last executing test programs: 10.517214769s ago: executing program 1 (id=3789): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7ee0000000000950074"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x4, 0x4, 0x9, 0x6, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x7, 0x0, 0x100, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x8, 0x7, 0x1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.785619907s ago: executing program 1 (id=3791): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000347a174f113221a20000b100002b0bf0297500000000000000000400000000d5bb3068b7c46c58139834d0162db12a669ff9f17dedfefc1dabc92831e69232e90402ca944a38fd8e22be4b4d261d8c1af95c9bc5a16b66adeb573df78836ebb80de0a208", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) close(r2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d084811000000e8fe558b180015000600142603600e120900210000090401a80016000a000d4006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) 9.733218422s ago: executing program 3 (id=3792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000740)=@ringbuf={{}, {}, {}, [@map_idx, @map_idx, @cb_func, @initr0, @func, @map_fd, @ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 9.656489208s ago: executing program 4 (id=3794): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x7, 0x0, &(0x7f00000004c0)="3f6c00c2231bc4", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000c50000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 9.3169921s ago: executing program 3 (id=3797): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) 8.939475225s ago: executing program 4 (id=3799): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7f, 0x2, 0x0, 0x4006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1}, 0x0) close(r0) socket$kcm(0x2a, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x10) 8.918168367s ago: executing program 3 (id=3800): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffefb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006911180000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1509, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x2140, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x28804, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8ff42b333f62477b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2005c080) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8.856647413s ago: executing program 2 (id=3802): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000461d02562c3163536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04c1ce6524e7e718c0b1da96d9c9fa8e9523840100cbac3c07a0bf00ff9513b150a632c33ca9a009870000000000000000000000000000002cd50db1486b80ee61ff6ddaa43468bf0609a8ef7fd07f4c556489cf61cfad63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d173d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aed4ee19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007dae5bf308287352cc53f035347270d076c93f1b1a810eb2c7d72ee9ce76e6da15600893bc36f6502f75a8acc0"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107447, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0, 0x5, 0xcf, &(0x7f0000000500)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02", 0x3}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x41d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.790445559s ago: executing program 4 (id=3803): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000347a174f113221a20000b100002b0bf0297500000000000000000400000000d5bb3068b7c46c58139834d0162db12a669ff9f17dedfefc1dabc92831e69232e90402ca944a38fd8e22be4b4d261d8c1af95c9bc5a16b66adeb573df78836ebb80de0a208", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d084811000000e8fe558b180015000600142603600e120900210000090401a80016000a000d4006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) 8.620509674s ago: executing program 3 (id=3804): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) close(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x0, &(0x7f0000000240), &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x340040c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)) 7.889865162s ago: executing program 1 (id=3805): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3e, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000a632cc435bfc5ba975ace8a2965dc5e5fa9d91c944f68f8c9795122d4be57569672e89800a6546ef6109963ef412ae82c903b54fb9ba2276a4d8adecd39c5f1f3eea6355ba29289b6deecff2bc92331a0b1427a01eb34fc260f4ee2c34ca84d23eeae9c56f49b4da662773b116", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) 7.875168683s ago: executing program 0 (id=3806): syz_clone(0xf0ff1f, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40087602, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.842593546s ago: executing program 2 (id=3807): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000740)=@ringbuf={{}, {}, {}, [@map_idx, @map_idx, @cb_func, @initr0, @func, @map_fd, @ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 7.723079208s ago: executing program 3 (id=3808): r0 = socket$kcm(0x2, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@hci={0x1f, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0x98, 0x0, 0x8000, "6005a00c68e907e9ee818d4212ce4bf4c48bcbb8ed9c7d1ea71fde27b8276fa46c2c0f4f80170e1ad85f6a795ed462357e2d7581a00212b84b32a4085b8f849dbae49998b7e6defbcd0d060b8554c21ef177c62fae1adce76868928a7b0b66b6dcf661c01ee11abd330de3f37702738e14300feaeb29a81a3c2ca0181a28127fb0"}, {0x10, 0x112, 0x5}, {0x30, 0xc6c720c928e581d4, 0x1, "bf73d66eb9367fb87af3dbde22116405d6a0e65f2dd2b03928"}, {0x60, 0x0, 0x2, "4c883bfe08b1c2b127ff018f34268b15e2089daa43802ae96f7638d28247c8ec7ad121bf6a5c3861ffafd7005f3ee84d6925acec2c2a46cae502a2890a0b82494330b5261eb95b8e0455df"}], 0x138}, 0x14) perf_event_open(&(0x7f0000002840)={0x2, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1044000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027", 0x23}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 7.716047358s ago: executing program 0 (id=3809): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r1, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0xffffffffffffffee, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c00009a1de42d4e79e6450008000000", @ANYRES32=r4, @ANYBLOB="ac1414aa0000007a00000000140000000000000000000000070000000100860200000000"], 0x38, 0x7}, 0x8386) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72, 0x1000000}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014e40900b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x7}], "a8a6"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "c05f"}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f00000005c0)=""/171, 0x46, 0xab, 0x1, 0x0, 0x0, @void, @value}, 0x20) r13 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x4}, 0x10, 0x0, r13, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000003c0)=@framed={{}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x6, 0x0, r9, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) gettid() syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) 7.5780193s ago: executing program 4 (id=3810): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) 7.565812171s ago: executing program 2 (id=3811): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000000000000030000000000001600000000381f363d1519dcf4f478a4266c12072ef1135db1cae5a6dc9beeadb1eacf3deac9cd5b36d95653c2373f5884f48790e4d324056a60dfb9bf171fcaed33b2678fed296316a58bc6a8a07138f8ffd0bfdf39dfa56ff86290e07b130690c58e76f82b1c488816e7ba8dcb36f3498f969b1db26dca835797c203c0d5c73a234c2100"/157, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @ldst={0x0, 0x0, 0x0, 0xd7ea35335597318b, 0x3, 0x2, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x1, 0x2, 0x2, 0x2, 0xb, 0xfffffffffffffff4, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x100, 0x0, &(0x7f00000002c0), 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x0, 0x3, 0xe, 0xa}], 0x10, 0xd0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_freezer_state(r1, &(0x7f0000001a00), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000000000030", @ANYBLOB], 0x50) 7.517072986s ago: executing program 1 (id=3812): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 7.48180321s ago: executing program 4 (id=3813): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7f, 0x2, 0x0, 0x4006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1}, 0x0) close(r0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="cf8660a7051a933e1235d9feeef69b5b5302d9b9aa009881ae86db7baa017a0c2723161a2eed553d3b1d8743476e7432d01d66392f491997a5ba33e6a26d4202c37435be166681cc4c3e015ad79c2f38ef83f3096a916b3ecf2224d8a220b32bd8c758ccd6a22a74c664310d6e019eb8a63fbafb83c6aa4d697afe678a3e0396f362c2d93d9b603d32ac9380cb1ad8ac431a0eaf807eff56630143e6ca99ac0be493cd9c448ee561a536a9de234458cec216faaca4cfddc55f691b64cc44e0be6d27c7f7752a970f96b7acdbfdab517ca4f3977a9e4839516f53d5226eb56d296c3df5e6525973a43f7cfd32509bf64a176c5a66867d5ffc91edd6fc40c55d92c5136e09b1dc684e9b7bbb321397", @ANYRES64=0x0], 0x10) 7.415218046s ago: executing program 3 (id=3814): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffefb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006911180000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1509, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x2140, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x28804, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8ff42b333f62477b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2005c080) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.380675009s ago: executing program 4 (id=3815): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) close(r2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d084811000000e8fe558b180015000600142603600e120900210000090401a80016000a000d4006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) 7.359596141s ago: executing program 2 (id=3816): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7ee0000000000950074"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x4, 0x4, 0x9, 0x6, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x7, 0x0, 0x100, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x8, 0x7, 0x1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.282603868s ago: executing program 1 (id=3817): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107447, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000040ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d3e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c47365e78c80854b2baf8eb320d8c34cfc81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6afd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d0504f1ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f415f6ac8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2f600000000000000e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83f869fbb866c57567826efc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d58710d1febe7394cf8b02f59dab24d07db3d3c1ebff5244f438b3d6d15a30ec32aadb3cfa1c2f7dac7c5937c14702a3a0702b53115c163eb91275aedd6ad46b49b100208e73bb2c57068664f8ffd34bc8708faadd12d80875d7f1c0d9cd1ddd292e1efe9780c02487a38a688dfc173fac71249cdee0fc53336ede131253606067e3dd22f2e5db2b9d570b1fb3f3add20b3a02caf5721868b642a2e5cf40a03c49b8fe89fa6b7b4a823104f2314d37e7de67b719bf3aba1273a974f38f7c82d4fa14aa12599ad6ae5197c3c0040e5beb587d917992168e412403cf568acf630927e005b9a75"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x0, 0x5, 0xcf, &(0x7f0000000500)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02", 0x3}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x41d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.698021032s ago: executing program 0 (id=3818): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) close(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x0, &(0x7f0000000240), &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x340040c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)) 6.238774214s ago: executing program 2 (id=3819): syz_clone(0xf0ff1f, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40087602, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.160417441s ago: executing program 2 (id=3820): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000347a174f113221a20000b100002b0bf0297500000000000000000400000000d5bb3068b7c46c58139834d0162db12a669ff9f17dedfefc1dabc92831e69232e90402ca944a38fd8e22be4b4d261d8c1af95c9bc5a16b66adeb573df78836ebb80de0a208", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d084811000000e8fe558b180015000600142603600e120900210000090401a80016000a000d4006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) 5.320302219s ago: executing program 1 (id=3821): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000740)=@ringbuf={{}, {}, {}, [@map_idx, @map_idx, @cb_func, @initr0, @func, @map_fd, @ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 4.650781001s ago: executing program 0 (id=3822): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3e, 0x6}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000a632cc435bfc5ba975ace8a2965dc5e5fa9d91c944f68f8c9795122d4be57569672e89800a6546ef6109963ef412ae82c903b54fb9ba2276a4d8adecd39c5f1f3eea6355ba29289b6deecff2bc92331a0b1427a01eb34fc260f4ee2c34ca84d23eeae9c56f49b4da662773b116", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) 1.833836321s ago: executing program 0 (id=3823): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) close(r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) 0s ago: executing program 0 (id=3824): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000500)='notify_on_release\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0xfffffffffffffda7) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00 \x00 \x00'}) kernel console output (not intermixed with test programs): gured BSSID 50:50:50:50:50:50 [ 296.766792][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.801559][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.372043][T11873] netlink: 'syz.3.2878': attribute type 39 has an invalid length. [ 300.035289][T11890] netlink: 117104 bytes leftover after parsing attributes in process `syz.3.2884'. [ 301.171986][T11912] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.2889'. [ 305.523044][ T3612] Bluetooth: hci3: command 0x0409 tx timeout [ 305.985489][ T5222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.199419][T12010] FAULT_INJECTION: forcing a failure. [ 306.199419][T12010] name failslab, interval 1, probability 0, space 0, times 0 [ 306.711952][T12010] CPU: 0 PID: 12010 Comm: syz.0.2916 Not tainted 5.15.167-syzkaller #0 [ 306.720480][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.730918][T12010] Call Trace: [ 306.734276][T12010] [ 306.737245][T12010] dump_stack_lvl+0x1e3/0x2d0 [ 306.742707][T12010] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 306.748748][T12010] ? panic+0x860/0x860 [ 306.753003][T12010] should_fail+0x38a/0x4c0 [ 306.757668][T12010] should_failslab+0x5/0x20 [ 306.762368][T12010] slab_pre_alloc_hook+0x53/0xc0 [ 306.767375][T12010] __kmalloc_node+0x71/0x390 [ 306.772009][T12010] ? kvmalloc_node+0x80/0x140 [ 306.776744][T12010] kvmalloc_node+0x80/0x140 [ 306.781296][T12010] generic_map_update_batch+0x3f2/0x8b0 [ 306.787016][T12010] ? __fget_files+0x413/0x480 [ 306.791751][T12010] ? rcu_read_unlock+0x90/0x90 [ 306.796575][T12010] ? __fdget+0x191/0x220 [ 306.800869][T12010] ? rcu_read_unlock+0x90/0x90 [ 306.805692][T12010] bpf_map_do_batch+0x4d0/0x620 [ 306.810601][T12010] __sys_bpf+0x55c/0x670 [ 306.814898][T12010] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 306.820393][T12010] ? syscall_enter_from_user_mode+0x2e/0x240 [ 306.826705][T12010] ? lockdep_hardirqs_on+0x94/0x130 [ 306.831973][T12010] __x64_sys_bpf+0x78/0x90 [ 306.836457][T12010] do_syscall_64+0x3b/0xb0 [ 306.840911][T12010] ? clear_bhb_loop+0x15/0x70 [ 306.845674][T12010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.851614][T12010] RIP: 0033:0x7ff75e0deff9 [ 306.856169][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.876082][T12010] RSP: 002b:00007ff75c557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.884556][T12010] RAX: ffffffffffffffda RBX: 00007ff75e296f80 RCX: 00007ff75e0deff9 [ 306.892648][T12010] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 306.900739][T12010] RBP: 00007ff75c557090 R08: 0000000000000000 R09: 0000000000000000 [ 306.909018][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.917043][T12010] R13: 0000000000000000 R14: 00007ff75e296f80 R15: 00007ffe96aa0098 [ 306.925568][T12010] [ 307.552265][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 309.679520][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 310.296863][ T5222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.463713][ T5222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.595510][ T5222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.043342][T11969] chnl_net:caif_netlink_parms(): no params data found [ 311.442935][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.481936][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.526199][T11969] device bridge_slave_0 entered promiscuous mode [ 311.628633][T12069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.687583][T12069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.719455][T12069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.749178][T12069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.950024][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.958033][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.968021][T11969] device bridge_slave_1 entered promiscuous mode [ 312.102272][ T1292] Bluetooth: hci3: command 0x0419 tx timeout [ 312.206682][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.256164][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.540075][T11969] team0: Port device team_slave_0 added [ 312.777488][T11969] team0: Port device team_slave_1 added [ 312.822844][T12108] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.2938'. [ 313.053489][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.080953][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.191881][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.275168][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.294661][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.371843][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.495211][T12142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.542645][T12142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.558396][T12142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.600468][T12142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.097325][T11969] device hsr_slave_0 entered promiscuous mode [ 314.161442][T11969] device hsr_slave_1 entered promiscuous mode [ 314.218322][T11969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.236538][T11969] Cannot create hsr debugfs directory [ 315.387841][T12198] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.2956'. [ 315.516081][ T5222] device hsr_slave_0 left promiscuous mode [ 315.547357][ T5222] device hsr_slave_1 left promiscuous mode [ 315.590476][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.623040][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.653161][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.660688][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.721033][ T5222] device veth1_macvtap left promiscuous mode [ 315.734921][ T5222] device veth1_vlan left promiscuous mode [ 315.753188][ T5222] device veth0_vlan left promiscuous mode [ 316.544361][ T5222] team0 (unregistering): Port device team_slave_1 removed [ 316.598673][ T5222] team0 (unregistering): Port device team_slave_0 removed [ 316.642172][ T5222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.692821][ T5222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.014835][ T5222] bond0 (unregistering): Released all slaves [ 317.103122][T12217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2963'. [ 317.385912][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.393074][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.647814][T12241] FAULT_INJECTION: forcing a failure. [ 317.647814][T12241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.663413][T12241] CPU: 1 PID: 12241 Comm: syz.0.2970 Not tainted 5.15.167-syzkaller #0 [ 317.671717][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.681976][T12241] Call Trace: [ 317.685279][T12241] [ 317.688237][T12241] dump_stack_lvl+0x1e3/0x2d0 [ 317.692955][T12241] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 317.698612][T12241] ? panic+0x860/0x860 [ 317.702694][T12241] ? validate_chain+0x112/0x5930 [ 317.707651][T12241] ? validate_chain+0x112/0x5930 [ 317.712728][T12241] should_fail+0x38a/0x4c0 [ 317.717275][T12241] _copy_from_user+0x2d/0x170 [ 317.721990][T12241] iovec_from_user+0x13b/0x390 [ 317.726807][T12241] __import_iovec+0x72/0x4b0 [ 317.731411][T12241] ? __ia32_sys_shutdown+0x60/0x60 [ 317.736565][T12241] import_iovec+0xe6/0x120 [ 317.741029][T12241] ___sys_sendmsg+0x215/0x2e0 [ 317.745843][T12241] ? __sys_sendmsg+0x260/0x260 [ 317.750852][T12241] ? __fdget+0x191/0x220 [ 317.755213][T12241] __se_sys_sendmsg+0x19a/0x260 [ 317.760177][T12241] ? __x64_sys_sendmsg+0x80/0x80 [ 317.765129][T12241] ? syscall_enter_from_user_mode+0x2e/0x240 [ 317.771636][T12241] ? lockdep_hardirqs_on+0x94/0x130 [ 317.777047][T12241] ? syscall_enter_from_user_mode+0x2e/0x240 [ 317.783510][T12241] do_syscall_64+0x3b/0xb0 [ 317.787990][T12241] ? clear_bhb_loop+0x15/0x70 [ 317.792695][T12241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.799465][T12241] RIP: 0033:0x7ff75e0deff9 [ 317.803907][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.823729][T12241] RSP: 002b:00007ff75c536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.832304][T12241] RAX: ffffffffffffffda RBX: 00007ff75e297058 RCX: 00007ff75e0deff9 [ 317.840429][T12241] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 317.848604][T12241] RBP: 00007ff75c536090 R08: 0000000000000000 R09: 0000000000000000 [ 317.856591][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.864596][T12241] R13: 0000000000000000 R14: 00007ff75e297058 R15: 00007ffe96aa0098 [ 317.872621][T12241] [ 317.938762][T12244] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.2971'. [ 318.530513][T11969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.595212][T11969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.651484][T11969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.683176][T11969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.957782][T12281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2982'. [ 320.172640][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.186753][T12305] FAULT_INJECTION: forcing a failure. [ 320.186753][T12305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.344439][T12305] CPU: 0 PID: 12305 Comm: syz.2.2987 Not tainted 5.15.167-syzkaller #0 [ 320.352768][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.362868][T12305] Call Trace: [ 320.366209][T12305] [ 320.369175][T12305] dump_stack_lvl+0x1e3/0x2d0 [ 320.373937][T12305] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 320.379647][T12305] ? panic+0x860/0x860 [ 320.383782][T12305] ? __lock_acquire+0x1ff0/0x1ff0 [ 320.388891][T12305] should_fail+0x38a/0x4c0 [ 320.393556][T12305] strncpy_from_user+0x32/0x370 [ 320.398575][T12305] getname_flags+0xf5/0x4e0 [ 320.403154][T12305] user_path_create+0x26/0x180 [ 320.407978][T12305] bpf_obj_pin_user+0x126/0x350 [ 320.412931][T12305] ? bpf_patch_insn_data+0xe00/0xe00 [ 320.418404][T12305] __sys_bpf+0x357/0x670 [ 320.422714][T12305] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 320.428254][T12305] ? syscall_enter_from_user_mode+0x2e/0x240 [ 320.434405][T12305] ? lockdep_hardirqs_on+0x94/0x130 [ 320.439792][T12305] __x64_sys_bpf+0x78/0x90 [ 320.444563][T12305] do_syscall_64+0x3b/0xb0 [ 320.449038][T12305] ? clear_bhb_loop+0x15/0x70 [ 320.453769][T12305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.459723][T12305] RIP: 0033:0x7f5399e91ff9 [ 320.464185][T12305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.484008][T12305] RSP: 002b:00007f539830a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.492516][T12305] RAX: ffffffffffffffda RBX: 00007f539a049f80 RCX: 00007f5399e91ff9 [ 320.500551][T12305] RDX: 0000000000000018 RSI: 00000000200001c0 RDI: 0000000000000006 [ 320.508574][T12305] RBP: 00007f539830a090 R08: 0000000000000000 R09: 0000000000000000 [ 320.516710][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.524726][T12305] R13: 0000000000000000 R14: 00007f539a049f80 R15: 00007ffcf98cbc68 [ 320.532797][T12305] [ 321.138004][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.159279][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.190488][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.235780][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.275757][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.295429][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.302627][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.375711][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.388098][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.448871][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.548147][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.555439][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.578109][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.611662][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.636385][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.660539][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.719821][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.742064][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.774028][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.836183][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.897349][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.940285][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.035933][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.094918][T11969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.460491][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.498115][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.568844][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.642526][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.657051][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.749004][T12359] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3002'. [ 322.787048][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.822748][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.876234][T11969] device veth0_vlan entered promiscuous mode [ 322.915929][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.946226][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.029262][T11969] device veth1_vlan entered promiscuous mode [ 323.071107][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3005'. [ 323.161962][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.172876][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.242804][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.308439][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.392715][T11969] device veth0_macvtap entered promiscuous mode [ 323.465646][T12378] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3006'. [ 323.497488][T11969] device veth1_macvtap entered promiscuous mode [ 323.614340][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.710371][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.744171][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.755347][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.779282][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.642105][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.683975][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.700098][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.716521][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.734250][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.745824][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.756637][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.767247][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.777453][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.788762][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.818201][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.830199][T11969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.839687][T11969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.849067][T11969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.858778][T11969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.890097][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.903331][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.261981][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.297937][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.377648][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.392651][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.408739][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3015'. [ 325.422178][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.465731][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.069675][T12444] netlink: 'syz.3.2904': attribute type 39 has an invalid length. [ 326.091046][T12444] device veth0_macvtap left promiscuous mode [ 327.062990][ T5219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.094899][T12481] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3028'. [ 327.216627][ T5219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.366430][ T5219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.525055][ T5219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.802984][T12475] chnl_net:caif_netlink_parms(): no params data found [ 328.524914][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.562033][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.612416][T12475] device bridge_slave_0 entered promiscuous mode [ 328.680248][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.731390][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.792006][T12475] device bridge_slave_1 entered promiscuous mode [ 328.982108][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 329.202615][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.368923][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.664999][T12563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3041'. [ 329.772605][T12475] team0: Port device team_slave_0 added [ 329.819257][T12475] team0: Port device team_slave_1 added [ 330.063416][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.077749][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.129031][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.173921][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.186983][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.220666][T12589] netlink: 'syz.3.3047': attribute type 6 has an invalid length. [ 330.240275][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.250947][T12589] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3047'. [ 330.357728][T12475] device hsr_slave_0 entered promiscuous mode [ 330.370494][T12475] device hsr_slave_1 entered promiscuous mode [ 330.608567][ T5219] device hsr_slave_0 left promiscuous mode [ 330.627511][ T5219] device hsr_slave_1 left promiscuous mode [ 330.649743][ T5219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.670523][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.690164][ T5219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.722390][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.758176][ T5219] device bridge_slave_1 left promiscuous mode [ 330.772095][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.808013][ T5219] device bridge_slave_0 left promiscuous mode [ 330.830420][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.893358][ T5219] device veth1_macvtap left promiscuous mode [ 330.910103][ T5219] device veth1_vlan left promiscuous mode [ 330.924847][ T5219] device veth0_vlan left promiscuous mode [ 331.082620][ T3660] Bluetooth: hci1: command 0x041b tx timeout [ 331.439694][ T5219] team0 (unregistering): Port device geneve1 removed [ 331.906084][ T5219] team0 (unregistering): Port device team_slave_1 removed [ 331.968185][ T5219] team0 (unregistering): Port device team_slave_0 removed [ 332.022635][ T5219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.067242][ T5219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.220292][ T5219] team0 (unregistering): Port device bond0 removed [ 332.259065][ T5219] bond0 (unregistering): Released all slaves [ 332.545709][T12626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3055'. [ 332.624561][T12635] netlink: 16318 bytes leftover after parsing attributes in process `syz.4.3059'. [ 332.945541][T12644] netlink: 'syz.4.3062': attribute type 6 has an invalid length. [ 332.990355][T12644] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3062'. [ 333.143109][ T2012] Bluetooth: hci1: command 0x040f tx timeout [ 333.473373][T12475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.516068][T12475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.563653][T12475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.595892][T12475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.677055][T12675] netlink: 'syz.3.3068': attribute type 39 has an invalid length. [ 333.817634][T12680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3069'. [ 333.982694][T12685] FAULT_INJECTION: forcing a failure. [ 333.982694][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 334.042115][T12685] CPU: 0 PID: 12685 Comm: syz.4.3070 Not tainted 5.15.167-syzkaller #0 [ 334.050699][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.061722][T12685] Call Trace: [ 334.065819][T12685] [ 334.068796][T12685] dump_stack_lvl+0x1e3/0x2d0 [ 334.074597][T12685] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 334.080778][T12685] ? panic+0x860/0x860 [ 334.084998][T12685] ? __might_sleep+0xc0/0xc0 [ 334.090101][T12685] should_fail+0x38a/0x4c0 [ 334.094608][T12685] should_failslab+0x5/0x20 [ 334.099158][T12685] slab_pre_alloc_hook+0x53/0xc0 [ 334.104584][T12685] kmem_cache_alloc_node_trace+0x4e/0x2e0 [ 334.111069][T12685] ? __get_vm_area_node+0x11f/0x2f0 [ 334.117106][T12685] __get_vm_area_node+0x11f/0x2f0 [ 334.122190][T12685] __vmalloc_node_range+0xe3/0x8c0 [ 334.127606][T12685] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.133364][T12685] ? end_current_label_crit_section+0x170/0x170 [ 334.140700][T12685] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.146281][T12685] __vmalloc+0x75/0x80 [ 334.150479][T12685] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.156151][T12685] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.161572][T12685] bpf_prog_alloc+0x18/0x1d0 [ 334.166812][T12685] bpf_prog_load+0x800/0x1b60 [ 334.171526][T12685] ? map_freeze+0x360/0x360 [ 334.176148][T12685] ? __might_fault+0xb8/0x110 [ 334.176746][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.181039][T12685] ? __might_fault+0xb4/0x110 [ 334.193864][T12685] ? bpf_lsm_bpf+0x5/0x10 [ 334.198259][T12685] ? security_bpf+0x7d/0xa0 [ 334.203144][T12685] __sys_bpf+0x343/0x670 [ 334.207460][T12685] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 334.212983][T12685] ? syscall_enter_from_user_mode+0x2e/0x240 [ 334.218993][T12685] ? lockdep_hardirqs_on+0x94/0x130 [ 334.224310][T12685] __x64_sys_bpf+0x78/0x90 [ 334.228753][T12685] do_syscall_64+0x3b/0xb0 [ 334.233360][T12685] ? clear_bhb_loop+0x15/0x70 [ 334.238068][T12685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.244036][T12685] RIP: 0033:0x7f444daecff9 [ 334.248502][T12685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.268306][T12685] RSP: 002b:00007f444bf65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.276851][T12685] RAX: ffffffffffffffda RBX: 00007f444dca4f80 RCX: 00007f444daecff9 [ 334.285112][T12685] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 334.293350][T12685] RBP: 00007f444bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 334.301353][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.309440][T12685] R13: 0000000000000001 R14: 00007f444dca4f80 R15: 00007fff8293e7f8 [ 334.317630][T12685] [ 334.321930][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.445988][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.548741][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.686269][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.703728][T12685] syz.4.3070: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 334.720553][T12685] CPU: 1 PID: 12685 Comm: syz.4.3070 Not tainted 5.15.167-syzkaller #0 [ 334.728855][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.739196][T12685] Call Trace: [ 334.742512][T12685] [ 334.745458][T12685] dump_stack_lvl+0x1e3/0x2d0 [ 334.750178][T12685] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 334.755841][T12685] ? panic+0x860/0x860 [ 334.759953][T12685] warn_alloc+0x278/0x3f0 [ 334.764315][T12685] ? zone_watermark_ok_safe+0x280/0x280 [ 334.769966][T12685] ? kmem_cache_alloc_node_trace+0x171/0x2e0 [ 334.775990][T12685] ? __get_vm_area_node+0x11f/0x2f0 [ 334.781231][T12685] ? __get_vm_area_node+0x2d6/0x2f0 [ 334.786492][T12685] __vmalloc_node_range+0x2b9/0x8c0 [ 334.791987][T12685] ? end_current_label_crit_section+0x170/0x170 [ 334.798287][T12685] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.803865][T12685] __vmalloc+0x75/0x80 [ 334.808060][T12685] ? bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.813641][T12685] bpf_prog_alloc_no_stats+0x33/0x2f0 [ 334.819063][T12685] bpf_prog_alloc+0x18/0x1d0 [ 334.823682][T12685] bpf_prog_load+0x800/0x1b60 [ 334.828396][T12685] ? map_freeze+0x360/0x360 [ 334.832922][T12685] ? __might_fault+0xb8/0x110 [ 334.837656][T12685] ? __might_fault+0xb4/0x110 [ 334.842362][T12685] ? bpf_lsm_bpf+0x5/0x10 [ 334.846712][T12685] ? security_bpf+0x7d/0xa0 [ 334.851239][T12685] __sys_bpf+0x343/0x670 [ 334.855510][T12685] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 334.860931][T12685] ? syscall_enter_from_user_mode+0x2e/0x240 [ 334.866944][T12685] ? lockdep_hardirqs_on+0x94/0x130 [ 334.872179][T12685] __x64_sys_bpf+0x78/0x90 [ 334.876622][T12685] do_syscall_64+0x3b/0xb0 [ 334.881063][T12685] ? clear_bhb_loop+0x15/0x70 [ 334.885877][T12685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.892068][T12685] RIP: 0033:0x7f444daecff9 [ 334.896506][T12685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.916241][T12685] RSP: 002b:00007f444bf65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.924799][T12685] RAX: ffffffffffffffda RBX: 00007f444dca4f80 RCX: 00007f444daecff9 [ 334.932803][T12685] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 334.940790][T12685] RBP: 00007f444bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 334.948957][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.957058][T12685] R13: 0000000000000001 R14: 00007f444dca4f80 R15: 00007fff8293e7f8 [ 334.965348][T12685] [ 335.002088][T12685] Mem-Info: [ 335.007383][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.022497][T12685] active_anon:267 inactive_anon:4125 isolated_anon:0 [ 335.022497][T12685] active_file:16610 inactive_file:40171 isolated_file:0 [ 335.022497][T12685] unevictable:768 dirty:129 writeback:0 [ 335.022497][T12685] slab_reclaimable:19101 slab_unreclaimable:91920 [ 335.022497][T12685] mapped:21216 shmem:1529 pagetables:540 bounce:0 [ 335.022497][T12685] kernel_misc_reclaimable:0 [ 335.022497][T12685] free:1403695 free_pcp:11345 free_cma:0 [ 335.087408][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.094699][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.193368][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.222142][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 335.245741][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.283425][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.290729][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.314748][T12685] Node 0 active_anon:1064kB inactive_anon:15988kB active_file:66364kB inactive_file:160684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84912kB dirty:452kB writeback:0kB shmem:4096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9840kB pagetables:2248kB all_unreclaimable? no [ 335.397242][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.553865][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.646408][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.667831][T12685] Node 1 active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 335.723272][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.765427][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.778421][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.788269][T12685] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.817142][T12685] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 335.836985][T12685] Node 0 DMA32 free:1660568kB min:34736kB low:43420kB high:52104kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:15988kB active_file:66364kB inactive_file:160684kB unevictable:1536kB writepending:452kB present:3129332kB managed:2600796kB mlocked:0kB bounce:0kB free_pcp:41192kB local_pcp:19840kB free_cma:0kB [ 335.901661][T12685] lowmem_reserve[]: 0 0 0 0 0 [ 335.915143][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.924399][T12685] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.962385][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.971376][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.982362][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.990474][T12685] lowmem_reserve[]: 0 0 0 0 0 [ 335.997475][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.015390][T12685] Node 1 Normal free:3937820kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5252kB local_pcp:5252kB free_cma:0kB [ 336.056226][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.062085][T12685] lowmem_reserve[]: 0 0 0 0 0 [ 336.075993][T12685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.083288][T12475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.096566][T12685] Node 0 DMA32: 136*4kB (UME) 1533*8kB (UME) 969*16kB (UME) 645*32kB (UME) 689*64kB (UME) 426*128kB (UME) 233*256kB (UM) 122*512kB (UME) 70*1024kB (UM) 30*2048kB (UME) 307*4096kB (UM) = 1660280kB [ 336.156194][T12685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 336.171534][T12685] Node 1 Normal: 143*4kB (UE) 38*8kB (UME) 17*16kB (UE) 163*32kB (UME) 65*64kB (UME) 20*128kB (UE) 5*256kB (UE) 7*512kB (UME) 0*1024kB 2*2048kB (UM) 956*4096kB (M) = 3937820kB [ 336.211877][T12685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.253326][T12685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.298084][T12685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.309056][T12712] netlink: 'syz.3.3077': attribute type 1 has an invalid length. [ 336.341969][T12712] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3077'. [ 336.382387][T12685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.432501][T12685] 58551 total pagecache pages [ 336.437241][T12685] 0 pages in swap cache [ 336.441415][T12685] Swap cache stats: add 62, delete 62, find 0/2 [ 336.549054][T12724] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.572057][T12685] Free swap = 124728kB [ 336.576279][T12685] Total swap = 124996kB [ 336.605326][T12685] 2097051 pages RAM [ 336.609191][T12685] 0 pages HighMem/MovableOnly [ 336.651891][T12685] 413094 pages reserved [ 336.656111][T12685] 0 pages cma reserved [ 336.664595][T12724] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3079'. [ 336.794240][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.814776][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.859912][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.018095][T12736] netlink: 'syz.1.3080': attribute type 6 has an invalid length. [ 337.027583][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.043070][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.052579][T12736] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3080'. [ 337.079934][T12739] netlink: 'syz.3.3081': attribute type 39 has an invalid length. [ 337.196003][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.238991][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.260808][T12475] device veth0_vlan entered promiscuous mode [ 337.289492][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.306559][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.335200][T12475] device veth1_vlan entered promiscuous mode [ 337.430997][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 337.479434][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.545198][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.577586][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.590858][T12475] device veth0_macvtap entered promiscuous mode [ 337.650952][T12475] device veth1_macvtap entered promiscuous mode [ 340.168012][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.182353][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.192539][T12768] netlink: 'syz.1.3087': attribute type 21 has an invalid length. [ 340.200602][T12768] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3087'. [ 340.306130][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.351887][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.365764][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.376908][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.392701][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.400630][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.415916][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.461043][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.474483][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.490886][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.511639][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.537934][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.549093][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.567253][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.584897][T12792] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.627496][T12792] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3090'. [ 340.665488][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.702988][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.775841][T12475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.798804][T12475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.825247][T12475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.838355][T12475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.858356][T12805] netlink: 'syz.3.3095': attribute type 39 has an invalid length. [ 341.094874][ T4703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.103229][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 341.198859][ T5222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.211592][ T5222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.264825][ T4703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.320574][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.395624][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.615466][T12828] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3021'. [ 342.409786][T12845] netlink: 'syz.4.3107': attribute type 10 has an invalid length. [ 342.418322][T12845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3107'. [ 342.437305][T12845] batman_adv: batadv0: Adding interface: virt_wifi0 [ 342.444761][T12845] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.472501][T12845] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 342.574622][ T4703] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.732018][ T4703] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.854373][ T4703] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.889440][T12871] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3115'. [ 342.929911][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3116'. [ 342.997237][ T4703] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.200351][T12882] netlink: 'syz.4.3117': attribute type 39 has an invalid length. [ 343.238548][T12882] device veth0_macvtap left promiscuous mode [ 343.517163][T12849] chnl_net:caif_netlink_parms(): no params data found [ 344.072797][T12849] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.095604][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.131394][T12849] device bridge_slave_0 entered promiscuous mode [ 344.337242][T12849] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.348709][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.352260][ T3660] Bluetooth: hci0: command 0x0409 tx timeout [ 344.368440][T12849] device bridge_slave_1 entered promiscuous mode [ 344.389440][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3128'. [ 344.545469][T12849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.657006][T12849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.851383][T12943] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 344.916771][T12943] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3131'. [ 344.923751][T12849] team0: Port device team_slave_0 added [ 344.954939][T12849] team0: Port device team_slave_1 added [ 345.062188][ T3660] Bluetooth: hci5: command 0x0406 tx timeout [ 345.099709][T12849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.112692][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.191201][T12849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.250787][T12953] netlink: 'syz.4.3133': attribute type 39 has an invalid length. [ 345.262753][T12849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.282510][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.342020][T12849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.408045][T12955] netlink: 'syz.2.3136': attribute type 10 has an invalid length. [ 345.426494][T12955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3136'. [ 345.449120][T12955] batman_adv: batadv0: Adding interface: virt_wifi0 [ 345.473778][T12955] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.506465][T12955] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 345.588236][T12963] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3138'. [ 345.628277][T12963] netlink: 'syz.3.3138': attribute type 1 has an invalid length. [ 345.786388][T12975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3140'. [ 346.385309][T12849] device hsr_slave_0 entered promiscuous mode [ 346.453620][ T3614] Bluetooth: hci0: command 0x041b tx timeout [ 346.493077][T12849] device hsr_slave_1 entered promiscuous mode [ 346.597446][T12849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.610571][T12849] Cannot create hsr debugfs directory [ 346.694863][ T4703] bond0: (slave wlan1): Releasing backup interface [ 347.170892][T13017] netlink: 'syz.1.3148': attribute type 39 has an invalid length. [ 347.278818][ T4703] device hsr_slave_0 left promiscuous mode [ 347.330839][ T4703] device hsr_slave_1 left promiscuous mode [ 347.360417][ T4703] device bridge_slave_1 left promiscuous mode [ 347.378286][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.427275][ T4703] device bridge_slave_0 left promiscuous mode [ 347.441615][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.469553][ T4703] device veth1_macvtap left promiscuous mode [ 347.484749][ T4703] device veth1_vlan left promiscuous mode [ 347.496416][ T4703] device veth0_vlan left promiscuous mode [ 347.507933][T13031] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3152'. [ 347.519487][T13031] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 347.891550][ T4703] team0 (unregistering): Port device team_slave_1 removed [ 347.912516][ T4703] team0 (unregistering): Port device team_slave_0 removed [ 347.929739][ T4703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.948094][ T4703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.034099][ T4703] bond0 (unregistering): Released all slaves [ 348.111811][T13045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3154'. [ 348.512590][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 349.100054][T13075] netlink: 'syz.4.3161': attribute type 39 has an invalid length. [ 349.256399][T12849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.329262][T12849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.376575][T12849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.497124][T12849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.300853][T13113] netlink: 'syz.3.3168': attribute type 10 has an invalid length. [ 350.313064][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3168'. [ 350.354615][T13113] batman_adv: batadv0: Adding interface: virt_wifi0 [ 350.379851][T13113] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.424088][T13113] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 350.456400][T13128] netlink: 'syz.4.3171': attribute type 10 has an invalid length. [ 350.593931][ T1292] Bluetooth: hci0: command 0x0419 tx timeout [ 350.658401][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.766735][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.803882][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.848446][T12849] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.901441][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.952804][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.997153][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.004758][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.065681][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.098863][T13153] netlink: 'syz.1.3175': attribute type 39 has an invalid length. [ 351.141007][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.172905][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.202667][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.209807][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.315662][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.340540][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.408823][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.458950][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.501173][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.576856][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.705679][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.724449][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.761168][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.794168][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.836172][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.894108][T12849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.402186][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.409009][T13200] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3184'. [ 352.412707][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.470617][T13200] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3184'. [ 352.564389][T12849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.604669][T13197] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3184'. [ 352.682339][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.695111][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.779123][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.799743][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.837990][T12849] device veth0_vlan entered promiscuous mode [ 352.856383][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.888834][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.988310][T12849] device veth1_vlan entered promiscuous mode [ 353.006490][T13220] netlink: 'syz.3.3188': attribute type 39 has an invalid length. [ 353.126613][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.143898][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.206669][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.246453][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.279593][T12849] device veth0_macvtap entered promiscuous mode [ 353.337666][T12849] device veth1_macvtap entered promiscuous mode [ 353.462301][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.504256][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.536970][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.556591][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.579396][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.598170][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.622634][T12849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.651463][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.685642][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.734082][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.775926][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.804858][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.836315][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.851368][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.881118][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.901843][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.933519][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.951816][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.973835][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.989491][T12849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.010109][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.039857][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.082975][T12849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.108895][T12849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.135659][T12849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.164419][T12849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.398535][ T5219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.448077][ T5219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.505198][ T5222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.537792][ T5222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.779563][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.805786][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.926419][T13283] netlink: 'syz.4.3200': attribute type 39 has an invalid length. [ 355.504487][T13303] FAULT_INJECTION: forcing a failure. [ 355.504487][T13303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.572234][T13303] CPU: 1 PID: 13303 Comm: syz.4.3206 Not tainted 5.15.167-syzkaller #0 [ 355.580582][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.590665][T13303] Call Trace: [ 355.593978][T13303] [ 355.597107][T13303] dump_stack_lvl+0x1e3/0x2d0 [ 355.601906][T13303] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 355.607576][T13303] ? panic+0x860/0x860 [ 355.611700][T13303] should_fail+0x38a/0x4c0 [ 355.616167][T13303] _copy_from_user+0x2d/0x170 [ 355.621061][T13303] __sys_bpf+0x1d5/0x670 [ 355.625339][T13303] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 355.630770][T13303] ? trace_hardirqs_on+0x30/0x80 [ 355.635744][T13303] ? syscall_enter_from_user_mode+0x37/0x240 [ 355.642057][T13303] __x64_sys_bpf+0x78/0x90 [ 355.646686][T13303] do_syscall_64+0x3b/0xb0 [ 355.651132][T13303] ? clear_bhb_loop+0x15/0x70 [ 355.655845][T13303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.661768][T13303] RIP: 0033:0x7f444daecff9 [ 355.666210][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.685843][T13303] RSP: 002b:00007f444bf65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.694291][T13303] RAX: ffffffffffffffda RBX: 00007f444dca4f80 RCX: 00007f444daecff9 [ 355.702304][T13303] RDX: 0000000000000010 RSI: 0000000020001300 RDI: 000000000000000f [ 355.710413][T13303] RBP: 00007f444bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 355.718425][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.726422][T13303] R13: 0000000000000000 R14: 00007f444dca4f80 R15: 00007fff8293e7f8 [ 355.734443][T13303] [ 359.884384][T13337] netlink: 'syz.1.3212': attribute type 39 has an invalid length. [ 360.432438][T13364] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3222'. [ 360.487978][T13364] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 360.505935][T13366] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3223'. [ 360.537654][T13366] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 360.583872][ T4703] bond0: (slave ªªªªªª): Releasing backup interface [ 360.887587][T13380] netlink: 'syz.3.3226': attribute type 39 has an invalid length. [ 361.143339][ T4703] device hsr_slave_0 left promiscuous mode [ 361.171520][ T4703] device hsr_slave_1 left promiscuous mode [ 361.195239][ T4703] batman_adv: batadv0: Removing interface: team0 [ 361.285535][ T4703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.293354][ T4703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.456933][ T4703] device bridge_slave_1 left promiscuous mode [ 361.534403][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.559867][ T4703] device bridge_slave_0 left promiscuous mode [ 361.594824][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.851811][ T4703] device veth1_macvtap left promiscuous mode [ 361.857958][ T4703] device veth1_vlan left promiscuous mode [ 362.120938][ T4703] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 362.141196][ T4703] team0 (unregistering): Port device team_slave_1 removed [ 362.159060][ T4703] team0 (unregistering): Port device team_slave_0 removed [ 362.174507][ T4703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.196086][ T4703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.278464][ T4703] bond0 (unregistering): Released all slaves [ 362.350295][T13385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3227'. [ 362.848313][T13417] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3236'. [ 362.889687][T13417] netlink: 'syz.4.3236': attribute type 1 has an invalid length. [ 363.185371][T13434] netlink: 'syz.4.3240': attribute type 39 has an invalid length. [ 363.241391][T13437] netlink: 'syz.2.3239': attribute type 25 has an invalid length. [ 363.523605][T13445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3245'. [ 366.390332][T13462] FAULT_INJECTION: forcing a failure. [ 366.390332][T13462] name failslab, interval 1, probability 0, space 0, times 0 [ 366.461313][T13462] CPU: 0 PID: 13462 Comm: syz.1.3250 Not tainted 5.15.167-syzkaller #0 [ 366.469968][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.480224][T13462] Call Trace: [ 366.483548][T13462] [ 366.486498][T13462] dump_stack_lvl+0x1e3/0x2d0 [ 366.491206][T13462] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 366.496869][T13462] ? panic+0x860/0x860 [ 366.500965][T13462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.507153][T13462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.513436][T13462] should_fail+0x38a/0x4c0 [ 366.517906][T13462] should_failslab+0x5/0x20 [ 366.522607][T13462] slab_pre_alloc_hook+0x53/0xc0 [ 366.527607][T13462] kmem_cache_alloc_node+0x49/0x2c0 [ 366.532944][T13462] ? __alloc_skb+0xdd/0x590 [ 366.537478][T13462] __alloc_skb+0xdd/0x590 [ 366.541927][T13462] netlink_sendmsg+0x6f8/0xd60 [ 366.546781][T13462] ? netlink_getsockopt+0x5b0/0x5b0 [ 366.552019][T13462] ? aa_sock_msg_perm+0x91/0x150 [ 366.556982][T13462] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 366.562284][T13462] ? security_socket_sendmsg+0x7d/0xa0 [ 366.567767][T13462] ? netlink_getsockopt+0x5b0/0x5b0 [ 366.573209][T13462] ____sys_sendmsg+0x59e/0x8f0 [ 366.578015][T13462] ? iovec_from_user+0x300/0x390 [ 366.582990][T13462] ? __sys_sendmsg_sock+0x30/0x30 [ 366.588065][T13462] ___sys_sendmsg+0x252/0x2e0 [ 366.592778][T13462] ? __sys_sendmsg+0x260/0x260 [ 366.597628][T13462] ? __fdget+0x191/0x220 [ 366.601899][T13462] __se_sys_sendmsg+0x19a/0x260 [ 366.606866][T13462] ? __x64_sys_sendmsg+0x80/0x80 [ 366.611826][T13462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.618041][T13462] do_syscall_64+0x3b/0xb0 [ 366.622480][T13462] ? clear_bhb_loop+0x15/0x70 [ 366.627180][T13462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.633155][T13462] RIP: 0033:0x7f4e4bc14ff9 [ 366.637633][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.657525][T13462] RSP: 002b:00007f4e4a08d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.666004][T13462] RAX: ffffffffffffffda RBX: 00007f4e4bdccf80 RCX: 00007f4e4bc14ff9 [ 366.673996][T13462] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 366.682193][T13462] RBP: 00007f4e4a08d090 R08: 0000000000000000 R09: 0000000000000000 [ 366.690274][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.698278][T13462] R13: 0000000000000000 R14: 00007f4e4bdccf80 R15: 00007ffd0b69e6b8 [ 366.706321][T13462] [ 367.876369][T13473] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3254'. [ 367.929061][T13473] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 368.466728][T13482] netlink: 'syz.2.3256': attribute type 39 has an invalid length. [ 368.856857][T13482] device veth0_macvtap left promiscuous mode [ 369.603597][T13505] FAULT_INJECTION: forcing a failure. [ 369.603597][T13505] name failslab, interval 1, probability 0, space 0, times 0 [ 369.664911][T13505] CPU: 0 PID: 13505 Comm: syz.2.3262 Not tainted 5.15.167-syzkaller #0 [ 369.673213][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.683461][T13505] Call Trace: [ 369.686761][T13505] [ 369.689696][T13505] dump_stack_lvl+0x1e3/0x2d0 [ 369.694394][T13505] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 369.700049][T13505] ? panic+0x860/0x860 [ 369.704135][T13505] ? __might_sleep+0xc0/0xc0 [ 369.708748][T13505] should_fail+0x38a/0x4c0 [ 369.713185][T13505] should_failslab+0x5/0x20 [ 369.717698][T13505] slab_pre_alloc_hook+0x53/0xc0 [ 369.722645][T13505] __kmalloc_node_track_caller+0x6b/0x390 [ 369.728372][T13505] ? netlink_sendmsg+0x6f8/0xd60 [ 369.733315][T13505] ? kmem_cache_alloc_node+0x154/0x2c0 [ 369.738785][T13505] ? __alloc_skb+0xdd/0x590 [ 369.743296][T13505] ? netlink_sendmsg+0x6f8/0xd60 [ 369.748239][T13505] __alloc_skb+0x12c/0x590 [ 369.752666][T13505] netlink_sendmsg+0x6f8/0xd60 [ 369.757456][T13505] ? netlink_getsockopt+0x5b0/0x5b0 [ 369.762666][T13505] ? aa_sock_msg_perm+0x91/0x150 [ 369.767612][T13505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 369.772911][T13505] ? security_socket_sendmsg+0x7d/0xa0 [ 369.778639][T13505] ? netlink_getsockopt+0x5b0/0x5b0 [ 369.783849][T13505] ____sys_sendmsg+0x59e/0x8f0 [ 369.788622][T13505] ? iovec_from_user+0x300/0x390 [ 369.793576][T13505] ? __sys_sendmsg_sock+0x30/0x30 [ 369.798710][T13505] ___sys_sendmsg+0x252/0x2e0 [ 369.803411][T13505] ? __sys_sendmsg+0x260/0x260 [ 369.808307][T13505] ? __fdget+0x191/0x220 [ 369.812565][T13505] __se_sys_sendmsg+0x19a/0x260 [ 369.817525][T13505] ? __x64_sys_sendmsg+0x80/0x80 [ 369.822571][T13505] ? syscall_enter_from_user_mode+0x2e/0x240 [ 369.828563][T13505] ? lockdep_hardirqs_on+0x94/0x130 [ 369.833888][T13505] ? syscall_enter_from_user_mode+0x2e/0x240 [ 369.839894][T13505] do_syscall_64+0x3b/0xb0 [ 369.844338][T13505] ? clear_bhb_loop+0x15/0x70 [ 369.849027][T13505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.854933][T13505] RIP: 0033:0x7faa4bf0dff9 [ 369.859357][T13505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.880224][T13505] RSP: 002b:00007faa4a386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.888666][T13505] RAX: ffffffffffffffda RBX: 00007faa4c0c5f80 RCX: 00007faa4bf0dff9 [ 369.896648][T13505] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 369.904620][T13505] RBP: 00007faa4a386090 R08: 0000000000000000 R09: 0000000000000000 [ 369.912615][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.920762][T13505] R13: 0000000000000000 R14: 00007faa4c0c5f80 R15: 00007ffce1071cc8 [ 369.928752][T13505] [ 369.956874][T13503] device syzkaller0 entered promiscuous mode [ 370.418232][T13518] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3266'. [ 370.441856][T13518] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 370.571597][T13521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3267'. [ 370.877258][T13536] FAULT_INJECTION: forcing a failure. [ 370.877258][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 370.890851][T13536] CPU: 1 PID: 13536 Comm: syz.3.3273 Not tainted 5.15.167-syzkaller #0 [ 370.899138][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.909623][T13536] Call Trace: [ 370.912933][T13536] [ 370.915891][T13536] dump_stack_lvl+0x1e3/0x2d0 [ 370.920741][T13536] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 370.926525][T13536] ? panic+0x860/0x860 [ 370.930877][T13536] should_fail+0x38a/0x4c0 [ 370.935347][T13536] should_failslab+0x5/0x20 [ 370.940055][T13536] slab_pre_alloc_hook+0x53/0xc0 [ 370.945030][T13536] ? xas_create+0x654/0x1620 [ 370.949737][T13536] kmem_cache_alloc+0x3f/0x280 [ 370.954543][T13536] xas_create+0x654/0x1620 [ 370.959009][T13536] xas_store+0x97/0x19e0 [ 370.963275][T13536] ? xas_find_marked+0x174/0x10e0 [ 370.968518][T13536] __xa_alloc+0x29d/0x3f0 [ 370.972884][T13536] ? xa_get_order+0x550/0x550 [ 370.977590][T13536] ? __rwlock_init+0x140/0x140 [ 370.982474][T13536] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 370.988489][T13536] __qrtr_bind+0x216/0x7d0 [ 370.993002][T13536] ? qrtr_tx_wait+0x830/0x830 [ 370.997707][T13536] ? qrtr_sendmsg+0x1e6/0xc10 [ 371.002407][T13536] ? _local_bh_enable+0xa0/0xa0 [ 371.007298][T13536] qrtr_sendmsg+0x41a/0xc10 [ 371.011841][T13536] ? qrtr_ioctl+0x3c0/0x3c0 [ 371.016369][T13536] ? aa_sock_msg_perm+0x91/0x150 [ 371.021708][T13536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 371.027016][T13536] ? security_socket_sendmsg+0x7d/0xa0 [ 371.032503][T13536] ? qrtr_ioctl+0x3c0/0x3c0 [ 371.037039][T13536] ____sys_sendmsg+0x59e/0x8f0 [ 371.041832][T13536] ? iovec_from_user+0x5d/0x390 [ 371.046716][T13536] ? __sys_sendmsg_sock+0x30/0x30 [ 371.051875][T13536] ___sys_sendmsg+0x252/0x2e0 [ 371.056615][T13536] ? __sys_sendmsg+0x260/0x260 [ 371.061488][T13536] ? __fdget+0x191/0x220 [ 371.065768][T13536] __se_sys_sendmsg+0x19a/0x260 [ 371.070679][T13536] ? __x64_sys_sendmsg+0x80/0x80 [ 371.076031][T13536] ? syscall_enter_from_user_mode+0x2e/0x240 [ 371.082049][T13536] ? lockdep_hardirqs_on+0x94/0x130 [ 371.087288][T13536] ? syscall_enter_from_user_mode+0x2e/0x240 [ 371.093323][T13536] do_syscall_64+0x3b/0xb0 [ 371.097769][T13536] ? clear_bhb_loop+0x15/0x70 [ 371.102470][T13536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.108389][T13536] RIP: 0033:0x7f892e619ff9 [ 371.112824][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.132540][T13536] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.140983][T13536] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 371.149070][T13536] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 371.157091][T13536] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 371.165094][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.173104][T13536] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 371.181123][T13536] [ 371.482840][T13555] tap0: tun_chr_ioctl cmd 1074025672 [ 371.488355][T13555] tap0: ignored: set checksum enabled [ 372.056919][T13568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3284'. [ 372.355337][T13574] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3281'. [ 372.522090][T13574] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 374.371505][T13623] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3299'. [ 374.452030][T13623] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 374.478567][T13630] netlink: 'syz.1.3301': attribute type 28 has an invalid length. [ 374.598146][T13629] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.628053][T13629] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3302'. [ 374.794942][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3306'. [ 375.477624][T13669] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3316'. [ 375.508486][T13667] tap0: tun_chr_ioctl cmd 1074025677 [ 375.522194][T13667] tap0: linktype set to 774 [ 375.538284][T13667] netlink: 'syz.2.3315': attribute type 2 has an invalid length. [ 375.547953][T13667] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3315'. [ 375.809406][T13682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3320'. [ 376.069181][T13695] FAULT_INJECTION: forcing a failure. [ 376.069181][T13695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.083670][T13695] CPU: 0 PID: 13695 Comm: syz.3.3326 Not tainted 5.15.167-syzkaller #0 [ 376.092229][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.102308][T13695] Call Trace: [ 376.105758][T13695] [ 376.108808][T13695] dump_stack_lvl+0x1e3/0x2d0 [ 376.113635][T13695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 376.119393][T13695] ? panic+0x860/0x860 [ 376.123507][T13695] should_fail+0x38a/0x4c0 [ 376.128055][T13695] _copy_from_user+0x2d/0x170 [ 376.133044][T13695] __tun_chr_ioctl+0x828/0x2270 [ 376.137943][T13695] ? tun_flow_create+0x310/0x310 [ 376.142916][T13695] ? bpf_lsm_file_ioctl+0x5/0x10 [ 376.147868][T13695] ? security_file_ioctl+0x7d/0xa0 [ 376.153001][T13695] ? tun_chr_poll+0x620/0x620 [ 376.157695][T13695] __se_sys_ioctl+0xf1/0x160 [ 376.162316][T13695] do_syscall_64+0x3b/0xb0 [ 376.166746][T13695] ? clear_bhb_loop+0x15/0x70 [ 376.171442][T13695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.177353][T13695] RIP: 0033:0x7f892e619ff9 [ 376.181910][T13695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.201645][T13695] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.210082][T13695] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 376.218162][T13695] RDX: 00000000200001c0 RSI: 00000000400454da RDI: 0000000000000003 [ 376.226231][T13695] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 376.234215][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.242348][T13695] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 376.250376][T13695] [ 376.441549][T13704] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3327'. [ 377.161434][T13716] netlink: 'syz.0.3333': attribute type 21 has an invalid length. [ 377.190316][T13716] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3333'. [ 377.215566][T13716] netlink: 'syz.0.3333': attribute type 4 has an invalid length. [ 377.318494][T13721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3334'. [ 378.299173][T13740] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3341'. [ 378.512593][T13749] netlink: 'syz.4.3345': attribute type 1 has an invalid length. [ 378.827692][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.834146][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.069522][T13776] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.088202][T13776] __nla_validate_parse: 2 callbacks suppressed [ 380.088222][T13776] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3356'. [ 380.202242][T13780] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3357'. [ 380.222139][T13780] netlink: 'syz.2.3357': attribute type 1 has an invalid length. [ 380.291243][T13785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3359'. [ 380.512487][T13795] syz.3.3361[13795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.512771][T13795] syz.3.3361[13795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.159755][T13811] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3368'. [ 381.350472][T13814] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3369'. [ 381.360107][T13814] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 381.454201][T13817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3371'. [ 381.661243][T13831] netlink: 'syz.0.3375': attribute type 39 has an invalid length. [ 381.768230][T13830] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3376'. [ 382.424241][T13853] FAULT_INJECTION: forcing a failure. [ 382.424241][T13853] name failslab, interval 1, probability 0, space 0, times 0 [ 382.461999][T13853] CPU: 0 PID: 13853 Comm: syz.4.3381 Not tainted 5.15.167-syzkaller #0 [ 382.470394][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.480489][T13853] Call Trace: [ 382.483897][T13853] [ 382.486856][T13853] dump_stack_lvl+0x1e3/0x2d0 [ 382.491571][T13853] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 382.497858][T13853] ? panic+0x860/0x860 [ 382.502032][T13853] ? __might_sleep+0xc0/0xc0 [ 382.506664][T13853] ? sctp_hash_key+0x210/0x210 [ 382.511478][T13853] should_fail+0x38a/0x4c0 [ 382.515949][T13853] should_failslab+0x5/0x20 [ 382.520505][T13853] slab_pre_alloc_hook+0x53/0xc0 [ 382.525504][T13853] kmem_cache_alloc_trace+0x49/0x290 [ 382.530831][T13853] ? sctp_association_new+0x86/0x2360 [ 382.536241][T13853] sctp_association_new+0x86/0x2360 [ 382.541484][T13853] ? apparmor_capable+0x12e/0x190 [ 382.546563][T13853] ? bpf_lsm_capable+0x5/0x10 [ 382.551288][T13853] ? security_capable+0x86/0xb0 [ 382.556303][T13853] sctp_connect_new_asoc+0x2ca/0x6a0 [ 382.561648][T13853] ? __sctp_connect+0xe10/0xe10 [ 382.566777][T13853] ? sctp_sendmsg+0xb21/0x3370 [ 382.571747][T13853] ? _local_bh_enable+0xa0/0xa0 [ 382.576650][T13853] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 382.582242][T13853] ? security_sctp_bind_connect+0x86/0xb0 [ 382.588163][T13853] sctp_sendmsg+0x1cd9/0x3370 [ 382.593055][T13853] ? sctp_getsockopt+0x7f0/0x7f0 [ 382.598019][T13853] ? aa_af_perm+0x350/0x350 [ 382.602834][T13853] ? validate_chain+0x112/0x5930 [ 382.607811][T13853] ? inet_sendmsg+0x81/0x310 [ 382.612488][T13853] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.617788][T13853] ? security_socket_sendmsg+0x7d/0xa0 [ 382.623283][T13853] ? inet_send_prepare+0x250/0x250 [ 382.628417][T13853] ____sys_sendmsg+0x59e/0x8f0 [ 382.633221][T13853] ? iovec_from_user+0x300/0x390 [ 382.638212][T13853] ? __sys_sendmsg_sock+0x30/0x30 [ 382.643321][T13853] ___sys_sendmsg+0x252/0x2e0 [ 382.648030][T13853] ? __sys_sendmsg+0x260/0x260 [ 382.652861][T13853] ? __fdget+0x191/0x220 [ 382.657124][T13853] __se_sys_sendmsg+0x19a/0x260 [ 382.662286][T13853] ? __x64_sys_sendmsg+0x80/0x80 [ 382.667270][T13853] ? syscall_enter_from_user_mode+0x2e/0x240 [ 382.673424][T13853] ? lockdep_hardirqs_on+0x94/0x130 [ 382.678644][T13853] ? syscall_enter_from_user_mode+0x2e/0x240 [ 382.684642][T13853] do_syscall_64+0x3b/0xb0 [ 382.689192][T13853] ? clear_bhb_loop+0x15/0x70 [ 382.693902][T13853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.699805][T13853] RIP: 0033:0x7f444daecff9 [ 382.704342][T13853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.724060][T13853] RSP: 002b:00007f444bf65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.732519][T13853] RAX: ffffffffffffffda RBX: 00007f444dca4f80 RCX: 00007f444daecff9 [ 382.740612][T13853] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 382.748630][T13853] RBP: 00007f444bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 382.756618][T13853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.764621][T13853] R13: 0000000000000000 R14: 00007f444dca4f80 R15: 00007fff8293e7f8 [ 382.772734][T13853] [ 383.031581][T13863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3385'. [ 384.297937][T13899] FAULT_INJECTION: forcing a failure. [ 384.297937][T13899] name failslab, interval 1, probability 0, space 0, times 0 [ 384.391192][T13904] netlink: 'syz.1.3395': attribute type 29 has an invalid length. [ 384.416656][T13899] CPU: 1 PID: 13899 Comm: syz.3.3394 Not tainted 5.15.167-syzkaller #0 [ 384.425173][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.435259][T13899] Call Trace: [ 384.438564][T13899] [ 384.441517][T13899] dump_stack_lvl+0x1e3/0x2d0 [ 384.446230][T13899] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 384.451899][T13899] ? panic+0x860/0x860 [ 384.456009][T13899] ? __might_sleep+0xc0/0xc0 [ 384.460647][T13899] should_fail+0x38a/0x4c0 [ 384.465202][T13899] should_failslab+0x5/0x20 [ 384.469744][T13899] slab_pre_alloc_hook+0x53/0xc0 [ 384.474826][T13899] __kmalloc+0x6e/0x300 [ 384.479034][T13899] ? sk_prot_alloc+0xe0/0x200 [ 384.483747][T13899] sk_prot_alloc+0xe0/0x200 [ 384.488277][T13899] ? sk_alloc+0x23/0x310 [ 384.492551][T13899] sk_alloc+0x35/0x310 [ 384.496651][T13899] bpf_prog_test_run_skb+0x362/0x1420 [ 384.502074][T13899] ? cpu_online+0x70/0x70 [ 384.506440][T13899] ? cpu_online+0x70/0x70 [ 384.510797][T13899] bpf_prog_test_run+0x32f/0x3a0 [ 384.515767][T13899] __sys_bpf+0x3ac/0x670 [ 384.520054][T13899] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 384.525473][T13899] ? syscall_enter_from_user_mode+0x2e/0x240 [ 384.531578][T13899] ? syscall_enter_from_user_mode+0x2e/0x240 [ 384.537771][T13899] ? lockdep_hardirqs_on+0x94/0x130 [ 384.543015][T13899] __x64_sys_bpf+0x78/0x90 [ 384.547576][T13899] do_syscall_64+0x3b/0xb0 [ 384.552410][T13899] ? clear_bhb_loop+0x15/0x70 [ 384.557127][T13899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.563141][T13899] RIP: 0033:0x7f892e619ff9 [ 384.567798][T13899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.587439][T13899] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.595890][T13899] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 384.603890][T13899] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 384.612146][T13899] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 384.620434][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.628549][T13899] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 384.636579][T13899] [ 384.667548][T13903] netlink: 'syz.0.3396': attribute type 4 has an invalid length. [ 384.689427][T13904] netlink: 'syz.1.3395': attribute type 29 has an invalid length. [ 384.705596][T13903] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.3396'. [ 384.726613][T13910] netlink: 'syz.1.3395': attribute type 29 has an invalid length. [ 384.937983][T13918] FAULT_INJECTION: forcing a failure. [ 384.937983][T13918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.957221][T13918] CPU: 1 PID: 13918 Comm: syz.2.3399 Not tainted 5.15.167-syzkaller #0 [ 384.965862][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.975948][T13918] Call Trace: [ 384.979268][T13918] [ 384.982215][T13918] dump_stack_lvl+0x1e3/0x2d0 [ 384.986927][T13918] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 384.992607][T13918] ? panic+0x860/0x860 [ 384.996717][T13918] ? snprintf+0xd6/0x120 [ 385.000988][T13918] should_fail+0x38a/0x4c0 [ 385.005450][T13918] _copy_to_user+0x2d/0x130 [ 385.010006][T13918] simple_read_from_buffer+0xc6/0x150 [ 385.019259][T13918] proc_fail_nth_read+0x1a3/0x210 [ 385.024364][T13918] ? proc_fault_inject_write+0x390/0x390 [ 385.030046][T13918] ? fsnotify_perm+0x442/0x590 [ 385.034861][T13918] ? proc_fault_inject_write+0x390/0x390 [ 385.040530][T13918] vfs_read+0x2fc/0xe10 [ 385.042809][T13916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3398'. [ 385.044723][T13918] ? kernel_read+0x1f0/0x1f0 [ 385.058441][T13918] ? __fget_files+0x413/0x480 [ 385.063285][T13918] ? mutex_lock_nested+0x17/0x20 [ 385.068253][T13918] ? __fdget_pos+0x2cb/0x380 [ 385.072877][T13918] ? ksys_read+0x77/0x2c0 [ 385.077238][T13918] ksys_read+0x1a2/0x2c0 [ 385.081746][T13918] ? print_irqtrace_events+0x210/0x210 [ 385.087241][T13918] ? vfs_write+0xe50/0xe50 [ 385.091678][T13918] ? syscall_enter_from_user_mode+0x2e/0x240 [ 385.097709][T13918] ? lockdep_hardirqs_on+0x94/0x130 [ 385.102979][T13918] ? syscall_enter_from_user_mode+0x2e/0x240 [ 385.108995][T13918] do_syscall_64+0x3b/0xb0 [ 385.113421][T13918] ? clear_bhb_loop+0x15/0x70 [ 385.118107][T13918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.124006][T13918] RIP: 0033:0x7faa4bf0ca3c [ 385.128428][T13918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 385.148127][T13918] RSP: 002b:00007faa4a386030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.156557][T13918] RAX: ffffffffffffffda RBX: 00007faa4c0c5f80 RCX: 00007faa4bf0ca3c [ 385.164537][T13918] RDX: 000000000000000f RSI: 00007faa4a3860a0 RDI: 0000000000000006 [ 385.172613][T13918] RBP: 00007faa4a386090 R08: 0000000000000000 R09: 0000000000000000 [ 385.180589][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.188561][T13918] R13: 0000000000000000 R14: 00007faa4c0c5f80 R15: 00007ffce1071cc8 [ 385.196595][T13918] [ 385.428132][T13927] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3405'. [ 385.450781][T13927] netlink: zone id is out of range [ 385.458589][T13927] netlink: zone id is out of range [ 385.472932][T13927] netlink: zone id is out of range [ 386.637065][T13958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3414'. [ 386.650115][T13955] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3413'. [ 386.673559][T13955] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 388.435599][T13976] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3419'. [ 388.544024][T13984] FAULT_INJECTION: forcing a failure. [ 388.544024][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.581569][T13984] CPU: 0 PID: 13984 Comm: syz.2.3423 Not tainted 5.15.167-syzkaller #0 [ 388.589890][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.600011][T13984] Call Trace: [ 388.603334][T13984] [ 388.606301][T13984] dump_stack_lvl+0x1e3/0x2d0 [ 388.611027][T13984] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 388.616745][T13984] ? panic+0x860/0x860 [ 388.620882][T13984] ? snprintf+0xd6/0x120 [ 388.625200][T13984] should_fail+0x38a/0x4c0 [ 388.629668][T13984] _copy_to_user+0x2d/0x130 [ 388.634216][T13984] simple_read_from_buffer+0xc6/0x150 [ 388.639649][T13984] proc_fail_nth_read+0x1a3/0x210 [ 388.644753][T13984] ? proc_fault_inject_write+0x390/0x390 [ 388.650587][T13984] ? fsnotify_perm+0x442/0x590 [ 388.655401][T13984] ? proc_fault_inject_write+0x390/0x390 [ 388.661125][T13984] vfs_read+0x2fc/0xe10 [ 388.665496][T13984] ? kernel_read+0x1f0/0x1f0 [ 388.670155][T13984] ? __fget_files+0x413/0x480 [ 388.674903][T13984] ? mutex_lock_nested+0x17/0x20 [ 388.679884][T13984] ? __fdget_pos+0x2cb/0x380 [ 388.684665][T13984] ? ksys_read+0x77/0x2c0 [ 388.689139][T13984] ksys_read+0x1a2/0x2c0 [ 388.693422][T13984] ? print_irqtrace_events+0x210/0x210 [ 388.698925][T13984] ? vfs_write+0xe50/0xe50 [ 388.703367][T13984] ? syscall_enter_from_user_mode+0x2e/0x240 [ 388.709374][T13984] ? lockdep_hardirqs_on+0x94/0x130 [ 388.714599][T13984] ? syscall_enter_from_user_mode+0x2e/0x240 [ 388.720607][T13984] do_syscall_64+0x3b/0xb0 [ 388.725038][T13984] ? clear_bhb_loop+0x15/0x70 [ 388.729735][T13984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.735647][T13984] RIP: 0033:0x7faa4bf0ca3c [ 388.740081][T13984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 388.759710][T13984] RSP: 002b:00007faa4a386030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.768147][T13984] RAX: ffffffffffffffda RBX: 00007faa4c0c5f80 RCX: 00007faa4bf0ca3c [ 388.776131][T13984] RDX: 000000000000000f RSI: 00007faa4a3860a0 RDI: 0000000000000005 [ 388.784408][T13984] RBP: 00007faa4a386090 R08: 0000000000000000 R09: 0000000000000000 [ 388.792568][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.800552][T13984] R13: 0000000000000000 R14: 00007faa4c0c5f80 R15: 00007ffce1071cc8 [ 388.808698][T13984] [ 388.983407][T13998] netlink: 'syz.1.3425': attribute type 39 has an invalid length. [ 388.985629][T14000] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3427'. [ 389.032494][T14000] netlink: zone id is out of range [ 389.052304][T14000] netlink: zone id is out of range [ 389.061247][T14000] netlink: zone id is out of range [ 389.098598][T13997] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3426'. [ 389.127100][T13997] netlink: 'syz.3.3426': attribute type 1 has an invalid length. [ 389.811892][T14023] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3434'. [ 389.826917][T14023] netlink: zone id is out of range [ 389.836103][T14023] netlink: zone id is out of range [ 389.864745][T14023] netlink: zone id is out of range [ 390.243101][T14036] netlink: 'syz.0.3438': attribute type 39 has an invalid length. [ 390.301982][T14036] device veth0_macvtap left promiscuous mode [ 390.443486][T14044] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3440'. [ 390.461581][T14044] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 391.421023][T14086] tap0: tun_chr_ioctl cmd 1074025675 [ 391.433165][T14086] tap0: persist enabled [ 391.485990][T14088] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3452'. [ 391.525780][T14088] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 391.550480][T14091] tap0: tun_chr_ioctl cmd 1074025675 [ 391.700091][T14091] tap0: persist enabled [ 391.874169][T14100] netlink: 'syz.4.3454': attribute type 39 has an invalid length. [ 393.012354][T14132] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3465'. [ 393.041556][T14132] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 393.794065][T14147] netlink: 'syz.2.3468': attribute type 39 has an invalid length. [ 394.102160][T14153] bridge0: port 3(hsr_slave_1) entered blocking state [ 394.159236][T14153] bridge0: port 3(hsr_slave_1) entered disabled state [ 394.428617][T14173] netlink: 'syz.2.3472': attribute type 6 has an invalid length. [ 394.648912][T14182] FAULT_INJECTION: forcing a failure. [ 394.648912][T14182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.692766][T14182] CPU: 1 PID: 14182 Comm: syz.1.3476 Not tainted 5.15.167-syzkaller #0 [ 394.701078][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.711160][T14182] Call Trace: [ 394.714469][T14182] [ 394.717429][T14182] dump_stack_lvl+0x1e3/0x2d0 [ 394.722231][T14182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 394.727902][T14182] ? panic+0x860/0x860 [ 394.732037][T14182] should_fail+0x38a/0x4c0 [ 394.736503][T14182] _copy_from_user+0x2d/0x170 [ 394.741220][T14182] __sys_bpf+0x1d5/0x670 [ 394.745498][T14182] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 394.750925][T14182] ? syscall_enter_from_user_mode+0x2e/0x240 [ 394.756943][T14182] ? lockdep_hardirqs_on+0x94/0x130 [ 394.762185][T14182] __x64_sys_bpf+0x78/0x90 [ 394.766637][T14182] do_syscall_64+0x3b/0xb0 [ 394.771168][T14182] ? clear_bhb_loop+0x15/0x70 [ 394.775960][T14182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.781892][T14182] RIP: 0033:0x7f4e4bc14ff9 [ 394.786335][T14182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.806020][T14182] RSP: 002b:00007f4e4a08d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.814732][T14182] RAX: ffffffffffffffda RBX: 00007f4e4bdccf80 RCX: 00007f4e4bc14ff9 [ 394.822736][T14182] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 000000000000000a [ 394.830740][T14182] RBP: 00007f4e4a08d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.838749][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.846751][T14182] R13: 0000000000000000 R14: 00007f4e4bdccf80 R15: 00007ffd0b69e6b8 [ 394.854814][T14182] [ 395.002443][T14185] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3478'. [ 395.029296][T14185] netlink: 'syz.0.3478': attribute type 1 has an invalid length. [ 395.643454][T14215] netlink: 'syz.0.3482': attribute type 39 has an invalid length. [ 395.695562][T14218] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 395.739606][T14218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3485'. [ 395.887568][T14218] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 396.100758][T14231] FAULT_INJECTION: forcing a failure. [ 396.100758][T14231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.132021][T14231] CPU: 1 PID: 14231 Comm: syz.0.3489 Not tainted 5.15.167-syzkaller #0 [ 396.140335][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.150512][T14231] Call Trace: [ 396.153827][T14231] [ 396.156891][T14231] dump_stack_lvl+0x1e3/0x2d0 [ 396.161707][T14231] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 396.167387][T14231] ? panic+0x860/0x860 [ 396.171503][T14231] ? perf_trace_lock+0x138/0x440 [ 396.176595][T14231] should_fail+0x38a/0x4c0 [ 396.181064][T14231] _copy_from_user+0x2d/0x170 [ 396.185794][T14231] ___sys_recvmsg+0x150/0x690 [ 396.190524][T14231] ? __sys_recvmsg+0x260/0x260 [ 396.195535][T14231] ? __fdget+0x191/0x220 [ 396.199824][T14231] __x64_sys_recvmsg+0x1dc/0x2b0 [ 396.204904][T14231] ? ___sys_recvmsg+0x690/0x690 [ 396.209810][T14231] ? syscall_enter_from_user_mode+0x2e/0x240 [ 396.215931][T14231] ? lockdep_hardirqs_on+0x94/0x130 [ 396.221182][T14231] ? syscall_enter_from_user_mode+0x2e/0x240 [ 396.227236][T14231] do_syscall_64+0x3b/0xb0 [ 396.231709][T14231] ? clear_bhb_loop+0x15/0x70 [ 396.236442][T14231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.242383][T14231] RIP: 0033:0x7f1252cd0ff9 [ 396.246843][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.266730][T14231] RSP: 002b:00007f1251149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 396.275191][T14231] RAX: ffffffffffffffda RBX: 00007f1252e88f80 RCX: 00007f1252cd0ff9 [ 396.283201][T14231] RDX: 0000000000000102 RSI: 0000000020000440 RDI: 0000000000000003 [ 396.291208][T14231] RBP: 00007f1251149090 R08: 0000000000000000 R09: 0000000000000000 [ 396.299237][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.307363][T14231] R13: 0000000000000000 R14: 00007f1252e88f80 R15: 00007ffd827a1128 [ 396.315498][T14231] [ 396.643213][T14239] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3492'. [ 396.669168][T14239] netlink: 'syz.1.3492': attribute type 1 has an invalid length. [ 396.693005][T14242] netlink: 'syz.0.3491': attribute type 10 has an invalid length. [ 397.268348][T14267] FAULT_INJECTION: forcing a failure. [ 397.268348][T14267] name failslab, interval 1, probability 0, space 0, times 0 [ 397.269670][T14265] netlink: 'syz.1.3497': attribute type 39 has an invalid length. [ 397.297823][T14267] CPU: 1 PID: 14267 Comm: syz.3.3499 Not tainted 5.15.167-syzkaller #0 [ 397.306239][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.316345][T14267] Call Trace: [ 397.319665][T14267] [ 397.322640][T14267] dump_stack_lvl+0x1e3/0x2d0 [ 397.327549][T14267] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 397.333240][T14267] ? panic+0x860/0x860 [ 397.337376][T14267] ? __might_sleep+0xc0/0xc0 [ 397.342009][T14267] ? bpf_trace_run2+0x222/0x340 [ 397.346940][T14267] should_fail+0x38a/0x4c0 [ 397.351532][T14267] should_failslab+0x5/0x20 [ 397.356081][T14267] slab_pre_alloc_hook+0x53/0xc0 [ 397.361186][T14267] __kmalloc+0x6e/0x300 [ 397.365407][T14267] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 397.371209][T14267] tomoyo_realpath_from_path+0xd8/0x5e0 [ 397.376916][T14267] tomoyo_path_number_perm+0x225/0x810 [ 397.382480][T14267] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 397.388180][T14267] ? __fget_files+0x413/0x480 [ 397.392981][T14267] security_file_ioctl+0x6d/0xa0 [ 397.398089][T14267] __se_sys_ioctl+0x47/0x160 [ 397.402751][T14267] do_syscall_64+0x3b/0xb0 [ 397.407224][T14267] ? clear_bhb_loop+0x15/0x70 [ 397.411967][T14267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.417924][T14267] RIP: 0033:0x7f892e619ff9 [ 397.422434][T14267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.442302][T14267] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.450777][T14267] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 397.458798][T14267] RDX: 00000000200000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 397.466827][T14267] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 397.474856][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.483021][T14267] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 397.491139][T14267] [ 397.508874][T14267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.811245][T14281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3503'. [ 397.841545][T14282] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3504'. [ 397.852631][T14282] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 398.080518][T14292] FAULT_INJECTION: forcing a failure. [ 398.080518][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.122161][T14292] CPU: 0 PID: 14292 Comm: syz.3.3509 Not tainted 5.15.167-syzkaller #0 [ 398.130464][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.140557][T14292] Call Trace: [ 398.143865][T14292] [ 398.146816][T14292] dump_stack_lvl+0x1e3/0x2d0 [ 398.151533][T14292] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 398.157198][T14292] ? panic+0x860/0x860 [ 398.161576][T14292] should_fail+0x38a/0x4c0 [ 398.166024][T14292] _copy_from_user+0x2d/0x170 [ 398.170734][T14292] __sys_bpf+0x1d5/0x670 [ 398.175006][T14292] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 398.180426][T14292] ? syscall_enter_from_user_mode+0x2e/0x240 [ 398.186443][T14292] ? lockdep_hardirqs_on+0x94/0x130 [ 398.191693][T14292] __x64_sys_bpf+0x78/0x90 [ 398.196176][T14292] do_syscall_64+0x3b/0xb0 [ 398.200633][T14292] ? clear_bhb_loop+0x15/0x70 [ 398.205334][T14292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.211283][T14292] RIP: 0033:0x7f892e619ff9 [ 398.215727][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.235373][T14292] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.243826][T14292] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 398.251832][T14292] RDX: 0000000000000094 RSI: 0000000020000b00 RDI: 0000000000000005 [ 398.259930][T14292] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 398.267952][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.275958][T14292] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 398.283977][T14292] [ 398.555744][T14306] netlink: 'syz.2.3512': attribute type 39 has an invalid length. [ 398.945991][T14326] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3516'. [ 398.958937][T14328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3517'. [ 398.977897][T14326] netlink: 'syz.0.3516': attribute type 1 has an invalid length. [ 399.198125][T14341] FAULT_INJECTION: forcing a failure. [ 399.198125][T14341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.239062][T14337] device syzkaller0 entered promiscuous mode [ 399.274722][T14341] CPU: 0 PID: 14341 Comm: syz.1.3520 Not tainted 5.15.167-syzkaller #0 [ 399.283097][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.293235][T14341] Call Trace: [ 399.296564][T14341] [ 399.299518][T14341] dump_stack_lvl+0x1e3/0x2d0 [ 399.304238][T14341] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 399.309919][T14341] ? panic+0x860/0x860 [ 399.314035][T14341] should_fail+0x38a/0x4c0 [ 399.318502][T14341] prepare_alloc_pages+0x1db/0x5b0 [ 399.323654][T14341] __alloc_pages+0x14f/0x700 [ 399.328285][T14341] ? __rmqueue_pcplist+0x2030/0x2030 [ 399.333630][T14341] ? __phys_addr+0xb6/0x170 [ 399.338187][T14341] ? alloc_pages+0x458/0x570 [ 399.342815][T14341] alloc_skb_with_frags+0x208/0x780 [ 399.348058][T14341] sock_alloc_send_pskb+0x915/0xa50 [ 399.353346][T14341] ? __might_fault+0xb4/0x110 [ 399.358076][T14341] ? sock_kzfree_s+0x50/0x50 [ 399.362708][T14341] ? iov_iter_advance+0x1f8/0x380 [ 399.367781][T14341] tun_get_user+0xc16/0x40f0 [ 399.372446][T14341] ? tun_ring_recv+0xcc0/0xcc0 [ 399.377251][T14341] ? rcu_lock_release+0x5/0x20 [ 399.382071][T14341] tun_chr_write_iter+0x10c/0x1e0 [ 399.387142][T14341] vfs_write+0xacd/0xe50 [ 399.391432][T14341] ? file_end_write+0x250/0x250 [ 399.396474][T14341] ? __fget_files+0x413/0x480 [ 399.401201][T14341] ? __fdget_pos+0x1e9/0x380 [ 399.404098][T14343] netlink: 'syz.2.3521': attribute type 39 has an invalid length. [ 399.405822][T14341] ? ksys_write+0x77/0x2c0 [ 399.405858][T14341] ksys_write+0x1a2/0x2c0 [ 399.405883][T14341] ? print_irqtrace_events+0x210/0x210 [ 399.405909][T14341] ? __ia32_sys_read+0x80/0x80 [ 399.405935][T14341] ? syscall_enter_from_user_mode+0x2e/0x240 [ 399.405964][T14341] ? lockdep_hardirqs_on+0x94/0x130 [ 399.444347][T14341] ? syscall_enter_from_user_mode+0x2e/0x240 [ 399.450385][T14341] do_syscall_64+0x3b/0xb0 [ 399.454921][T14341] ? clear_bhb_loop+0x15/0x70 [ 399.459628][T14341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.465568][T14341] RIP: 0033:0x7f4e4bc14ff9 [ 399.470018][T14341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.489756][T14341] RSP: 002b:00007f4e4a06c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.498212][T14341] RAX: ffffffffffffffda RBX: 00007f4e4bdcd058 RCX: 00007f4e4bc14ff9 [ 399.506601][T14341] RDX: 000000000000ffdd RSI: 0000000020000440 RDI: 0000000000000003 [ 399.514605][T14341] RBP: 00007f4e4a06c090 R08: 0000000000000000 R09: 0000000000000000 [ 399.522614][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.530734][T14341] R13: 0000000000000001 R14: 00007f4e4bdcd058 R15: 00007ffd0b69e6b8 [ 399.538959][T14341] [ 401.052244][T14373] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3529'. [ 401.080759][T14373] netlink: 'syz.2.3529': attribute type 1 has an invalid length. [ 401.205062][T14374] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3530'. [ 401.548364][T14378] device syzkaller0 entered promiscuous mode [ 401.606932][T14384] IPv6: NLM_F_CREATE should be specified when creating new route [ 401.620884][T14384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3534'. [ 401.899280][T14395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3538'. [ 402.304147][T14405] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 402.332574][T14405] netlink: 'syz.2.3542': attribute type 29 has an invalid length. [ 402.937825][T14409] chnl_net:caif_netlink_parms(): no params data found [ 403.374042][T14440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3549'. [ 403.395457][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.413906][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.460643][T14409] device bridge_slave_0 entered promiscuous mode [ 403.506177][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.529002][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.551654][T14409] device bridge_slave_1 entered promiscuous mode [ 403.578964][T14449] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3551'. [ 403.690844][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.734649][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.751515][T14456] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3553'. [ 403.771396][T14456] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 403.890401][T14409] team0: Port device team_slave_0 added [ 403.934028][T14409] team0: Port device team_slave_1 added [ 404.077256][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.112690][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.177963][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.214256][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.221266][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.312037][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.422482][ T3611] Bluetooth: hci4: command 0x0409 tx timeout [ 404.447036][T14409] device hsr_slave_0 entered promiscuous mode [ 404.497386][T14409] device hsr_slave_1 entered promiscuous mode [ 404.517860][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.530300][T14409] Cannot create hsr debugfs directory [ 405.601572][T14409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.625761][T14477] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3561'. [ 405.723991][T14409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.870678][T14409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.929764][T14494] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3564'. [ 406.060806][T14498] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3566'. [ 406.090856][T14409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.127880][T14498] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 406.438588][T14409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.480210][T14409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.501816][ T3611] Bluetooth: hci4: command 0x041b tx timeout [ 406.536662][T14409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.576060][T14409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.966860][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.010097][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.032852][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.060789][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.122874][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.151992][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.191314][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.198717][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.269242][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.318865][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.345854][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.383124][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.390306][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.419558][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.467709][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.520866][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.552255][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.601969][T14532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3575'. [ 407.646021][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.662931][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.897114][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.976109][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.995589][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.005362][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.017717][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.030732][T14409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.141082][T14544] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3577'. [ 408.371457][T14554] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3580'. [ 408.452866][T14554] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 408.582098][ T1292] Bluetooth: hci4: command 0x040f tx timeout [ 408.835644][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.903962][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.949103][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.500585][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.526135][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.544319][ T154] kworker/dying (154) used greatest stack depth: 18104 bytes left [ 409.647010][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.669187][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.701072][T14409] device veth0_vlan entered promiscuous mode [ 409.731407][T14585] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3589'. [ 409.774978][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.808138][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.952884][T14409] device veth1_vlan entered promiscuous mode [ 409.975068][T14593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3590'. [ 410.074400][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.093746][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.237808][T14409] device veth0_macvtap entered promiscuous mode [ 410.298494][T14409] device veth1_macvtap entered promiscuous mode [ 410.474799][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.487184][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.505572][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.520809][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.532765][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.545984][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.558854][T14614] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3593'. [ 410.578586][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.582572][T14614] netlink: 'syz.2.3593': attribute type 1 has an invalid length. [ 410.602419][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.634626][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.653545][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.662055][ T3612] Bluetooth: hci4: command 0x0419 tx timeout [ 410.678582][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.712640][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.734648][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.746108][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.757528][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.768507][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.780571][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.791521][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.802692][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.815106][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.860207][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.907543][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.974622][T14409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.000945][T14409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.035948][T14409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.066422][T14409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.308693][T14630] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3599'. [ 411.532609][T14634] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3601'. [ 411.636028][ T5232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.655167][ T5232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.696602][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.065821][ T5219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.116482][ T5219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.127090][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.329484][ T4703] device hsr_slave_0 left promiscuous mode [ 412.338243][ T4703] device hsr_slave_1 left promiscuous mode [ 412.470684][ T4703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.506617][T14648] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3605'. [ 412.519052][ T4703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.532336][ T4703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.559078][ T4703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.572907][T14648] netlink: 'syz.0.3605': attribute type 1 has an invalid length. [ 412.613151][ T4703] batman_adv: batadv0: Removing interface: virt_wifi0 [ 412.637152][ T4703] device bridge_slave_1 left promiscuous mode [ 412.657997][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.709392][ T4703] device bridge_slave_0 left promiscuous mode [ 412.718508][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.819322][ T4703] device veth1_macvtap left promiscuous mode [ 412.830024][ T4703] device veth1_vlan left promiscuous mode [ 412.866974][ T4703] device veth0_vlan left promiscuous mode [ 413.594913][ T4703] team0 (unregistering): Port device team_slave_1 removed [ 413.619661][ T4703] team0 (unregistering): Port device team_slave_0 removed [ 413.639690][ T4703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.678057][ T4703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.843445][ T4703] bond0 (unregistering): Released all slaves [ 413.934290][T14679] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3612'. [ 413.952026][T14683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3613'. [ 414.255267][T14699] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3619'. [ 414.281118][T14699] netlink: 'syz.4.3619': attribute type 1 has an invalid length. [ 415.453394][T14730] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.502020][T14730] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3627'. [ 415.563352][T14732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3628'. [ 415.893237][T14740] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3631'. [ 415.904954][T14740] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 416.506158][T14746] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 417.627166][T14786] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3642'. [ 417.661026][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3643'. [ 418.123167][T14796] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3645'. [ 418.166495][T14796] netlink: 'syz.4.3645': attribute type 1 has an invalid length. [ 419.008496][T14844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3657'. [ 419.910376][T14860] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3660'. [ 420.436098][T14867] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3664'. [ 420.459474][T14867] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 420.977619][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3670'. [ 422.887108][T14919] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3678'. [ 422.923381][T14919] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 423.669112][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3685'. [ 424.481487][T14956] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3688'. [ 424.633955][T14973] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3694'. [ 424.643499][T14973] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 425.680242][T15006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3702'. [ 425.998074][T15019] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3706'. [ 426.116661][T15023] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3708'. [ 426.127101][T15023] netlink: 'syz.4.3708': attribute type 1 has an invalid length. [ 427.017090][ T3610] Bluetooth: hci3: command 0x0406 tx timeout [ 427.949945][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3717'. [ 428.263241][T15069] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3720'. [ 428.736427][T15077] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3723'. [ 428.749088][T15077] netlink: 'syz.2.3723': attribute type 1 has an invalid length. [ 429.730265][T15112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3732'. [ 430.098594][T15127] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3734'. [ 430.415664][T15131] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3738'. [ 430.457193][T15131] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 431.083761][T15165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3747'. [ 431.172888][T15169] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3748'. [ 431.465645][T15180] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3752'. [ 431.490741][T15180] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 431.995291][T15203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3759'. [ 433.385606][T15218] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3761'. [ 434.609400][T15259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3773'. [ 435.870275][T15279] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3777'. [ 436.137587][T15282] FAULT_INJECTION: forcing a failure. [ 436.137587][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 436.187535][T15282] CPU: 1 PID: 15282 Comm: syz.3.3778 Not tainted 5.15.167-syzkaller #0 [ 436.195863][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.206165][T15282] Call Trace: [ 436.209464][T15282] [ 436.212413][T15282] dump_stack_lvl+0x1e3/0x2d0 [ 436.217127][T15282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 436.223319][T15282] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 436.228992][T15282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 436.235191][T15282] ? __wake_up_klogd+0xcc/0x100 [ 436.240192][T15282] should_fail+0x38a/0x4c0 [ 436.244691][T15282] should_failslab+0x5/0x20 [ 436.249239][T15282] slab_pre_alloc_hook+0x53/0xc0 [ 436.254331][T15282] kmem_cache_alloc_trace+0x49/0x290 [ 436.259682][T15282] ? btf_new_fd+0x107/0x920 [ 436.264230][T15282] btf_new_fd+0x107/0x920 [ 436.268695][T15282] __sys_bpf+0x486/0x670 [ 436.272976][T15282] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 436.278412][T15282] ? syscall_enter_from_user_mode+0x2e/0x240 [ 436.284478][T15282] ? lockdep_hardirqs_on+0x94/0x130 [ 436.289763][T15282] __x64_sys_bpf+0x78/0x90 [ 436.294232][T15282] do_syscall_64+0x3b/0xb0 [ 436.298852][T15282] ? clear_bhb_loop+0x15/0x70 [ 436.303731][T15282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.309657][T15282] RIP: 0033:0x7f892e619ff9 [ 436.314098][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.333815][T15282] RSP: 002b:00007f892ca92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.342255][T15282] RAX: ffffffffffffffda RBX: 00007f892e7d1f80 RCX: 00007f892e619ff9 [ 436.350251][T15282] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 436.358270][T15282] RBP: 00007f892ca92090 R08: 0000000000000000 R09: 0000000000000000 [ 436.366290][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.374279][T15282] R13: 0000000000000000 R14: 00007f892e7d1f80 R15: 00007ffda4411be8 [ 436.382319][T15282] [ 436.741040][T15305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3785'. [ 437.633568][T15332] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3792'. [ 438.428956][T15357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3800'. [ 439.534352][T15390] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3807'. [ 439.639646][T15395] netlink: 'syz.0.3809': attribute type 17 has an invalid length. [ 439.685307][T15395] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3809'. [ 440.011520][T15409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3814'. [ 440.654776][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.661365][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.451897][ T3611] Bluetooth: hci1: command 0x0406 tx timeout [ 458.687832][ T3611] Bluetooth: hci2: command 0x0409 tx timeout [ 459.002771][ T3611] Bluetooth: hci6: command 0x0409 tx timeout [ 459.923699][ T3612] Bluetooth: hci7: command 0x0409 tx timeout [ 461.051080][ T3611] Bluetooth: hci8: command 0x0409 tx timeout [ 461.364598][ T3610] Bluetooth: hci6: command 0x041b tx timeout [ 461.691814][ T3610] Bluetooth: hci2: command 0x041b tx timeout [ 462.650136][ T3611] Bluetooth: hci7: command 0x041b tx timeout [ 463.251888][ T1292] Bluetooth: hci8: command 0x041b tx timeout [ 464.031883][ T3610] Bluetooth: hci6: command 0x040f tx timeout [ 464.394136][ T1292] Bluetooth: hci2: command 0x040f tx timeout [ 465.031887][ T3610] Bluetooth: hci7: command 0x040f tx timeout [ 465.464524][ T3610] Bluetooth: hci9: command 0x0409 tx timeout [ 465.670745][ T3610] Bluetooth: hci8: command 0x040f tx timeout [ 467.138749][ T1292] Bluetooth: hci6: command 0x0419 tx timeout [ 467.160584][ T1292] Bluetooth: hci2: command 0x0419 tx timeout [ 467.711921][ T1292] Bluetooth: hci7: command 0x0419 tx timeout [ 468.012863][ T3610] Bluetooth: hci9: command 0x041b tx timeout [ 469.490464][ T3610] Bluetooth: hci8: command 0x0419 tx timeout [ 470.416562][ T3610] Bluetooth: hci0: command 0x0406 tx timeout [ 472.228705][ T1292] Bluetooth: hci9: command 0x040f tx timeout [ 474.368410][ T3610] Bluetooth: hci9: command 0x0419 tx timeout [ 502.684764][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.691412][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.949784][T10360] Bluetooth: hci10: command 0x0409 tx timeout [ 519.685854][ T3611] Bluetooth: hci11: command 0x0409 tx timeout [ 520.435441][ T3611] Bluetooth: hci12: command 0x0409 tx timeout [ 521.193840][ T1292] Bluetooth: hci10: command 0x041b tx timeout [ 521.306851][ T1292] Bluetooth: hci13: command 0x0409 tx timeout [ 521.853501][ T1292] Bluetooth: hci11: command 0x041b tx timeout [ 522.921022][ T3611] Bluetooth: hci12: command 0x041b tx timeout [ 523.660517][ T3611] Bluetooth: hci10: command 0x040f tx timeout [ 523.708533][ T3610] Bluetooth: hci13: command 0x041b tx timeout [ 525.002438][ T3610] Bluetooth: hci11: command 0x040f tx timeout [ 525.786167][ T3660] Bluetooth: hci14: command 0x0409 tx timeout [ 526.075125][ T1292] Bluetooth: hci12: command 0x040f tx timeout [ 526.116558][ T1292] Bluetooth: hci13: command 0x040f tx timeout [ 526.343747][ T1292] Bluetooth: hci10: command 0x0419 tx timeout [ 527.250566][ T1292] Bluetooth: hci11: command 0x0419 tx timeout [ 528.701086][ T1292] Bluetooth: hci14: command 0x041b tx timeout [ 529.557375][ T1292] Bluetooth: hci12: command 0x0419 tx timeout [ 529.874065][ T3610] Bluetooth: hci13: command 0x0419 tx timeout [ 530.023104][ T3611] Bluetooth: hci4: command 0x0406 tx timeout [ 531.352408][ T3610] Bluetooth: hci14: command 0x040f tx timeout [ 534.302473][ T3611] Bluetooth: hci14: command 0x0419 tx timeout [ 563.196477][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.202960][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.978381][ T1292] Bluetooth: hci15: command 0x0409 tx timeout [ 581.468315][ T1292] Bluetooth: hci6: command 0x0406 tx timeout [ 581.698854][ T1292] Bluetooth: hci2: command 0x0406 tx timeout [ 581.991752][ T1292] Bluetooth: hci7: command 0x0406 tx timeout [ 582.338277][ T1292] Bluetooth: hci8: command 0x0406 tx timeout [ 582.971556][ T1292] Bluetooth: hci18: command 0x0409 tx timeout [ 584.888267][ T1292] Bluetooth: hci16: command 0x0409 tx timeout [ 585.427239][ T1292] Bluetooth: hci17: command 0x0409 tx timeout [ 585.779047][ T27] INFO: task syz.3.3814:15408 blocked for more than 143 seconds. [ 585.842135][ T27] Not tainted 5.15.167-syzkaller #0 [ 585.847907][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.072299][ T3611] Bluetooth: hci15: command 0x041b tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.514793][ T21] Bluetooth: hci9: command 0x0406 tx timeout [ 586.523200][ T27] task:syz.3.3814 state:D stack:26840 pid:15408 ppid: 11969 flags:0x00004004 [ 586.532894][ T27] Call Trace: [ 586.536432][ T27] [ 586.539388][ T27] __schedule+0x12c4/0x45b0 [ 587.227050][ T27] ? release_firmware_map_entry+0x190/0x190 [ 587.354974][ T3612] Bluetooth: hci18: command 0x041b tx timeout [ 587.575632][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 587.581184][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 587.753705][ T1292] Bluetooth: hci16: command 0x041b tx timeout [ 588.184526][ T27] schedule+0x11b/0x1f0 [ 588.188764][ T27] schedule_preempt_disabled+0xf/0x20 [ 588.363334][ T1292] Bluetooth: hci15: command 0x040f tx timeout [ 588.547207][ T27] __mutex_lock_common+0xe34/0x25a0 [ 588.594798][ T1292] Bluetooth: hci17: command 0x041b tx timeout [ 589.771730][ T27] ? tun_chr_close+0x3a/0x1b0 [ 589.776538][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 589.860083][ T1292] Bluetooth: hci19: command 0x0409 tx timeout [ 590.191834][ T27] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 590.198661][ T27] mutex_lock_nested+0x17/0x20 [ 590.641763][ T27] tun_chr_close+0x3a/0x1b0 [ 590.646394][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 590.905962][ T1292] Bluetooth: hci18: command 0x040f tx timeout [ 591.082519][ T27] __fput+0x3fe/0x8e0 [ 591.086600][ T27] task_work_run+0x129/0x1a0 [ 591.091230][ T27] exit_to_user_mode_loop+0x106/0x130 [ 591.180760][ T1292] Bluetooth: hci16: command 0x040f tx timeout [ 591.559464][ T3612] Bluetooth: hci15: command 0x0419 tx timeout [ 591.641328][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 591.932083][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 591.937996][ T27] do_syscall_64+0x47/0xb0 [ 592.048955][ T3612] Bluetooth: hci17: command 0x040f tx timeout [ 592.281646][ T27] ? clear_bhb_loop+0x15/0x70 [ 592.378892][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.433203][ T3612] Bluetooth: hci19: command 0x041b tx timeout [ 592.485610][ T27] RIP: 0033:0x7f892e619ff9 [ 592.490183][ T27] RSP: 002b:00007ffda4411d48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.525170][ T27] RAX: 0000000000000000 RBX: 000000000006b5ff RCX: 00007f892e619ff9 [ 592.552963][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 592.561219][ T27] RBP: 00007f892e7d3a80 R08: 0000000000000001 R09: 00007ffda441203f [ 592.615441][ T27] R10: 00007f892e49c000 R11: 0000000000000246 R12: 000000000006b6dd [ 592.635528][ T27] R13: 00007ffda4411e50 R14: 0000000000000032 R15: ffffffffffffffff [ 592.645220][ T27] [ 592.648341][ T27] INFO: task syz.2.3820:15435 blocked for more than 150 seconds. [ 592.656590][ T27] Not tainted 5.15.167-syzkaller #0 [ 592.662709][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.671404][ T27] task:syz.2.3820 state:D stack:27360 pid:15435 ppid: 12475 flags:0x00004004 [ 592.681187][ T27] Call Trace: [ 592.685383][ T27] [ 592.688358][ T27] __schedule+0x12c4/0x45b0 [ 592.693381][ T27] ? release_firmware_map_entry+0x190/0x190 [ 592.700516][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 592.708659][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 592.714324][ T27] schedule+0x11b/0x1f0 [ 592.718520][ T27] schedule_preempt_disabled+0xf/0x20 [ 592.724385][ T27] __mutex_lock_common+0xe34/0x25a0 [ 592.729627][ T27] ? __tun_chr_ioctl+0x460/0x2270 [ 592.735245][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 592.740500][ T27] ? __might_fault+0xb4/0x110 [ 592.745640][ T27] mutex_lock_nested+0x17/0x20 [ 592.750430][ T27] __tun_chr_ioctl+0x460/0x2270 [ 592.755711][ T27] ? tun_flow_create+0x310/0x310 [ 592.760779][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 592.766209][ T27] ? security_file_ioctl+0x7d/0xa0 [ 592.771352][ T27] ? tun_chr_poll+0x620/0x620 [ 592.776486][ T27] __se_sys_ioctl+0xf1/0x160 [ 592.781104][ T27] do_syscall_64+0x3b/0xb0 [ 592.786008][ T27] ? clear_bhb_loop+0x15/0x70 [ 592.790716][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.797087][ T27] RIP: 0033:0x7faa4bf0dff9 [ 592.802727][ T27] RSP: 002b:00007faa4a365038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.811208][ T27] RAX: ffffffffffffffda RBX: 00007faa4c0c6058 RCX: 00007faa4bf0dff9 [ 592.822045][ T27] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 592.830071][ T27] RBP: 00007faa4bf80296 R08: 0000000000000000 R09: 0000000000000000 [ 592.839361][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.847715][ T27] R13: 0000000000000000 R14: 00007faa4c0c6058 R15: 00007ffce1071cc8 [ 592.856057][ T27] [ 592.859301][ T27] INFO: task syz.2.3820:15436 blocked for more than 150 seconds. [ 592.871250][ T27] Not tainted 5.15.167-syzkaller #0 [ 592.878201][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.887843][ T27] task:syz.2.3820 state:D stack:27520 pid:15436 ppid: 12475 flags:0x00004004 [ 592.897544][ T27] Call Trace: [ 592.902697][ T27] [ 592.905672][ T27] __schedule+0x12c4/0x45b0 [ 592.910406][ T27] ? release_firmware_map_entry+0x190/0x190 [ 592.916900][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 592.924197][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 592.929453][ T27] schedule+0x11b/0x1f0 [ 592.935684][ T27] schedule_preempt_disabled+0xf/0x20 [ 592.941103][ T27] __mutex_lock_common+0xe34/0x25a0 [ 592.946944][ T27] ? tun_chr_close+0x3a/0x1b0 [ 592.955846][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 592.961089][ T27] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 592.969508][ T27] ? __rwlock_init+0x140/0x140 [ 592.978350][ T27] mutex_lock_nested+0x17/0x20 [ 592.987799][ T27] tun_chr_close+0x3a/0x1b0 [ 592.992496][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 592.997201][ T27] __fput+0x3fe/0x8e0 [ 593.001205][ T27] task_work_run+0x129/0x1a0 [ 593.006028][ T27] exit_to_user_mode_loop+0x106/0x130 [ 593.011431][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 593.017080][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 593.022735][ T27] do_syscall_64+0x47/0xb0 [ 593.027184][ T27] ? clear_bhb_loop+0x15/0x70 [ 593.033541][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.039611][ T27] RIP: 0033:0x7faa4bf0dff9 [ 593.044107][ T27] RSP: 002b:00007faa4a344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 593.052836][ T27] RAX: 0000000000000000 RBX: 00007faa4c0c6130 RCX: 00007faa4bf0dff9 [ 593.060835][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 593.069753][ T27] RBP: 00007faa4bf80296 R08: 0000000000000000 R09: 0000000000000000 [ 593.078156][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.086220][ T27] R13: 0000000000000000 R14: 00007faa4c0c6130 R15: 00007ffce1071cc8 [ 593.094289][ T27] [ 593.099469][ T27] [ 593.099469][ T27] Showing all locks held in the system: [ 593.124212][ T27] 3 locks held by kworker/1:1/23: [ 593.129302][ T27] #0: ffff888017071938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 593.149779][ T27] #1: ffffc90000ddfd20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 593.160812][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x8d/0xc70 [ 593.170726][ T27] 1 lock held by khungtaskd/27: [ 593.175688][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 593.185400][ T27] 3 locks held by kworker/1:3/2012: [ 593.190617][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 593.201104][ T27] #1: ffffc90005de7d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 593.211979][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 593.222712][ T3612] Bluetooth: hci18: command 0x0419 tx timeout [ 593.228914][ T27] 2 locks held by getty/3327: [ 593.233705][ T27] #0: ffff8880296df098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 593.243775][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 593.255344][ T27] 3 locks held by kworker/0:4/3610: [ 593.260697][ T27] #0: ffff888028c72138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 593.271814][ T27] #1: ffffc90003097d20 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 593.282489][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 593.292302][ T27] 3 locks held by kworker/u4:14/5232: [ 593.297708][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 593.308901][ T27] #1: ffffc90003267d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 593.319537][ T27] #2: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 593.328876][ T27] 2 locks held by kworker/1:6/10360: [ 593.334235][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 593.344737][ T27] #1: ffffc90003117d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 593.356180][ T27] 2 locks held by syz.3.3814/15408: [ 593.361515][ T27] #0: ffff888027d59a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 593.373598][ T27] #1: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_sk_done+0xa0/0x2a0 [ 593.382677][ T27] 2 locks held by syz.4.3815/15410: [ 593.387888][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 593.396944][ T27] #1: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 593.408175][ T27] 1 lock held by syz.2.3820/15435: [ 593.413519][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x460/0x2270 [ 593.422916][ T27] 1 lock held by syz.2.3820/15436: [ 593.428033][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 593.437123][ T27] 4 locks held by syz.1.3821/15438: [ 593.442522][ T27] #0: ffff88801c238ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 593.452676][ T27] #1: ffff88801c238078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 593.462262][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 593.473748][ T27] #3: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 593.484761][ T27] 1 lock held by syz.0.3824/15455: [ 593.489920][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x598/0xf60 [ 593.498755][ T27] 1 lock held by syz-executor/15460: [ 593.504115][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.513652][ T27] 1 lock held by syz-executor/15461: [ 593.519266][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.528907][ T27] 1 lock held by syz-executor/15467: [ 593.534293][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.543942][ T27] 1 lock held by syz-executor/15472: [ 593.549248][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.559120][ T27] 1 lock held by syz-executor/15474: [ 593.564708][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.574244][ T27] 1 lock held by syz-executor/15488: [ 593.579536][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.589339][ T27] 1 lock held by syz-executor/15491: [ 593.595062][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.604881][ T27] 1 lock held by syz-executor/15492: [ 593.610173][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.619920][ T27] 1 lock held by syz-executor/15497: [ 593.625695][ T3611] Bluetooth: hci16: command 0x0419 tx timeout [ 593.629002][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.642196][ T27] 1 lock held by syz-executor/15499: [ 593.648188][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.657880][ T27] 1 lock held by syz-executor/15508: [ 593.663382][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.672941][ T27] 1 lock held by syz-executor/15512: [ 593.678244][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.687736][ T27] 1 lock held by syz-executor/15514: [ 593.693983][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.703526][ T27] 1 lock held by syz-executor/15515: [ 593.708819][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.718345][ T27] 1 lock held by syz-executor/15520: [ 593.723852][ T27] #0: ffffffff8da31d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 593.733448][ T27] [ 593.735883][ T27] ============================================= [ 593.735883][ T27] [ 593.751547][ T27] NMI backtrace for cpu 0 [ 593.755930][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 593.763944][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.774019][ T27] Call Trace: [ 593.777313][ T27] [ 593.780257][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 593.785008][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 593.790673][ T27] ? panic+0x860/0x860 [ 593.794779][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 593.800175][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 593.806011][ T27] ? __wake_up_klogd+0xd5/0x100 [ 593.810896][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 593.817111][ T27] ? _printk+0xd1/0x120 [ 593.821313][ T27] ? panic+0x860/0x860 [ 593.825405][ T27] ? __wake_up_klogd+0xcc/0x100 [ 593.830273][ T27] ? panic+0x860/0x860 [ 593.834366][ T27] ? __rcu_read_unlock+0x92/0x100 [ 593.839413][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 593.845502][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 593.851519][ T27] watchdog+0xe72/0xeb0 [ 593.855714][ T27] kthread+0x3f6/0x4f0 [ 593.859892][ T27] ? hungtask_pm_notify+0x50/0x50 [ 593.864943][ T27] ? kthread_blkcg+0xd0/0xd0 [ 593.869559][ T27] ret_from_fork+0x1f/0x30 [ 593.874016][ T27] [ 593.878365][ T27] Sending NMI from CPU 0 to CPUs 1: [ 593.884313][ C1] NMI backtrace for cpu 1 [ 593.884328][ C1] CPU: 1 PID: 15438 Comm: syz.1.3821 Not tainted 5.15.167-syzkaller #0 [ 593.884348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.884358][ C1] RIP: 0010:unwind_next_frame+0x12c8/0x1fa0 [ 593.884386][ C1] Code: 24 48 01 c5 4c 89 ff 48 89 ee 48 89 da eb 3f 49 8d 5e 02 49 83 c6 03 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 33 0b 00 00 <4c> 89 f0 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 4d 0b 00 00 48 0f bf [ 593.884400][ C1] RSP: 0018:ffffc90000dd01c8 EFLAGS: 00000246 [ 593.884416][ C1] RAX: 0000000000000000 RBX: ffffffff8e5ee9de RCX: 0000000000000000 [ 593.884428][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffc90000dd02e0 [ 593.884441][ C1] RBP: ffffffff8e5ee9e0 R08: ffffc900030472c0 R09: ffffc90000dd02d0 [ 593.884454][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1cbdd3c [ 593.884466][ C1] R13: 1ffffffff1cbdd3c R14: ffffffff8e5ee9df R15: ffffc90000dd0280 [ 593.884480][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 593.884495][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.884507][ C1] CR2: 0000559900956b08 CR3: 0000000023c24000 CR4: 00000000003506e0 [ 593.884522][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 593.884532][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 593.884543][ C1] Call Trace: [ 593.884548][ C1] [ 593.884554][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 593.884583][ C1] ? read_lock_is_recursive+0x10/0x10 [ 593.884603][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 593.884622][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 593.884648][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 593.884665][ C1] ? nmi_handle+0xf7/0x370 [ 593.884683][ C1] ? unwind_next_frame+0x12c8/0x1fa0 [ 593.884702][ C1] ? default_do_nmi+0x62/0x150 [ 593.884721][ C1] ? exc_nmi+0xa8/0x100 [ 593.884738][ C1] ? end_repeat_nmi+0x16/0x31 [ 593.884760][ C1] ? unwind_next_frame+0x12c8/0x1fa0 [ 593.884779][ C1] ? unwind_next_frame+0x12c8/0x1fa0 [ 593.884798][ C1] ? unwind_next_frame+0x12c8/0x1fa0 [ 593.884817][ C1] [ 593.884822][ C1] [ 593.884830][ C1] ? arch_stack_walk+0x101/0x140 [ 593.884851][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 593.884875][ C1] arch_stack_walk+0x10d/0x140 [ 593.884896][ C1] ? stack_trace_save+0x113/0x1c0 [ 593.884915][ C1] stack_trace_save+0x113/0x1c0 [ 593.884934][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 593.884952][ C1] ? kasan_unpoison+0x42/0x60 [ 593.884971][ C1] ? __kasan_slab_alloc+0x43/0xc0 [ 593.884987][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 593.885008][ C1] ____kasan_kmalloc+0xba/0xf0 [ 593.885023][ C1] ? ____kasan_kmalloc+0xba/0xf0 [ 593.885038][ C1] ? __kmalloc+0x168/0x300 [ 593.885055][ C1] ? ___neigh_create+0x6be/0x2220 [ 593.885071][ C1] ? ip6_finish_output2+0x11c5/0x15a0 [ 593.885091][ C1] ? ndisc_send_skb+0xae0/0x13c0 [ 593.885108][ C1] ? addrconf_rs_timer+0x357/0x610 [ 593.885124][ C1] ? call_timer_fn+0x16d/0x560 [ 593.885138][ C1] ? __run_timers+0x67c/0x890 [ 593.885152][ C1] ? run_timer_softirq+0x63/0xf0 [ 593.885171][ C1] ? handle_softirqs+0x3a7/0x930 [ 593.885186][ C1] ? __irq_exit_rcu+0x157/0x240 [ 593.885201][ C1] ? irq_exit_rcu+0x5/0x20 [ 593.885215][ C1] ? sysvec_apic_timer_interrupt+0x91/0xb0 [ 593.885234][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.885261][ C1] ? preempt_schedule_irq+0xf2/0x1c0 [ 593.885278][ C1] ? irqentry_exit+0x53/0x80 [ 593.885294][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.885314][ C1] ? stack_trace_consume_entry+0xce/0x270 [ 593.885331][ C1] ? arch_stack_walk+0x101/0x140 [ 593.885368][ C1] __kmalloc+0x168/0x300 [ 593.885384][ C1] ? ___neigh_create+0x6be/0x2220 [ 593.885402][ C1] ___neigh_create+0x6be/0x2220 [ 593.885422][ C1] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 593.885447][ C1] ip6_finish_output2+0x11c5/0x15a0 [ 593.885472][ C1] ? __ip6_finish_output+0x7d0/0x7d0 [ 593.885492][ C1] ? __ip6_finish_output+0x645/0x7d0 [ 593.885515][ C1] ndisc_send_skb+0xae0/0x13c0 [ 593.885539][ C1] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 593.885555][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 593.885575][ C1] ? ndisc_error_report+0x160/0x160 [ 593.885599][ C1] ? ndisc_send_rs+0x517/0x6a0 [ 593.885619][ C1] addrconf_rs_timer+0x357/0x610 [ 593.885639][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 593.885662][ C1] call_timer_fn+0x16d/0x560 [ 593.885677][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 593.885695][ C1] ? __run_timers+0x890/0x890 [ 593.885713][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 593.885732][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 593.885749][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 593.885766][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 593.885785][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 593.885803][ C1] __run_timers+0x67c/0x890 [ 593.885824][ C1] ? detach_timer+0x2f0/0x2f0 [ 593.885838][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 593.885858][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 593.885879][ C1] run_timer_softirq+0x63/0xf0 [ 593.885898][ C1] handle_softirqs+0x3a7/0x930 [ 593.885917][ C1] ? __irq_exit_rcu+0x157/0x240 [ 593.885936][ C1] ? do_softirq+0x240/0x240 [ 593.885950][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 593.885968][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 593.885990][ C1] __irq_exit_rcu+0x157/0x240 [ 593.886007][ C1] ? irq_exit_rcu+0x20/0x20 [ 593.886029][ C1] irq_exit_rcu+0x5/0x20 [ 593.886059][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 593.886086][ C1] [ 593.886094][ C1] [ 593.886099][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.886120][ C1] RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 [ 593.886137][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 99 bd 1a f7 e8 f4 2c 4a f7 fb bf 01 00 00 00 a9 b3 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 76 8d f7 48 [ 593.886151][ C1] RSP: 0018:ffffc90003047060 EFLAGS: 00000286 [ 593.886165][ C1] RAX: 28723126b843ab00 RBX: 1ffff92000608e14 RCX: ffffffff81631ae8 [ 593.886178][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: 0000000000000001 [ 593.886190][ C1] RBP: ffffc90003047110 R08: dffffc0000000000 R09: fffffbfff20e241a [ 593.886203][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000608e0c [ 593.886215][ C1] R13: 1ffff92000608e10 R14: ffffc90003047080 R15: dffffc0000000000 [ 593.886233][ C1] ? mark_lock+0x98/0x340 [ 593.886258][ C1] ? __cond_resched+0x20/0x20 [ 593.886282][ C1] irqentry_exit+0x53/0x80 [ 593.886299][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.886319][ C1] RIP: 0010:stack_trace_consume_entry+0xce/0x270 [ 593.886338][ C1] Code: 26 4c 89 0c 24 48 89 df 49 89 f5 4d 89 c6 e8 39 2a 5c 00 4d 89 f0 4c 8b 0c 24 4c 89 ee 48 ba 00 00 00 00 00 fc ff df 48 8b 1b <45> 8d 70 01 41 0f b6 04 17 84 c0 0f 85 2d 01 00 00 45 89 31 4a 8d [ 593.886351][ C1] RSP: 0018:ffffc900030471d0 EFLAGS: 00000246 [ 593.886364][ C1] RAX: 1ffff92000608e60 RBX: ffffc900030473a0 RCX: 0000000080000000 [ 593.886376][ C1] RDX: dffffc0000000000 RSI: ffffffff85074162 RDI: ffffc9000304730c [ 593.886389][ C1] RBP: ffffc90003047308 R08: 0000000000000007 R09: ffffc90003047310 [ 593.886401][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000608e61 [ 593.886413][ C1] R13: 1ffff92000608e61 R14: 0000000000000000 R15: 1ffff92000608e62 [ 593.886431][ C1] ? device_remove_class_symlinks+0x112/0x1b0 [ 593.886453][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 593.886470][ C1] arch_stack_walk+0x101/0x140 [ 593.886491][ C1] ? device_remove_class_symlinks+0x112/0x1b0 [ 593.886511][ C1] stack_trace_save+0x113/0x1c0 [ 593.886529][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 593.886548][ C1] ? kasan_check_range+0x19d/0x290 [ 593.886567][ C1] ? kmem_cache_free+0x91/0x1f0 [ 593.886584][ C1] kasan_set_track+0x4b/0x80 [ 593.886603][ C1] ? kasan_set_track+0x4b/0x80 [ 593.886620][ C1] ? kasan_set_free_info+0x1f/0x40 [ 593.886636][ C1] ? ____kasan_slab_free+0xd8/0x120 [ 593.886660][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 593.886678][ C1] ? kmem_cache_free+0x91/0x1f0 [ 593.886694][ C1] ? kernfs_put+0x325/0x4a0 [ 593.886710][ C1] ? kernfs_remove_by_name_ns+0x99/0x100 [ 593.886753][ C1] kasan_set_free_info+0x1f/0x40 [ 593.886769][ C1] ____kasan_slab_free+0xd8/0x120 [ 593.886787][ C1] slab_free_freelist_hook+0xdd/0x160 [ 593.886807][ C1] ? kernfs_put+0x325/0x4a0 [ 593.886824][ C1] kmem_cache_free+0x91/0x1f0 [ 593.886845][ C1] kernfs_put+0x325/0x4a0 [ 593.886865][ C1] kernfs_remove_by_name_ns+0x99/0x100 [ 593.886883][ C1] device_remove_class_symlinks+0x112/0x1b0 [ 593.886908][ C1] device_del+0x4ab/0xbd0 [ 593.886928][ C1] ? kill_device+0x160/0x160 [ 593.886949][ C1] rfkill_unregister+0xbe/0x220 [ 593.886969][ C1] hci_unregister_dev+0x42a/0x580 [ 593.886989][ C1] vhci_release+0x73/0xc0 [ 593.887010][ C1] ? vhci_open+0x290/0x290 [ 593.887029][ C1] __fput+0x3fe/0x8e0 [ 593.887069][ C1] task_work_run+0x129/0x1a0 [ 593.887093][ C1] do_exit+0x6a3/0x2480 [ 593.887115][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.887136][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 593.887155][ C1] ? put_task_struct+0x80/0x80 [ 593.887174][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.887203][ C1] do_group_exit+0x144/0x310 [ 593.887225][ C1] get_signal+0xc66/0x14e0 [ 593.887256][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 593.887279][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 593.887304][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 593.887323][ C1] ? print_irqtrace_events+0x210/0x210 [ 593.887340][ C1] ? get_sigframe_size+0x10/0x10 [ 593.887361][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 593.887393][ C1] exit_to_user_mode_loop+0x97/0x130 [ 593.887410][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 593.887429][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 593.887449][ C1] do_syscall_64+0x47/0xb0 [ 593.887466][ C1] ? clear_bhb_loop+0x15/0x70 [ 593.887481][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 593.887502][ C1] RIP: 0033:0x7f4e4bc14ff9 [ 593.887515][ C1] Code: Unable to access opcode bytes at RIP 0x7f4e4bc14fcf. [ 593.887523][ C1] RSP: 002b:00007f4e4a08d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 593.887539][ C1] RAX: fffffffffffffe00 RBX: 00007f4e4bdccf88 RCX: 00007f4e4bc14ff9 [ 593.887552][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e4bdccf88 [ 593.887563][ C1] RBP: 00007f4e4bdccf80 R08: 0000000000000000 R09: 0000000000000000 [ 593.887573][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4bdccf8c [ 593.887583][ C1] R13: 0000000000000000 R14: 00007ffd0b69e5d0 R15: 00007ffd0b69e6b8 [ 593.887603][ C1] [ 594.184191][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 594.421771][ T3611] Bluetooth: hci17: command 0x0419 tx timeout [ 594.426155][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 594.503102][ T3611] Bluetooth: hci19: command 0x040f tx timeout [ 594.503743][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 594.972090][ T27] Call Trace: [ 594.975371][ T27] [ 594.978296][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 594.982989][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 594.988724][ T27] ? panic+0x860/0x860 [ 594.992800][ T27] panic+0x318/0x860 [ 594.996695][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 595.002322][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 595.008488][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 595.013706][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 595.019772][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 595.025944][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 595.032203][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 595.038470][ T27] watchdog+0xeb0/0xeb0 [ 595.042851][ T27] kthread+0x3f6/0x4f0 [ 595.046937][ T27] ? hungtask_pm_notify+0x50/0x50 [ 595.052052][ T27] ? kthread_blkcg+0xd0/0xd0 [ 595.056666][ T27] ret_from_fork+0x1f/0x30 [ 595.061264][ T27] [ 595.064581][ T27] Kernel Offset: disabled [ 595.068933][ T27] Rebooting in 86400 seconds..