last executing test programs: 19.611503887s ago: executing program 3 (id=1823): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000200056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.54801917s ago: executing program 1 (id=1824): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0), 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=""/156, 0x9c}, 0x20002) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 19.122958919s ago: executing program 1 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 19.10371964s ago: executing program 2 (id=1828): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000040)=""/250, 0x2b, 0xfa, 0x9}, 0x28) (fail_nth: 12) 18.926384957s ago: executing program 0 (id=1829): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) 18.62799213s ago: executing program 1 (id=1830): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./cgroup/../file0\x00'}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, r1, 0x0) 18.575536182s ago: executing program 2 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18.309277984s ago: executing program 3 (id=1832): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) (fail_nth: 3) 18.112347722s ago: executing program 0 (id=1833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.064078485s ago: executing program 2 (id=1834): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 17.998533047s ago: executing program 1 (id=1835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x83e00, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.740981799s ago: executing program 0 (id=1836): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 17.635906113s ago: executing program 2 (id=1837): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 17.593221775s ago: executing program 3 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.49017918s ago: executing program 1 (id=1839): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1009, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x25, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000)=r3, 0x4) syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328dcb4", 0x22, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x10, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1) close(r2) 17.308089928s ago: executing program 2 (id=1840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.284972748s ago: executing program 3 (id=1841): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x25, 0x0, 0x0) 17.211638272s ago: executing program 0 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.044983989s ago: executing program 2 (id=1843): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x5776, 0x8000}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x15, 0x5, 0x0) (rerun: 32) recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) (async) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x2c, 0x0, 0x0) (async, rerun: 32) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b0000000900000001000093010000000300ecffe1a30000040000000071305f302e306f5f61"], 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f00000009c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={&(0x7f0000000300)="42c20b10f24cec996815124e5eedf3608954956e5ec8ae9b9bfad09a39", &(0x7f0000000840)=""/183, &(0x7f0000000900)="450470229db365f707dc93d5d93c7c01aa4ce24443e72926d5c5a54e27b02433fb39df19a31cef9f2437e036ba276e09b730125b14d177480e1600e30d274b36d4f5ecfbd07c18829dc568f7296eee190ebd70dd2acb42b4a719e84116fcb31a76a51bc32d54a72d033935fc049aa5b6fbb357e6135a68de14179651441e07695cf8a2817bc11601a447f7ff715fd49a3b1816ec90d71393257b14309b43f1b24c610400c7aaf801afcf2d8ac8d9e09d3ec18528ec40c7a3", &(0x7f0000000ac0)="7a8f7fc31a55f6755149a05eea4518e399c519a1724212d3a0e8f4115f0dff9a127915b9e553666b07919b3b91710a3bae956a5f4b863bb20e5b14a47aa506a2a94512594d0b8c24975c5c7d909709c11d7d7ff402b695e608e8de89e0a2526603073197e63ecbe0ebcfa32c9bde4601060bd3070a7b1ddf700a1c356fbbc07d7bdeec882b5ac6676cd45d57f5afb1150b61a4ff3467a3969839f6a4267c34fdbb1b9224c2e350554bc8", 0x3, r7}, 0x38) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x385643, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000c4638731190006000000000000000300000085100000feffffff4cbdf2ffab0e11fbcfa61cab003917f62f1b24da81a7a2e8d4c1967d1139905e5a251fe0def844a47c6f3bf5c416554dd697b698d15b60fab6ac6005e3d5587e2f5d417c7834dfb83d56846ae315e37386f8e1fa473caf59e42d46a59f282ca5f82ee7f95b951e49cdde17fdc80a79d91f2f84cda9b4de043282f78903740308ce2ef22f741dccaffc5d4538d7c5344c9feeab020f09d6f797"], &(0x7f00000004c0)='GPL\x00', 0x0, 0xa7, &(0x7f0000000500)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x7, 0x0, 0xb1d}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x5, 0x6}], 0x10, 0x9579}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r9, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40), 0x0, 0xe6, &(0x7f00000001c0)=[{}, {}], 0x11, 0x10, &(0x7f0000000d00), &(0x7f0000000280), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000480)=r10) (async) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000a40)=@caif=@dgm={0x25, 0x6, 0x80}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) 16.993301111s ago: executing program 3 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16.970668402s ago: executing program 0 (id=1845): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 16.695850834s ago: executing program 3 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x9, &(0x7f0000000480)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50, 0x8}, [@initr0, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16.640198146s ago: executing program 0 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x10000}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5}) 16.584245289s ago: executing program 1 (id=1848): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 286.539898ms ago: executing program 32 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x10000}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5}) 175.517293ms ago: executing program 33 (id=1848): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 104.627356ms ago: executing program 34 (id=1843): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x5776, 0x8000}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x15, 0x5, 0x0) (rerun: 32) recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) (async) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x2c, 0x0, 0x0) (async, rerun: 32) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b0000000900000001000093010000000300ecffe1a30000040000000071305f302e306f5f61"], 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f00000009c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={&(0x7f0000000300)="42c20b10f24cec996815124e5eedf3608954956e5ec8ae9b9bfad09a39", &(0x7f0000000840)=""/183, &(0x7f0000000900)="450470229db365f707dc93d5d93c7c01aa4ce24443e72926d5c5a54e27b02433fb39df19a31cef9f2437e036ba276e09b730125b14d177480e1600e30d274b36d4f5ecfbd07c18829dc568f7296eee190ebd70dd2acb42b4a719e84116fcb31a76a51bc32d54a72d033935fc049aa5b6fbb357e6135a68de14179651441e07695cf8a2817bc11601a447f7ff715fd49a3b1816ec90d71393257b14309b43f1b24c610400c7aaf801afcf2d8ac8d9e09d3ec18528ec40c7a3", &(0x7f0000000ac0)="7a8f7fc31a55f6755149a05eea4518e399c519a1724212d3a0e8f4115f0dff9a127915b9e553666b07919b3b91710a3bae956a5f4b863bb20e5b14a47aa506a2a94512594d0b8c24975c5c7d909709c11d7d7ff402b695e608e8de89e0a2526603073197e63ecbe0ebcfa32c9bde4601060bd3070a7b1ddf700a1c356fbbc07d7bdeec882b5ac6676cd45d57f5afb1150b61a4ff3467a3969839f6a4267c34fdbb1b9224c2e350554bc8", 0x3, r7}, 0x38) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x385643, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000c4638731190006000000000000000300000085100000feffffff4cbdf2ffab0e11fbcfa61cab003917f62f1b24da81a7a2e8d4c1967d1139905e5a251fe0def844a47c6f3bf5c416554dd697b698d15b60fab6ac6005e3d5587e2f5d417c7834dfb83d56846ae315e37386f8e1fa473caf59e42d46a59f282ca5f82ee7f95b951e49cdde17fdc80a79d91f2f84cda9b4de043282f78903740308ce2ef22f741dccaffc5d4538d7c5344c9feeab020f09d6f797"], &(0x7f00000004c0)='GPL\x00', 0x0, 0xa7, &(0x7f0000000500)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x7, 0x0, 0xb1d}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x5, 0x6}], 0x10, 0x9579}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r9, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40), 0x0, 0xe6, &(0x7f00000001c0)=[{}, {}], 0x11, 0x10, &(0x7f0000000d00), &(0x7f0000000280), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000480)=r10) (async) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000a40)=@caif=@dgm={0x25, 0x6, 0x80}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) 0s ago: executing program 35 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x9, &(0x7f0000000480)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50, 0x8}, [@initr0, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 297008][ T9766] __vmalloc+0x7a/0x90 [ 322.301103][ T9766] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 322.306669][ T9766] bpf_prog_alloc_no_stats+0x47/0x440 [ 322.312087][ T9766] ? bpf_prog_alloc+0x2b/0x1b0 [ 322.316877][ T9766] bpf_prog_alloc+0x3d/0x1b0 [ 322.321526][ T9766] bpf_prog_load+0x6b8/0x16d0 [ 322.326236][ T9766] ? map_freeze+0x420/0x420 [ 322.330821][ T9766] ? __might_fault+0xaa/0x120 [ 322.335586][ T9766] ? __lock_acquire+0x7c80/0x7c80 [ 322.340641][ T9766] ? file_end_write+0x159/0x250 [ 322.345547][ T9766] ? __might_fault+0xaa/0x120 [ 322.350237][ T9766] ? __might_fault+0xc6/0x120 [ 322.354932][ T9766] ? __might_fault+0xaa/0x120 [ 322.359625][ T9766] ? bpf_lsm_bpf+0x9/0x10 [ 322.363982][ T9766] ? security_bpf+0x7e/0xa0 [ 322.368507][ T9766] __sys_bpf+0x55a/0x800 [ 322.372776][ T9766] ? bpf_link_show_fdinfo+0x350/0x350 [ 322.378182][ T9766] ? lock_chain_count+0x20/0x20 [ 322.383084][ T9766] __x64_sys_bpf+0x7c/0x90 [ 322.387604][ T9766] do_syscall_64+0x55/0xb0 [ 322.392043][ T9766] ? clear_bhb_loop+0x40/0x90 [ 322.396738][ T9766] ? clear_bhb_loop+0x40/0x90 [ 322.401433][ T9766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.407355][ T9766] RIP: 0033:0x7fc34f58f749 [ 322.411785][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.431511][ T9766] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.439962][ T9766] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 322.447950][ T9766] RDX: 000000000000003f RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 322.455958][ T9766] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 322.463953][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.471974][ T9766] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 322.480009][ T9766] [ 322.511596][ T9766] syz.3.1366: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 322.534171][ T9766] CPU: 0 PID: 9766 Comm: syz.3.1366 Not tainted syzkaller #0 [ 322.541617][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.551716][ T9766] Call Trace: [ 322.555032][ T9766] [ 322.558010][ T9766] dump_stack_lvl+0x16c/0x230 [ 322.562737][ T9766] ? show_regs_print_info+0x20/0x20 [ 322.567979][ T9766] ? load_image+0x3b0/0x3b0 [ 322.572551][ T9766] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.579030][ T9766] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 322.585601][ T9766] warn_alloc+0x210/0x300 [ 322.590006][ T9766] ? zone_watermark_ok_safe+0x230/0x230 [ 322.595625][ T9766] ? __get_vm_area_node+0x356/0x370 [ 322.600876][ T9766] __vmalloc_node_range+0x393/0x1320 [ 322.606224][ T9766] ? mark_lock+0x94/0x320 [ 322.610610][ T9766] ? __lock_acquire+0x1334/0x7c80 [ 322.615694][ T9766] ? verify_lock_unused+0x140/0x140 [ 322.620960][ T9766] ? free_vm_area+0x50/0x50 [ 322.625514][ T9766] ? end_current_label_crit_section+0x170/0x170 [ 322.631830][ T9766] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 322.637440][ T9766] __vmalloc+0x7a/0x90 [ 322.641577][ T9766] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 322.647180][ T9766] bpf_prog_alloc_no_stats+0x47/0x440 [ 322.652596][ T9766] ? bpf_prog_alloc+0x2b/0x1b0 [ 322.657427][ T9766] bpf_prog_alloc+0x3d/0x1b0 [ 322.662083][ T9766] bpf_prog_load+0x6b8/0x16d0 [ 322.666836][ T9766] ? map_freeze+0x420/0x420 [ 322.671395][ T9766] ? __might_fault+0xaa/0x120 [ 322.676114][ T9766] ? __lock_acquire+0x7c80/0x7c80 [ 322.681188][ T9766] ? file_end_write+0x159/0x250 [ 322.686092][ T9766] ? __might_fault+0xaa/0x120 [ 322.690822][ T9766] ? __might_fault+0xc6/0x120 [ 322.695563][ T9766] ? __might_fault+0xaa/0x120 [ 322.700305][ T9766] ? bpf_lsm_bpf+0x9/0x10 [ 322.704715][ T9766] ? security_bpf+0x7e/0xa0 [ 322.709291][ T9766] __sys_bpf+0x55a/0x800 [ 322.713611][ T9766] ? bpf_link_show_fdinfo+0x350/0x350 [ 322.719048][ T9766] ? lock_chain_count+0x20/0x20 [ 322.723964][ T9766] __x64_sys_bpf+0x7c/0x90 [ 322.728426][ T9766] do_syscall_64+0x55/0xb0 [ 322.732890][ T9766] ? clear_bhb_loop+0x40/0x90 [ 322.737624][ T9766] ? clear_bhb_loop+0x40/0x90 [ 322.742353][ T9766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.748293][ T9766] RIP: 0033:0x7fc34f58f749 [ 322.752764][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.772416][ T9766] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.781409][ T9766] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 322.789606][ T9766] RDX: 000000000000003f RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 322.797636][ T9766] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 322.805661][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.813693][ T9766] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 322.821753][ T9766] [ 322.845387][ T9766] Mem-Info: [ 322.848669][ T9766] active_anon:5404 inactive_anon:0 isolated_anon:0 [ 322.848669][ T9766] active_file:18584 inactive_file:39973 isolated_file:0 [ 322.848669][ T9766] unevictable:768 dirty:131 writeback:0 [ 322.848669][ T9766] slab_reclaimable:10200 slab_unreclaimable:92125 [ 322.848669][ T9766] mapped:24119 shmem:1361 pagetables:535 [ 322.848669][ T9766] sec_pagetables:0 bounce:0 [ 322.848669][ T9766] kernel_misc_reclaimable:0 [ 322.848669][ T9766] free:1346846 free_pcp:11119 free_cma:0 [ 322.906512][ T9766] Node 0 active_anon:21616kB inactive_anon:0kB active_file:74336kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96376kB dirty:520kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11776kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no [ 322.949762][ T9766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 322.987207][ T9766] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.038376][ T9766] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 323.079335][ T9766] Node 0 DMA32 free:1479752kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21368kB inactive_anon:0kB active_file:74336kB inactive_file:158364kB unevictable:1536kB writepending:520kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:25764kB local_pcp:19960kB free_cma:0kB [ 323.207161][ T9766] lowmem_reserve[]: 0 0 1 1 1 [ 323.214418][ T9766] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.253448][ T9766] lowmem_reserve[]: 0 0 0 0 0 [ 323.258295][ T9766] Node 1 Normal free:3892264kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20032kB local_pcp:11424kB free_cma:0kB [ 323.302236][ T9766] lowmem_reserve[]: 0 0 0 0 0 [ 323.307211][ T9766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.350169][ T9766] Node 0 DMA32: 1832*4kB (UME) 1421*8kB (UM) 1270*16kB (UME) 873*32kB (UME) 303*64kB (UM) 164*128kB (UM) 117*256kB (UME) 36*512kB (UM) 29*1024kB (UM) 10*2048kB (ME) 311*4096kB (M) = 1479752kB [ 323.404780][ T9766] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 323.442553][ T9766] Node 1 Normal: 256*4kB (UME) 59*8kB (UME) 35*16kB (UME) 91*32kB (UME) 31*64kB (UE) 6*128kB (UME) 2*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 948*4096kB (ME) = 3892264kB [ 323.462143][ T9766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.471755][ T9766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.508273][ T9766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.525576][ T5795] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 323.558492][ T9766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.589840][ T9766] 59918 total pagecache pages [ 323.606493][ T9766] 0 pages in swap cache [ 323.623641][ T9766] Free swap = 124996kB [ 323.643536][ T9766] Total swap = 124996kB [ 323.672452][ T9766] 2097051 pages RAM [ 323.692370][ T9766] 0 pages HighMem/MovableOnly [ 323.714465][ T9766] 416138 pages reserved [ 323.729021][ T9766] 0 pages cma reserved [ 323.946452][ T9788] syz.3.1377[9788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.946736][ T9788] syz.3.1377[9788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.250450][ T9792] syzkaller0: entered promiscuous mode [ 324.297791][ T9792] syzkaller0: entered allmulticast mode [ 324.311798][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1379'. [ 324.360257][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1379'. [ 324.411896][ T9793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1379'. [ 324.778213][ T9802] FAULT_INJECTION: forcing a failure. [ 324.778213][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.799770][ T9802] CPU: 0 PID: 9802 Comm: syz.3.1383 Not tainted syzkaller #0 [ 324.807243][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.817354][ T9802] Call Trace: [ 324.820673][ T9802] [ 324.823646][ T9802] dump_stack_lvl+0x16c/0x230 [ 324.828384][ T9802] ? show_regs_print_info+0x20/0x20 [ 324.833628][ T9802] ? load_image+0x3b0/0x3b0 [ 324.838189][ T9802] ? __might_fault+0xaa/0x120 [ 324.842920][ T9802] ? __lock_acquire+0x7c80/0x7c80 [ 324.848000][ T9802] should_fail_ex+0x39d/0x4d0 [ 324.852748][ T9802] _copy_from_user+0x2f/0xe0 [ 324.857412][ T9802] __sys_bpf+0x1e9/0x800 [ 324.861736][ T9802] ? bpf_link_show_fdinfo+0x350/0x350 [ 324.867182][ T9802] ? lock_chain_count+0x20/0x20 [ 324.872093][ T9802] __x64_sys_bpf+0x7c/0x90 [ 324.876560][ T9802] do_syscall_64+0x55/0xb0 [ 324.881028][ T9802] ? clear_bhb_loop+0x40/0x90 [ 324.885853][ T9802] ? clear_bhb_loop+0x40/0x90 [ 324.890573][ T9802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.896509][ T9802] RIP: 0033:0x7fc34f58f749 [ 324.900972][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.920634][ T9802] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.929120][ T9802] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 324.937237][ T9802] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 324.945261][ T9802] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 324.953295][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.961313][ T9802] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 324.969355][ T9802] [ 325.520750][ T5795] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 328.840233][ T9832] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1396'. [ 329.242246][ T9845] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1404'. [ 329.303112][ T9837] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 329.322201][ T9837] batman_adv: batadv0: Removing interface: team0 [ 329.344177][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.361454][ T9837] team0: entered promiscuous mode [ 329.382436][ T9837] team_slave_0: entered promiscuous mode [ 329.415809][ T9837] team_slave_1: entered promiscuous mode [ 329.435564][ T9837] bond0: (slave team0): Enslaving as an active interface with an up link [ 329.664191][ T9856] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 329.713184][ T9856] vlan0: entered allmulticast mode [ 329.735078][ T9856] veth0_vlan: entered allmulticast mode [ 329.807132][ T9856] vlan0: entered promiscuous mode [ 329.813800][ T9856] team0: Port device vlan0 added [ 330.076027][ T9870] netlink: 'syz.2.1414': attribute type 9 has an invalid length. [ 330.104797][ T9870] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1414'. [ 331.029025][ T9901] syz.1.1429[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.029278][ T9901] syz.1.1429[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.296143][ T9928] netlink: 184920 bytes leftover after parsing attributes in process `syz.1.1442'. [ 332.382278][ T9928] net_ratelimit: 81 callbacks suppressed [ 332.382304][ T9928] openvswitch: netlink: Flow key attribute not present in set flow. [ 333.467737][ T9951] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 333.498662][ T9951] batman_adv: batadv0: Removing interface: ` [ 333.570924][ T9951] 8021q: adding VLAN 0 to HW filter on device ` [ 333.629484][ T9951] bond0: (slave `): Enslaving as an active interface with an up link [ 333.891477][ T9951] syz.0.1450 (9951) used greatest stack depth: 19528 bytes left [ 334.688559][ T9992] FAULT_INJECTION: forcing a failure. [ 334.688559][ T9992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.731272][ T9992] CPU: 0 PID: 9992 Comm: syz.2.1469 Not tainted syzkaller #0 [ 334.738760][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.748861][ T9992] Call Trace: [ 334.752180][ T9992] [ 334.755149][ T9992] dump_stack_lvl+0x16c/0x230 [ 334.759888][ T9992] ? show_regs_print_info+0x20/0x20 [ 334.765145][ T9992] ? load_image+0x3b0/0x3b0 [ 334.769697][ T9992] ? __might_fault+0xaa/0x120 [ 334.774435][ T9992] ? __lock_acquire+0x7c80/0x7c80 [ 334.779514][ T9992] should_fail_ex+0x39d/0x4d0 [ 334.784264][ T9992] _copy_from_user+0x2f/0xe0 [ 334.788905][ T9992] btf_new_fd+0x348/0x980 [ 334.793297][ T9992] ? bpf_btf_show_fdinfo+0x80/0x80 [ 334.798475][ T9992] ? capable+0x88/0xe0 [ 334.802612][ T9992] __sys_bpf+0x60e/0x800 [ 334.806897][ T9992] ? bpf_link_show_fdinfo+0x350/0x350 [ 334.812326][ T9992] ? lock_chain_count+0x20/0x20 [ 334.817225][ T9992] __x64_sys_bpf+0x7c/0x90 [ 334.821685][ T9992] do_syscall_64+0x55/0xb0 [ 334.826169][ T9992] ? clear_bhb_loop+0x40/0x90 [ 334.830918][ T9992] ? clear_bhb_loop+0x40/0x90 [ 334.835654][ T9992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.841601][ T9992] RIP: 0033:0x7fd0cb38f749 [ 334.846062][ T9992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.865737][ T9992] RSP: 002b:00007fd0cc140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.874205][ T9992] RAX: ffffffffffffffda RBX: 00007fd0cb5e5fa0 RCX: 00007fd0cb38f749 [ 334.882256][ T9992] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 334.890278][ T9992] RBP: 00007fd0cc140090 R08: 0000000000000000 R09: 0000000000000000 [ 334.898292][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.906304][ T9992] R13: 00007fd0cb5e6038 R14: 00007fd0cb5e5fa0 R15: 00007fffc2241248 [ 334.914349][ T9992] [ 335.589328][ T5795] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 335.677387][T10018] FAULT_INJECTION: forcing a failure. [ 335.677387][T10018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.702493][T10018] CPU: 1 PID: 10018 Comm: syz.3.1482 Not tainted syzkaller #0 [ 335.710076][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.720282][T10018] Call Trace: [ 335.723591][T10018] [ 335.726542][T10018] dump_stack_lvl+0x16c/0x230 [ 335.731259][T10018] ? show_regs_print_info+0x20/0x20 [ 335.736493][T10018] ? load_image+0x3b0/0x3b0 [ 335.741024][T10018] ? __might_fault+0xaa/0x120 [ 335.745724][T10018] ? __lock_acquire+0x7c80/0x7c80 [ 335.750778][T10018] should_fail_ex+0x39d/0x4d0 [ 335.755491][T10018] _copy_from_user+0x2f/0xe0 [ 335.760132][T10018] __sys_bpf+0x1e9/0x800 [ 335.764404][T10018] ? bpf_link_show_fdinfo+0x350/0x350 [ 335.769811][T10018] ? lock_chain_count+0x20/0x20 [ 335.774688][T10018] __x64_sys_bpf+0x7c/0x90 [ 335.779123][T10018] do_syscall_64+0x55/0xb0 [ 335.783566][T10018] ? clear_bhb_loop+0x40/0x90 [ 335.788278][T10018] ? clear_bhb_loop+0x40/0x90 [ 335.792974][T10018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.798885][T10018] RIP: 0033:0x7fc34f58f749 [ 335.803322][T10018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.822947][T10018] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.831379][T10018] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 335.839371][T10018] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 335.847373][T10018] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 335.855381][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.863392][T10018] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 335.871433][T10018] [ 336.626707][ T5795] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 336.697167][T10054] syz.1.1495[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.711041][T10054] syz.1.1495[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.071170][T10067] FAULT_INJECTION: forcing a failure. [ 337.071170][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 337.119501][T10067] CPU: 0 PID: 10067 Comm: syz.0.1502 Not tainted syzkaller #0 [ 337.127079][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.137274][T10067] Call Trace: [ 337.140593][T10067] [ 337.143585][T10067] dump_stack_lvl+0x16c/0x230 [ 337.148333][T10067] ? show_regs_print_info+0x20/0x20 [ 337.153672][T10067] ? load_image+0x3b0/0x3b0 [ 337.158237][T10067] ? __might_sleep+0xe0/0xe0 [ 337.162980][T10067] ? __lock_acquire+0x7c80/0x7c80 [ 337.168053][T10067] should_fail_ex+0x39d/0x4d0 [ 337.172790][T10067] should_failslab+0x9/0x20 [ 337.177343][T10067] slab_pre_alloc_hook+0x59/0x310 [ 337.182419][T10067] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 337.188010][T10067] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 337.193602][T10067] __kmem_cache_alloc_node+0x53/0x260 [ 337.199024][T10067] ? __lock_acquire+0x7c80/0x7c80 [ 337.204094][T10067] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 337.209681][T10067] __kmalloc+0xa4/0x240 [ 337.213893][T10067] bpf_prog_test_run_skb+0x22c/0x11c0 [ 337.219310][T10067] ? __fget_files+0x28/0x4d0 [ 337.224038][T10067] ? __fget_files+0x44a/0x4d0 [ 337.228949][T10067] ? cpu_online+0x60/0x60 [ 337.233325][T10067] bpf_prog_test_run+0x321/0x390 [ 337.238409][T10067] __sys_bpf+0x440/0x800 [ 337.242704][T10067] ? bpf_link_show_fdinfo+0x350/0x350 [ 337.248136][T10067] ? lock_chain_count+0x20/0x20 [ 337.253041][T10067] __x64_sys_bpf+0x7c/0x90 [ 337.257511][T10067] do_syscall_64+0x55/0xb0 [ 337.261979][T10067] ? clear_bhb_loop+0x40/0x90 [ 337.266697][T10067] ? clear_bhb_loop+0x40/0x90 [ 337.271428][T10067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.277379][T10067] RIP: 0033:0x7f739eb8f749 [ 337.281840][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.301487][T10067] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.309954][T10067] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 337.317963][T10067] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 337.325975][T10067] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 337.333986][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.341995][T10067] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 337.350024][T10067] [ 337.414956][T10073] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1505'. [ 337.477855][T10070] netlink: 'syz.1.1504': attribute type 27 has an invalid length. [ 337.525941][T10073] netlink: 'syz.2.1505': attribute type 21 has an invalid length. [ 337.540052][T10073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1505'. [ 337.550706][T10073] netlink: 'syz.2.1505': attribute type 4 has an invalid length. [ 337.560375][T10073] netlink: 'syz.2.1505': attribute type 5 has an invalid length. [ 337.580370][T10073] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1505'. [ 337.599566][T10071] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 337.640319][T10071] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 337.667748][T10071] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 337.693835][T10071] team0: Port device wlan1 added [ 337.705286][T10079] FAULT_INJECTION: forcing a failure. [ 337.705286][T10079] name failslab, interval 1, probability 0, space 0, times 0 [ 337.753490][T10079] CPU: 0 PID: 10079 Comm: syz.3.1508 Not tainted syzkaller #0 [ 337.761079][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.771218][T10079] Call Trace: [ 337.774567][T10079] [ 337.777545][T10079] dump_stack_lvl+0x16c/0x230 [ 337.782324][T10079] ? show_regs_print_info+0x20/0x20 [ 337.787637][T10079] ? load_image+0x3b0/0x3b0 [ 337.792250][T10079] ? __lock_acquire+0x7c80/0x7c80 [ 337.797369][T10079] should_fail_ex+0x39d/0x4d0 [ 337.802142][T10079] should_failslab+0x9/0x20 [ 337.806801][T10079] slab_pre_alloc_hook+0x59/0x310 [ 337.811909][T10079] ? bpf_prog_alloc+0x3d/0x1b0 [ 337.816741][T10079] ? bpf_prog_load+0x6b8/0x16d0 [ 337.821664][T10079] ? __sys_bpf+0x55a/0x800 [ 337.826145][T10079] kmem_cache_alloc_node+0x60/0x330 [ 337.831415][T10079] ? alloc_vmap_area+0x1c4/0x1c70 [ 337.836537][T10079] alloc_vmap_area+0x1c4/0x1c70 [ 337.841497][T10079] ? vm_map_ram+0xcb0/0xcb0 [ 337.846062][T10079] ? rcu_is_watching+0x15/0xb0 [ 337.850904][T10079] __get_vm_area_node+0x162/0x370 [ 337.856096][T10079] __vmalloc_node_range+0x36e/0x1320 [ 337.861443][T10079] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 337.867071][T10079] ? mark_lock+0x94/0x320 [ 337.871464][T10079] ? __lock_acquire+0x1334/0x7c80 [ 337.876556][T10079] ? verify_lock_unused+0x140/0x140 [ 337.881846][T10079] ? free_vm_area+0x50/0x50 [ 337.886433][T10079] ? end_current_label_crit_section+0x170/0x170 [ 337.892777][T10079] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 337.898366][T10079] __vmalloc+0x7a/0x90 [ 337.902491][T10079] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 337.908087][T10079] bpf_prog_alloc_no_stats+0x47/0x440 [ 337.913507][T10079] ? bpf_prog_alloc+0x2b/0x1b0 [ 337.918354][T10079] bpf_prog_alloc+0x3d/0x1b0 [ 337.923017][T10079] bpf_prog_load+0x6b8/0x16d0 [ 337.927772][T10079] ? map_freeze+0x420/0x420 [ 337.932384][T10079] ? __might_fault+0xaa/0x120 [ 337.937118][T10079] ? __lock_acquire+0x7c80/0x7c80 [ 337.942281][T10079] ? file_end_write+0x159/0x250 [ 337.947197][T10079] ? __might_fault+0xaa/0x120 [ 337.951932][T10079] ? __might_fault+0xc6/0x120 [ 337.956791][T10079] ? __might_fault+0xaa/0x120 [ 337.961601][T10079] ? bpf_lsm_bpf+0x9/0x10 [ 337.966012][T10079] ? security_bpf+0x7e/0xa0 [ 337.970628][T10079] __sys_bpf+0x55a/0x800 [ 337.974959][T10079] ? bpf_link_show_fdinfo+0x350/0x350 [ 337.980464][T10079] ? lock_chain_count+0x20/0x20 [ 337.985407][T10079] __x64_sys_bpf+0x7c/0x90 [ 337.989877][T10079] do_syscall_64+0x55/0xb0 [ 337.994423][T10079] ? clear_bhb_loop+0x40/0x90 [ 337.999246][T10079] ? clear_bhb_loop+0x40/0x90 [ 338.004007][T10079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.009952][T10079] RIP: 0033:0x7fc34f58f749 [ 338.014420][T10079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.034082][T10079] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.042578][T10079] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 338.050625][T10079] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 338.058649][T10079] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 338.066665][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.074710][T10079] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 338.082913][T10079] [ 338.089955][T10079] syz.3.1508: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 338.107712][T10079] CPU: 1 PID: 10079 Comm: syz.3.1508 Not tainted syzkaller #0 [ 338.115270][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.125406][T10079] Call Trace: [ 338.128742][T10079] [ 338.131715][T10079] dump_stack_lvl+0x16c/0x230 [ 338.136466][T10079] ? show_regs_print_info+0x20/0x20 [ 338.141717][T10079] ? load_image+0x3b0/0x3b0 [ 338.146278][T10079] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.152763][T10079] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 338.159323][T10079] warn_alloc+0x210/0x300 [ 338.163725][T10079] ? slab_free_freelist_hook+0x130/0x1b0 [ 338.169443][T10079] ? zone_watermark_ok_safe+0x230/0x230 [ 338.175039][T10079] ? __get_vm_area_node+0x17b/0x370 [ 338.180305][T10079] ? __get_vm_area_node+0x17b/0x370 [ 338.185586][T10079] __vmalloc_node_range+0x393/0x1320 [ 338.190931][T10079] ? mark_lock+0x94/0x320 [ 338.195320][T10079] ? __lock_acquire+0x1334/0x7c80 [ 338.200435][T10079] ? verify_lock_unused+0x140/0x140 [ 338.205726][T10079] ? free_vm_area+0x50/0x50 [ 338.210293][T10079] ? end_current_label_crit_section+0x170/0x170 [ 338.216609][T10079] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 338.222224][T10079] __vmalloc+0x7a/0x90 [ 338.226353][T10079] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 338.231980][T10079] bpf_prog_alloc_no_stats+0x47/0x440 [ 338.237418][T10079] ? bpf_prog_alloc+0x2b/0x1b0 [ 338.242265][T10079] bpf_prog_alloc+0x3d/0x1b0 [ 338.246925][T10079] bpf_prog_load+0x6b8/0x16d0 [ 338.251690][T10079] ? map_freeze+0x420/0x420 [ 338.256250][T10079] ? __might_fault+0xaa/0x120 [ 338.260992][T10079] ? __lock_acquire+0x7c80/0x7c80 [ 338.266064][T10079] ? file_end_write+0x159/0x250 [ 338.270972][T10079] ? __might_fault+0xaa/0x120 [ 338.275691][T10079] ? __might_fault+0xc6/0x120 [ 338.280416][T10079] ? __might_fault+0xaa/0x120 [ 338.285141][T10079] ? bpf_lsm_bpf+0x9/0x10 [ 338.289516][T10079] ? security_bpf+0x7e/0xa0 [ 338.294096][T10079] __sys_bpf+0x55a/0x800 [ 338.298398][T10079] ? bpf_link_show_fdinfo+0x350/0x350 [ 338.303869][T10079] ? lock_chain_count+0x20/0x20 [ 338.308797][T10079] __x64_sys_bpf+0x7c/0x90 [ 338.313312][T10079] do_syscall_64+0x55/0xb0 [ 338.317850][T10079] ? clear_bhb_loop+0x40/0x90 [ 338.322582][T10079] ? clear_bhb_loop+0x40/0x90 [ 338.327313][T10079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.333274][T10079] RIP: 0033:0x7fc34f58f749 [ 338.337740][T10079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.357504][T10079] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.365978][T10079] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 338.373992][T10079] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 338.382055][T10079] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 338.390082][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.398105][T10079] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 338.406176][T10079] [ 338.442197][T10079] Mem-Info: [ 338.445785][T10079] active_anon:5440 inactive_anon:0 isolated_anon:0 [ 338.445785][T10079] active_file:18606 inactive_file:39980 isolated_file:0 [ 338.445785][T10079] unevictable:768 dirty:195 writeback:0 [ 338.445785][T10079] slab_reclaimable:10162 slab_unreclaimable:92655 [ 338.445785][T10079] mapped:24186 shmem:1361 pagetables:528 [ 338.445785][T10079] sec_pagetables:0 bounce:0 [ 338.445785][T10079] kernel_misc_reclaimable:0 [ 338.445785][T10079] free:1348989 free_pcp:9398 free_cma:0 [ 338.510011][T10079] Node 0 active_anon:21760kB inactive_anon:0kB active_file:74424kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96744kB dirty:776kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11912kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no [ 338.543906][T10079] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 338.588924][T10079] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.618304][T10079] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 338.631220][ T5795] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 338.633182][T10079] Node 0 DMA32 free:1488324kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21704kB inactive_anon:0kB active_file:74424kB inactive_file:158392kB unevictable:1536kB writepending:836kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:17660kB local_pcp:2032kB free_cma:0kB [ 338.692510][T10079] lowmem_reserve[]: 0 0 1 1 1 [ 338.705584][T10079] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.736791][T10079] lowmem_reserve[]: 0 0 0 0 0 [ 338.741706][T10079] Node 1 Normal free:3892264kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20032kB local_pcp:11424kB free_cma:0kB [ 338.772700][T10079] lowmem_reserve[]: 0 0 0 0 0 [ 338.777499][T10079] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.790905][T10079] Node 0 DMA32: 1025*4kB (UME) 1484*8kB (UME) 1338*16kB (UM) 1004*32kB (UME) 407*64kB (UME) 163*128kB (UM) 117*256kB (UME) 35*512kB (UM) 29*1024kB (UM) 10*2048kB (ME) 311*4096kB (M) = 1488324kB [ 338.852805][T10079] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 338.895805][T10079] Node 1 Normal: 256*4kB (UME) 59*8kB (UME) 35*16kB (UME) 91*32kB (UME) 31*64kB (UE) 6*128kB (UME) 2*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 948*4096kB (ME) = 3892264kB [ 338.924369][T10079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.934544][T10079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.948106][T10079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.958960][T10079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.002204][T10079] 59947 total pagecache pages [ 339.007950][T10079] 0 pages in swap cache [ 339.021569][T10079] Free swap = 124996kB [ 339.032210][T10079] Total swap = 124996kB [ 339.042438][T10079] 2097051 pages RAM [ 339.046354][T10079] 0 pages HighMem/MovableOnly [ 339.051064][T10079] 416138 pages reserved [ 339.078623][T10079] 0 pages cma reserved [ 339.206805][T10095] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1514'. [ 339.351371][T10107] FAULT_INJECTION: forcing a failure. [ 339.351371][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.387464][T10107] CPU: 0 PID: 10107 Comm: syz.2.1519 Not tainted syzkaller #0 [ 339.395039][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.405144][T10107] Call Trace: [ 339.408484][T10107] [ 339.411462][T10107] dump_stack_lvl+0x16c/0x230 [ 339.416221][T10107] ? show_regs_print_info+0x20/0x20 [ 339.421497][T10107] ? load_image+0x3b0/0x3b0 [ 339.426064][T10107] ? __might_fault+0xaa/0x120 [ 339.430809][T10107] ? __lock_acquire+0x7c80/0x7c80 [ 339.435921][T10107] should_fail_ex+0x39d/0x4d0 [ 339.440662][T10107] _copy_from_user+0x2f/0xe0 [ 339.445315][T10107] __sys_bpf+0x1e9/0x800 [ 339.449712][T10107] ? bpf_link_show_fdinfo+0x350/0x350 [ 339.455139][T10107] ? lock_chain_count+0x20/0x20 [ 339.460028][T10107] __x64_sys_bpf+0x7c/0x90 [ 339.464466][T10107] do_syscall_64+0x55/0xb0 [ 339.468905][T10107] ? clear_bhb_loop+0x40/0x90 [ 339.473602][T10107] ? clear_bhb_loop+0x40/0x90 [ 339.478300][T10107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.484299][T10107] RIP: 0033:0x7fd0cb38f749 [ 339.488733][T10107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.508360][T10107] RSP: 002b:00007fd0cc140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.516825][T10107] RAX: ffffffffffffffda RBX: 00007fd0cb5e5fa0 RCX: 00007fd0cb38f749 [ 339.524905][T10107] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 339.532919][T10107] RBP: 00007fd0cc140090 R08: 0000000000000000 R09: 0000000000000000 [ 339.540995][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.549000][T10107] R13: 00007fd0cb5e6038 R14: 00007fd0cb5e5fa0 R15: 00007fffc2241248 [ 339.557096][T10107] [ 339.707380][T10115] netlink: 'syz.3.1523': attribute type 10 has an invalid length. [ 339.795545][T10115] veth0_to_bond: entered promiscuous mode [ 339.801980][T10115] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 339.907907][T10124] FAULT_INJECTION: forcing a failure. [ 339.907907][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.936899][T10124] CPU: 0 PID: 10124 Comm: syz.1.1527 Not tainted syzkaller #0 [ 339.944467][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.954575][T10124] Call Trace: [ 339.957894][T10124] [ 339.960857][T10124] dump_stack_lvl+0x16c/0x230 [ 339.965591][T10124] ? show_regs_print_info+0x20/0x20 [ 339.970836][T10124] ? load_image+0x3b0/0x3b0 [ 339.975395][T10124] ? __might_fault+0xaa/0x120 [ 339.980128][T10124] ? __lock_acquire+0x7c80/0x7c80 [ 339.985210][T10124] should_fail_ex+0x39d/0x4d0 [ 339.989952][T10124] _copy_to_user+0x2f/0xa0 [ 339.994414][T10124] bpf_verifier_vlog+0x45c/0x870 [ 339.999420][T10124] __btf_verifier_log+0xd5/0x120 [ 340.004409][T10124] ? btf_check_sec_info+0x330/0x330 [ 340.009654][T10124] ? __lock_acquire+0x7c80/0x7c80 [ 340.014734][T10124] ? btf_parse_hdr+0x1da/0x6d0 [ 340.019549][T10124] btf_parse_hdr+0x292/0x6d0 [ 340.024192][T10124] btf_new_fd+0x37b/0x980 [ 340.028578][T10124] ? bpf_btf_show_fdinfo+0x80/0x80 [ 340.033748][T10124] ? capable+0x88/0xe0 [ 340.037874][T10124] __sys_bpf+0x60e/0x800 [ 340.042166][T10124] ? bpf_link_show_fdinfo+0x350/0x350 [ 340.047597][T10124] ? lock_chain_count+0x20/0x20 [ 340.052510][T10124] __x64_sys_bpf+0x7c/0x90 [ 340.056968][T10124] do_syscall_64+0x55/0xb0 [ 340.061439][T10124] ? clear_bhb_loop+0x40/0x90 [ 340.066165][T10124] ? clear_bhb_loop+0x40/0x90 [ 340.070898][T10124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.076838][T10124] RIP: 0033:0x7f108658f749 [ 340.081298][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.100958][T10124] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.109420][T10124] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 340.117434][T10124] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 340.125449][T10124] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.133463][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.141484][T10124] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 340.149527][T10124] [ 341.072905][T10144] FAULT_INJECTION: forcing a failure. [ 341.072905][T10144] name failslab, interval 1, probability 0, space 0, times 0 [ 341.122105][T10144] CPU: 1 PID: 10144 Comm: syz.3.1536 Not tainted syzkaller #0 [ 341.129760][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.139900][T10144] Call Trace: [ 341.143224][T10144] [ 341.146196][T10144] dump_stack_lvl+0x16c/0x230 [ 341.150939][T10144] ? show_regs_print_info+0x20/0x20 [ 341.156213][T10144] ? load_image+0x3b0/0x3b0 [ 341.160786][T10144] ? __might_sleep+0xe0/0xe0 [ 341.165443][T10144] ? __lock_acquire+0x7c80/0x7c80 [ 341.170536][T10144] should_fail_ex+0x39d/0x4d0 [ 341.175297][T10144] should_failslab+0x9/0x20 [ 341.179872][T10144] slab_pre_alloc_hook+0x59/0x310 [ 341.184958][T10144] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 341.190566][T10144] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 341.196171][T10144] __kmem_cache_alloc_node+0x53/0x260 [ 341.201615][T10144] ? __lock_acquire+0x7c80/0x7c80 [ 341.206704][T10144] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 341.212312][T10144] __kmalloc+0xa4/0x240 [ 341.216532][T10144] bpf_prog_test_run_skb+0x22c/0x11c0 [ 341.221964][T10144] ? __fget_files+0x28/0x4d0 [ 341.226690][T10144] ? __fget_files+0x44a/0x4d0 [ 341.231410][T10144] ? cpu_online+0x60/0x60 [ 341.235764][T10144] bpf_prog_test_run+0x321/0x390 [ 341.240760][T10144] __sys_bpf+0x440/0x800 [ 341.245028][T10144] ? bpf_link_show_fdinfo+0x350/0x350 [ 341.250440][T10144] ? lock_chain_count+0x20/0x20 [ 341.255332][T10144] __x64_sys_bpf+0x7c/0x90 [ 341.259777][T10144] do_syscall_64+0x55/0xb0 [ 341.264228][T10144] ? clear_bhb_loop+0x40/0x90 [ 341.268927][T10144] ? clear_bhb_loop+0x40/0x90 [ 341.273629][T10144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.279549][T10144] RIP: 0033:0x7fc34f58f749 [ 341.283994][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.303627][T10144] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.312502][T10144] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 341.320608][T10144] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 341.328604][T10144] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 341.336613][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.344629][T10144] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 341.352645][T10144] [ 342.079744][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 342.656912][T10180] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1550'. [ 342.702646][T10180] `: default FDB implementation only supports local addresses [ 343.244050][T10196] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 343.525575][T10207] FAULT_INJECTION: forcing a failure. [ 343.525575][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 343.552952][T10207] CPU: 0 PID: 10207 Comm: syz.0.1562 Not tainted syzkaller #0 [ 343.560526][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.570627][T10207] Call Trace: [ 343.573941][T10207] [ 343.576907][T10207] dump_stack_lvl+0x16c/0x230 [ 343.581659][T10207] ? show_regs_print_info+0x20/0x20 [ 343.586917][T10207] ? load_image+0x3b0/0x3b0 [ 343.591476][T10207] ? __lock_acquire+0x7c80/0x7c80 [ 343.596554][T10207] should_fail_ex+0x39d/0x4d0 [ 343.601269][T10207] should_failslab+0x9/0x20 [ 343.605806][T10207] slab_pre_alloc_hook+0x59/0x310 [ 343.610870][T10207] ? sk_prot_alloc+0xe7/0x210 [ 343.615575][T10207] ? sk_prot_alloc+0xe7/0x210 [ 343.620270][T10207] __kmem_cache_alloc_node+0x53/0x260 [ 343.625676][T10207] ? sk_prot_alloc+0xe7/0x210 [ 343.630379][T10207] __kmalloc+0xa4/0x240 [ 343.634565][T10207] sk_prot_alloc+0xe7/0x210 [ 343.639086][T10207] ? sk_alloc+0x24/0x360 [ 343.643373][T10207] sk_alloc+0x3a/0x360 [ 343.647492][T10207] ? bpf_ctx_init+0x163/0x1a0 [ 343.652196][T10207] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 343.657773][T10207] bpf_prog_test_run_skb+0x39a/0x11c0 [ 343.663166][T10207] ? __fget_files+0x28/0x4d0 [ 343.667813][T10207] ? cpu_online+0x60/0x60 [ 343.672174][T10207] bpf_prog_test_run+0x321/0x390 [ 343.677153][T10207] __sys_bpf+0x440/0x800 [ 343.681858][T10207] ? bpf_link_show_fdinfo+0x350/0x350 [ 343.687351][T10207] ? lock_chain_count+0x20/0x20 [ 343.692234][T10207] __x64_sys_bpf+0x7c/0x90 [ 343.696680][T10207] do_syscall_64+0x55/0xb0 [ 343.701124][T10207] ? clear_bhb_loop+0x40/0x90 [ 343.705826][T10207] ? clear_bhb_loop+0x40/0x90 [ 343.710523][T10207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.716453][T10207] RIP: 0033:0x7f739eb8f749 [ 343.720887][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.740522][T10207] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.748975][T10207] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 343.756970][T10207] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 343.764978][T10207] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.772996][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.780990][T10207] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 343.788995][T10207] [ 344.669601][T10226] netlink: 'syz.0.1570': attribute type 41 has an invalid length. [ 344.735129][T10226] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1570'. [ 344.755341][T10226] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 344.817783][T10226] CPU: 1 PID: 10226 Comm: syz.0.1570 Not tainted syzkaller #0 [ 344.825361][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.835497][T10226] Call Trace: [ 344.840149][T10226] [ 344.843620][T10226] dump_stack_lvl+0x16c/0x230 [ 344.848398][T10226] ? show_regs_print_info+0x20/0x20 [ 344.853690][T10226] ? load_image+0x3b0/0x3b0 [ 344.858293][T10226] sysfs_warn_dup+0x8e/0xa0 [ 344.862888][T10226] sysfs_do_create_link_sd+0xc0/0x110 [ 344.868462][T10226] device_add_class_symlinks+0x1cf/0x240 [ 344.874280][T10226] device_add+0x507/0xc20 [ 344.878731][T10226] wiphy_register+0x1e74/0x2c00 [ 344.883698][T10226] ? cfg80211_event_work+0x40/0x40 [ 344.888887][T10226] ? minstrel_ht_alloc+0x88a/0x990 [ 344.894092][T10226] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 344.900250][T10226] ieee80211_register_hw+0x2de8/0x3b10 [ 344.906000][T10226] ? ieee80211_register_hw+0xed1/0x3b10 [ 344.911699][T10226] ? ieee80211_tasklet_handler+0x20/0x20 [ 344.917464][T10226] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 344.923464][T10226] ? __debug_object_init+0xe8/0x430 [ 344.929008][T10226] ? __asan_memset+0x22/0x40 [ 344.933689][T10226] ? __hrtimer_init+0x186/0x270 [ 344.938808][T10226] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 344.944635][T10226] ? mac80211_hwsim_free+0x220/0x220 [ 344.950004][T10226] ? rcu_is_watching+0x15/0xb0 [ 344.954843][T10226] ? kstrndup+0xbd/0x140 [ 344.959355][T10226] hwsim_new_radio_nl+0xd78/0x19d0 [ 344.964540][T10226] ? __nla_validate+0x50/0x50 [ 344.969303][T10226] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 344.975718][T10226] ? __nla_parse+0x40/0x50 [ 344.980225][T10226] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 344.986651][T10226] genl_family_rcv_msg_doit+0x209/0x2f0 [ 344.992308][T10226] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 344.998297][T10226] ? bpf_lsm_capable+0x9/0x10 [ 345.003057][T10226] ? security_capable+0x89/0xb0 [ 345.008005][T10226] genl_rcv_msg+0x60b/0x790 [ 345.012601][T10226] ? genl_bind+0x360/0x360 [ 345.017094][T10226] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 345.023498][T10226] ? ref_tracker_free+0x634/0x7d0 [ 345.028614][T10226] netlink_rcv_skb+0x216/0x480 [ 345.033464][T10226] ? genl_bind+0x360/0x360 [ 345.037980][T10226] ? netlink_ack+0x1110/0x1110 [ 345.042847][T10226] ? __lock_acquire+0x7c80/0x7c80 [ 345.048022][T10226] ? down_read+0x1ac/0x2e0 [ 345.052516][T10226] genl_rcv+0x28/0x40 [ 345.056571][T10226] netlink_unicast+0x751/0x8d0 [ 345.061418][T10226] netlink_sendmsg+0x8c1/0xbe0 [ 345.066271][T10226] ? netlink_getsockopt+0x580/0x580 [ 345.071732][T10226] ? aa_sock_msg_perm+0x94/0x150 [ 345.077378][T10226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.083260][T10226] ? security_socket_sendmsg+0x80/0xa0 [ 345.088794][T10226] ? netlink_getsockopt+0x580/0x580 [ 345.094069][T10226] ____sys_sendmsg+0x5bf/0x950 [ 345.098948][T10226] ? __asan_memset+0x22/0x40 [ 345.104764][T10226] ? __sys_sendmsg_sock+0x30/0x30 [ 345.109883][T10226] ? __import_iovec+0x5f2/0x860 [ 345.114988][T10226] ? import_iovec+0x73/0xa0 [ 345.119574][T10226] ___sys_sendmsg+0x220/0x290 [ 345.124345][T10226] ? __sys_sendmsg+0x270/0x270 [ 345.129209][T10226] __se_sys_sendmsg+0x1a5/0x270 [ 345.134103][T10226] ? perf_trace_preemptirq_template+0x281/0x340 [ 345.140397][T10226] ? __x64_sys_sendmsg+0x80/0x80 [ 345.145424][T10226] ? trace_sys_enter+0x1f/0x80 [ 345.150453][T10226] do_syscall_64+0x55/0xb0 [ 345.155046][T10226] ? clear_bhb_loop+0x40/0x90 [ 345.159783][T10226] ? clear_bhb_loop+0x40/0x90 [ 345.164514][T10226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.170445][T10226] RIP: 0033:0x7f739eb8f749 [ 345.175068][T10226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.194816][T10226] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.203282][T10226] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 345.211496][T10226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 345.219494][T10226] RBP: 00007f739ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.228012][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.236010][T10226] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 345.244111][T10226] [ 345.906619][T10259] FAULT_INJECTION: forcing a failure. [ 345.906619][T10259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.925780][T10259] CPU: 0 PID: 10259 Comm: syz.0.1583 Not tainted syzkaller #0 [ 345.933347][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.943453][T10259] Call Trace: [ 345.946797][T10259] [ 345.949780][T10259] dump_stack_lvl+0x16c/0x230 [ 345.954528][T10259] ? show_regs_print_info+0x20/0x20 [ 345.959795][T10259] ? load_image+0x3b0/0x3b0 [ 345.964360][T10259] ? __might_fault+0xaa/0x120 [ 345.969095][T10259] ? __lock_acquire+0x7c80/0x7c80 [ 345.974182][T10259] ? __virt_addr_valid+0x18c/0x540 [ 345.979358][T10259] should_fail_ex+0x39d/0x4d0 [ 345.984197][T10259] _copy_from_user+0x2f/0xe0 [ 345.988854][T10259] bpf_prog_test_run_skb+0x259/0x11c0 [ 345.994286][T10259] ? __fget_files+0x28/0x4d0 [ 345.998936][T10259] ? __fget_files+0x44a/0x4d0 [ 346.003697][T10259] ? cpu_online+0x60/0x60 [ 346.008084][T10259] bpf_prog_test_run+0x321/0x390 [ 346.013073][T10259] __sys_bpf+0x440/0x800 [ 346.017371][T10259] ? bpf_link_show_fdinfo+0x350/0x350 [ 346.022833][T10259] ? lock_chain_count+0x20/0x20 [ 346.027753][T10259] __x64_sys_bpf+0x7c/0x90 [ 346.032231][T10259] do_syscall_64+0x55/0xb0 [ 346.036733][T10259] ? clear_bhb_loop+0x40/0x90 [ 346.041481][T10259] ? clear_bhb_loop+0x40/0x90 [ 346.046235][T10259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.052195][T10259] RIP: 0033:0x7f739eb8f749 [ 346.056675][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.076433][T10259] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.084911][T10259] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 346.092940][T10259] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 346.100967][T10259] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.108995][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.117114][T10259] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 346.125259][T10259] [ 347.450350][T10294] FAULT_INJECTION: forcing a failure. [ 347.450350][T10294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.482512][T10294] CPU: 0 PID: 10294 Comm: syz.0.1598 Not tainted syzkaller #0 [ 347.490082][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.500184][T10294] Call Trace: [ 347.503513][T10294] [ 347.506499][T10294] dump_stack_lvl+0x16c/0x230 [ 347.511294][T10294] ? show_regs_print_info+0x20/0x20 [ 347.516639][T10294] ? load_image+0x3b0/0x3b0 [ 347.521205][T10294] ? __might_fault+0xaa/0x120 [ 347.525927][T10294] ? __lock_acquire+0x7c80/0x7c80 [ 347.531008][T10294] should_fail_ex+0x39d/0x4d0 [ 347.535749][T10294] _copy_from_user+0x2f/0xe0 [ 347.540399][T10294] __sys_bpf+0x1e9/0x800 [ 347.544696][T10294] ? bpf_link_show_fdinfo+0x350/0x350 [ 347.550233][T10294] ? lock_chain_count+0x20/0x20 [ 347.555134][T10294] __x64_sys_bpf+0x7c/0x90 [ 347.559590][T10294] do_syscall_64+0x55/0xb0 [ 347.564088][T10294] ? clear_bhb_loop+0x40/0x90 [ 347.568924][T10294] ? clear_bhb_loop+0x40/0x90 [ 347.573658][T10294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.579605][T10294] RIP: 0033:0x7f739eb8f749 [ 347.584078][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.603869][T10294] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.612338][T10294] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 347.620348][T10294] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 347.628363][T10294] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.636370][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.644378][T10294] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 347.652438][T10294] [ 348.131513][T10305] FAULT_INJECTION: forcing a failure. [ 348.131513][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 348.154283][T10305] CPU: 0 PID: 10305 Comm: syz.0.1603 Not tainted syzkaller #0 [ 348.161856][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.171977][T10305] Call Trace: [ 348.175305][T10305] [ 348.178286][T10305] dump_stack_lvl+0x16c/0x230 [ 348.183040][T10305] ? show_regs_print_info+0x20/0x20 [ 348.188361][T10305] ? load_image+0x3b0/0x3b0 [ 348.192937][T10305] ? __might_sleep+0xe0/0xe0 [ 348.197599][T10305] ? __lock_acquire+0x7c80/0x7c80 [ 348.202698][T10305] should_fail_ex+0x39d/0x4d0 [ 348.207451][T10305] should_failslab+0x9/0x20 [ 348.212008][T10305] slab_pre_alloc_hook+0x59/0x310 [ 348.217106][T10305] ? free_vm_area+0x50/0x50 [ 348.221685][T10305] ? bpf_prog_alloc_no_stats+0xd8/0x440 [ 348.227308][T10305] __kmem_cache_alloc_node+0x53/0x260 [ 348.232761][T10305] ? bpf_prog_alloc_no_stats+0xd8/0x440 [ 348.238379][T10305] kmalloc_trace+0x2a/0xe0 [ 348.242881][T10305] bpf_prog_alloc_no_stats+0xd8/0x440 [ 348.248319][T10305] ? bpf_prog_alloc+0x2b/0x1b0 [ 348.253154][T10305] bpf_prog_alloc+0x3d/0x1b0 [ 348.257812][T10305] bpf_prog_load+0x6b8/0x16d0 [ 348.262567][T10305] ? map_freeze+0x420/0x420 [ 348.267125][T10305] ? __might_fault+0xaa/0x120 [ 348.271834][T10305] ? __lock_acquire+0x7c80/0x7c80 [ 348.276886][T10305] ? file_end_write+0x159/0x250 [ 348.281850][T10305] ? __might_fault+0xaa/0x120 [ 348.286550][T10305] ? __might_fault+0xc6/0x120 [ 348.291251][T10305] ? __might_fault+0xaa/0x120 [ 348.295956][T10305] ? bpf_lsm_bpf+0x9/0x10 [ 348.300418][T10305] ? security_bpf+0x7e/0xa0 [ 348.304959][T10305] __sys_bpf+0x55a/0x800 [ 348.309273][T10305] ? bpf_link_show_fdinfo+0x350/0x350 [ 348.314711][T10305] ? lock_chain_count+0x20/0x20 [ 348.319629][T10305] __x64_sys_bpf+0x7c/0x90 [ 348.324092][T10305] do_syscall_64+0x55/0xb0 [ 348.330373][T10305] ? clear_bhb_loop+0x40/0x90 [ 348.335205][T10305] ? clear_bhb_loop+0x40/0x90 [ 348.339910][T10305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.345826][T10305] RIP: 0033:0x7f739eb8f749 [ 348.350283][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.369935][T10305] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.378396][T10305] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 348.386398][T10305] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 348.394437][T10305] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.402443][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.410459][T10305] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 348.418489][T10305] [ 349.094486][T10331] FAULT_INJECTION: forcing a failure. [ 349.094486][T10331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.113886][T10331] CPU: 1 PID: 10331 Comm: syz.0.1616 Not tainted syzkaller #0 [ 349.121626][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.131734][T10331] Call Trace: [ 349.135057][T10331] [ 349.138168][T10331] dump_stack_lvl+0x16c/0x230 [ 349.142915][T10331] ? show_regs_print_info+0x20/0x20 [ 349.148487][T10331] ? load_image+0x3b0/0x3b0 [ 349.153222][T10331] ? __might_fault+0xaa/0x120 [ 349.158147][T10331] ? __lock_acquire+0x7c80/0x7c80 [ 349.163251][T10331] ? __virt_addr_valid+0x18c/0x540 [ 349.168421][T10331] should_fail_ex+0x39d/0x4d0 [ 349.173134][T10331] _copy_from_user+0x2f/0xe0 [ 349.177746][T10331] bpf_prog_test_run_skb+0x259/0x11c0 [ 349.183135][T10331] ? __fget_files+0x28/0x4d0 [ 349.187748][T10331] ? __fget_files+0x44a/0x4d0 [ 349.192465][T10331] ? cpu_online+0x60/0x60 [ 349.196820][T10331] bpf_prog_test_run+0x321/0x390 [ 349.201782][T10331] __sys_bpf+0x440/0x800 [ 349.206047][T10331] ? bpf_link_show_fdinfo+0x350/0x350 [ 349.211467][T10331] ? lock_chain_count+0x20/0x20 [ 349.216349][T10331] __x64_sys_bpf+0x7c/0x90 [ 349.220793][T10331] do_syscall_64+0x55/0xb0 [ 349.225243][T10331] ? clear_bhb_loop+0x40/0x90 [ 349.229939][T10331] ? clear_bhb_loop+0x40/0x90 [ 349.234638][T10331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.240554][T10331] RIP: 0033:0x7f739eb8f749 [ 349.244996][T10331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.264634][T10331] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.273163][T10331] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 349.281152][T10331] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 349.289320][T10331] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 349.297318][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.305317][T10331] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 349.313332][T10331] [ 349.739310][T10347] netlink: 'syz.3.1623': attribute type 10 has an invalid length. [ 349.752276][T10347] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1623'. [ 350.044153][T10357] FAULT_INJECTION: forcing a failure. [ 350.044153][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 350.081268][T10357] CPU: 1 PID: 10357 Comm: syz.1.1627 Not tainted syzkaller #0 [ 350.088851][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.098963][T10357] Call Trace: [ 350.102290][T10357] [ 350.105316][T10357] dump_stack_lvl+0x16c/0x230 [ 350.110072][T10357] ? show_regs_print_info+0x20/0x20 [ 350.115332][T10357] ? load_image+0x3b0/0x3b0 [ 350.119898][T10357] ? __lock_acquire+0x7c80/0x7c80 [ 350.124985][T10357] should_fail_ex+0x39d/0x4d0 [ 350.129724][T10357] should_failslab+0x9/0x20 [ 350.134289][T10357] slab_pre_alloc_hook+0x59/0x310 [ 350.139378][T10357] ? sk_prot_alloc+0xe7/0x210 [ 350.144112][T10357] ? sk_prot_alloc+0xe7/0x210 [ 350.148843][T10357] __kmem_cache_alloc_node+0x53/0x260 [ 350.154278][T10357] ? sk_prot_alloc+0xe7/0x210 [ 350.158985][T10357] __kmalloc+0xa4/0x240 [ 350.163170][T10357] sk_prot_alloc+0xe7/0x210 [ 350.167702][T10357] ? sk_alloc+0x24/0x360 [ 350.171973][T10357] sk_alloc+0x3a/0x360 [ 350.176068][T10357] ? bpf_ctx_init+0x163/0x1a0 [ 350.180762][T10357] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 350.186332][T10357] bpf_prog_test_run_skb+0x39a/0x11c0 [ 350.191740][T10357] ? __fget_files+0x28/0x4d0 [ 350.196364][T10357] ? cpu_online+0x60/0x60 [ 350.200715][T10357] bpf_prog_test_run+0x321/0x390 [ 350.205769][T10357] __sys_bpf+0x440/0x800 [ 350.210034][T10357] ? bpf_link_show_fdinfo+0x350/0x350 [ 350.215444][T10357] ? lock_chain_count+0x20/0x20 [ 350.220329][T10357] __x64_sys_bpf+0x7c/0x90 [ 350.224768][T10357] do_syscall_64+0x55/0xb0 [ 350.229213][T10357] ? clear_bhb_loop+0x40/0x90 [ 350.233935][T10357] ? clear_bhb_loop+0x40/0x90 [ 350.238636][T10357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.244552][T10357] RIP: 0033:0x7f108658f749 [ 350.249249][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.268895][T10357] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.277352][T10357] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 350.285362][T10357] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 350.293351][T10357] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.301343][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.309359][T10357] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 350.317588][T10357] [ 350.767250][T10374] FAULT_INJECTION: forcing a failure. [ 350.767250][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.781799][T10374] CPU: 1 PID: 10374 Comm: syz.0.1632 Not tainted syzkaller #0 [ 350.789318][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.799413][T10374] Call Trace: [ 350.802732][T10374] [ 350.805703][T10374] dump_stack_lvl+0x16c/0x230 [ 350.810530][T10374] ? show_regs_print_info+0x20/0x20 [ 350.815799][T10374] ? load_image+0x3b0/0x3b0 [ 350.820460][T10374] ? __might_fault+0xaa/0x120 [ 350.825206][T10374] ? __lock_acquire+0x7c80/0x7c80 [ 350.830304][T10374] should_fail_ex+0x39d/0x4d0 [ 350.835066][T10374] _copy_from_user+0x2f/0xe0 [ 350.839809][T10374] __sys_bpf+0x1e9/0x800 [ 350.844119][T10374] ? bpf_link_show_fdinfo+0x350/0x350 [ 350.849562][T10374] ? lock_chain_count+0x20/0x20 [ 350.854559][T10374] __x64_sys_bpf+0x7c/0x90 [ 350.859003][T10374] do_syscall_64+0x55/0xb0 [ 350.863451][T10374] ? clear_bhb_loop+0x40/0x90 [ 350.868151][T10374] ? clear_bhb_loop+0x40/0x90 [ 350.872852][T10374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.878791][T10374] RIP: 0033:0x7f739eb8f749 [ 350.883248][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.902886][T10374] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.911333][T10374] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 350.919429][T10374] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 350.927509][T10374] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 350.935608][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.943596][T10374] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 350.951603][T10374] [ 351.137536][T10367] netlink: 'syz.1.1631': attribute type 153 has an invalid length. [ 351.147952][T10367] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1631'. [ 351.432993][ T5795] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 351.579731][T10385] hsr0: entered promiscuous mode [ 351.624707][T10385] hsr0: entered allmulticast mode [ 351.646770][T10385] hsr_slave_0: entered allmulticast mode [ 351.660302][T10385] hsr_slave_1: entered allmulticast mode [ 352.566896][T10413] syz.2.1642[10413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.567185][T10413] syz.2.1642[10413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.045039][T10424] FAULT_INJECTION: forcing a failure. [ 353.045039][T10424] name failslab, interval 1, probability 0, space 0, times 0 [ 353.091633][T10424] CPU: 1 PID: 10424 Comm: syz.1.1646 Not tainted syzkaller #0 [ 353.099204][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.109313][T10424] Call Trace: [ 353.112629][T10424] [ 353.115594][T10424] dump_stack_lvl+0x16c/0x230 [ 353.120353][T10424] ? show_regs_print_info+0x20/0x20 [ 353.125581][T10424] ? load_image+0x3b0/0x3b0 [ 353.130111][T10424] ? __might_sleep+0xe0/0xe0 [ 353.134748][T10424] ? __lock_acquire+0x7c80/0x7c80 [ 353.139927][T10424] should_fail_ex+0x39d/0x4d0 [ 353.144659][T10424] should_failslab+0x9/0x20 [ 353.149198][T10424] slab_pre_alloc_hook+0x59/0x310 [ 353.154261][T10424] ? apparmor_sk_alloc_security+0x77/0x100 [ 353.160094][T10424] __kmem_cache_alloc_node+0x53/0x260 [ 353.165499][T10424] ? apparmor_sk_alloc_security+0x77/0x100 [ 353.171344][T10424] kmalloc_trace+0x2a/0xe0 [ 353.175795][T10424] apparmor_sk_alloc_security+0x77/0x100 [ 353.181475][T10424] security_sk_alloc+0x6e/0xa0 [ 353.186296][T10424] sk_prot_alloc+0x101/0x210 [ 353.190948][T10424] ? sk_alloc+0x24/0x360 [ 353.195237][T10424] sk_alloc+0x3a/0x360 [ 353.199332][T10424] ? bpf_ctx_init+0x163/0x1a0 [ 353.204030][T10424] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 353.209687][T10424] bpf_prog_test_run_skb+0x39a/0x11c0 [ 353.215089][T10424] ? __fget_files+0x28/0x4d0 [ 353.219743][T10424] ? cpu_online+0x60/0x60 [ 353.224101][T10424] bpf_prog_test_run+0x321/0x390 [ 353.229067][T10424] __sys_bpf+0x440/0x800 [ 353.233337][T10424] ? bpf_link_show_fdinfo+0x350/0x350 [ 353.238747][T10424] ? lock_chain_count+0x20/0x20 [ 353.243634][T10424] __x64_sys_bpf+0x7c/0x90 [ 353.248337][T10424] do_syscall_64+0x55/0xb0 [ 353.252782][T10424] ? clear_bhb_loop+0x40/0x90 [ 353.257486][T10424] ? clear_bhb_loop+0x40/0x90 [ 353.262207][T10424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.268131][T10424] RIP: 0033:0x7f108658f749 [ 353.272673][T10424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.292394][T10424] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.300858][T10424] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 353.308859][T10424] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 353.316858][T10424] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.324869][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.332864][T10424] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 353.340973][T10424] [ 353.502826][ T51] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 353.975933][T10450] FAULT_INJECTION: forcing a failure. [ 353.975933][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 353.995950][T10450] CPU: 1 PID: 10450 Comm: syz.0.1657 Not tainted syzkaller #0 [ 354.003524][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.013694][T10450] Call Trace: [ 354.017002][T10450] [ 354.019956][T10450] dump_stack_lvl+0x16c/0x230 [ 354.024673][T10450] ? show_regs_print_info+0x20/0x20 [ 354.029921][T10450] ? load_image+0x3b0/0x3b0 [ 354.034455][T10450] ? __lock_acquire+0x7c80/0x7c80 [ 354.039513][T10450] should_fail_ex+0x39d/0x4d0 [ 354.044222][T10450] should_failslab+0x9/0x20 [ 354.048840][T10450] slab_pre_alloc_hook+0x59/0x310 [ 354.053897][T10450] ? sk_prot_alloc+0xe7/0x210 [ 354.058619][T10450] ? sk_prot_alloc+0xe7/0x210 [ 354.063322][T10450] __kmem_cache_alloc_node+0x53/0x260 [ 354.068725][T10450] ? sk_prot_alloc+0xe7/0x210 [ 354.073531][T10450] __kmalloc+0xa4/0x240 [ 354.077737][T10450] sk_prot_alloc+0xe7/0x210 [ 354.082315][T10450] ? sk_alloc+0x24/0x360 [ 354.086659][T10450] sk_alloc+0x3a/0x360 [ 354.090776][T10450] ? bpf_ctx_init+0x163/0x1a0 [ 354.095490][T10450] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 354.101376][T10450] bpf_prog_test_run_skb+0x39a/0x11c0 [ 354.106793][T10450] ? __fget_files+0x28/0x4d0 [ 354.111541][T10450] ? cpu_online+0x60/0x60 [ 354.115907][T10450] bpf_prog_test_run+0x321/0x390 [ 354.120989][T10450] __sys_bpf+0x440/0x800 [ 354.125268][T10450] ? bpf_link_show_fdinfo+0x350/0x350 [ 354.130677][T10450] ? lock_chain_count+0x20/0x20 [ 354.135564][T10450] __x64_sys_bpf+0x7c/0x90 [ 354.140441][T10450] do_syscall_64+0x55/0xb0 [ 354.144977][T10450] ? clear_bhb_loop+0x40/0x90 [ 354.149707][T10450] ? clear_bhb_loop+0x40/0x90 [ 354.154435][T10450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.160379][T10450] RIP: 0033:0x7f739eb8f749 [ 354.164827][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.184469][T10450] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.192910][T10450] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 354.200902][T10450] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 354.208898][T10450] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.216893][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.224912][T10450] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 354.232922][T10450] [ 354.977224][ T51] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 355.556203][T10493] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 355.576490][T10493] netlink: 'syz.3.1673': attribute type 4 has an invalid length. [ 355.586345][T10493] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1673'. [ 356.274766][ T51] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 359.428259][T10521] FAULT_INJECTION: forcing a failure. [ 359.428259][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.492213][T10521] CPU: 0 PID: 10521 Comm: syz.1.1683 Not tainted syzkaller #0 [ 359.499790][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.509919][T10521] Call Trace: [ 359.513252][T10521] [ 359.516293][T10521] dump_stack_lvl+0x16c/0x230 [ 359.521059][T10521] ? show_regs_print_info+0x20/0x20 [ 359.526333][T10521] ? load_image+0x3b0/0x3b0 [ 359.530916][T10521] ? __lock_acquire+0x7c80/0x7c80 [ 359.536010][T10521] ? snprintf+0xdb/0x120 [ 359.540321][T10521] should_fail_ex+0x39d/0x4d0 [ 359.545097][T10521] _copy_to_user+0x2f/0xa0 [ 359.549587][T10521] simple_read_from_buffer+0xe7/0x150 [ 359.555049][T10521] proc_fail_nth_read+0x1e3/0x250 [ 359.560154][T10521] ? proc_fault_inject_write+0x340/0x340 [ 359.565871][T10521] ? fsnotify_perm+0x271/0x5e0 [ 359.570711][T10521] ? proc_fault_inject_write+0x340/0x340 [ 359.576424][T10521] vfs_read+0x27e/0x920 [ 359.580669][T10521] ? kernel_read+0x1e0/0x1e0 [ 359.585326][T10521] ? __fget_files+0x28/0x4d0 [ 359.589985][T10521] ? __fget_files+0x44a/0x4d0 [ 359.594739][T10521] ? __fdget_pos+0x2a3/0x330 [ 359.599497][T10521] ? ksys_read+0x75/0x250 [ 359.603905][T10521] ksys_read+0x147/0x250 [ 359.608211][T10521] ? vfs_write+0x940/0x940 [ 359.612695][T10521] ? lockdep_hardirqs_on+0x98/0x150 [ 359.617963][T10521] do_syscall_64+0x55/0xb0 [ 359.622451][T10521] ? clear_bhb_loop+0x40/0x90 [ 359.627189][T10521] ? clear_bhb_loop+0x40/0x90 [ 359.631929][T10521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.637892][T10521] RIP: 0033:0x7f108658e15c [ 359.642395][T10521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.662075][T10521] RSP: 002b:00007f10847f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.670569][T10521] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658e15c [ 359.678615][T10521] RDX: 000000000000000f RSI: 00007f10847f60a0 RDI: 0000000000000005 [ 359.686846][T10521] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.694880][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.703005][T10521] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 359.711062][T10521] [ 359.974982][T10529] FAULT_INJECTION: forcing a failure. [ 359.974982][T10529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.013811][T10529] CPU: 1 PID: 10529 Comm: syz.1.1685 Not tainted syzkaller #0 [ 360.021387][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.031509][T10529] Call Trace: [ 360.034852][T10529] [ 360.037833][T10529] dump_stack_lvl+0x16c/0x230 [ 360.042596][T10529] ? show_regs_print_info+0x20/0x20 [ 360.047863][T10529] ? load_image+0x3b0/0x3b0 [ 360.052435][T10529] ? __might_fault+0xaa/0x120 [ 360.057186][T10529] ? __lock_acquire+0x7c80/0x7c80 [ 360.062291][T10529] should_fail_ex+0x39d/0x4d0 [ 360.067063][T10529] _copy_to_user+0x2f/0xa0 [ 360.071565][T10529] bpf_test_finish+0x19a/0x620 [ 360.076399][T10529] ? convert___skb_to_skb+0x590/0x590 [ 360.081804][T10529] ? convert_skb_to___skb+0x420/0x420 [ 360.087212][T10529] ? slab_build_skb+0x25f/0x3f0 [ 360.092102][T10529] bpf_prog_test_run_skb+0xc28/0x11c0 [ 360.097519][T10529] ? cpu_online+0x60/0x60 [ 360.101884][T10529] bpf_prog_test_run+0x321/0x390 [ 360.106858][T10529] __sys_bpf+0x440/0x800 [ 360.111128][T10529] ? bpf_link_show_fdinfo+0x350/0x350 [ 360.116546][T10529] ? lock_chain_count+0x20/0x20 [ 360.121452][T10529] __x64_sys_bpf+0x7c/0x90 [ 360.125907][T10529] do_syscall_64+0x55/0xb0 [ 360.130363][T10529] ? clear_bhb_loop+0x40/0x90 [ 360.135159][T10529] ? clear_bhb_loop+0x40/0x90 [ 360.139867][T10529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.145804][T10529] RIP: 0033:0x7f108658f749 [ 360.150265][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.169933][T10529] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.178385][T10529] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 360.186387][T10529] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 360.194381][T10529] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.202375][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.210379][T10529] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 360.218402][T10529] [ 360.483251][T10533] syz.3.1687[10533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.483532][T10533] syz.3.1687[10533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.729463][ T51] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 361.274119][T10553] netlink: 'syz.3.1692': attribute type 3 has an invalid length. [ 361.299412][T10553] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1692'. [ 362.993338][T10550] netlink: 'syz.3.1692': attribute type 21 has an invalid length. [ 363.001326][T10550] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1692'. [ 363.010575][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 363.767858][T10568] syzkaller0: entered promiscuous mode [ 363.778610][T10568] syzkaller0: entered allmulticast mode [ 363.916836][ T51] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 367.124783][T10602] FAULT_INJECTION: forcing a failure. [ 367.124783][T10602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.152269][T10602] CPU: 1 PID: 10602 Comm: syz.3.1713 Not tainted syzkaller #0 [ 367.159830][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.169935][T10602] Call Trace: [ 367.173242][T10602] [ 367.176213][T10602] dump_stack_lvl+0x16c/0x230 [ 367.180933][T10602] ? show_regs_print_info+0x20/0x20 [ 367.186173][T10602] ? load_image+0x3b0/0x3b0 [ 367.190711][T10602] ? __might_fault+0xaa/0x120 [ 367.195416][T10602] ? __lock_acquire+0x7c80/0x7c80 [ 367.200494][T10602] should_fail_ex+0x39d/0x4d0 [ 367.205209][T10602] _copy_to_user+0x2f/0xa0 [ 367.209656][T10602] bpf_test_finish+0x19a/0x620 [ 367.214455][T10602] ? convert___skb_to_skb+0x590/0x590 [ 367.219848][T10602] ? convert_skb_to___skb+0x420/0x420 [ 367.225251][T10602] ? slab_build_skb+0x25f/0x3f0 [ 367.230136][T10602] bpf_prog_test_run_skb+0xc28/0x11c0 [ 367.235542][T10602] ? cpu_online+0x60/0x60 [ 367.239986][T10602] bpf_prog_test_run+0x321/0x390 [ 367.244955][T10602] __sys_bpf+0x440/0x800 [ 367.249219][T10602] ? bpf_link_show_fdinfo+0x350/0x350 [ 367.254662][T10602] ? lock_chain_count+0x20/0x20 [ 367.259542][T10602] __x64_sys_bpf+0x7c/0x90 [ 367.263981][T10602] do_syscall_64+0x55/0xb0 [ 367.268429][T10602] ? clear_bhb_loop+0x40/0x90 [ 367.273130][T10602] ? clear_bhb_loop+0x40/0x90 [ 367.277840][T10602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.283768][T10602] RIP: 0033:0x7fc34f58f749 [ 367.288211][T10602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.307850][T10602] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.316389][T10602] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 367.324391][T10602] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 367.332407][T10602] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 367.340399][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.348413][T10602] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 367.356424][T10602] [ 367.875803][T10615] syz.0.1719[10615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.876067][T10615] syz.0.1719[10615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.706642][T10635] FAULT_INJECTION: forcing a failure. [ 368.706642][T10635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.744471][T10635] CPU: 0 PID: 10635 Comm: syz.1.1726 Not tainted syzkaller #0 [ 368.752052][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.762143][T10635] Call Trace: [ 368.765453][T10635] [ 368.768411][T10635] dump_stack_lvl+0x16c/0x230 [ 368.773132][T10635] ? show_regs_print_info+0x20/0x20 [ 368.778366][T10635] ? load_image+0x3b0/0x3b0 [ 368.782933][T10635] ? __might_fault+0xaa/0x120 [ 368.787634][T10635] ? __lock_acquire+0x7c80/0x7c80 [ 368.792711][T10635] should_fail_ex+0x39d/0x4d0 [ 368.797513][T10635] _copy_to_user+0x2f/0xa0 [ 368.801972][T10635] bpf_verifier_vlog+0x45c/0x870 [ 368.806971][T10635] __btf_verifier_log+0xd5/0x120 [ 368.811953][T10635] ? btf_check_sec_info+0x330/0x330 [ 368.817190][T10635] ? __lock_acquire+0x7c80/0x7c80 [ 368.822275][T10635] ? btf_parse_hdr+0x1da/0x6d0 [ 368.827069][T10635] btf_parse_hdr+0x366/0x6d0 [ 368.831689][T10635] btf_new_fd+0x37b/0x980 [ 368.836054][T10635] ? bpf_btf_show_fdinfo+0x80/0x80 [ 368.841194][T10635] ? capable+0x88/0xe0 [ 368.845305][T10635] __sys_bpf+0x60e/0x800 [ 368.849577][T10635] ? bpf_link_show_fdinfo+0x350/0x350 [ 368.854988][T10635] ? lock_chain_count+0x20/0x20 [ 368.859881][T10635] __x64_sys_bpf+0x7c/0x90 [ 368.864324][T10635] do_syscall_64+0x55/0xb0 [ 368.868774][T10635] ? clear_bhb_loop+0x40/0x90 [ 368.873483][T10635] ? clear_bhb_loop+0x40/0x90 [ 368.878222][T10635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.884140][T10635] RIP: 0033:0x7f108658f749 [ 368.888580][T10635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.908221][T10635] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.916671][T10635] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 368.924665][T10635] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 368.932661][T10635] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 368.940655][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.948652][T10635] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 368.956758][T10635] [ 369.225282][T10645] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1730'. [ 369.306075][T10643] FAULT_INJECTION: forcing a failure. [ 369.306075][T10643] name failslab, interval 1, probability 0, space 0, times 0 [ 369.340292][T10643] CPU: 0 PID: 10643 Comm: syz.1.1729 Not tainted syzkaller #0 [ 369.347862][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.357980][T10643] Call Trace: [ 369.361312][T10643] [ 369.364301][T10643] dump_stack_lvl+0x16c/0x230 [ 369.369142][T10643] ? show_regs_print_info+0x20/0x20 [ 369.374419][T10643] ? load_image+0x3b0/0x3b0 [ 369.379001][T10643] ? __might_sleep+0xe0/0xe0 [ 369.383659][T10643] ? __lock_acquire+0x7c80/0x7c80 [ 369.388770][T10643] should_fail_ex+0x39d/0x4d0 [ 369.393533][T10643] should_failslab+0x9/0x20 [ 369.398125][T10643] slab_pre_alloc_hook+0x59/0x310 [ 369.403231][T10643] ? tomoyo_encode+0x28b/0x540 [ 369.408088][T10643] ? tomoyo_encode+0x28b/0x540 [ 369.412945][T10643] __kmem_cache_alloc_node+0x53/0x260 [ 369.418415][T10643] ? tomoyo_encode+0x28b/0x540 [ 369.423281][T10643] __kmalloc+0xa4/0x240 [ 369.427499][T10643] tomoyo_encode+0x28b/0x540 [ 369.432188][T10643] tomoyo_realpath_from_path+0x592/0x5d0 [ 369.437930][T10643] tomoyo_path_number_perm+0x1ea/0x590 [ 369.443473][T10643] ? tomoyo_path_number_perm+0x1ba/0x590 [ 369.449205][T10643] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 369.454801][T10643] ? __fget_files+0x28/0x4d0 [ 369.459481][T10643] security_file_ioctl+0x70/0xa0 [ 369.464580][T10643] __se_sys_ioctl+0x48/0x170 [ 369.469252][T10643] do_syscall_64+0x55/0xb0 [ 369.473738][T10643] ? clear_bhb_loop+0x40/0x90 [ 369.478492][T10643] ? clear_bhb_loop+0x40/0x90 [ 369.483238][T10643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.489193][T10643] RIP: 0033:0x7f108658f749 [ 369.493684][T10643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.513365][T10643] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.521859][T10643] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 369.529897][T10643] RDX: 0000200000000940 RSI: 00000000000089e0 RDI: 000000000000000e [ 369.537933][T10643] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.545969][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.553994][T10643] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 369.562023][T10643] [ 369.632951][T10643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.913716][T10660] syzkaller0: entered promiscuous mode [ 370.919493][T10660] syzkaller0: entered allmulticast mode [ 371.216033][T10672] FAULT_INJECTION: forcing a failure. [ 371.216033][T10672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.273567][T10672] CPU: 0 PID: 10672 Comm: syz.0.1740 Not tainted syzkaller #0 [ 371.281158][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.291270][T10672] Call Trace: [ 371.294612][T10672] [ 371.297583][T10672] dump_stack_lvl+0x16c/0x230 [ 371.302321][T10672] ? show_regs_print_info+0x20/0x20 [ 371.307580][T10672] ? load_image+0x3b0/0x3b0 [ 371.312152][T10672] ? __might_fault+0xaa/0x120 [ 371.316885][T10672] ? __lock_acquire+0x7c80/0x7c80 [ 371.321970][T10672] should_fail_ex+0x39d/0x4d0 [ 371.326725][T10672] _copy_to_user+0x2f/0xa0 [ 371.331218][T10672] bpf_test_finish+0x19a/0x620 [ 371.336051][T10672] ? convert___skb_to_skb+0x590/0x590 [ 371.341475][T10672] ? convert_skb_to___skb+0x420/0x420 [ 371.346909][T10672] ? slab_build_skb+0x25f/0x3f0 [ 371.351821][T10672] bpf_prog_test_run_skb+0xc28/0x11c0 [ 371.357277][T10672] ? cpu_online+0x60/0x60 [ 371.361679][T10672] bpf_prog_test_run+0x321/0x390 [ 371.366714][T10672] __sys_bpf+0x440/0x800 [ 371.371022][T10672] ? bpf_link_show_fdinfo+0x350/0x350 [ 371.376477][T10672] ? lock_chain_count+0x20/0x20 [ 371.381390][T10672] __x64_sys_bpf+0x7c/0x90 [ 371.385854][T10672] do_syscall_64+0x55/0xb0 [ 371.390341][T10672] ? clear_bhb_loop+0x40/0x90 [ 371.395095][T10672] ? clear_bhb_loop+0x40/0x90 [ 371.399851][T10672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.405814][T10672] RIP: 0033:0x7f739eb8f749 [ 371.410291][T10672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.429949][T10672] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.438480][T10672] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 371.446500][T10672] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 371.454584][T10672] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.462572][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.478835][T10672] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 371.486889][T10672] [ 374.259871][T10711] FAULT_INJECTION: forcing a failure. [ 374.259871][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 374.278912][T10711] CPU: 1 PID: 10711 Comm: syz.0.1754 Not tainted syzkaller #0 [ 374.286477][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.296811][T10711] Call Trace: [ 374.300129][T10711] [ 374.303077][T10711] dump_stack_lvl+0x16c/0x230 [ 374.307784][T10711] ? show_regs_print_info+0x20/0x20 [ 374.313004][T10711] ? load_image+0x3b0/0x3b0 [ 374.317527][T10711] ? __lock_acquire+0x7c80/0x7c80 [ 374.322580][T10711] should_fail_ex+0x39d/0x4d0 [ 374.327325][T10711] should_failslab+0x9/0x20 [ 374.331861][T10711] slab_pre_alloc_hook+0x59/0x310 [ 374.336960][T10711] ? sk_prot_alloc+0xe7/0x210 [ 374.341662][T10711] ? sk_prot_alloc+0xe7/0x210 [ 374.346359][T10711] __kmem_cache_alloc_node+0x53/0x260 [ 374.351761][T10711] ? sk_prot_alloc+0xe7/0x210 [ 374.356466][T10711] __kmalloc+0xa4/0x240 [ 374.360653][T10711] sk_prot_alloc+0xe7/0x210 [ 374.365180][T10711] ? sk_alloc+0x24/0x360 [ 374.369530][T10711] sk_alloc+0x3a/0x360 [ 374.373617][T10711] ? bpf_ctx_init+0x163/0x1a0 [ 374.378415][T10711] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 374.383995][T10711] bpf_prog_test_run_skb+0x39a/0x11c0 [ 374.389390][T10711] ? __fget_files+0x28/0x4d0 [ 374.394230][T10711] ? cpu_online+0x60/0x60 [ 374.398592][T10711] bpf_prog_test_run+0x321/0x390 [ 374.403558][T10711] __sys_bpf+0x440/0x800 [ 374.407829][T10711] ? bpf_link_show_fdinfo+0x350/0x350 [ 374.413248][T10711] ? lock_chain_count+0x20/0x20 [ 374.418157][T10711] __x64_sys_bpf+0x7c/0x90 [ 374.422745][T10711] do_syscall_64+0x55/0xb0 [ 374.427208][T10711] ? clear_bhb_loop+0x40/0x90 [ 374.432034][T10711] ? clear_bhb_loop+0x40/0x90 [ 374.436770][T10711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.442727][T10711] RIP: 0033:0x7f739eb8f749 [ 374.447177][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.466910][T10711] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.475362][T10711] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 374.483364][T10711] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 374.491392][T10711] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.500306][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.508759][T10711] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 374.516804][T10711] [ 375.636029][T10719] FAULT_INJECTION: forcing a failure. [ 375.636029][T10719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.676922][T10719] CPU: 0 PID: 10719 Comm: syz.1.1758 Not tainted syzkaller #0 [ 375.684557][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.694649][T10719] Call Trace: [ 375.697952][T10719] [ 375.700902][T10719] dump_stack_lvl+0x16c/0x230 [ 375.705624][T10719] ? show_regs_print_info+0x20/0x20 [ 375.710850][T10719] ? load_image+0x3b0/0x3b0 [ 375.715388][T10719] ? __might_fault+0xaa/0x120 [ 375.720087][T10719] ? __lock_acquire+0x7c80/0x7c80 [ 375.725158][T10719] should_fail_ex+0x39d/0x4d0 [ 375.729867][T10719] _copy_from_user+0x2f/0xe0 [ 375.734498][T10719] __sys_bpf+0x1e9/0x800 [ 375.738767][T10719] ? bpf_link_show_fdinfo+0x350/0x350 [ 375.744171][T10719] ? lock_chain_count+0x20/0x20 [ 375.749053][T10719] __x64_sys_bpf+0x7c/0x90 [ 375.753490][T10719] do_syscall_64+0x55/0xb0 [ 375.757935][T10719] ? clear_bhb_loop+0x40/0x90 [ 375.762637][T10719] ? clear_bhb_loop+0x40/0x90 [ 375.767342][T10719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.773261][T10719] RIP: 0033:0x7f108658f749 [ 375.777699][T10719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.797331][T10719] RSP: 002b:00007f10847f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.805768][T10719] RAX: ffffffffffffffda RBX: 00007f10867e5fa0 RCX: 00007f108658f749 [ 375.813759][T10719] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 375.821749][T10719] RBP: 00007f10847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.829735][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.837725][T10719] R13: 00007f10867e6038 R14: 00007f10867e5fa0 R15: 00007ffee50b43a8 [ 375.845739][T10719] [ 375.919751][T10721] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1759'. [ 375.978344][T10721] netlink: zone id is out of range [ 375.989889][T10721] netlink: zone id is out of range [ 375.995735][T10721] netlink: zone id is out of range [ 376.001337][T10721] netlink: zone id is out of range [ 376.009532][T10721] netlink: zone id is out of range [ 376.019038][T10721] netlink: zone id is out of range [ 376.025487][T10721] netlink: zone id is out of range [ 376.031195][T10721] netlink: zone id is out of range [ 376.046138][T10721] netlink: zone id is out of range [ 376.052718][T10721] netlink: zone id is out of range [ 378.280796][T10744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1768'. [ 379.277281][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.284043][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.658203][ T51] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 379.825452][T10779] FAULT_INJECTION: forcing a failure. [ 379.825452][T10779] name failslab, interval 1, probability 0, space 0, times 0 [ 379.874816][T10779] CPU: 1 PID: 10779 Comm: syz.2.1779 Not tainted syzkaller #0 [ 379.882370][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.892481][T10779] Call Trace: [ 379.895795][T10779] [ 379.898758][T10779] dump_stack_lvl+0x16c/0x230 [ 379.903495][T10779] ? show_regs_print_info+0x20/0x20 [ 379.908754][T10779] ? load_image+0x3b0/0x3b0 [ 379.913298][T10779] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 379.919315][T10779] ? __asan_memset+0x22/0x40 [ 379.923935][T10779] should_fail_ex+0x39d/0x4d0 [ 379.928648][T10779] should_failslab+0x9/0x20 [ 379.933179][T10779] slab_pre_alloc_hook+0x59/0x310 [ 379.938233][T10779] ? __debug_object_init+0xe8/0x430 [ 379.943488][T10779] kmem_cache_alloc+0x5a/0x2e0 [ 379.948310][T10779] ? slab_build_skb+0x2b/0x3f0 [ 379.953144][T10779] slab_build_skb+0x2b/0x3f0 [ 379.957790][T10779] bpf_prog_test_run_skb+0x3ba/0x11c0 [ 379.963207][T10779] ? __fget_files+0x28/0x4d0 [ 379.967847][T10779] ? cpu_online+0x60/0x60 [ 379.972210][T10779] bpf_prog_test_run+0x321/0x390 [ 379.977266][T10779] __sys_bpf+0x440/0x800 [ 379.981530][T10779] ? bpf_link_show_fdinfo+0x350/0x350 [ 379.986967][T10779] ? lock_chain_count+0x20/0x20 [ 379.991861][T10779] __x64_sys_bpf+0x7c/0x90 [ 379.996319][T10779] do_syscall_64+0x55/0xb0 [ 380.000783][T10779] ? clear_bhb_loop+0x40/0x90 [ 380.005492][T10779] ? clear_bhb_loop+0x40/0x90 [ 380.010194][T10779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.016146][T10779] RIP: 0033:0x7fd0cb38f749 [ 380.020584][T10779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.040211][T10779] RSP: 002b:00007fd0cc140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.048649][T10779] RAX: ffffffffffffffda RBX: 00007fd0cb5e5fa0 RCX: 00007fd0cb38f749 [ 380.056638][T10779] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 380.064629][T10779] RBP: 00007fd0cc140090 R08: 0000000000000000 R09: 0000000000000000 [ 380.072642][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.080653][T10779] R13: 00007fd0cb5e6038 R14: 00007fd0cb5e5fa0 R15: 00007fffc2241248 [ 380.088668][T10779] [ 380.661120][ T51] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 380.937297][T10809] FAULT_INJECTION: forcing a failure. [ 380.937297][T10809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.012311][T10809] CPU: 1 PID: 10809 Comm: syz.3.1793 Not tainted syzkaller #0 [ 381.019873][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.029982][T10809] Call Trace: [ 381.033309][T10809] [ 381.036282][T10809] dump_stack_lvl+0x16c/0x230 [ 381.041031][T10809] ? show_regs_print_info+0x20/0x20 [ 381.046305][T10809] ? load_image+0x3b0/0x3b0 [ 381.050891][T10809] ? __might_fault+0xaa/0x120 [ 381.055634][T10809] ? __lock_acquire+0x7c80/0x7c80 [ 381.060728][T10809] should_fail_ex+0x39d/0x4d0 [ 381.065475][T10809] _copy_to_user+0x2f/0xa0 [ 381.069926][T10809] bpf_test_finish+0x24b/0x620 [ 381.074738][T10809] ? convert___skb_to_skb+0x590/0x590 [ 381.080145][T10809] ? convert_skb_to___skb+0x420/0x420 [ 381.085605][T10809] ? slab_build_skb+0x25f/0x3f0 [ 381.090508][T10809] bpf_prog_test_run_skb+0xc28/0x11c0 [ 381.095926][T10809] ? cpu_online+0x60/0x60 [ 381.100298][T10809] bpf_prog_test_run+0x321/0x390 [ 381.105280][T10809] __sys_bpf+0x440/0x800 [ 381.109552][T10809] ? bpf_link_show_fdinfo+0x350/0x350 [ 381.114961][T10809] ? lock_chain_count+0x20/0x20 [ 381.119843][T10809] __x64_sys_bpf+0x7c/0x90 [ 381.124284][T10809] do_syscall_64+0x55/0xb0 [ 381.128729][T10809] ? clear_bhb_loop+0x40/0x90 [ 381.133431][T10809] ? clear_bhb_loop+0x40/0x90 [ 381.138134][T10809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.144054][T10809] RIP: 0033:0x7fc34f58f749 [ 381.148503][T10809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.168135][T10809] RSP: 002b:00007fc3504d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.176577][T10809] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58f749 [ 381.184573][T10809] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 381.192582][T10809] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 381.200594][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.208593][T10809] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 381.216610][T10809] [ 381.950587][ T51] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 382.500905][T10853] FAULT_INJECTION: forcing a failure. [ 382.500905][T10853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.562369][T10853] CPU: 0 PID: 10853 Comm: syz.0.1810 Not tainted syzkaller #0 [ 382.569921][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.580027][T10853] Call Trace: [ 382.583352][T10853] [ 382.586316][T10853] dump_stack_lvl+0x16c/0x230 [ 382.591045][T10853] ? show_regs_print_info+0x20/0x20 [ 382.596305][T10853] ? load_image+0x3b0/0x3b0 [ 382.600877][T10853] ? __might_fault+0xaa/0x120 [ 382.605625][T10853] ? __lock_acquire+0x7c80/0x7c80 [ 382.610720][T10853] should_fail_ex+0x39d/0x4d0 [ 382.615466][T10853] _copy_from_user+0x2f/0xe0 [ 382.620094][T10853] __sys_bpf+0x1e9/0x800 [ 382.624397][T10853] ? bpf_link_show_fdinfo+0x350/0x350 [ 382.629839][T10853] ? lock_chain_count+0x20/0x20 [ 382.634749][T10853] __x64_sys_bpf+0x7c/0x90 [ 382.639255][T10853] do_syscall_64+0x55/0xb0 [ 382.643739][T10853] ? clear_bhb_loop+0x40/0x90 [ 382.648496][T10853] ? clear_bhb_loop+0x40/0x90 [ 382.653217][T10853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.659153][T10853] RIP: 0033:0x7f739eb8f749 [ 382.663600][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.683252][T10853] RSP: 002b:00007f739fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.691709][T10853] RAX: ffffffffffffffda RBX: 00007f739ede5fa0 RCX: 00007f739eb8f749 [ 382.700054][T10853] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 382.708134][T10853] RBP: 00007f739fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.716151][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.724142][T10853] R13: 00007f739ede6038 R14: 00007f739ede5fa0 R15: 00007fff7ed2a3d8 [ 382.732168][T10853] [ 382.816406][ T51] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 383.050256][T10865] syz.3.1817[10865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.057868][T10865] syz.3.1817[10865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.483924][T10880] net_ratelimit: 331 callbacks suppressed [ 383.483944][T10880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.691385][ T51] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 383.972869][T10890] FAULT_INJECTION: forcing a failure. [ 383.972869][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.044664][T10890] CPU: 0 PID: 10890 Comm: syz.2.1828 Not tainted syzkaller #0 [ 384.052280][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.062409][T10890] Call Trace: [ 384.065819][T10890] [ 384.068796][T10890] dump_stack_lvl+0x16c/0x230 [ 384.073551][T10890] ? show_regs_print_info+0x20/0x20 [ 384.078819][T10890] ? load_image+0x3b0/0x3b0 [ 384.083494][T10890] ? __might_fault+0xaa/0x120 [ 384.088254][T10890] ? __lock_acquire+0x7c80/0x7c80 [ 384.093377][T10890] should_fail_ex+0x39d/0x4d0 [ 384.098149][T10890] _copy_to_user+0x2f/0xa0 [ 384.102639][T10890] bpf_verifier_vlog+0x45c/0x870 [ 384.107660][T10890] __btf_verifier_log+0xd5/0x120 [ 384.112766][T10890] ? btf_check_sec_info+0x330/0x330 [ 384.118043][T10890] ? __lock_acquire+0x7c80/0x7c80 [ 384.123132][T10890] ? btf_parse_hdr+0x1da/0x6d0 [ 384.127967][T10890] btf_parse_hdr+0x390/0x6d0 [ 384.132617][T10890] btf_new_fd+0x37b/0x980 [ 384.137020][T10890] ? bpf_btf_show_fdinfo+0x80/0x80 [ 384.142197][T10890] ? capable+0x88/0xe0 [ 384.146363][T10890] __sys_bpf+0x60e/0x800 [ 384.150687][T10890] ? bpf_link_show_fdinfo+0x350/0x350 [ 384.156231][T10890] ? lock_chain_count+0x20/0x20 [ 384.161141][T10890] __x64_sys_bpf+0x7c/0x90 [ 384.165582][T10890] do_syscall_64+0x55/0xb0 [ 384.170026][T10890] ? clear_bhb_loop+0x40/0x90 [ 384.174728][T10890] ? clear_bhb_loop+0x40/0x90 [ 384.179431][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.185347][T10890] RIP: 0033:0x7fd0cb38f749 [ 384.189796][T10890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.209689][T10890] RSP: 002b:00007fd0cc140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.218156][T10890] RAX: ffffffffffffffda RBX: 00007fd0cb5e5fa0 RCX: 00007fd0cb38f749 [ 384.226234][T10890] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 384.234317][T10890] RBP: 00007fd0cc140090 R08: 0000000000000000 R09: 0000000000000000 [ 384.242309][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.250314][T10890] R13: 00007fd0cb5e6038 R14: 00007fd0cb5e5fa0 R15: 00007fffc2241248 [ 384.258341][T10890] [ 384.924120][T10900] FAULT_INJECTION: forcing a failure. [ 384.924120][T10900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.944918][T10900] CPU: 0 PID: 10900 Comm: syz.3.1832 Not tainted syzkaller #0 [ 384.952505][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.962708][T10900] Call Trace: [ 384.966040][T10900] [ 384.969026][T10900] dump_stack_lvl+0x16c/0x230 [ 384.973821][T10900] ? show_regs_print_info+0x20/0x20 [ 384.979099][T10900] ? load_image+0x3b0/0x3b0 [ 384.983679][T10900] ? __lock_acquire+0x7c80/0x7c80 [ 384.988775][T10900] should_fail_ex+0x39d/0x4d0 [ 384.993608][T10900] _copy_to_user+0x2f/0xa0 [ 384.998174][T10900] simple_read_from_buffer+0xe7/0x150 [ 385.003625][T10900] proc_fail_nth_read+0x1e3/0x250 [ 385.008710][T10900] ? proc_fault_inject_write+0x340/0x340 [ 385.014387][T10900] ? fsnotify_perm+0x271/0x5e0 [ 385.019190][T10900] ? proc_fault_inject_write+0x340/0x340 [ 385.024955][T10900] vfs_read+0x27e/0x920 [ 385.029167][T10900] ? kernel_read+0x1e0/0x1e0 [ 385.033797][T10900] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.039993][T10900] ? lockdep_hardirqs_on+0x98/0x150 [ 385.045234][T10900] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.051461][T10900] ksys_read+0x147/0x250 [ 385.055747][T10900] ? vfs_write+0x940/0x940 [ 385.060201][T10900] ? syscall_enter_from_user_mode+0x2e/0x80 [ 385.066127][T10900] do_syscall_64+0x55/0xb0 [ 385.070658][T10900] ? clear_bhb_loop+0x40/0x90 [ 385.075356][T10900] ? clear_bhb_loop+0x40/0x90 [ 385.080068][T10900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.085994][T10900] RIP: 0033:0x7fc34f58e15c [ 385.090432][T10900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 385.110152][T10900] RSP: 002b:00007fc3504d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.118592][T10900] RAX: ffffffffffffffda RBX: 00007fc34f7e5fa0 RCX: 00007fc34f58e15c [ 385.126580][T10900] RDX: 000000000000000f RSI: 00007fc3504d20a0 RDI: 0000000000000010 [ 385.134570][T10900] RBP: 00007fc3504d2090 R08: 0000000000000000 R09: 0000000000000000 [ 385.142824][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.150904][T10900] R13: 00007fc34f7e6038 R14: 00007fc34f7e5fa0 R15: 00007ffdd53f48c8 [ 385.159014][T10900] [ 385.773765][T10917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1839'. [ 386.042324][T10926] netlink: 'syz.2.1843': attribute type 21 has an invalid length. [ 386.102931][T10926] netlink: 'syz.2.1843': attribute type 21 has an invalid length. [ 403.983039][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.013131][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.039171][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.062971][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.075114][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 404.085975][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.132457][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.142570][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.159423][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.186097][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.197891][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 404.216502][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.236877][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.254084][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.267438][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.276887][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.284939][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.292678][T10956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.342730][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.368109][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.387431][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.397406][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.408220][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.418234][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.561659][T10240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.724773][T10240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.825131][T10240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.985592][T10240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.264385][T10952] chnl_net:caif_netlink_parms(): no params data found [ 405.276126][T10950] chnl_net:caif_netlink_parms(): no params data found [ 405.297419][T10954] chnl_net:caif_netlink_parms(): no params data found [ 405.495512][T10958] chnl_net:caif_netlink_parms(): no params data found [ 405.766053][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.774898][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.782298][T10954] bridge_slave_0: entered allmulticast mode [ 405.789845][T10954] bridge_slave_0: entered promiscuous mode [ 405.812212][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.819745][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.827542][T10950] bridge_slave_0: entered allmulticast mode [ 405.836232][T10950] bridge_slave_0: entered promiscuous mode [ 405.845721][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.854387][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.861693][T10950] bridge_slave_1: entered allmulticast mode [ 405.869618][T10950] bridge_slave_1: entered promiscuous mode [ 405.893693][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.901049][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.908511][T10954] bridge_slave_1: entered allmulticast mode [ 405.916484][T10954] bridge_slave_1: entered promiscuous mode [ 405.940529][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.948391][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.955861][T10952] bridge_slave_0: entered allmulticast mode [ 405.964444][T10952] bridge_slave_0: entered promiscuous mode [ 406.046754][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.054390][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.061697][T10952] bridge_slave_1: entered allmulticast mode [ 406.070170][T10952] bridge_slave_1: entered promiscuous mode [ 406.100846][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.115597][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.125658][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.133234][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.140517][T10958] bridge_slave_0: entered allmulticast mode [ 406.149571][T10958] bridge_slave_0: entered promiscuous mode [ 406.161387][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.204994][T10952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.233236][ T5803] Bluetooth: hci2: command tx timeout [ 406.253839][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.261081][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.269084][T10958] bridge_slave_1: entered allmulticast mode [ 406.277002][T10958] bridge_slave_1: entered promiscuous mode [ 406.300212][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.331403][T10952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.393445][ T5803] Bluetooth: hci0: command tx timeout [ 406.393477][ T5804] Bluetooth: hci1: command tx timeout [ 406.463544][T10950] team0: Port device team_slave_0 added [ 406.473164][ T5803] Bluetooth: hci3: command tx timeout [ 406.503677][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.517176][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.535315][T10954] team0: Port device team_slave_0 added [ 406.547623][T10954] team0: Port device team_slave_1 added [ 406.560165][T10952] team0: Port device team_slave_0 added [ 406.580386][T10950] team0: Port device team_slave_1 added [ 406.733690][T10952] team0: Port device team_slave_1 added [ 406.800112][T10958] team0: Port device team_slave_0 added [ 406.820684][T10958] team0: Port device team_slave_1 added [ 406.858697][T10954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.878152][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.918755][T10954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.027200][T10950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.034793][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.072260][T10950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.096098][T10950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.112130][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.148107][T10950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.227791][T10954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.244097][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.270591][T10954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.289201][T10952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.296499][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.324021][T10952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.352515][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.359545][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.385799][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.430643][T10952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.444576][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.474960][T10952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.488466][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.495553][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.523492][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.628868][T10952] hsr_slave_0: entered promiscuous mode [ 407.636153][T10952] hsr_slave_1: entered promiscuous mode [ 407.644152][T10952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.651773][T10952] Cannot create hsr debugfs directory [ 407.758592][T10954] hsr_slave_0: entered promiscuous mode [ 407.765403][T10954] hsr_slave_1: entered promiscuous mode [ 407.771932][T10954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.781528][T10954] Cannot create hsr debugfs directory [ 407.801812][T10950] hsr_slave_0: entered promiscuous mode [ 407.808803][T10950] hsr_slave_1: entered promiscuous mode [ 407.816075][T10950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.824280][T10950] Cannot create hsr debugfs directory [ 407.863959][T10958] hsr_slave_0: entered promiscuous mode [ 407.871516][T10958] hsr_slave_1: entered promiscuous mode [ 407.878170][T10958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.887654][T10958] Cannot create hsr debugfs directory [ 408.312265][ T5803] Bluetooth: hci2: command tx timeout [ 408.472411][ T5803] Bluetooth: hci1: command tx timeout [ 408.472530][ T5804] Bluetooth: hci0: command tx timeout [ 408.521023][T10240] hsr_slave_0: left promiscuous mode [ 408.528622][T10240] hsr_slave_1: left promiscuous mode [ 408.535292][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.543038][T10240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.551179][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.560485][T10240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.567940][ T5804] Bluetooth: hci3: command tx timeout [ 408.576094][T10240] bridge_slave_1: left allmulticast mode [ 408.581810][T10240] bridge_slave_1: left promiscuous mode [ 408.588175][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.598226][T10240] bridge_slave_0: left allmulticast mode [ 408.604172][T10240] bridge_slave_0: left promiscuous mode [ 408.609969][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.650466][T10240] veth0_macvtap: left promiscuous mode [ 408.656406][T10240] veth1_vlan: left promiscuous mode [ 408.661810][T10240] veth0_vlan: left promiscuous mode [ 409.366558][T10240] ` (unregistering): Port device team_slave_1 removed [ 409.421091][T10240] ` (unregistering): Port device C removed [ 409.474747][T10240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.529585][T10240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.811837][T10240] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 409.955382][T10240] bond0 (unregistering): (slave `): Releasing backup interface [ 410.118726][T10240] bond0 (unregistering): Released all slaves [ 410.392291][ T5804] Bluetooth: hci2: command tx timeout [ 410.552510][ T5804] Bluetooth: hci0: command tx timeout [ 410.558022][ T5804] Bluetooth: hci1: command tx timeout [ 410.569677][T10950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.582553][T10950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.602233][T10950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.632753][ T5804] Bluetooth: hci3: command tx timeout [ 410.652250][T10950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.799005][T10958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.814379][T10958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.850604][T10958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.899732][T10958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.989400][T10954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.031940][T10954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.112741][T10954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.135620][T10954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.186507][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.340697][T10952] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.378533][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.416399][T10952] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.431289][T10952] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.457965][T10952] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.517818][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.648111][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.776956][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.874784][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.927525][T10950] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.987517][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.995266][ T8140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.007596][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.014972][ T8140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.097042][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.138538][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.178351][T10954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.233983][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.241312][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.315097][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.380901][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.388184][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.437711][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.477678][ T5804] Bluetooth: hci2: command tx timeout [ 412.491333][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.538783][T10952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.627563][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.633156][ T5804] Bluetooth: hci1: command tx timeout [ 412.640008][ T5803] Bluetooth: hci0: command tx timeout [ 412.683303][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.691581][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.714907][ T5803] Bluetooth: hci3: command tx timeout [ 412.817593][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.824880][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.894835][T10952] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.921812][T10958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.933812][T10958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.014822][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.022093][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.067321][T10954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.080583][T10954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.149330][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.156726][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.436965][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.647581][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.687890][T10950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.816569][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.877687][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.983983][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.131464][T10954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.587200][T10952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.555430][T10958] veth0_vlan: entered promiscuous mode [ 415.633365][T10954] veth0_vlan: entered promiscuous mode [ 415.649127][T10958] veth1_vlan: entered promiscuous mode [ 415.746796][T10954] veth1_vlan: entered promiscuous mode [ 415.840755][T10950] veth0_vlan: entered promiscuous mode [ 415.895783][T10952] veth0_vlan: entered promiscuous mode [ 416.010389][T10950] veth1_vlan: entered promiscuous mode [ 416.164650][T10954] veth0_macvtap: entered promiscuous mode [ 416.186056][T10952] veth1_vlan: entered promiscuous mode [ 416.307083][T10958] veth0_macvtap: entered promiscuous mode [ 416.336306][T10958] veth1_macvtap: entered promiscuous mode [ 416.354263][T10954] veth1_macvtap: entered promiscuous mode [ 416.494361][T10950] veth0_macvtap: entered promiscuous mode [ 416.505422][T10952] veth0_macvtap: entered promiscuous mode [ 416.589145][T10952] veth1_macvtap: entered promiscuous mode [ 416.607315][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.626705][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.648704][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.671297][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.682830][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.693753][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.706466][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.718554][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.729918][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.740026][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.751721][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.762283][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.774718][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.787329][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.801781][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.812771][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.823881][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.835101][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.845346][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.856263][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.866427][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.877278][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.889300][T10954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.898821][T10950] veth1_macvtap: entered promiscuous mode [ 416.969652][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.990218][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.016660][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.027546][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.038923][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.049728][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.059749][T10954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.070339][T10954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.082912][T10954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.102889][T10958] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.111666][T10958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.121386][T10958] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.131469][T10958] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.170462][T10954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.184576][T10954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.195031][T10954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.204876][T10954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.238309][ T42] [ 417.240714][ T42] ====================================================== [ 417.247789][ T42] WARNING: possible circular locking dependency detected [ 417.254820][ T42] syzkaller #0 Not tainted [ 417.259232][ T42] ------------------------------------------------------ [ 417.266259][ T42] kworker/u4:2/42 is trying to acquire lock: [ 417.272239][ T42] ffff8880274d8d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 417.281825][ T42] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 417.281825][ T42] but task is already holding lock: [ 417.289203][ T42] ffff88807b970768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 417.299611][ T42] [ 417.299611][ T42] which lock already depends on the new lock. [ 417.299611][ T42] [ 417.310152][ T42] [ 417.310152][ T42] the existing dependency chain (in reverse order) is: [ 417.319401][ T42] [ 417.319401][ T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 417.327197][ T42] __mutex_lock+0x129/0xcc0 [ 417.332329][ T42] ieee80211_open+0x144/0x200 [ 417.337713][ T42] __dev_open+0x2bc/0x430 [ 417.342615][ T42] dev_open+0xab/0x170 [ 417.347339][ T42] team_add_slave+0xae7/0x2660 [ 417.352649][ T42] do_setlink+0xe14/0x3fb0 [ 417.357684][ T42] rtnl_newlink+0x175b/0x2020 [ 417.362929][ T42] rtnetlink_rcv_msg+0x7c7/0xf10 [ 417.368651][ T42] netlink_rcv_skb+0x216/0x480 [ 417.373976][ T42] netlink_unicast+0x751/0x8d0 [ 417.379276][ T42] netlink_sendmsg+0x8c1/0xbe0 [ 417.384619][ T42] ____sys_sendmsg+0x5bf/0x950 [ 417.389937][ T42] ___sys_sendmsg+0x220/0x290 [ 417.395167][ T42] __se_sys_sendmsg+0x1a5/0x270 [ 417.400571][ T42] do_syscall_64+0x55/0xb0 [ 417.405556][ T42] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.412087][ T42] [ 417.412087][ T42] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 417.420280][ T42] __lock_acquire+0x2ddb/0x7c80 [ 417.425670][ T42] lock_acquire+0x197/0x410 [ 417.430732][ T42] __mutex_lock+0x129/0xcc0 [ 417.435881][ T42] team_del_slave+0x32/0x1c0 [ 417.441013][ T42] team_device_event+0x28d/0xa20 [ 417.446485][ T42] notifier_call_chain+0x197/0x390 [ 417.452138][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 417.459038][ T42] unregister_netdevice_queue+0x324/0x360 [ 417.465331][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 417.471504][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 417.477872][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 417.483794][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 417.489891][ T42] hwsim_exit_net+0x585/0x640 [ 417.495135][ T42] cleanup_net+0x6f4/0xb90 [ 417.500109][ T42] process_scheduled_works+0xa45/0x15b0 [ 417.506196][ T42] worker_thread+0xa55/0xfc0 [ 417.511321][ T42] kthread+0x2fa/0x390 [ 417.515921][ T42] ret_from_fork+0x48/0x80 [ 417.520873][ T42] ret_from_fork_asm+0x11/0x20 [ 417.526182][ T42] [ 417.526182][ T42] other info that might help us debug this: [ 417.526182][ T42] [ 417.536551][ T42] Possible unsafe locking scenario: [ 417.536551][ T42] [ 417.544018][ T42] CPU0 CPU1 [ 417.549492][ T42] ---- ---- [ 417.554899][ T42] lock(&rdev->wiphy.mtx); [ 417.559450][ T42] lock(team->team_lock_key#3); [ 417.566954][ T42] lock(&rdev->wiphy.mtx); [ 417.573995][ T42] lock(team->team_lock_key#3); [ 417.578960][ T42] [ 417.578960][ T42] *** DEADLOCK *** [ 417.578960][ T42] [ 417.587222][ T42] 5 locks held by kworker/u4:2/42: [ 417.592342][ T42] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 417.603694][ T42] #1: ffffc90000b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 417.614248][ T42] #2: ffffffff8dfaf8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 417.623795][ T42] #3: ffffffff8dfbc708 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 417.633950][ T42] #4: ffff88807b970768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 417.644791][ T42] [ 417.644791][ T42] stack backtrace: [ 417.650785][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 417.658169][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.668243][ T42] Workqueue: netns cleanup_net [ 417.673130][ T42] Call Trace: [ 417.676424][ T42] [ 417.679370][ T42] dump_stack_lvl+0x16c/0x230 [ 417.684078][ T42] ? load_image+0x3b0/0x3b0 [ 417.688612][ T42] ? show_regs_print_info+0x20/0x20 [ 417.693835][ T42] ? print_circular_bug+0x12b/0x1a0 [ 417.699055][ T42] check_noncircular+0x2bd/0x3c0 [ 417.704014][ T42] ? print_deadlock_bug+0x5d0/0x5d0 [ 417.709226][ T42] ? lockdep_lock+0xe0/0x220 [ 417.713833][ T42] ? __lock_acquire+0x1334/0x7c80 [ 417.718884][ T42] ? _find_first_zero_bit+0xd3/0x100 [ 417.724217][ T42] __lock_acquire+0x2ddb/0x7c80 [ 417.729186][ T42] ? verify_lock_unused+0x140/0x140 [ 417.734587][ T42] ? verify_lock_unused+0x140/0x140 [ 417.739906][ T42] lock_acquire+0x197/0x410 [ 417.744487][ T42] ? team_del_slave+0x32/0x1c0 [ 417.749295][ T42] ? __might_sleep+0xe0/0xe0 [ 417.753928][ T42] ? read_lock_is_recursive+0x20/0x20 [ 417.759536][ T42] __mutex_lock+0x129/0xcc0 [ 417.764084][ T42] ? team_del_slave+0x32/0x1c0 [ 417.768877][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 417.773925][ T42] ? rcu_is_watching+0x15/0xb0 [ 417.778799][ T42] ? trace_contention_end+0x39/0xe0 [ 417.784051][ T42] ? __mutex_lock+0x304/0xcc0 [ 417.788820][ T42] ? team_del_slave+0x32/0x1c0 [ 417.793638][ T42] ? mutex_lock_nested+0x20/0x20 [ 417.798614][ T42] ? bond_netdev_event+0xe1/0xef0 [ 417.803771][ T42] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 417.809530][ T42] ? bond_ipsec_offload_ok+0x410/0x410 [ 417.815185][ T42] team_del_slave+0x32/0x1c0 [ 417.819797][ T42] team_device_event+0x28d/0xa20 [ 417.824784][ T42] notifier_call_chain+0x197/0x390 [ 417.829961][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 417.836337][ T42] ? lock_chain_count+0x20/0x20 [ 417.841234][ T42] ? unregister_netdevice_many+0x20/0x20 [ 417.846902][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 417.852673][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 417.857890][ T42] unregister_netdevice_queue+0x324/0x360 [ 417.864210][ T42] ? list_netdevice+0x730/0x730 [ 417.869109][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 417.874976][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 417.880655][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 417.886508][ T42] ? ieee80211_do_stop+0x1db0/0x1db0 [ 417.891826][ T42] ? rcu_is_watching+0x15/0xb0 [ 417.896798][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 417.902736][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 417.908309][ T42] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 417.913885][ T42] hwsim_exit_net+0x585/0x640 [ 417.918673][ T42] ? hwsim_init_net+0x90/0x90 [ 417.923369][ T42] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 417.929196][ T42] cleanup_net+0x6f4/0xb90 [ 417.933644][ T42] ? ops_free_list+0x3b0/0x3b0 [ 417.938550][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.943779][ T42] ? process_scheduled_works+0x957/0x15b0 [ 417.949698][ T42] ? process_scheduled_works+0x957/0x15b0 [ 417.955447][ T42] process_scheduled_works+0xa45/0x15b0 [ 417.961067][ T42] ? assign_work+0x400/0x400 [ 417.965762][ T42] ? assign_work+0x39e/0x400 [ 417.970398][ T42] worker_thread+0xa55/0xfc0 [ 417.975063][ T42] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 417.981012][ T42] ? _raw_spin_unlock+0x40/0x40 [ 417.985914][ T42] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 417.992464][ T42] kthread+0x2fa/0x390 [ 417.996615][ T42] ? pr_cont_work+0x560/0x560 [ 418.001352][ T42] ? kthread_blkcg+0xd0/0xd0 [ 418.005979][ T42] ret_from_fork+0x48/0x80 [ 418.010451][ T42] ? kthread_blkcg+0xd0/0xd0 [ 418.015086][ T42] ret_from_fork_asm+0x11/0x20 [ 418.020003][ T42] [ 418.041507][ T42] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 418.050013][ T42] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 418.084841][ T42] team0: Port device wlan1 removed [ 419.130464][ T42] mac80211_hwsim hwsim12 wlan1 (unregistering): left promiscuous mode [ 419.141234][ T42] mac80211_hwsim hwsim12 wlan1 (unregistering): left allmulticast mode [ 419.160397][ T42] team0: Port device wlan1 removed [ 420.715288][ T42] hsr_slave_0: left promiscuous mode [ 420.724730][ T42] hsr_slave_1: left promiscuous mode [ 420.730934][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.741424][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.755241][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.762809][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.770747][ T42] vlan0: left allmulticast mode [ 420.778981][ T42] veth0_vlan: left allmulticast mode [ 420.784646][ T42] vlan0: left promiscuous mode [ 420.789803][ T42] À: port 1(vlan0) entered disabled state [ 420.803869][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.811375][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.827742][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.835475][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.844953][ T42] bridge0: port 3(team0) entered disabled state [ 420.855447][ T42] bridge_slave_1: left allmulticast mode [ 420.861263][ T42] bridge_slave_1: left promiscuous mode [ 420.867079][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.875595][ T42] bridge_slave_0: left allmulticast mode [ 420.881268][ T42] bridge_slave_0: left promiscuous mode [ 420.887156][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.899752][ T42] hsr_slave_0: left promiscuous mode [ 420.906035][ T42] hsr_slave_1: left promiscuous mode [ 420.912507][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.919979][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.927873][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.935552][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.945804][ T42] bridge0: port 3(team0) entered disabled state [ 420.953611][ T42] bridge_slave_1: left allmulticast mode [ 420.959317][ T42] bridge_slave_1: left promiscuous mode [ 420.965723][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.974492][ T42] bridge_slave_0: left allmulticast mode [ 420.980171][ T42] bridge_slave_0: left promiscuous mode [ 420.986453][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.000489][ T42] veth1_macvtap: left promiscuous mode [ 421.006780][ T42] veth1_vlan: left promiscuous mode [ 421.012344][ T42] veth0_vlan: left promiscuous mode [ 421.018617][ T42] veth1_vlan: left promiscuous mode [ 421.024025][ T42] veth0_vlan: left promiscuous mode [ 421.349983][ T42] team_slave_1 (unregistering): left promiscuous mode [ 421.358055][ T42] team0 (unregistering): Port device team_slave_1 removed [ 421.389415][ T42] team_slave_0 (unregistering): left promiscuous mode [ 421.397271][ T42] team0 (unregistering): Port device team_slave_0 removed [ 421.429130][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.438009][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 421.470526][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.479467][ T42] bond_slave_0 (unregistering): left promiscuous mode [ 421.509419][ T42] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 421.518469][ T42] veth0_to_bond (unregistering): left promiscuous mode [ 421.598755][ T42] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 421.611540][ T42] batadv0 (unregistering): left promiscuous mode [ 421.758262][ T42] bond0 (unregistering): (slave team0): Releasing backup interface [ 421.766852][ T42] team0 (unregistering): left promiscuous mode [ 421.903854][ T42] bond0 (unregistering): Released all slaves [ 422.084417][ T42] team_slave_1 (unregistering): left promiscuous mode [ 422.091269][ T42] team_slave_1 (unregistering): left allmulticast mode [ 422.099147][ T42] team0 (unregistering): Port device team_slave_1 removed [ 422.127400][ T42] team_slave_0 (unregistering): left promiscuous mode [ 422.135730][ T42] team_slave_0 (unregistering): left allmulticast mode [ 422.144420][ T42] team0 (unregistering): Port device team_slave_0 removed [ 422.158060][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.178263][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.287161][ T42] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 422.296639][ T42] bond0 (unregistering): Released all slaves [ 422.460788][ T42] vlan0 (unregistering): left promiscuous mode [ 422.467083][ T42] veth0_vlan (unregistering): left promiscuous mode [ 422.476640][ T42] team0 (unregistering): Port device vlan0 removed [ 422.651129][ T42] team_slave_1 (unregistering): left promiscuous mode [ 422.658030][ T42] team_slave_1 (unregistering): left allmulticast mode [ 422.667667][ T42] team0 (unregistering): Port device team_slave_1 removed [ 422.696207][ T42] team_slave_0 (unregistering): left promiscuous mode [ 422.703097][ T42] team_slave_0 (unregistering): left allmulticast mode [ 422.711431][ T42] team0 (unregistering): Port device team_slave_0 removed [ 422.742948][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.776747][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.877223][ T42] bond0 (unregistering): Released all slaves [ 425.617170][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.669438][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.720268][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.790113][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.210232][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.271383][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.382781][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.438963][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0