ T5838] Bluetooth: hci4: command tx timeout [ 93.758071][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.765082][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.791779][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.804366][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.815847][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.823634][ T5845] bridge_slave_1: entered allmulticast mode [ 93.834693][ T5845] bridge_slave_1: entered promiscuous mode [ 93.843720][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.871030][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.878217][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.904408][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.916740][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.923734][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.949808][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.001511][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.009033][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.040645][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.128153][ T5835] hsr_slave_0: entered promiscuous mode [ 94.134742][ T5835] hsr_slave_1: entered promiscuous mode [ 94.148108][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.161133][ T5848] team0: Port device team_slave_0 added [ 94.187878][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.202815][ T5848] team0: Port device team_slave_1 added [ 94.271097][ T5840] hsr_slave_0: entered promiscuous mode [ 94.277811][ T5840] hsr_slave_1: entered promiscuous mode [ 94.283930][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.292080][ T5840] Cannot create hsr debugfs directory [ 94.390339][ T5845] team0: Port device team_slave_0 added [ 94.397984][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.404974][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.430967][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.447713][ T5847] hsr_slave_0: entered promiscuous mode [ 94.454187][ T5847] hsr_slave_1: entered promiscuous mode [ 94.461312][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.469971][ T5847] Cannot create hsr debugfs directory [ 94.486030][ T5845] team0: Port device team_slave_1 added [ 94.492815][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.500703][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.527149][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.599555][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.607860][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.634542][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.691422][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.699118][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.726682][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.869059][ T5848] hsr_slave_0: entered promiscuous mode [ 94.875749][ T5848] hsr_slave_1: entered promiscuous mode [ 94.882277][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.890228][ T5848] Cannot create hsr debugfs directory [ 94.997163][ T5845] hsr_slave_0: entered promiscuous mode [ 95.003599][ T5845] hsr_slave_1: entered promiscuous mode [ 95.010491][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.018291][ T5845] Cannot create hsr debugfs directory [ 95.394383][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.440061][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.451923][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.464506][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.477300][ T5838] Bluetooth: hci0: command tx timeout [ 95.546393][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.553763][ T5838] Bluetooth: hci1: command tx timeout [ 95.568847][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.604489][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.626023][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.688618][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.707192][ T5838] Bluetooth: hci2: command tx timeout [ 95.710436][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.746079][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.781734][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.797363][ T5838] Bluetooth: hci4: command tx timeout [ 95.802840][ T51] Bluetooth: hci3: command tx timeout [ 95.853802][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.865071][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.889274][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.900580][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.941947][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.019928][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.039445][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.054864][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.073138][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.080493][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.108749][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.132368][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.151411][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.158617][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.223866][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.328425][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.400493][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.407832][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.421531][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.428860][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.494311][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.534673][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.631510][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.663757][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.691934][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.699171][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.733181][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.740481][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.762719][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.770407][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.813733][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.820968][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.871288][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.922888][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.011446][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.072326][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.079612][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.125146][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.132400][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.155789][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.224481][ T5835] veth0_vlan: entered promiscuous mode [ 97.238118][ T24] cfg80211: failed to load regulatory.db [ 97.310419][ T5835] veth1_vlan: entered promiscuous mode [ 97.434092][ T5847] veth0_vlan: entered promiscuous mode [ 97.485087][ T5847] veth1_vlan: entered promiscuous mode [ 97.534170][ T5835] veth0_macvtap: entered promiscuous mode [ 97.547017][ T51] Bluetooth: hci0: command tx timeout [ 97.593437][ T5835] veth1_macvtap: entered promiscuous mode [ 97.633986][ T51] Bluetooth: hci1: command tx timeout [ 97.649906][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.663246][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.674938][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.683990][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.692922][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.701825][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.719857][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.775190][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.788357][ T51] Bluetooth: hci2: command tx timeout [ 97.806031][ T5847] veth0_macvtap: entered promiscuous mode [ 97.867165][ T51] Bluetooth: hci3: command tx timeout [ 97.872641][ T51] Bluetooth: hci4: command tx timeout [ 97.891144][ T5847] veth1_macvtap: entered promiscuous mode [ 97.980466][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.993636][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.004852][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.013917][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.022767][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.032182][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.076037][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.081363][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.091831][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.125831][ T5848] veth0_vlan: entered promiscuous mode [ 98.163322][ T5840] veth0_vlan: entered promiscuous mode [ 98.218916][ T5848] veth1_vlan: entered promiscuous mode [ 98.247850][ T5840] veth1_vlan: entered promiscuous mode [ 98.253811][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.292588][ T5840] veth0_macvtap: entered promiscuous mode [ 98.298670][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.363555][ T5840] veth1_macvtap: entered promiscuous mode [ 98.392179][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.423886][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.480760][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.505287][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.514041][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.552073][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.583069][ T5848] veth0_macvtap: entered promiscuous mode [ 98.615249][ T5848] veth1_macvtap: entered promiscuous mode [ 98.665184][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.709035][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.720573][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.729952][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744373][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.804744][ C1] hrtimer: interrupt took 27055 ns [ 99.168414][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.187075][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.322021][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.334321][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.347443][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.357756][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.435678][ T5845] veth0_vlan: entered promiscuous mode [ 99.536285][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 99.640093][ T5845] veth1_vlan: entered promiscuous mode [ 99.643049][ T51] Bluetooth: hci0: command tx timeout [ 99.658709][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.687842][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.707336][ T51] Bluetooth: hci1: command tx timeout [ 99.808552][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.816441][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.818105][ T5937] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 99.833898][ T5937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9'. [ 99.865620][ T5937] dummy0: entered promiscuous mode [ 99.876345][ T51] Bluetooth: hci2: command tx timeout [ 99.885860][ T5937] bridge0: port 3(dummy0) entered blocking state [ 99.892638][ T5937] bridge0: port 3(dummy0) entered disabled state [ 99.899433][ T5937] dummy0: entered allmulticast mode [ 99.907898][ T5937] bridge0: port 3(dummy0) entered blocking state [ 99.914664][ T5937] bridge0: port 3(dummy0) entered forwarding state [ 99.946889][ T5838] Bluetooth: hci3: command tx timeout [ 99.952413][ T51] Bluetooth: hci4: command tx timeout [ 99.966965][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.977620][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.985491][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.041275][ T5845] veth0_macvtap: entered promiscuous mode [ 100.064261][ T5943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 100.103099][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 100.161616][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.216643][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.232368][ T5845] veth1_macvtap: entered promiscuous mode [ 100.385984][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 100.399748][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.603033][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.723262][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.744107][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.764116][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.785560][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.973609][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.403556][ T5965] batadv0: entered promiscuous mode [ 101.441381][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.694208][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 102.151121][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.190825][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.284004][ T51] Bluetooth: hci4: Malformed HCI Event [ 102.393995][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.425244][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.876154][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.307857][ T5998] bridge_slave_1: left allmulticast mode [ 103.313600][ T5998] bridge_slave_1: left promiscuous mode [ 103.327010][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.395218][ T5998] bridge_slave_0: left allmulticast mode [ 103.401486][ T5998] bridge_slave_0: left promiscuous mode [ 103.416289][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.490287][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 104.242779][ T6009] syz.1.27 (6009) used greatest stack depth: 16832 bytes left [ 104.865897][ T6038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.35'. [ 104.969549][ T6038] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35'. [ 105.039225][ T6038] bridge0: port 3(dummy0) entered disabled state [ 105.154216][ T6038] dummy0 (unregistering): left allmulticast mode [ 105.176530][ T6038] bridge0: port 3(dummy0) entered disabled state [ 105.230318][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 106.063647][ T6064] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.42'. [ 106.213256][ T6067] netlink: 'syz.1.44': attribute type 2 has an invalid length. [ 106.277713][ T6067] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 106.314121][ T6067] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.44'. [ 106.377755][ T6067] block nbd5: not configured, cannot reconfigure [ 106.523682][ T6071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'. [ 106.601007][ T6071] netlink: 14 bytes leftover after parsing attributes in process `syz.2.46'. [ 106.644076][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.491935][ T6084] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 107.521000][ T6084] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.50'. [ 107.569154][ T6085] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.51'. [ 107.652568][ T6086] netlink: zone id is out of range [ 107.659013][ T6086] netlink: get zone limit has 8 unknown bytes [ 108.032530][ T6093] batadv0: entered promiscuous mode [ 108.311204][ T6097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.759954][ T6103] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 108.792947][ T6101] netlink: 'syz.0.56': attribute type 6 has an invalid length. [ 108.843289][ T6106] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 109.154612][ T6116] batadv0: entered promiscuous mode [ 109.331042][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.516760][ T6120] warning: `syz.1.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.472678][ T6121] Illegal XDP return value 3062028106 on prog (id 35) dev N/A, expect packet loss! [ 110.710880][ T6128] netlink: 'syz.3.63': attribute type 2 has an invalid length. [ 110.759308][ T6128] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 110.820241][ T6128] __nla_validate_parse: 5 callbacks suppressed [ 110.820263][ T6128] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.63'. [ 110.946890][ T6128] block nbd5: not configured, cannot reconfigure [ 111.754953][ T51] Bluetooth: hci2: Malformed HCI Event [ 111.918820][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 112.234354][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 112.737113][ T6163] netlink: 14 bytes leftover after parsing attributes in process `syz.3.75'. [ 112.788403][ T6163] hsr_slave_0: left promiscuous mode [ 112.846901][ T6163] hsr_slave_1: left promiscuous mode [ 113.102525][ T6168] netlink: 'syz.4.76': attribute type 11 has an invalid length. [ 113.137094][ T6168] netlink: 'syz.4.76': attribute type 15 has an invalid length. [ 113.357191][ T6172] netlink: 735 bytes leftover after parsing attributes in process `syz.1.77'. [ 113.520798][ T6173] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.78'. [ 113.596223][ T6171] delete_channel: no stack [ 113.627347][ T6171] delete_channel: no stack [ 113.749759][ T6179] Zero length message leads to an empty skb [ 113.816181][ T6184] netlink: 'syz.1.82': attribute type 11 has an invalid length. [ 113.847375][ T6184] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.82'. [ 115.088693][ T6206] netlink: 14 bytes leftover after parsing attributes in process `syz.3.90'. [ 115.567455][ T6180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.408653][ T6227] netlink: 'syz.4.98': attribute type 21 has an invalid length. [ 116.820616][ T6238] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.101'. [ 117.668527][ T6247] netlink: 'syz.3.100': attribute type 2 has an invalid length. [ 117.794677][ T6247] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 117.817050][ T6247] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.100'. [ 117.904483][ T6247] block nbd5: not configured, cannot reconfigure [ 118.380735][ T6254] FAULT_INJECTION: forcing a failure. [ 118.380735][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.425432][ T6259] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 118.433692][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.4.108 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 118.433714][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.433730][ T6254] Call Trace: [ 118.433737][ T6254] [ 118.433745][ T6254] dump_stack_lvl+0x189/0x250 [ 118.433784][ T6254] ? __pfx____ratelimit+0x10/0x10 [ 118.433807][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.433833][ T6254] ? __pfx__printk+0x10/0x10 [ 118.433852][ T6254] ? __might_fault+0xb0/0x130 [ 118.433880][ T6254] should_fail_ex+0x414/0x560 [ 118.433907][ T6254] _copy_from_user+0x2d/0xb0 [ 118.433925][ T6254] __sys_bpf+0x1ed/0x860 [ 118.433951][ T6254] ? __pfx___sys_bpf+0x10/0x10 [ 118.433987][ T6254] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 118.434010][ T6254] ? __pfx_ksys_write+0x10/0x10 [ 118.434024][ T6254] ? rcu_is_watching+0x15/0xb0 [ 118.434046][ T6254] __x64_sys_bpf+0x7c/0x90 [ 118.434067][ T6254] do_syscall_64+0xfa/0x3b0 [ 118.434088][ T6254] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.434109][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.434125][ T6254] ? clear_bhb_loop+0x60/0xb0 [ 118.434145][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.434162][ T6254] RIP: 0033:0x7f3df9d8e929 [ 118.434184][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.434198][ T6254] RSP: 002b:00007f3dfabd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.434217][ T6254] RAX: ffffffffffffffda RBX: 00007f3df9fb5fa0 RCX: 00007f3df9d8e929 [ 118.434230][ T6254] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 118.434241][ T6254] RBP: 00007f3dfabd7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.434251][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.434260][ T6254] R13: 0000000000000000 R14: 00007f3df9fb5fa0 R15: 00007ffff53e62e8 [ 118.434289][ T6254] [ 118.783932][ T6259] hsr0: entered promiscuous mode [ 119.063548][ T6270] netlink: 'syz.1.112': attribute type 6 has an invalid length. [ 119.093061][ T6270] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.112'. [ 120.208489][ T6298] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 120.801957][ T6298] macvlan0: entered promiscuous mode [ 120.849165][ T6298] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 121.136427][ T51] Bluetooth: hci3: Malformed HCI Event [ 121.461398][ T6331] FAULT_INJECTION: forcing a failure. [ 121.461398][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.527062][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.2.131 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 121.527092][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.527108][ T6331] Call Trace: [ 121.527116][ T6331] [ 121.527126][ T6331] dump_stack_lvl+0x189/0x250 [ 121.527172][ T6331] ? __pfx____ratelimit+0x10/0x10 [ 121.527200][ T6331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.527230][ T6331] ? __pfx__printk+0x10/0x10 [ 121.527268][ T6331] should_fail_ex+0x414/0x560 [ 121.527301][ T6331] strncpy_from_user+0x36/0x290 [ 121.527330][ T6331] do_tcp_setsockopt+0x157/0x1f10 [ 121.527359][ T6331] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 121.527395][ T6331] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.527423][ T6331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.527453][ T6331] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.527488][ T6331] ? tcp_setsockopt+0x3d/0xe0 [ 121.527506][ T6331] ? mptcp_setsockopt+0x2b3f/0x3460 [ 121.527530][ T6331] mptcp_setsockopt+0x2b5d/0x3460 [ 121.527550][ T6331] ? vfs_write+0x8d8/0xa90 [ 121.527574][ T6331] ? aa_sk_perm+0x81e/0x950 [ 121.527598][ T6331] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 121.527622][ T6331] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.527643][ T6331] ? __lock_acquire+0xab9/0xd20 [ 121.527678][ T6331] ? aa_sock_opt_perm+0x74/0x110 [ 121.527706][ T6331] ? sock_common_setsockopt+0x36/0xc0 [ 121.527735][ T6331] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.527767][ T6331] do_sock_setsockopt+0x257/0x3e0 [ 121.527796][ T6331] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 121.527822][ T6331] ? __fget_files+0x2a/0x420 [ 121.527854][ T6331] __x64_sys_setsockopt+0x18b/0x220 [ 121.527882][ T6331] do_syscall_64+0xfa/0x3b0 [ 121.527908][ T6331] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.527938][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.527958][ T6331] ? clear_bhb_loop+0x60/0xb0 [ 121.527983][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.528006][ T6331] RIP: 0033:0x7fe19018e929 [ 121.528028][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.528044][ T6331] RSP: 002b:00007fe18dfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.528077][ T6331] RAX: ffffffffffffffda RBX: 00007fe1903b6080 RCX: 00007fe19018e929 [ 121.528091][ T6331] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000005 [ 121.528102][ T6331] RBP: 00007fe18dfd5090 R08: 0000000000000004 R09: 0000000000000000 [ 121.528114][ T6331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.528125][ T6331] R13: 0000000000000001 R14: 00007fe1903b6080 R15: 00007fff07cf9818 [ 121.528156][ T6331] [ 121.868777][ T6337] FAULT_INJECTION: forcing a failure. [ 121.868777][ T6337] name failslab, interval 1, probability 0, space 0, times 1 [ 121.901562][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.2.136 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 121.901602][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.901614][ T6337] Call Trace: [ 121.901622][ T6337] [ 121.901632][ T6337] dump_stack_lvl+0x189/0x250 [ 121.901670][ T6337] ? __pfx____ratelimit+0x10/0x10 [ 121.901698][ T6337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.901731][ T6337] ? __pfx__printk+0x10/0x10 [ 121.901750][ T6337] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.901794][ T6337] ? sctp_get_port_local+0xe4c/0x1610 [ 121.901823][ T6337] should_fail_ex+0x414/0x560 [ 121.901857][ T6337] should_failslab+0xa8/0x100 [ 121.901883][ T6337] __kmalloc_cache_noprof+0x70/0x3d0 [ 121.901904][ T6337] ? sctp_add_bind_addr+0x8c/0x370 [ 121.901940][ T6337] sctp_add_bind_addr+0x8c/0x370 [ 121.901967][ T6337] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 121.901995][ T6337] sctp_do_bind+0x5ab/0x940 [ 121.902033][ T6337] sctp_connect_new_asoc+0x25c/0x690 [ 121.902060][ T6337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 121.902079][ T6337] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.902119][ T6337] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 121.902148][ T6337] ? security_sctp_bind_connect+0x7e/0x2e0 [ 121.902194][ T6337] sctp_sendmsg+0x155c/0x2810 [ 121.902232][ T6337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 121.902251][ T6337] ? is_bpf_text_address+0x26/0x2b0 [ 121.902275][ T6337] ? aa_sk_perm+0x81e/0x950 [ 121.902307][ T6337] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.902335][ T6337] ? sock_rps_record_flow+0x19/0x410 [ 121.902369][ T6337] ? inet_sendmsg+0x2f4/0x370 [ 121.902403][ T6337] __sock_sendmsg+0x19c/0x270 [ 121.902436][ T6337] ____sys_sendmsg+0x505/0x830 [ 121.902467][ T6337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.902507][ T6337] ? import_iovec+0x74/0xa0 [ 121.902534][ T6337] ___sys_sendmsg+0x21f/0x2a0 [ 121.902560][ T6337] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.902621][ T6337] ? __fget_files+0x2a/0x420 [ 121.902662][ T6337] ? __fget_files+0x2a/0x420 [ 121.902684][ T6337] ? __fget_files+0x3a0/0x420 [ 121.902721][ T6337] __x64_sys_sendmsg+0x19b/0x260 [ 121.902747][ T6337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.902766][ T6337] ? perf_trace_preemptirq_template+0xa3/0x340 [ 121.902806][ T6337] ? __pfx_ksys_write+0x10/0x10 [ 121.902823][ T6337] ? rcu_is_watching+0x15/0xb0 [ 121.902849][ T6337] ? do_syscall_64+0xbe/0x3b0 [ 121.902883][ T6337] do_syscall_64+0xfa/0x3b0 [ 121.902908][ T6337] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.902934][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.902955][ T6337] ? clear_bhb_loop+0x60/0xb0 [ 121.902980][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.903000][ T6337] RIP: 0033:0x7fe19018e929 [ 121.903019][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.903036][ T6337] RSP: 002b:00007fe18dff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.903056][ T6337] RAX: ffffffffffffffda RBX: 00007fe1903b5fa0 RCX: 00007fe19018e929 [ 121.903071][ T6337] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 121.903083][ T6337] RBP: 00007fe18dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.903094][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.903105][ T6337] R13: 0000000000000000 R14: 00007fe1903b5fa0 R15: 00007fff07cf9818 [ 121.903141][ T6337] [ 122.927448][ T51] Bluetooth: hci1: Malformed HCI Event [ 124.307572][ T6403] veth0_vlan: entered allmulticast mode [ 124.707206][ T6416] netlink: 'syz.1.167': attribute type 11 has an invalid length. [ 124.824731][ T6420] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.168'. [ 125.448785][ T6431] FAULT_INJECTION: forcing a failure. [ 125.448785][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.514790][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.1.170 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 125.514819][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.514832][ T6431] Call Trace: [ 125.514841][ T6431] [ 125.514850][ T6431] dump_stack_lvl+0x189/0x250 [ 125.514889][ T6431] ? __pfx____ratelimit+0x10/0x10 [ 125.514916][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.514958][ T6431] ? __pfx__printk+0x10/0x10 [ 125.514986][ T6431] ? __might_fault+0xb0/0x130 [ 125.515016][ T6431] should_fail_ex+0x414/0x560 [ 125.515052][ T6431] _copy_to_user+0x31/0xb0 [ 125.515077][ T6431] simple_read_from_buffer+0xe1/0x170 [ 125.515107][ T6431] proc_fail_nth_read+0x1df/0x250 [ 125.515139][ T6431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.515170][ T6431] ? rw_verify_area+0x258/0x650 [ 125.515201][ T6431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.515230][ T6431] vfs_read+0x200/0x980 [ 125.515258][ T6431] ? __pfx___mutex_lock+0x10/0x10 [ 125.515289][ T6431] ? __pfx_vfs_read+0x10/0x10 [ 125.515312][ T6431] ? __fget_files+0x2a/0x420 [ 125.515342][ T6431] ? __fget_files+0x3a0/0x420 [ 125.515365][ T6431] ? __fget_files+0x2a/0x420 [ 125.515401][ T6431] ksys_read+0x145/0x250 [ 125.515419][ T6431] ? __fget_files+0x2a/0x420 [ 125.515446][ T6431] ? __pfx_ksys_read+0x10/0x10 [ 125.515473][ T6431] ? do_syscall_64+0xbe/0x3b0 [ 125.515508][ T6431] do_syscall_64+0xfa/0x3b0 [ 125.515535][ T6431] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.515561][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.515582][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 125.515609][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.515628][ T6431] RIP: 0033:0x7fe5b9d8d33c [ 125.515647][ T6431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.515665][ T6431] RSP: 002b:00007fe5b7bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.515687][ T6431] RAX: ffffffffffffffda RBX: 00007fe5b9fb6080 RCX: 00007fe5b9d8d33c [ 125.515702][ T6431] RDX: 000000000000000f RSI: 00007fe5b7bf60a0 RDI: 0000000000000005 [ 125.515714][ T6431] RBP: 00007fe5b7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.515726][ T6431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.515742][ T6431] R13: 0000000000000000 R14: 00007fe5b9fb6080 R15: 00007ffe6eb0efb8 [ 125.515798][ T6431] [ 127.013672][ T6447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.176'. [ 127.621307][ T6454] netlink: 'syz.3.180': attribute type 11 has an invalid length. [ 127.643565][ T6454] netlink: 'syz.3.180': attribute type 15 has an invalid length. [ 127.913439][ T6461] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 127.913439][ T6463] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 128.158460][ T6472] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 128.166747][ T6467] can: request_module (can-proto-5) failed. [ 128.617996][ T6486] netlink: 'syz.3.188': attribute type 21 has an invalid length. [ 128.854551][ T6487] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.189'. [ 128.870335][ T6487] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.189'. [ 128.888358][ T6502] FAULT_INJECTION: forcing a failure. [ 128.888358][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 128.910415][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.0.191 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 128.910445][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.910457][ T6502] Call Trace: [ 128.910466][ T6502] [ 128.910476][ T6502] dump_stack_lvl+0x189/0x250 [ 128.910514][ T6502] ? __pfx____ratelimit+0x10/0x10 [ 128.910543][ T6502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.910583][ T6502] ? __pfx__printk+0x10/0x10 [ 128.910613][ T6502] ? __pfx___might_resched+0x10/0x10 [ 128.910639][ T6502] should_fail_ex+0x414/0x560 [ 128.910674][ T6502] should_failslab+0xa8/0x100 [ 128.910699][ T6502] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 128.910722][ T6502] ? __get_vm_area_node+0x13f/0x300 [ 128.910742][ T6502] ? __pfx_perf_trace_lock+0x10/0x10 [ 128.910766][ T6502] __get_vm_area_node+0x13f/0x300 [ 128.910795][ T6502] __vmalloc_node_range_noprof+0x301/0x12f0 [ 128.910820][ T6502] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 128.910874][ T6502] ? perf_trace_lock+0xec/0x3b0 [ 128.910904][ T6502] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.910926][ T6502] ? __might_fault+0xb0/0x130 [ 128.910945][ T6502] ? __pfx_aa_get_newest_label+0x10/0x10 [ 128.910972][ T6502] ? _parse_integer_limit+0x1ae/0x1f0 [ 128.911009][ T6502] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 128.911036][ T6502] __vmalloc_noprof+0xb1/0xf0 [ 128.911059][ T6502] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 128.911091][ T6502] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 128.911129][ T6502] bpf_prog_alloc+0x3c/0x1a0 [ 128.911163][ T6502] bpf_prog_load+0x735/0x1930 [ 128.911209][ T6502] ? __pfx_bpf_prog_load+0x10/0x10 [ 128.911237][ T6502] ? __pfx_perf_trace_lock+0x10/0x10 [ 128.911280][ T6502] ? bpf_lsm_bpf+0x9/0x20 [ 128.911297][ T6502] ? security_bpf+0x7e/0x300 [ 128.911322][ T6502] __sys_bpf+0x5f1/0x860 [ 128.911354][ T6502] ? __pfx___sys_bpf+0x10/0x10 [ 128.911404][ T6502] ? ksys_write+0x22a/0x250 [ 128.911427][ T6502] ? __pfx_ksys_write+0x10/0x10 [ 128.911443][ T6502] ? rcu_is_watching+0x15/0xb0 [ 128.911473][ T6502] __x64_sys_bpf+0x7c/0x90 [ 128.911497][ T6502] do_syscall_64+0xfa/0x3b0 [ 128.911520][ T6502] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.911542][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.911565][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 128.911588][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.911604][ T6502] RIP: 0033:0x7fa2d498e929 [ 128.911620][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.911640][ T6502] RSP: 002b:00007fa2d58aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.911657][ T6502] RAX: ffffffffffffffda RBX: 00007fa2d4bb6080 RCX: 00007fa2d498e929 [ 128.911669][ T6502] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 128.911679][ T6502] RBP: 00007fa2d58aa090 R08: 0000000000000000 R09: 0000000000000000 [ 128.911690][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.911700][ T6502] R13: 0000000000000000 R14: 00007fa2d4bb6080 R15: 00007ffc91a83818 [ 128.911737][ T6502] [ 128.911925][ T6502] syz.0.191: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 129.150262][ T6504] netlink: 'syz.4.194': attribute type 10 has an invalid length. [ 129.204494][ T6502] ,cpuset=/,mems_allowed=0-1 [ 129.272979][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.0.191 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 129.273007][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.273019][ T6502] Call Trace: [ 129.273027][ T6502] [ 129.273036][ T6502] dump_stack_lvl+0x189/0x250 [ 129.273074][ T6502] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 129.273103][ T6502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.273134][ T6502] ? __pfx__printk+0x10/0x10 [ 129.273156][ T6502] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.273178][ T6502] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.273208][ T6502] warn_alloc+0x214/0x310 [ 129.273238][ T6502] ? __pfx_warn_alloc+0x10/0x10 [ 129.273263][ T6502] ? __get_vm_area_node+0x13f/0x300 [ 129.273288][ T6502] ? __get_vm_area_node+0x2b5/0x300 [ 129.273312][ T6502] __vmalloc_node_range_noprof+0x326/0x12f0 [ 129.273358][ T6502] ? perf_trace_lock+0xec/0x3b0 [ 129.273385][ T6502] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.273406][ T6502] ? __might_fault+0xb0/0x130 [ 129.273426][ T6502] ? __pfx_aa_get_newest_label+0x10/0x10 [ 129.273451][ T6502] ? _parse_integer_limit+0x1ae/0x1f0 [ 129.273485][ T6502] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 129.273513][ T6502] __vmalloc_noprof+0xb1/0xf0 [ 129.273544][ T6502] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 129.273571][ T6502] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 129.273605][ T6502] bpf_prog_alloc+0x3c/0x1a0 [ 129.273631][ T6502] bpf_prog_load+0x735/0x1930 [ 129.273664][ T6502] ? __pfx_bpf_prog_load+0x10/0x10 [ 129.273687][ T6502] ? __pfx_perf_trace_lock+0x10/0x10 [ 129.273718][ T6502] ? bpf_lsm_bpf+0x9/0x20 [ 129.273731][ T6502] ? security_bpf+0x7e/0x300 [ 129.273753][ T6502] __sys_bpf+0x5f1/0x860 [ 129.273779][ T6502] ? __pfx___sys_bpf+0x10/0x10 [ 129.273812][ T6502] ? ksys_write+0x22a/0x250 [ 129.273830][ T6502] ? __pfx_ksys_write+0x10/0x10 [ 129.273843][ T6502] ? rcu_is_watching+0x15/0xb0 [ 129.273864][ T6502] __x64_sys_bpf+0x7c/0x90 [ 129.273885][ T6502] do_syscall_64+0xfa/0x3b0 [ 129.273907][ T6502] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.273928][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.273944][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 129.273963][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.273978][ T6502] RIP: 0033:0x7fa2d498e929 [ 129.273993][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.274006][ T6502] RSP: 002b:00007fa2d58aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.274024][ T6502] RAX: ffffffffffffffda RBX: 00007fa2d4bb6080 RCX: 00007fa2d498e929 [ 129.274035][ T6502] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 129.274045][ T6502] RBP: 00007fa2d58aa090 R08: 0000000000000000 R09: 0000000000000000 [ 129.274055][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.274064][ T6502] R13: 0000000000000000 R14: 00007fa2d4bb6080 R15: 00007ffc91a83818 [ 129.274092][ T6502] [ 129.274148][ T6504] hsr0: entered promiscuous mode [ 129.274224][ T6502] Mem-Info: [ 129.429311][ T6508] netlink: 'syz.3.193': attribute type 30 has an invalid length. [ 129.470695][ T6502] active_anon:5206 inactive_anon:0 isolated_anon:0 [ 129.470695][ T6502] active_file:11616 inactive_file:39840 isolated_file:0 [ 129.470695][ T6502] unevictable:768 dirty:196 writeback:0 [ 129.470695][ T6502] slab_reclaimable:10012 slab_unreclaimable:97753 [ 129.470695][ T6502] mapped:30420 shmem:1361 pagetables:1111 [ 129.470695][ T6502] sec_pagetables:0 bounce:0 [ 129.470695][ T6502] kernel_misc_reclaimable:0 [ 129.470695][ T6502] free:1326299 free_pcp:14658 free_cma:0 [ 129.470758][ T6502] Node 0 active_anon:20824kB inactive_anon:0kB active_file:46464kB inactive_file:159160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121680kB dirty:784kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10920kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.470811][ T6502] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.470861][ T6502] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.470921][ T6502] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 129.470977][ T6502] Node 0 DMA32 free:1383548kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20776kB inactive_anon:0kB active_file:46464kB inactive_file:157320kB unevictable:1536kB writepending:784kB present:3129332kB managed:2561084kB mlocked:0kB bounce:0kB free_pcp:40832kB local_pcp:19700kB free_cma:0kB [ 129.471037][ T6502] lowmem_reserve[]: 0 0 1 1 1 [ 129.471083][ T6502] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 129.471139][ T6502] lowmem_reserve[]: 0 0 0 0 0 [ 129.471186][ T6502] Node 1 Normal free:3906284kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:9312kB free_cma:0kB [ 129.471245][ T6502] lowmem_reserve[]: 0 0 0 0 0 [ 129.471291][ T6502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.880249][ T6502] Node 0 DMA32: 1372*4kB (UME) 1144*8kB (UME) 499*16kB (UME) 553*32kB (UME) 269*64kB (UME) 47*128kB (UM) 18*256kB (UME) 7*512kB (UME) 7*1024kB (UM) 5*2048kB (UME) 316*4096kB (UM) = 1383488kB [ 129.903426][ T6502] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 129.933719][ T6502] Node 1 Normal: 179*4kB (UE) 54*8kB (UME) 39*16kB (UME) 88*32kB (UME) 24*64kB (UME) 6*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3906284kB [ 129.986636][ T6502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.036527][ T6502] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.046442][ T6502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.056223][ T6502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.119794][ T6502] 52813 total pagecache pages [ 130.124563][ T6502] 0 pages in swap cache [ 130.167966][ T6502] Free swap = 124996kB [ 130.172214][ T6502] Total swap = 124996kB [ 130.176422][ T6502] 2097051 pages RAM [ 130.188054][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 130.221716][ T6502] 0 pages HighMem/MovableOnly [ 130.239569][ T6502] 424674 pages reserved [ 130.249903][ T6502] 0 pages cma reserved [ 130.295314][ T6524] netlink: 196 bytes leftover after parsing attributes in process `syz.2.201'. [ 130.517109][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 131.335873][ T6547] netlink: 'syz.0.210': attribute type 30 has an invalid length. [ 131.594633][ T6557] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.215'. [ 131.842245][ T6561] FAULT_INJECTION: forcing a failure. [ 131.842245][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 131.866103][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.0.216 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 131.866134][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.866146][ T6561] Call Trace: [ 131.866154][ T6561] [ 131.866163][ T6561] dump_stack_lvl+0x189/0x250 [ 131.866202][ T6561] ? __pfx____ratelimit+0x10/0x10 [ 131.866231][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.866263][ T6561] ? __pfx__printk+0x10/0x10 [ 131.866294][ T6561] ? __pfx___might_resched+0x10/0x10 [ 131.866331][ T6561] should_fail_ex+0x414/0x560 [ 131.866365][ T6561] should_failslab+0xa8/0x100 [ 131.866392][ T6561] __kmalloc_cache_noprof+0x70/0x3d0 [ 131.866413][ T6561] ? sctp_association_new+0x89/0x25f0 [ 131.866435][ T6561] ? __asan_memcpy+0x40/0x70 [ 131.866471][ T6561] sctp_association_new+0x89/0x25f0 [ 131.866493][ T6561] ? sctp_do_bind+0x65a/0x940 [ 131.866522][ T6561] ? __ipv6_addr_type+0x10c/0x2f0 [ 131.866556][ T6561] sctp_connect_new_asoc+0x2c5/0x690 [ 131.866582][ T6561] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.866603][ T6561] ? __local_bh_enable_ip+0x12d/0x1c0 [ 131.866645][ T6561] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 131.866675][ T6561] ? security_sctp_bind_connect+0x7e/0x2e0 [ 131.866703][ T6561] sctp_sendmsg+0x155c/0x2810 [ 131.866742][ T6561] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.866761][ T6561] ? is_bpf_text_address+0x26/0x2b0 [ 131.866786][ T6561] ? aa_sk_perm+0x81e/0x950 [ 131.866818][ T6561] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.866848][ T6561] ? sock_rps_record_flow+0x19/0x410 [ 131.866882][ T6561] ? inet_sendmsg+0x2f4/0x370 [ 131.866916][ T6561] __sock_sendmsg+0x19c/0x270 [ 131.866951][ T6561] ____sys_sendmsg+0x505/0x830 [ 131.866982][ T6561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.867017][ T6561] ? import_iovec+0x74/0xa0 [ 131.867045][ T6561] ___sys_sendmsg+0x21f/0x2a0 [ 131.867071][ T6561] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.867123][ T6561] ? __fget_files+0x2a/0x420 [ 131.867165][ T6561] ? __fget_files+0x2a/0x420 [ 131.867188][ T6561] ? __fget_files+0x3a0/0x420 [ 131.867226][ T6561] __x64_sys_sendmsg+0x19b/0x260 [ 131.867253][ T6561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.867274][ T6561] ? perf_trace_preemptirq_template+0xa3/0x340 [ 131.867405][ T6561] ? __pfx_ksys_write+0x10/0x10 [ 131.867433][ T6561] ? rcu_is_watching+0x15/0xb0 [ 131.867459][ T6561] ? do_syscall_64+0xbe/0x3b0 [ 131.867495][ T6561] do_syscall_64+0xfa/0x3b0 [ 131.867523][ T6561] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.867550][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.867571][ T6561] ? clear_bhb_loop+0x60/0xb0 [ 131.867597][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.867618][ T6561] RIP: 0033:0x7fa2d498e929 [ 131.867638][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.867655][ T6561] RSP: 002b:00007fa2d58cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.867677][ T6561] RAX: ffffffffffffffda RBX: 00007fa2d4bb5fa0 RCX: 00007fa2d498e929 [ 131.867691][ T6561] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 131.867704][ T6561] RBP: 00007fa2d58cb090 R08: 0000000000000000 R09: 0000000000000000 [ 131.867716][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.867728][ T6561] R13: 0000000000000000 R14: 00007fa2d4bb5fa0 R15: 00007ffc91a83818 [ 131.867764][ T6561] [ 132.473551][ T6567] FAULT_INJECTION: forcing a failure. [ 132.473551][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 132.492625][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.3.213 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 132.492658][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.492671][ T6567] Call Trace: [ 132.492680][ T6567] [ 132.492689][ T6567] dump_stack_lvl+0x189/0x250 [ 132.492729][ T6567] ? __pfx____ratelimit+0x10/0x10 [ 132.492758][ T6567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.492792][ T6567] ? __pfx__printk+0x10/0x10 [ 132.492825][ T6567] ? __pfx___might_resched+0x10/0x10 [ 132.492857][ T6567] should_fail_ex+0x414/0x560 [ 132.492894][ T6567] should_failslab+0xa8/0x100 [ 132.492921][ T6567] __kmalloc_cache_noprof+0x70/0x3d0 [ 132.492943][ T6567] ? __request_module+0x2b5/0x5e0 [ 132.492981][ T6567] __request_module+0x2b5/0x5e0 [ 132.493021][ T6567] ? __pfx___request_module+0x10/0x10 [ 132.493077][ T6567] ? tcp_ca_find_autoload+0x110/0x240 [ 132.493112][ T6567] ? tcp_ca_find_autoload+0x110/0x240 [ 132.493141][ T6567] tcp_ca_find_autoload+0x138/0x240 [ 132.493169][ T6567] ? tcp_set_congestion_control+0x72/0xb70 [ 132.493199][ T6567] tcp_set_congestion_control+0x122/0xb70 [ 132.493227][ T6567] ? tcp_set_congestion_control+0x72/0xb70 [ 132.493268][ T6567] do_tcp_setsockopt+0x247/0x1f10 [ 132.493296][ T6567] ? __pfx_perf_trace_lock+0x10/0x10 [ 132.493317][ T6567] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 132.493345][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.493374][ T6567] ? __local_bh_enable_ip+0x12d/0x1c0 [ 132.493407][ T6567] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 132.493447][ T6567] ? tcp_setsockopt+0x3d/0xe0 [ 132.493465][ T6567] ? mptcp_setsockopt+0x2b3f/0x3460 [ 132.493492][ T6567] mptcp_setsockopt+0x2b5d/0x3460 [ 132.493513][ T6567] ? vfs_write+0x8d8/0xa90 [ 132.493541][ T6567] ? aa_sk_perm+0x81e/0x950 [ 132.493572][ T6567] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 132.493591][ T6567] ? perf_trace_lock+0xec/0x3b0 [ 132.493614][ T6567] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.493640][ T6567] ? __pfx_perf_trace_lock+0x10/0x10 [ 132.493666][ T6567] ? aa_sock_opt_perm+0x74/0x110 [ 132.493694][ T6567] ? sock_common_setsockopt+0x36/0xc0 [ 132.493726][ T6567] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.493760][ T6567] do_sock_setsockopt+0x257/0x3e0 [ 132.493787][ T6567] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.493818][ T6567] ? __fget_files+0x2a/0x420 [ 132.493856][ T6567] __x64_sys_setsockopt+0x18b/0x220 [ 132.493890][ T6567] do_syscall_64+0xfa/0x3b0 [ 132.493917][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.493943][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.493964][ T6567] ? clear_bhb_loop+0x60/0xb0 [ 132.493992][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.494012][ T6567] RIP: 0033:0x7fb0b898e929 [ 132.494032][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.494048][ T6567] RSP: 002b:00007fb0b67d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.494069][ T6567] RAX: ffffffffffffffda RBX: 00007fb0b8bb6080 RCX: 00007fb0b898e929 [ 132.494084][ T6567] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000005 [ 132.494095][ T6567] RBP: 00007fb0b67d5090 R08: 0000000000000004 R09: 0000000000000000 [ 132.494108][ T6567] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.494120][ T6567] R13: 0000000000000001 R14: 00007fb0b8bb6080 R15: 00007fff98879158 [ 132.494161][ T6567] [ 133.646111][ T6593] netlink: 'syz.4.226': attribute type 30 has an invalid length. [ 134.689676][ T6617] FAULT_INJECTION: forcing a failure. [ 134.689676][ T6617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.740658][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.1.234 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 134.740687][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.740699][ T6617] Call Trace: [ 134.740707][ T6617] [ 134.740716][ T6617] dump_stack_lvl+0x189/0x250 [ 134.740751][ T6617] ? __pfx____ratelimit+0x10/0x10 [ 134.740777][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.740807][ T6617] ? __pfx__printk+0x10/0x10 [ 134.740829][ T6617] ? __might_fault+0xb0/0x130 [ 134.740862][ T6617] should_fail_ex+0x414/0x560 [ 134.740895][ T6617] _copy_from_user+0x2d/0xb0 [ 134.740917][ T6617] ___sys_sendmsg+0x158/0x2a0 [ 134.740944][ T6617] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.741006][ T6617] ? __fget_files+0x2a/0x420 [ 134.741028][ T6617] ? __fget_files+0x3a0/0x420 [ 134.741063][ T6617] __x64_sys_sendmsg+0x19b/0x260 [ 134.741088][ T6617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.741121][ T6617] ? __pfx_ksys_write+0x10/0x10 [ 134.741138][ T6617] ? rcu_is_watching+0x15/0xb0 [ 134.741163][ T6617] ? do_syscall_64+0xbe/0x3b0 [ 134.741195][ T6617] do_syscall_64+0xfa/0x3b0 [ 134.741220][ T6617] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.741245][ T6617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.741265][ T6617] ? clear_bhb_loop+0x60/0xb0 [ 134.741289][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.741317][ T6617] RIP: 0033:0x7fe5b9d8e929 [ 134.741335][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.741351][ T6617] RSP: 002b:00007fe5bab28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.741372][ T6617] RAX: ffffffffffffffda RBX: 00007fe5b9fb5fa0 RCX: 00007fe5b9d8e929 [ 134.741387][ T6617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 134.741399][ T6617] RBP: 00007fe5bab28090 R08: 0000000000000000 R09: 0000000000000000 [ 134.741410][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.741421][ T6617] R13: 0000000000000000 R14: 00007fe5b9fb5fa0 R15: 00007ffe6eb0efb8 [ 134.741453][ T6617] [ 135.159762][ T6627] netlink: 'syz.1.239': attribute type 25 has an invalid length. [ 135.229319][ T6635] netlink: 'syz.0.240': attribute type 11 has an invalid length. [ 135.246948][ T6627] netlink: 'syz.1.239': attribute type 7 has an invalid length. [ 135.330099][ T6627] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 135.353269][ T6627] netlink: 176 bytes leftover after parsing attributes in process `syz.1.239'. [ 135.442245][ T6645] FAULT_INJECTION: forcing a failure. [ 135.442245][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 135.478986][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.0.244 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 135.479015][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.479027][ T6645] Call Trace: [ 135.479036][ T6645] [ 135.479044][ T6645] dump_stack_lvl+0x189/0x250 [ 135.479080][ T6645] ? __pfx____ratelimit+0x10/0x10 [ 135.479107][ T6645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.479139][ T6645] ? __pfx__printk+0x10/0x10 [ 135.479176][ T6645] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.479206][ T6645] should_fail_ex+0x414/0x560 [ 135.479240][ T6645] should_failslab+0xa8/0x100 [ 135.479264][ T6645] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 135.479286][ T6645] ? __alloc_skb+0x112/0x2d0 [ 135.479311][ T6645] __alloc_skb+0x112/0x2d0 [ 135.479335][ T6645] __ipv6_ifa_notify+0x1e8/0xac0 [ 135.479369][ T6645] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 135.479391][ T6645] ? __pfx_work_grab_pending+0x10/0x10 [ 135.479413][ T6645] ? __lock_acquire+0xab9/0xd20 [ 135.479447][ T6645] ? __cancel_work+0x1e6/0x2e0 [ 135.479468][ T6645] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.479495][ T6645] ? __cancel_work+0x254/0x2e0 [ 135.479520][ T6645] ? __pfx___cancel_work+0x10/0x10 [ 135.479542][ T6645] ? ipv6_del_addr+0x60c/0x8f0 [ 135.479569][ T6645] ipv6_del_addr+0x6b1/0x8f0 [ 135.479597][ T6645] inet6_addr_del+0x473/0x600 [ 135.479641][ T6645] addrconf_del_ifaddr+0x113/0x160 [ 135.479671][ T6645] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 135.479716][ T6645] inet6_ioctl+0x10f/0x280 [ 135.479745][ T6645] ? __pfx_inet6_ioctl+0x10/0x10 [ 135.479780][ T6645] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 135.479806][ T6645] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 135.479830][ T6645] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 135.479854][ T6645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 135.479891][ T6645] sock_do_ioctl+0xdc/0x300 [ 135.479921][ T6645] ? __pfx_sock_do_ioctl+0x10/0x10 [ 135.479945][ T6645] ? __lock_acquire+0xab9/0xd20 [ 135.479992][ T6645] sock_ioctl+0x576/0x790 [ 135.480021][ T6645] ? __pfx_sock_ioctl+0x10/0x10 [ 135.480047][ T6645] ? __fget_files+0x2a/0x420 [ 135.480070][ T6645] ? __fget_files+0x3a0/0x420 [ 135.480091][ T6645] ? __fget_files+0x2a/0x420 [ 135.480119][ T6645] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.480149][ T6645] ? __pfx_sock_ioctl+0x10/0x10 [ 135.480182][ T6645] __se_sys_ioctl+0xfc/0x170 [ 135.480216][ T6645] do_syscall_64+0xfa/0x3b0 [ 135.480242][ T6645] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.480267][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.480287][ T6645] ? clear_bhb_loop+0x60/0xb0 [ 135.480312][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.480331][ T6645] RIP: 0033:0x7fa2d498e929 [ 135.480349][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.480365][ T6645] RSP: 002b:00007fa2d58cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.480386][ T6645] RAX: ffffffffffffffda RBX: 00007fa2d4bb5fa0 RCX: 00007fa2d498e929 [ 135.480400][ T6645] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 135.480412][ T6645] RBP: 00007fa2d58cb090 R08: 0000000000000000 R09: 0000000000000000 [ 135.480424][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.480435][ T6645] R13: 0000000000000000 R14: 00007fa2d4bb5fa0 R15: 00007ffc91a83818 [ 135.480469][ T6645] [ 136.040652][ T6655] syz.0.247 uses obsolete (PF_INET,SOCK_PACKET) [ 137.023953][ T6681] netlink: 'syz.0.256': attribute type 21 has an invalid length. [ 137.606900][ T6695] netlink: 'syz.1.260': attribute type 30 has an invalid length. [ 137.758393][ T6696] netlink: 5 bytes leftover after parsing attributes in process `syz.3.261'. [ 137.777795][ T6696] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 137.822775][ T6696] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 137.863049][ T6696] netlink: 130248 bytes leftover after parsing attributes in process `syz.3.261'. [ 137.982521][ T6701] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.262'. [ 138.195336][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.208191][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.521905][ T6721] netlink: 'syz.4.270': attribute type 30 has an invalid length. [ 138.945236][ T6723] netlink: 'syz.3.272': attribute type 6 has an invalid length. [ 139.017118][ T6723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.272'. [ 139.995475][ T6742] netlink: 'syz.0.278': attribute type 33 has an invalid length. [ 140.527992][ T6762] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 140.690454][ T6762] team0: Port device geneve1 added [ 140.772962][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 141.979232][ T6787] netlink: 'syz.1.294': attribute type 11 has an invalid length. [ 142.178488][ T6790] netlink: 'syz.2.296': attribute type 6 has an invalid length. [ 142.186424][ T6790] netlink: 168 bytes leftover after parsing attributes in process `syz.2.296'. [ 142.512239][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.296'. [ 142.557294][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.296'. [ 142.602754][ T6808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.296'. [ 142.959069][ T6824] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 143.016823][ T6824] hsr0: entered promiscuous mode [ 143.044702][ T6830] netlink: 'syz.4.312': attribute type 10 has an invalid length. [ 143.268294][ T6833] netlink: 'syz.3.313': attribute type 11 has an invalid length. [ 143.276118][ T6833] netlink: 'syz.3.313': attribute type 15 has an invalid length. [ 143.512850][ T6838] netlink: 'syz.0.316': attribute type 16 has an invalid length. [ 143.565669][ T6841] netlink: 'syz.4.317': attribute type 21 has an invalid length. [ 143.574417][ T6838] netlink: 168 bytes leftover after parsing attributes in process `syz.0.316'. [ 143.671486][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.756882][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.846731][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.891930][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.457937][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 145.649715][ T51] Bluetooth: hci2: Malformed HCI Event [ 146.400373][ T6946] sit0: entered allmulticast mode [ 146.584511][ T6957] FAULT_INJECTION: forcing a failure. [ 146.584511][ T6957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.615165][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.3.362 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 146.615195][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.615207][ T6957] Call Trace: [ 146.615214][ T6957] [ 146.615222][ T6957] dump_stack_lvl+0x189/0x250 [ 146.615259][ T6957] ? __pfx____ratelimit+0x10/0x10 [ 146.615286][ T6957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.615318][ T6957] ? __pfx__printk+0x10/0x10 [ 146.615340][ T6957] ? __might_fault+0xb0/0x130 [ 146.615373][ T6957] should_fail_ex+0x414/0x560 [ 146.615413][ T6957] _copy_from_iter+0x1db/0x16f0 [ 146.615449][ T6957] ? policy_nodemask+0x27c/0x720 [ 146.615478][ T6957] ? __pfx__copy_from_iter+0x10/0x10 [ 146.615519][ T6957] ? __sk_mem_schedule+0x7f/0xf0 [ 146.615542][ T6957] ? skb_page_frag_refill+0x199/0x320 [ 146.615572][ T6957] mptcp_sendmsg+0xd6e/0x1970 [ 146.615636][ T6957] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 146.615664][ T6957] ? sock_rps_record_flow+0x19/0x410 [ 146.615694][ T6957] ? inet_sendmsg+0x2f4/0x370 [ 146.615719][ T6957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.615750][ T6957] __sock_sendmsg+0x19c/0x270 [ 146.615780][ T6957] ____sys_sendmsg+0x505/0x830 [ 146.615808][ T6957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.615841][ T6957] ? import_iovec+0x74/0xa0 [ 146.615866][ T6957] ___sys_sendmsg+0x21f/0x2a0 [ 146.615891][ T6957] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.615954][ T6957] ? __fget_files+0x2a/0x420 [ 146.615973][ T6957] ? __fget_files+0x3a0/0x420 [ 146.616001][ T6957] __x64_sys_sendmsg+0x19b/0x260 [ 146.616021][ T6957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.616048][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 146.616061][ T6957] ? rcu_is_watching+0x15/0xb0 [ 146.616081][ T6957] ? do_syscall_64+0xbe/0x3b0 [ 146.616116][ T6957] do_syscall_64+0xfa/0x3b0 [ 146.616137][ T6957] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.616158][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.616174][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 146.616194][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.616209][ T6957] RIP: 0033:0x7fb0b898e929 [ 146.616225][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.616238][ T6957] RSP: 002b:00007fb0b67f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.616255][ T6957] RAX: ffffffffffffffda RBX: 00007fb0b8bb5fa0 RCX: 00007fb0b898e929 [ 146.616267][ T6957] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 146.616277][ T6957] RBP: 00007fb0b67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.616287][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.616296][ T6957] R13: 0000000000000000 R14: 00007fb0b8bb5fa0 R15: 00007fff98879158 [ 146.616326][ T6957] [ 147.082306][ T6965] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 147.504453][ T6971] netlink: 'syz.2.367': attribute type 29 has an invalid length. [ 147.781062][ T6982] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.372'. [ 147.915095][ T6992] FAULT_INJECTION: forcing a failure. [ 147.915095][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 147.969685][ T6992] CPU: 0 UID: 0 PID: 6992 Comm: syz.3.376 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 147.969715][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.969735][ T6992] Call Trace: [ 147.969744][ T6992] [ 147.969753][ T6992] dump_stack_lvl+0x189/0x250 [ 147.969791][ T6992] ? __pfx____ratelimit+0x10/0x10 [ 147.969819][ T6992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.969851][ T6992] ? __pfx__printk+0x10/0x10 [ 147.969874][ T6992] ? __pfx_fib6_clean_node+0x10/0x10 [ 147.969900][ T6992] ? do_raw_spin_unlock+0x122/0x240 [ 147.969933][ T6992] should_fail_ex+0x414/0x560 [ 147.969967][ T6992] should_failslab+0xa8/0x100 [ 147.969992][ T6992] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.970013][ T6992] ? nf_nat_masq_schedule+0x239/0x550 [ 147.970050][ T6992] nf_nat_masq_schedule+0x239/0x550 [ 147.970086][ T6992] ? __pfx_inet_cmp+0x10/0x10 [ 147.970115][ T6992] ? __pfx_nf_nat_masq_schedule+0x10/0x10 [ 147.970149][ T6992] ? masq_inet6_event+0xf3/0x1b0 [ 147.970185][ T6992] masq_inet6_event+0x14b/0x1b0 [ 147.970216][ T6992] ? __pfx_masq_inet6_event+0x10/0x10 [ 147.970244][ T6992] ? addr_event+0x83/0x470 [ 147.970279][ T6992] notifier_call_chain+0x1b3/0x3e0 [ 147.970304][ T6992] ? atomic_notifier_call_chain+0x26/0x180 [ 147.970327][ T6992] atomic_notifier_call_chain+0xda/0x180 [ 147.970350][ T6992] ipv6_del_addr+0x6be/0x8f0 [ 147.970380][ T6992] inet6_addr_del+0x473/0x600 [ 147.970425][ T6992] addrconf_del_ifaddr+0x113/0x160 [ 147.970456][ T6992] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 147.970503][ T6992] inet6_ioctl+0x10f/0x280 [ 147.970532][ T6992] ? __pfx_inet6_ioctl+0x10/0x10 [ 147.970562][ T6992] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 147.970588][ T6992] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 147.970612][ T6992] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 147.970638][ T6992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.970677][ T6992] sock_do_ioctl+0xdc/0x300 [ 147.970707][ T6992] ? __pfx_sock_do_ioctl+0x10/0x10 [ 147.970737][ T6992] ? __lock_acquire+0xab9/0xd20 [ 147.970784][ T6992] sock_ioctl+0x576/0x790 [ 147.970813][ T6992] ? __pfx_sock_ioctl+0x10/0x10 [ 147.970841][ T6992] ? __fget_files+0x2a/0x420 [ 147.970863][ T6992] ? __fget_files+0x3a0/0x420 [ 147.970886][ T6992] ? __fget_files+0x2a/0x420 [ 147.970914][ T6992] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.970945][ T6992] ? __pfx_sock_ioctl+0x10/0x10 [ 147.970971][ T6992] __se_sys_ioctl+0xfc/0x170 [ 147.971012][ T6992] do_syscall_64+0xfa/0x3b0 [ 147.971039][ T6992] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.971065][ T6992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.971086][ T6992] ? clear_bhb_loop+0x60/0xb0 [ 147.971115][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.971135][ T6992] RIP: 0033:0x7fb0b898e929 [ 147.971157][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.971175][ T6992] RSP: 002b:00007fb0b67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.971196][ T6992] RAX: ffffffffffffffda RBX: 00007fb0b8bb5fa0 RCX: 00007fb0b898e929 [ 147.971211][ T6992] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 147.971223][ T6992] RBP: 00007fb0b67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.971236][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.971247][ T6992] R13: 0000000000000000 R14: 00007fb0b8bb5fa0 R15: 00007fff98879158 [ 147.971280][ T6992] [ 148.719375][ T7003] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 148.812812][ T7005] netlink: 'syz.4.381': attribute type 11 has an invalid length. [ 148.824595][ T7005] netlink: 'syz.4.381': attribute type 15 has an invalid length. [ 149.111983][ T7015] netlink: 'syz.4.386': attribute type 39 has an invalid length. [ 149.196927][ T7019] netlink: 'syz.4.386': attribute type 3 has an invalid length. [ 149.204849][ T7019] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 149.213338][ T7019] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.282899][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 149.463512][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 149.896389][ T7043] tap0: tun_chr_ioctl cmd 1074812118 [ 149.917956][ T51] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 150.422733][ T7057] netlink: 'syz.1.399': attribute type 21 has an invalid length. [ 150.602107][ T7057] netlink: 168 bytes leftover after parsing attributes in process `syz.1.399'. [ 151.094154][ T51] Bluetooth: hci0: Malformed HCI Event [ 151.443856][ T7074] FAULT_INJECTION: forcing a failure. [ 151.443856][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 151.493317][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.2.406 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 151.493348][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.493360][ T7074] Call Trace: [ 151.493369][ T7074] [ 151.493377][ T7074] dump_stack_lvl+0x189/0x250 [ 151.493410][ T7074] ? __pfx____ratelimit+0x10/0x10 [ 151.493434][ T7074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.493466][ T7074] ? __pfx__printk+0x10/0x10 [ 151.493487][ T7074] ? crng_make_state+0x3fc/0x700 [ 151.493516][ T7074] ? crng_make_state+0x13a/0x700 [ 151.493549][ T7074] should_fail_ex+0x414/0x560 [ 151.493581][ T7074] should_failslab+0xa8/0x100 [ 151.493606][ T7074] __kmalloc_cache_noprof+0x70/0x3d0 [ 151.493667][ T7074] ? sctp_add_bind_addr+0x8c/0x370 [ 151.493703][ T7074] sctp_add_bind_addr+0x8c/0x370 [ 151.493738][ T7074] sctp_copy_local_addr_list+0x30b/0x4e0 [ 151.493773][ T7074] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 151.493803][ T7074] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 151.493836][ T7074] ? sctp_v6_is_any+0x64/0x80 [ 151.493857][ T7074] ? sctp_copy_one_addr+0x93/0x360 [ 151.493890][ T7074] sctp_bind_addr_copy+0xb3/0x3c0 [ 151.493922][ T7074] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 151.493953][ T7074] sctp_connect_new_asoc+0x2e0/0x690 [ 151.493980][ T7074] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 151.494000][ T7074] ? __local_bh_enable_ip+0x12d/0x1c0 [ 151.494040][ T7074] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 151.494070][ T7074] ? security_sctp_bind_connect+0x7e/0x2e0 [ 151.494103][ T7074] sctp_sendmsg+0x155c/0x2810 [ 151.494139][ T7074] ? __pfx_sctp_sendmsg+0x10/0x10 [ 151.494164][ T7074] ? aa_sk_perm+0x81e/0x950 [ 151.494196][ T7074] ? __pfx_aa_sk_perm+0x10/0x10 [ 151.494224][ T7074] ? sock_rps_record_flow+0x19/0x410 [ 151.494258][ T7074] ? inet_sendmsg+0x2f4/0x370 [ 151.494291][ T7074] __sock_sendmsg+0x19c/0x270 [ 151.494325][ T7074] ____sys_sendmsg+0x505/0x830 [ 151.494355][ T7074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.494388][ T7074] ? import_iovec+0x74/0xa0 [ 151.494414][ T7074] ___sys_sendmsg+0x21f/0x2a0 [ 151.494438][ T7074] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.494501][ T7074] ? __fget_files+0x2a/0x420 [ 151.494523][ T7074] ? __fget_files+0x3a0/0x420 [ 151.494560][ T7074] __x64_sys_sendmsg+0x19b/0x260 [ 151.494587][ T7074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.494607][ T7074] ? perf_trace_preemptirq_template+0xa3/0x340 [ 151.494655][ T7074] ? __pfx_ksys_write+0x10/0x10 [ 151.494672][ T7074] ? rcu_is_watching+0x15/0xb0 [ 151.494698][ T7074] ? do_syscall_64+0xbe/0x3b0 [ 151.494731][ T7074] do_syscall_64+0xfa/0x3b0 [ 151.494757][ T7074] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.494788][ T7074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.494810][ T7074] ? clear_bhb_loop+0x60/0xb0 [ 151.494835][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.494855][ T7074] RIP: 0033:0x7fe19018e929 [ 151.494874][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.494891][ T7074] RSP: 002b:00007fe18dfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.494912][ T7074] RAX: ffffffffffffffda RBX: 00007fe1903b6080 RCX: 00007fe19018e929 [ 151.494926][ T7074] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 151.494938][ T7074] RBP: 00007fe18dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.494951][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.494962][ T7074] R13: 0000000000000000 R14: 00007fe1903b6080 R15: 00007fff07cf9818 [ 151.494996][ T7074] [ 152.914786][ T51] Bluetooth: hci4: Malformed HCI Event [ 153.030765][ T7103] FAULT_INJECTION: forcing a failure. [ 153.030765][ T7103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.064741][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.0.416 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 153.064771][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.064782][ T7103] Call Trace: [ 153.064790][ T7103] [ 153.064799][ T7103] dump_stack_lvl+0x189/0x250 [ 153.064837][ T7103] ? __pfx____ratelimit+0x10/0x10 [ 153.064864][ T7103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.064895][ T7103] ? __pfx__printk+0x10/0x10 [ 153.064928][ T7103] should_fail_ex+0x414/0x560 [ 153.064958][ T7103] _copy_to_user+0x31/0xb0 [ 153.064982][ T7103] simple_read_from_buffer+0xe1/0x170 [ 153.065008][ T7103] proc_fail_nth_read+0x1df/0x250 [ 153.065035][ T7103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.065061][ T7103] ? rw_verify_area+0x258/0x650 [ 153.065091][ T7103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.065115][ T7103] vfs_read+0x200/0x980 [ 153.065138][ T7103] ? __pfx___mutex_lock+0x10/0x10 [ 153.065166][ T7103] ? __pfx_vfs_read+0x10/0x10 [ 153.065185][ T7103] ? __fget_files+0x2a/0x420 [ 153.065211][ T7103] ? __fget_files+0x3a0/0x420 [ 153.065232][ T7103] ? __fget_files+0x2a/0x420 [ 153.065263][ T7103] ksys_read+0x145/0x250 [ 153.065285][ T7103] ? __pfx_ksys_read+0x10/0x10 [ 153.065315][ T7103] do_syscall_64+0xfa/0x3b0 [ 153.065344][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.065364][ T7103] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.065384][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 153.065407][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.065425][ T7103] RIP: 0033:0x7fa2d498d33c [ 153.065442][ T7103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.065458][ T7103] RSP: 002b:00007fa2d58cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.065477][ T7103] RAX: ffffffffffffffda RBX: 00007fa2d4bb5fa0 RCX: 00007fa2d498d33c [ 153.065491][ T7103] RDX: 000000000000000f RSI: 00007fa2d58cb0a0 RDI: 0000000000000006 [ 153.065513][ T7103] RBP: 00007fa2d58cb090 R08: 0000000000000000 R09: 0000000000000000 [ 153.065525][ T7103] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.065537][ T7103] R13: 0000000000000000 R14: 00007fa2d4bb5fa0 R15: 00007ffc91a83818 [ 153.065569][ T7103] [ 153.310806][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 153.624904][ T7116] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 153.919745][ T7119] netlink: 'syz.4.422': attribute type 11 has an invalid length. [ 154.012147][ T7119] netlink: 'syz.4.422': attribute type 15 has an invalid length. [ 154.982083][ T7134] netlink: 'syz.3.426': attribute type 11 has an invalid length. [ 155.091142][ T7134] netlink: 'syz.3.426': attribute type 15 has an invalid length. [ 155.126774][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.246583][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.318878][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.333619][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.919096][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 156.236643][ T51] Bluetooth: hci0: SCO packet too small [ 157.536150][ T7157] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.436'. [ 157.764199][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 157.848093][ T7163] netlink: 'syz.4.438': attribute type 30 has an invalid length. [ 158.110658][ T7167] netlink: 'syz.0.441': attribute type 21 has an invalid length. [ 158.170453][ T7167] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.441'. [ 158.258914][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 158.444368][ T7178] FAULT_INJECTION: forcing a failure. [ 158.444368][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 158.482979][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.3.442 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 158.483008][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.483020][ T7178] Call Trace: [ 158.483028][ T7178] [ 158.483038][ T7178] dump_stack_lvl+0x189/0x250 [ 158.483076][ T7178] ? __pfx____ratelimit+0x10/0x10 [ 158.483105][ T7178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.483136][ T7178] ? __pfx__printk+0x10/0x10 [ 158.483175][ T7178] should_fail_ex+0x414/0x560 [ 158.483210][ T7178] should_failslab+0xa8/0x100 [ 158.483235][ T7178] __kmalloc_cache_noprof+0x70/0x3d0 [ 158.483257][ T7178] ? sctp_add_bind_addr+0x8c/0x370 [ 158.483293][ T7178] sctp_add_bind_addr+0x8c/0x370 [ 158.483328][ T7178] sctp_copy_local_addr_list+0x30b/0x4e0 [ 158.483363][ T7178] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 158.483393][ T7178] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 158.483425][ T7178] ? sctp_v6_is_any+0x64/0x80 [ 158.483445][ T7178] ? sctp_copy_one_addr+0x93/0x360 [ 158.483480][ T7178] sctp_bind_addr_copy+0xb3/0x3c0 [ 158.483510][ T7178] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 158.483541][ T7178] sctp_connect_new_asoc+0x2e0/0x690 [ 158.483568][ T7178] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 158.483589][ T7178] ? __local_bh_enable_ip+0x12d/0x1c0 [ 158.483629][ T7178] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 158.483658][ T7178] ? security_sctp_bind_connect+0x7e/0x2e0 [ 158.483685][ T7178] sctp_sendmsg+0x155c/0x2810 [ 158.483720][ T7178] ? __pfx_sctp_sendmsg+0x10/0x10 [ 158.483747][ T7178] ? aa_sk_perm+0x81e/0x950 [ 158.483779][ T7178] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.483807][ T7178] ? sock_rps_record_flow+0x19/0x410 [ 158.483841][ T7178] ? inet_sendmsg+0x2f4/0x370 [ 158.483889][ T7178] __sock_sendmsg+0x19c/0x270 [ 158.483922][ T7178] ____sys_sendmsg+0x505/0x830 [ 158.483952][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.483992][ T7178] ? import_iovec+0x74/0xa0 [ 158.484019][ T7178] ___sys_sendmsg+0x21f/0x2a0 [ 158.484044][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.484109][ T7178] ? __fget_files+0x2a/0x420 [ 158.484133][ T7178] ? __fget_files+0x3a0/0x420 [ 158.484169][ T7178] __x64_sys_sendmsg+0x19b/0x260 [ 158.484195][ T7178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.484215][ T7178] ? perf_trace_preemptirq_template+0xa3/0x340 [ 158.484254][ T7178] ? __pfx_ksys_write+0x10/0x10 [ 158.484272][ T7178] ? rcu_is_watching+0x15/0xb0 [ 158.484298][ T7178] ? do_syscall_64+0xbe/0x3b0 [ 158.484330][ T7178] do_syscall_64+0xfa/0x3b0 [ 158.484356][ T7178] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.484392][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.484413][ T7178] ? clear_bhb_loop+0x60/0xb0 [ 158.484438][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.484458][ T7178] RIP: 0033:0x7fb0b898e929 [ 158.484477][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.484493][ T7178] RSP: 002b:00007fb0b67d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.484515][ T7178] RAX: ffffffffffffffda RBX: 00007fb0b8bb6080 RCX: 00007fb0b898e929 [ 158.484529][ T7178] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 158.484542][ T7178] RBP: 00007fb0b67d5090 R08: 0000000000000000 R09: 0000000000000000 [ 158.484555][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.484566][ T7178] R13: 0000000000000000 R14: 00007fb0b8bb6080 R15: 00007fff98879158 [ 158.484599][ T7178] [ 158.860570][ T51] Bluetooth: hci0: SCO packet too small [ 158.969455][ T7182] netlink: 'syz.1.444': attribute type 30 has an invalid length. [ 159.141178][ T7184] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.445'. [ 159.519190][ T7195] sctp: [Deprecated]: syz.0.449 (pid 7195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.519190][ T7195] Use struct sctp_sack_info instead [ 159.710204][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 160.421402][ T7220] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 160.629154][ T7230] FAULT_INJECTION: forcing a failure. [ 160.629154][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 160.642248][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.1.464 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 160.642276][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.642289][ T7230] Call Trace: [ 160.642298][ T7230] [ 160.642308][ T7230] dump_stack_lvl+0x189/0x250 [ 160.642347][ T7230] ? __pfx____ratelimit+0x10/0x10 [ 160.642376][ T7230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.642410][ T7230] ? __pfx__printk+0x10/0x10 [ 160.642448][ T7230] should_fail_ex+0x414/0x560 [ 160.642483][ T7230] should_failslab+0xa8/0x100 [ 160.642510][ T7230] __kmalloc_noprof+0xcb/0x4f0 [ 160.642532][ T7230] ? nsim_fib_event_nb+0x295/0x1080 [ 160.642567][ T7230] nsim_fib_event_nb+0x295/0x1080 [ 160.642609][ T7230] notifier_call_chain+0x1b3/0x3e0 [ 160.642635][ T7230] ? atomic_notifier_call_chain+0x26/0x180 [ 160.642658][ T7230] atomic_notifier_call_chain+0xda/0x180 [ 160.642682][ T7230] call_fib_notifiers+0x31/0x60 [ 160.642705][ T7230] fib6_del+0x104d/0x1550 [ 160.642732][ T7230] ? fib6_del+0x621/0x1550 [ 160.642783][ T7230] ? __pfx_fib6_del+0x10/0x10 [ 160.642806][ T7230] ? do_raw_spin_lock+0x121/0x290 [ 160.642829][ T7230] ? __ip6_del_rt+0x8c/0x180 [ 160.642865][ T7230] ? __ip6_del_rt+0x8c/0x180 [ 160.642890][ T7230] __ip6_del_rt+0x97/0x180 [ 160.642922][ T7230] ip6_del_rt+0xb3/0x100 [ 160.642952][ T7230] ? __pfx_ip6_del_rt+0x10/0x10 [ 160.642990][ T7230] ? nlmsg_notify+0xf0/0x1a0 [ 160.643008][ T7230] ? nlmsg_notify+0x14a/0x1a0 [ 160.643032][ T7230] __ipv6_ifa_notify+0x5c7/0xac0 [ 160.643068][ T7230] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 160.643092][ T7230] ? __pfx_work_grab_pending+0x10/0x10 [ 160.643115][ T7230] ? __lock_acquire+0xab9/0xd20 [ 160.643151][ T7230] ? __cancel_work+0x1e6/0x2e0 [ 160.643173][ T7230] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.643202][ T7230] ? __cancel_work+0x254/0x2e0 [ 160.643228][ T7230] ? __pfx___cancel_work+0x10/0x10 [ 160.643253][ T7230] ? ipv6_del_addr+0x60c/0x8f0 [ 160.643281][ T7230] ipv6_del_addr+0x6b1/0x8f0 [ 160.643311][ T7230] inet6_addr_del+0x473/0x600 [ 160.643358][ T7230] addrconf_del_ifaddr+0x113/0x160 [ 160.643390][ T7230] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 160.643439][ T7230] inet6_ioctl+0x10f/0x280 [ 160.643468][ T7230] ? __pfx_inet6_ioctl+0x10/0x10 [ 160.643495][ T7230] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 160.643523][ T7230] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 160.643547][ T7230] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 160.643574][ T7230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.643612][ T7230] sock_do_ioctl+0xdc/0x300 [ 160.643645][ T7230] ? __pfx_sock_do_ioctl+0x10/0x10 [ 160.643670][ T7230] ? __lock_acquire+0xab9/0xd20 [ 160.643719][ T7230] sock_ioctl+0x576/0x790 [ 160.643757][ T7230] ? __pfx_sock_ioctl+0x10/0x10 [ 160.643785][ T7230] ? __fget_files+0x2a/0x420 [ 160.643809][ T7230] ? __fget_files+0x3a0/0x420 [ 160.643832][ T7230] ? __fget_files+0x2a/0x420 [ 160.643862][ T7230] ? bpf_lsm_file_ioctl+0x9/0x20 [ 160.643894][ T7230] ? __pfx_sock_ioctl+0x10/0x10 [ 160.643926][ T7230] __se_sys_ioctl+0xfc/0x170 [ 160.643962][ T7230] do_syscall_64+0xfa/0x3b0 [ 160.643990][ T7230] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.644016][ T7230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.644038][ T7230] ? clear_bhb_loop+0x60/0xb0 [ 160.644064][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.644085][ T7230] RIP: 0033:0x7fe5b9d8e929 [ 160.644106][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.644124][ T7230] RSP: 002b:00007fe5bab28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.644147][ T7230] RAX: ffffffffffffffda RBX: 00007fe5b9fb5fa0 RCX: 00007fe5b9d8e929 [ 160.644162][ T7230] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 160.644176][ T7230] RBP: 00007fe5bab28090 R08: 0000000000000000 R09: 0000000000000000 [ 160.644189][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.644201][ T7230] R13: 0000000000000000 R14: 00007fe5b9fb5fa0 R15: 00007ffe6eb0efb8 [ 160.644235][ T7230] [ 161.175003][ T7237] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.465'. [ 161.188091][ T51] Bluetooth: hci3: SCO packet too small [ 161.385235][ T7240] C: renamed from team_slave_0 (while UP) [ 161.571898][ T7240] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 161.652395][ T7240] netlink: 116 bytes leftover after parsing attributes in process `syz.3.467'. [ 161.733271][ T7240] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 307.156599][ C1] ------------[ cut here ]------------ [ 307.163578][ C1] WARNING: CPU: 1 PID: 7264 at kernel/rcu/tree_stall.h:989 rcu_check_gp_start_stall+0x2e4/0x470 [ 307.175078][ C1] Modules linked in: [ 307.181067][ C1] CPU: 1 UID: 0 PID: 7264 Comm: syz.2.475 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 307.192447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.203149][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 307.209809][ C1] Code: ff ff 48 c7 c7 20 34 ac 99 be 04 00 00 00 e8 83 16 7c 00 4c 89 f7 b8 01 00 00 00 87 05 65 7a 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 44 14 8e 74 47 48 c7 c0 30 32 a1 8f 48 c1 e8 [ 307.229743][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 307.235851][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7b9ad [ 307.243857][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144400 [ 307.252053][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 307.260077][ C1] R10: dffffc0000000000 R11: fffffbfff3358684 R12: 0000000000002904 [ 307.268105][ C1] R13: 1ffff110170e7922 R14: ffffffff8e144400 R15: dffffc0000000000 [ 307.276397][ C1] FS: 00007fe18dff66c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 307.285375][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.292171][ C1] CR2: 000000110c2e88ec CR3: 000000007695a000 CR4: 00000000003526f0 [ 307.300273][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.308271][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 307.316269][ C1] Call Trace: [ 307.319579][ C1] [ 307.322470][ C1] rcu_core+0x5f7/0x1710 [ 307.326764][ C1] ? trace_call_bpf+0xb7/0x850 [ 307.331584][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 307.336829][ C1] ? ktime_get+0x3e/0x1f0 [ 307.341218][ C1] ? __pfx_rcu_core+0x10/0x10 [ 307.346050][ C1] ? perf_trace_run_bpf_submit+0x100/0x170 [ 307.351934][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 307.358332][ C1] ? handle_softirqs+0x1a8/0x870 [ 307.363319][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 307.369992][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 307.375863][ C1] handle_softirqs+0x286/0x870 [ 307.380684][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 307.385518][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 307.391117][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 307.396451][ C1] __irq_exit_rcu+0xca/0x1f0 [ 307.401087][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 307.406342][ C1] irq_exit_rcu+0x9/0x30 [ 307.410627][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 307.416450][ C1] [ 307.419406][ C1] [ 307.422364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.428385][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 307.434152][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 85 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 307.453880][ C1] RSP: 0018:ffffc9000483f738 EFLAGS: 00000246 [ 307.460102][ C1] RAX: ffffffff8172006d RBX: 0000000000000003 RCX: 0000000000080000 [ 307.468196][ C1] RDX: ffffc9000c9fa000 RSI: 000000000007ffff RDI: 0000000000080000 [ 307.476239][ C1] RBP: ffffc9000483f810 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 307.484284][ C1] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: dffffc0000000000 [ 307.492392][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000907eec [ 307.500423][ C1] ? kvm_wait+0x22d/0x290 [ 307.504887][ C1] kvm_wait+0x232/0x290 [ 307.509357][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.514735][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 307.519467][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 307.525611][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 307.532279][ C1] ? __lock_acquire+0xab9/0xd20 [ 307.537201][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 307.544454][ C1] do_raw_spin_lock+0x21f/0x290 [ 307.549364][ C1] ? d_instantiate+0x64/0xa0 [ 307.554006][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.559427][ C1] d_instantiate+0x64/0xa0 [ 307.563891][ C1] alloc_file_pseudo+0xf6/0x210 [ 307.568785][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 307.574301][ C1] anon_inode_getfd+0xca/0x1b0 [ 307.579105][ C1] bpf_prog_load+0x1465/0x1930 [ 307.583933][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 307.589173][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 307.594524][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 307.598891][ C1] ? security_bpf+0x7e/0x300 [ 307.603524][ C1] __sys_bpf+0x5f1/0x860 [ 307.607820][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 307.612650][ C1] ? rcu_is_watching+0x15/0xb0 [ 307.617567][ C1] __x64_sys_bpf+0x7c/0x90 [ 307.622052][ C1] do_syscall_64+0xfa/0x3b0 [ 307.626603][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.632971][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.639247][ C1] ? clear_bhb_loop+0x60/0xb0 [ 307.643968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.649915][ C1] RIP: 0033:0x7fe19018e929 [ 307.654433][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.674094][ C1] RSP: 002b:00007fe18dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.682645][ C1] RAX: ffffffffffffffda RBX: 00007fe1903b5fa0 RCX: 00007fe19018e929 [ 307.690738][ C1] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 307.698753][ C1] RBP: 00007fe190210b39 R08: 0000000000000000 R09: 0000000000000000 [ 307.706764][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.714763][ C1] R13: 0000000000000000 R14: 00007fe1903b5fa0 R15: 00007fff07cf9818 [ 307.722792][ C1] [ 307.725837][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.733172][ C1] CPU: 1 UID: 0 PID: 7264 Comm: syz.2.475 Not tainted 6.15.0-syzkaller-g7fdaba912981 #0 PREEMPT(full) [ 307.744576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.755764][ C1] Call Trace: [ 307.759074][ C1] [ 307.761950][ C1] dump_stack_lvl+0x99/0x250 [ 307.766588][ C1] ? __asan_memcpy+0x40/0x70 [ 307.771217][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.776466][ C1] ? __pfx__printk+0x10/0x10 [ 307.781284][ C1] panic+0x2db/0x790 [ 307.785331][ C1] ? __pfx_panic+0x10/0x10 [ 307.789898][ C1] __warn+0x31b/0x4b0 [ 307.793918][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 307.799709][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 307.805461][ C1] report_bug+0x2be/0x4f0 [ 307.809829][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 307.815929][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 307.821682][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 307.827439][ C1] handle_bug+0x84/0x160 [ 307.831727][ C1] exc_invalid_op+0x1a/0x50 [ 307.836315][ C1] asm_exc_invalid_op+0x1a/0x20 [ 307.841198][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 307.847578][ C1] Code: ff ff 48 c7 c7 20 34 ac 99 be 04 00 00 00 e8 83 16 7c 00 4c 89 f7 b8 01 00 00 00 87 05 65 7a 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 44 14 8e 74 47 48 c7 c0 30 32 a1 8f 48 c1 e8 [ 307.867419][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 307.873645][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7b9ad [ 307.881851][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144400 [ 307.889952][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 307.897973][ C1] R10: dffffc0000000000 R11: fffffbfff3358684 R12: 0000000000002904 [ 307.905982][ C1] R13: 1ffff110170e7922 R14: ffffffff8e144400 R15: dffffc0000000000 [ 307.914035][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 307.919897][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 307.925661][ C1] rcu_core+0x5f7/0x1710 [ 307.929956][ C1] ? trace_call_bpf+0xb7/0x850 [ 307.934769][ C1] ? __pfx_trace_call_bpf+0x10/0x10 [ 307.940014][ C1] ? ktime_get+0x3e/0x1f0 [ 307.944481][ C1] ? __pfx_rcu_core+0x10/0x10 [ 307.949203][ C1] ? perf_trace_run_bpf_submit+0x100/0x170 [ 307.955055][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 307.961511][ C1] ? handle_softirqs+0x1a8/0x870 [ 307.966504][ C1] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 307.973130][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 307.978999][ C1] handle_softirqs+0x286/0x870 [ 307.984110][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 307.989037][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 307.994476][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 307.999900][ C1] __irq_exit_rcu+0xca/0x1f0 [ 308.004600][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 308.009940][ C1] irq_exit_rcu+0x9/0x30 [ 308.014374][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 308.020628][ C1] [ 308.023594][ C1] [ 308.026571][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.032682][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 308.038535][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 85 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 308.058325][ C1] RSP: 0018:ffffc9000483f738 EFLAGS: 00000246 [ 308.064888][ C1] RAX: ffffffff8172006d RBX: 0000000000000003 RCX: 0000000000080000 [ 308.073263][ C1] RDX: ffffc9000c9fa000 RSI: 000000000007ffff RDI: 0000000000080000 [ 308.083208][ C1] RBP: ffffc9000483f810 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 308.091664][ C1] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: dffffc0000000000 [ 308.100302][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000907eec [ 308.108428][ C1] ? kvm_wait+0x22d/0x290 [ 308.112821][ C1] kvm_wait+0x232/0x290 [ 308.117021][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.122312][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 308.127267][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 308.133603][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 308.140470][ C1] ? __lock_acquire+0xab9/0xd20 [ 308.145401][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 308.151007][ C1] do_raw_spin_lock+0x21f/0x290 [ 308.155978][ C1] ? d_instantiate+0x64/0xa0 [ 308.160625][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.166048][ C1] d_instantiate+0x64/0xa0 [ 308.170509][ C1] alloc_file_pseudo+0xf6/0x210 [ 308.175522][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 308.181420][ C1] anon_inode_getfd+0xca/0x1b0 [ 308.186465][ C1] bpf_prog_load+0x1465/0x1930 [ 308.192838][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 308.198485][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 308.203852][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 308.208258][ C1] ? security_bpf+0x7e/0x300 [ 308.213078][ C1] __sys_bpf+0x5f1/0x860 [ 308.217392][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 308.222254][ C1] ? rcu_is_watching+0x15/0xb0 [ 308.227165][ C1] __x64_sys_bpf+0x7c/0x90 [ 308.231832][ C1] do_syscall_64+0xfa/0x3b0 [ 308.236803][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.243013][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.249209][ C1] ? clear_bhb_loop+0x60/0xb0 [ 308.253959][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.259886][ C1] RIP: 0033:0x7fe19018e929 [ 308.264334][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.283975][ C1] RSP: 002b:00007fe18dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.292435][ C1] RAX: ffffffffffffffda RBX: 00007fe1903b5fa0 RCX: 00007fe19018e929 [ 308.300533][ C1] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 308.308535][ C1] RBP: 00007fe190210b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.316873][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.325067][ C1] R13: 0000000000000000 R14: 00007fe1903b5fa0 R15: 00007fff07cf9818 [ 308.333140][ C1] [ 308.336645][ C1] Kernel Offset: disabled [ 308.340999][ C1] Rebooting in 86400 seconds..