last executing test programs: 10.265420279s ago: executing program 3 (id=2465): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000a40), 0x6e, 0x0}, 0x20) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={0x0, r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 9.584216616s ago: executing program 3 (id=2468): socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b00000000009500002000000000e4aafdcdccff464ac0855bd3bff7489bae0c5621345bdda9449437f810c5fc316f04e947b54d780465eb664d0b6b04"], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000c40), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc", 0x13}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="b747223d7bc0c59886be0f7fafeba9e9ba05c2", 0x13}, {&(0x7f0000001600)="27cdc8ece023d9f584f91b8e29118f8ec8c4f7a0ab646bf80706b3e6fa09b01f22992054018248dc6bab25369587639eef736b56d4cdc86809594e90877a8da35bc6eabde037e0cf6d3134749c354420b5632cc8af58e8c3cc0da826bfd514e357f1080e6081112b6c880fdf1a6124093bce1fb2a3ffed0417e4fc64ec620166a97bdcf1d621dadf3caeec72a7302b45650ed5410673f9c725efdd8f8135466936aae3a25503fe0c3a7af8a441502cef9fe6a0efc95f11bfde74b9358c381a6c7fb72ec511a469e5cf31e0c54183f308ad39602d87a2a452f3ae31121bf117e18b77a84bf33062dc98cc25db5f8c18456a1a8a56958d4d31ff5367f238519e256e505cd8406e8913184ff31ce1c0f11c9aab73364389411c65f96624b830d1ff7ea5a3431c3f9d77ff22d8ad1077ad3ea5f78e2180c455456c119916edde4d2caba0013be07cac98e8bc4cba2a0e5c13c443e5c3586ccbfd4efb1771045c16", 0x15f}, {&(0x7f0000000140)="d7681016cd60fd67f52e8588e77065aaa7291103b0d372caff10866f974ee84e2825198fe1ae0d2f601352f2393b9c41f4520722e6c3ca77b1a26c62087b07deb7ae2f972b167f0a1f04274a386211f8b6cc4cf71d80d268fc4a9047f3e5168e5a495b2dbcacd513521d8321dececc2f55ed0041ca7c6a1643a263fc2a09e60efeeb9cf6d4be2db9175c74b09368e53462f289662d025b", 0x97}], 0x3, &(0x7f0000001780)=[{0x110, 0x118, 0xdd, "76e101db7ff4d73cf44e831359c1caee2adf581c9753659aa63f76bc66d7db0f29057c63cd3f92d1b0083d1ac857d20515e1a2c67090389116c50c67de7885081d7df239a2d5920b31d9712772d032be59055cea87914eb212d9b414ec3fa72970af4eec331499d6e97d2b3b50de4ac466317482571550b85bd7ea46c6bdddb7f4fcd5f2ca097074e82512eb23d8616c543ee436b2d5e664177723ff361806ca2aa96bb2676c75c957f6bb5c2b1e5f197692dbdb9cd171f5ff33df380e06fbbaf723c448fc6b97eeb1ca365e8569e99e37801f4efccf978cd9e0d764f65847e801f412a0239672959075270026389e45ac8afc66826f0b90ec91cce85b9e"}, {0x60, 0x118, 0x327, "c6431c64d64909dc26e15ed98b8329cca3c66a25c09459edad5bc82dfc2d702f6a485c9a790f7c6d2d42356fe0c9f80d5393e30dbb7ceb160eb761784f091ce38afc5a04109cc7f694aa9aa49c22"}, {0xb8, 0x111, 0x9, "700a4c8dd52ace43feae541e0160e8ed2caf71f88c5eb25bd4c38a44247a7bf28a04a8fc28d8263fefe26184e5d1e56a957d24f33255b7636b4c1a7f6829bb831fc544ffc6a3890bb5fb3cc55cca49f7ed72a2e9ecbe08b72c3f51fd68f4e23b8c8056c96c863f054e21e95b1664f9e035141f1b9237c5d873b24fcf136add9089a9748c4a9b39e1880567ee79c5dcc643940e1bca4443783cbcabacd51493e7b9ce9188"}], 0x228}, 0x4008095) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014000000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e857d01e91d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644c", 0xd8}], 0x1}, 0x4008000) socketpair(0x6, 0x4488d7c601e84fd6, 0x0, &(0x7f0000000100)) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122300000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f00000002c0)="b5c4f1931d1e83b2b7c52c25aef77f"}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 8.263147616s ago: executing program 3 (id=2473): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x20008800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x4, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=r0], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 7.881635593s ago: executing program 3 (id=2476): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000240), 0x1}, 0x10815, 0x3, 0x0, 0x5}, 0x0, 0x5, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 7.426052188s ago: executing program 3 (id=2478): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 6.905525749s ago: executing program 3 (id=2480): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r1) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x7}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x11, &(0x7f0000000480)=@ringbuf={{}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}]}, 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x1, &(0x7f0000000140)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r6}, 0x4) r7 = socket$kcm(0x2a, 0x2, 0x0) close(r7) 3.016092573s ago: executing program 2 (id=2505): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.818021752s ago: executing program 1 (id=2506): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000240)="16c488a8", 0x4}, {&(0x7f00000002c0)="bcc5d7a3", 0x4}], 0x3}, 0x4044) 2.696515244s ago: executing program 1 (id=2507): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) 2.554705568s ago: executing program 2 (id=2508): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (fail_nth: 3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) 2.338520489s ago: executing program 1 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000480)="4fde"}, 0x20) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffff8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x65}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0], 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, 0x0, 0x40012100) close(0x3) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000a40), 0x6e, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={0x0, r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.71838761s ago: executing program 2 (id=2511): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000240), 0x1}, 0x10815, 0x3, 0x0, 0x5}, 0x0, 0x5, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.574377644s ago: executing program 0 (id=2512): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, r2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xe2, 0xff, 0x0, 0x5, 0x0, 0x2, 0x2481, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x6, 0x9}, 0x8000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x65aa}, 0xffffffffffffffff, 0x2, r1, 0x9) 1.573067344s ago: executing program 1 (id=2513): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r1) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x7}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x11, &(0x7f0000000480)=@ringbuf={{}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}]}, 0x0}, 0x90) r6 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x1, &(0x7f0000000140)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r7}, 0x4) r8 = socket$kcm(0x2a, 0x2, 0x0) close(r8) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000200), 0x12) write$cgroup_int(r9, &(0x7f0000000080), 0x2) write$cgroup_devices(r9, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) 1.492978273s ago: executing program 2 (id=2514): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="16c488a8", 0x4}, {&(0x7f00000002c0)="bcc5d7a3", 0x4}], 0x3}, 0x4044) 1.31231799s ago: executing program 2 (id=2515): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.052778836s ago: executing program 1 (id=2516): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 841.561947ms ago: executing program 0 (id=2517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d00000007000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="130000004f0081c5ea6565a3e073e490715f0d", 0x13}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{r5}, &(0x7f0000001440), &(0x7f0000001480)='%pB \x00'}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x0, 0x3, 0x4, 0x4, 0x0, 0x1, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x0, 0x0, 0x2, 0x8, 0xa, 0x8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000480)='syzkaller\x00', 0x7ff, 0x65, &(0x7f00000004c0)=""/101, 0x41000, 0x21, '\x00', r4, 0x1a, r3, 0x8, &(0x7f0000000700)={0x2, 0x1ff}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x5, 0x1, 0xfffffffb}, 0x10, 0x7bdf, r3, 0x2, &(0x7f0000000780)=[r5], &(0x7f00000007c0)=[{0x0, 0x5, 0xc}, {0x2, 0x3, 0xb, 0xa}], 0x10, 0x8a}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18bd000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r7}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1d, 0x1, 0x31ce, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r9, r8, 0x14, 0x10, 0x0, @void, @value=r8, @void, @void, r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000840), &(0x7f0000000340)=r7}, 0x20) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xc4, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000980), 0x8, 0xb6, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) 840.884197ms ago: executing program 1 (id=2518): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='fsi_master_gpio_clock_zeros\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) close(r0) socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xc, [@func={0x5, 0x0, 0x0, 0xc, 0x3}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0x3, 0x2}, {0xa, 0xff}, {0x9, 0x9}, {0xb, 0x7}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x7}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x80, [{0xf, 0x1, 0x33c00000}, {0xa, 0x4, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x5, 0x2}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x2e, 0x61, 0x30, 0x30, 0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x70]}}, &(0x7f0000000a40)=""/4096, 0xc4, 0x1000, 0x2, 0x2, 0x10000, @value=r3}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1}, 0x40000010) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x80020000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000280)="b0b535023e851b491f94793f88ba00981408413007a1e81055af0f76a82eea30b0705b6c5cb3940ed343e0939eef6893ef37e11c95c89dc5c368a71f4c13140721f339ab82de9013c61249895a7c87b02c6c5776f7a05b42217e76d3a0149c9c26e9d8d9c0680a84f3871af983ee92c11ca54502", &(0x7f0000000080)=""/11, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1018310000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/7, 0x7}], 0x3, &(0x7f0000000500)=""/105, 0x69}, 0x100b1) 733.369808ms ago: executing program 2 (id=2519): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x3, &(0x7f0000001380)=ANY=[@ANYRESDEC, @ANYRESDEC=r1], &(0x7f0000001200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, r1}, 0x94) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 587.686012ms ago: executing program 0 (id=2520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2000}, 0xc) 357.935275ms ago: executing program 0 (id=2521): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000240), 0x1}, 0x10815, 0x3, 0x0, 0x5}, 0x0, 0x5, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 171.446293ms ago: executing program 0 (id=2522): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="16c488a8", 0x4}, {&(0x7f00000002c0)="bcc5d7a3", 0x4}], 0x3}, 0x4044) 0s ago: executing program 0 (id=2523): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000010000800000000005000000180000003b000000000000000e0500001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000184400000000000000000000000000001800000001000000000000000100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000038504000300000018110000539bb80822a2209ee2e7a3acdb4ff45a571340fb01866512bbb81a40420116570e800de067364264953437dc9db96dc59ca2679dd5fc3c7aa92642324a44f8c3ad58f0e25e3af4dd594ed21ec54dde923da90c3d8fb184050dc47c71afa200b5190c0dad42a7ab27054be12eecad72204bf45767fa921d2686d937f01b2873412a0a77e701967cde716b6b80efb7aa97b86b421daa3c", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000008ce8970c88d7d957e21c633c8e810bb95269afa1f84451e4cfddad9f7cad423083213ba4e3af5a2d4ab42be1c3e45f2c58f3d1da8c0692b887a94423b6a79c28b046b6f09ab0613188b3c66ee9e7237fd8d10705311d86b187a8b116a794c903f0d0bd7134ce697510563e38dbf723012d0f0777870341000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, &(0x7f0000000340), 0x40f00, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x1, 0x1}], 0x10, 0x6}, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000000c0), &(0x7f0000000500)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x38, 0x1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="050000000500"/21], 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffffffff, 0xfffff000, 0xcec, 0x1000, r3, 0x1ff, '\x00', 0x0, r2, 0x5, 0x2, 0x4, 0x7}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x251a, '\x00', 0x0, r2, 0x1, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x9, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="098609000104561696257a76c67e1a0e5b58ee"], &(0x7f0000000200)='GPL\x00', 0x20005, 0x9b, &(0x7f0000000380)=""/155, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock=0xd, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, r3, r4, r5, r6, r7], &(0x7f0000000f40)=[{0x1, 0x3, 0x1, 0xa}, {0x5, 0x4, 0x6, 0x3}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa020a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x20, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40004061) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000340)}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001c40)=@generic={&(0x7f0000000600)='./file0\x00', r12}, 0x18) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): user+0x2f/0xe0 [ 373.480759][T10616] __copy_msghdr+0x3bb/0x580 [ 373.485409][T10616] ___sys_sendmsg+0x1a6/0x290 [ 373.490192][T10616] ? __sys_sendmsg+0x270/0x270 [ 373.495027][T10616] ? __lock_acquire+0x7c80/0x7c80 [ 373.500201][T10616] __se_sys_sendmsg+0x1a5/0x270 [ 373.505110][T10616] ? perf_trace_preemptirq_template+0x281/0x340 [ 373.511407][T10616] ? __x64_sys_sendmsg+0x80/0x80 [ 373.516418][T10616] ? lockdep_hardirqs_on+0x98/0x150 [ 373.521675][T10616] do_syscall_64+0x55/0xb0 [ 373.526148][T10616] ? clear_bhb_loop+0x40/0x90 [ 373.530868][T10616] ? clear_bhb_loop+0x40/0x90 [ 373.535598][T10616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.541529][T10616] RIP: 0033:0x7f769a38efc9 [ 373.546033][T10616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.565692][T10616] RSP: 002b:00007f769b1d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.574152][T10616] RAX: ffffffffffffffda RBX: 00007f769a5e5fa0 RCX: 00007f769a38efc9 [ 373.582143][T10616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 373.590563][T10616] RBP: 00007f769b1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 373.598550][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.606553][T10616] R13: 00007f769a5e6038 R14: 00007f769a5e5fa0 R15: 00007ffcf4970ac8 [ 373.614576][T10616] [ 373.660570][T10619] FAULT_INJECTION: forcing a failure. [ 373.660570][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 373.727480][T10619] CPU: 1 PID: 10619 Comm: syz.0.1842 Not tainted syzkaller #0 [ 373.735019][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.745132][T10619] Call Trace: [ 373.748456][T10619] [ 373.751436][T10619] dump_stack_lvl+0x16c/0x230 [ 373.756173][T10619] ? show_regs_print_info+0x20/0x20 [ 373.761423][T10619] ? load_image+0x3b0/0x3b0 [ 373.766007][T10619] ? __might_sleep+0xe0/0xe0 [ 373.770651][T10619] ? __lock_acquire+0x7c80/0x7c80 [ 373.775754][T10619] should_fail_ex+0x39d/0x4d0 [ 373.780499][T10619] should_failslab+0x9/0x20 [ 373.785085][T10619] slab_pre_alloc_hook+0x59/0x310 [ 373.790178][T10619] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 373.795784][T10619] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 373.801451][T10619] __kmem_cache_alloc_node+0x53/0x260 [ 373.807057][T10619] ? __lock_acquire+0x7c80/0x7c80 [ 373.812114][T10619] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 373.817685][T10619] __kmalloc+0xa4/0x240 [ 373.821878][T10619] bpf_prog_test_run_skb+0x22c/0x11c0 [ 373.827318][T10619] ? __fget_files+0x28/0x4d0 [ 373.831957][T10619] ? __fget_files+0x44a/0x4d0 [ 373.836665][T10619] ? cpu_online+0x60/0x60 [ 373.841018][T10619] bpf_prog_test_run+0x321/0x390 [ 373.845972][T10619] __sys_bpf+0x440/0x800 [ 373.850227][T10619] ? bpf_link_show_fdinfo+0x350/0x350 [ 373.855625][T10619] ? lock_chain_count+0x20/0x20 [ 373.860495][T10619] __x64_sys_bpf+0x7c/0x90 [ 373.864960][T10619] do_syscall_64+0x55/0xb0 [ 373.869394][T10619] ? clear_bhb_loop+0x40/0x90 [ 373.874091][T10619] ? clear_bhb_loop+0x40/0x90 [ 373.878801][T10619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.884715][T10619] RIP: 0033:0x7f1a0c78efc9 [ 373.889154][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.908788][T10619] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.917226][T10619] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 373.925218][T10619] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 373.933230][T10619] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 373.941229][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.949222][T10619] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 373.957225][T10619] [ 374.128441][T10620] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 374.141534][T10620] __nla_validate_parse: 9 callbacks suppressed [ 374.141555][T10620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1841'. [ 374.192417][T10620] bond0: (slave dummy0): Releasing backup interface [ 374.226259][T10620] bridge0: port 3(dummy0) entered blocking state [ 374.243518][T10620] bridge0: port 3(dummy0) entered disabled state [ 374.246456][ T5808] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 374.266452][T10620] dummy0: entered allmulticast mode [ 374.544206][T10634] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1848'. [ 374.561864][T10634] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1848'. [ 374.615168][T10640] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 375.250641][T10650] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1859'. [ 375.280627][T10650] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1859'. [ 375.540162][T10651] netlink: 'syz.3.1851': attribute type 10 has an invalid length. [ 375.980281][T10651] .`: (slave dummy0): Enslaving as an active interface with an up link [ 376.060342][T10659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1853'. [ 376.085275][T10659] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1853'. [ 377.129227][T10678] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1863'. [ 377.597598][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 377.606550][T10683] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1864'. [ 378.179608][T10707] netlink: 'syz.3.1872': attribute type 10 has an invalid length. [ 378.420104][T10715] FAULT_INJECTION: forcing a failure. [ 378.420104][T10715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.442903][T10715] CPU: 1 PID: 10715 Comm: syz.0.1875 Not tainted syzkaller #0 [ 378.450440][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.460529][T10715] Call Trace: [ 378.463836][T10715] [ 378.466785][T10715] dump_stack_lvl+0x16c/0x230 [ 378.472014][T10715] ? show_regs_print_info+0x20/0x20 [ 378.477232][T10715] ? load_image+0x3b0/0x3b0 [ 378.481755][T10715] ? __might_fault+0xaa/0x120 [ 378.486546][T10715] ? __lock_acquire+0x7c80/0x7c80 [ 378.491624][T10715] should_fail_ex+0x39d/0x4d0 [ 378.496330][T10715] _copy_from_user+0x2f/0xe0 [ 378.500945][T10715] __sys_bpf+0x1e9/0x800 [ 378.505307][T10715] ? bpf_link_show_fdinfo+0x350/0x350 [ 378.510712][T10715] ? lock_chain_count+0x20/0x20 [ 378.515589][T10715] __x64_sys_bpf+0x7c/0x90 [ 378.520108][T10715] do_syscall_64+0x55/0xb0 [ 378.524544][T10715] ? clear_bhb_loop+0x40/0x90 [ 378.529240][T10715] ? clear_bhb_loop+0x40/0x90 [ 378.533935][T10715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.539847][T10715] RIP: 0033:0x7f1a0c78efc9 [ 378.544280][T10715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.563997][T10715] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.572447][T10715] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 378.580474][T10715] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 378.588497][T10715] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 378.596506][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.604501][T10715] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 378.612513][T10715] [ 378.843549][T10722] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 378.953278][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.961692][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.207805][T10731] __nla_validate_parse: 8 callbacks suppressed [ 379.207826][T10731] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.1881'. [ 379.530997][T10739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1885'. [ 379.837873][T10749] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1889'. [ 379.873402][T10749] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1889'. [ 380.105722][T10758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1893'. [ 380.233530][T10763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 380.237372][T10764] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1895'. [ 380.260420][T10763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 380.273070][T10762] FAULT_INJECTION: forcing a failure. [ 380.273070][T10762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.287293][T10762] CPU: 1 PID: 10762 Comm: syz.3.1894 Not tainted syzkaller #0 [ 380.294822][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.304936][T10762] Call Trace: [ 380.308279][T10762] [ 380.311257][T10762] dump_stack_lvl+0x16c/0x230 [ 380.316007][T10762] ? show_regs_print_info+0x20/0x20 [ 380.321273][T10762] ? load_image+0x3b0/0x3b0 [ 380.325846][T10762] ? __might_fault+0xaa/0x120 [ 380.330586][T10762] ? __lock_acquire+0x7c80/0x7c80 [ 380.335689][T10762] should_fail_ex+0x39d/0x4d0 [ 380.340454][T10762] _copy_from_user+0x2f/0xe0 [ 380.345055][T10765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 380.354032][T10762] sk_setsockopt+0x276/0x29d0 [ 380.354078][T10762] ? sockopt_capable+0x60/0x60 [ 380.354125][T10762] ? trace_call_bpf+0xc3/0x690 [ 380.354159][T10762] ? __might_sleep+0xe0/0xe0 [ 380.354184][T10762] ? trace_call_bpf+0x5ba/0x690 [ 380.354258][T10762] udp_lib_setsockopt+0xed/0x890 [ 380.354296][T10762] ? udp_destroy_sock+0x2c0/0x2c0 [ 380.354334][T10762] ? __fget_files+0x28/0x4d0 [ 380.354374][T10762] udp_setsockopt+0x77/0xb0 [ 380.354407][T10762] ? udp_set_csum+0x6f0/0x6f0 [ 380.354429][T10762] ? sock_common_recvmsg+0x1b0/0x1b0 [ 380.354465][T10762] do_sock_setsockopt+0x175/0x1a0 [ 380.412524][T10762] __x64_sys_setsockopt+0x184/0x200 [ 380.417802][T10762] do_syscall_64+0x55/0xb0 [ 380.422277][T10762] ? clear_bhb_loop+0x40/0x90 [ 380.427012][T10762] ? clear_bhb_loop+0x40/0x90 [ 380.431799][T10762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.437747][T10762] RIP: 0033:0x7fd173d8efc9 [ 380.442219][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.461884][T10762] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.470366][T10762] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 380.478409][T10762] RDX: 000000000000003e RSI: 0000000000000001 RDI: 0000000000000003 [ 380.486439][T10762] RBP: 00007fd174c3e090 R08: 0000000000000004 R09: 0000000000000000 [ 380.494469][T10762] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 380.502585][T10762] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 380.510747][T10762] [ 380.722088][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 381.088059][T10789] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 384.043486][ T5808] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 384.274172][T10868] __nla_validate_parse: 32 callbacks suppressed [ 384.274189][T10868] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1948'. [ 384.436172][T10875] FAULT_INJECTION: forcing a failure. [ 384.436172][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 384.477079][T10875] CPU: 1 PID: 10875 Comm: syz.1.1942 Not tainted syzkaller #0 [ 384.484625][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.490833][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 384.494701][T10875] Call Trace: [ 384.494713][T10875] [ 384.494722][T10875] dump_stack_lvl+0x16c/0x230 [ 384.514582][T10875] ? show_regs_print_info+0x20/0x20 [ 384.519841][T10875] ? load_image+0x3b0/0x3b0 [ 384.524405][T10875] ? __might_sleep+0xe0/0xe0 [ 384.529027][T10875] ? __lock_acquire+0x7c80/0x7c80 [ 384.534102][T10875] should_fail_ex+0x39d/0x4d0 [ 384.538820][T10875] should_failslab+0x9/0x20 [ 384.543362][T10875] slab_pre_alloc_hook+0x59/0x310 [ 384.548422][T10875] kmem_cache_alloc+0x5a/0x2e0 [ 384.553223][T10875] ? getname_flags+0xbb/0x500 [ 384.557932][T10875] getname_flags+0xbb/0x500 [ 384.562488][T10875] __x64_sys_mkdir+0x5f/0x80 [ 384.567115][T10875] do_syscall_64+0x55/0xb0 [ 384.571559][T10875] ? clear_bhb_loop+0x40/0x90 [ 384.576254][T10875] ? clear_bhb_loop+0x40/0x90 [ 384.580948][T10875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.586949][T10875] RIP: 0033:0x7f6f9cb8efc9 [ 384.591386][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.611015][T10875] RSP: 002b:00007f6f9d9ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 384.619445][T10875] RAX: ffffffffffffffda RBX: 00007f6f9cde5fa0 RCX: 00007f6f9cb8efc9 [ 384.627432][T10875] RDX: 0000000000000000 RSI: 0000000000000038 RDI: 0000200000000100 [ 384.635416][T10875] RBP: 00007f6f9d9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 384.643400][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.651384][T10875] R13: 00007f6f9cde6038 R14: 00007f6f9cde5fa0 R15: 00007ffec1cffe48 [ 384.659394][T10875] [ 384.712532][T10876] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1943'. [ 384.786783][T10876] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1943'. [ 385.532435][ T5808] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 385.604350][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1950'. [ 385.818488][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 385.868418][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 385.925706][T10895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 386.143315][T10906] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1956'. [ 386.155126][T10906] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1956'. [ 387.983079][T10954] netlink: 'syz.1.1976': attribute type 10 has an invalid length. [ 388.349132][T10964] FAULT_INJECTION: forcing a failure. [ 388.349132][T10964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.405869][T10964] CPU: 1 PID: 10964 Comm: syz.3.1981 Not tainted syzkaller #0 [ 388.413426][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.423527][T10964] Call Trace: [ 388.426848][T10964] [ 388.429821][T10964] dump_stack_lvl+0x16c/0x230 [ 388.434560][T10964] ? show_regs_print_info+0x20/0x20 [ 388.439835][T10964] ? load_image+0x3b0/0x3b0 [ 388.444392][T10964] ? __might_fault+0xaa/0x120 [ 388.449115][T10964] ? __lock_acquire+0x7c80/0x7c80 [ 388.454191][T10964] should_fail_ex+0x39d/0x4d0 [ 388.458956][T10964] _copy_to_user+0x2f/0xa0 [ 388.463431][T10964] bpf_prog_test_run_raw_tp+0x4bc/0x640 [ 388.469073][T10964] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 388.474603][T10964] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 388.480148][T10964] bpf_prog_test_run+0x321/0x390 [ 388.485143][T10964] __sys_bpf+0x440/0x800 [ 388.489436][T10964] ? bpf_link_show_fdinfo+0x350/0x350 [ 388.494885][T10964] ? lock_chain_count+0x20/0x20 [ 388.499797][T10964] __x64_sys_bpf+0x7c/0x90 [ 388.504246][T10964] do_syscall_64+0x55/0xb0 [ 388.508694][T10964] ? clear_bhb_loop+0x40/0x90 [ 388.513396][T10964] ? clear_bhb_loop+0x40/0x90 [ 388.518104][T10964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.524068][T10964] RIP: 0033:0x7fd173d8efc9 [ 388.528509][T10964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.548149][T10964] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.556587][T10964] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 388.564579][T10964] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 388.572589][T10964] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.580682][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.588691][T10964] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 388.596701][T10964] [ 389.312070][T10987] __nla_validate_parse: 13 callbacks suppressed [ 389.312110][T10987] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1992'. [ 389.333880][T10990] FAULT_INJECTION: forcing a failure. [ 389.333880][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 389.351648][T10990] CPU: 1 PID: 10990 Comm: syz.1.1993 Not tainted syzkaller #0 [ 389.359115][T10987] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1992'. [ 389.368028][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.368046][T10990] Call Trace: [ 389.368054][T10990] [ 389.368064][T10990] dump_stack_lvl+0x16c/0x230 [ 389.368099][T10990] ? show_regs_print_info+0x20/0x20 [ 389.368127][T10990] ? load_image+0x3b0/0x3b0 [ 389.368152][T10990] ? __might_sleep+0xe0/0xe0 [ 389.368178][T10990] ? __lock_acquire+0x7c80/0x7c80 [ 389.368208][T10990] should_fail_ex+0x39d/0x4d0 [ 389.368243][T10990] should_failslab+0x9/0x20 [ 389.368272][T10990] slab_pre_alloc_hook+0x59/0x310 [ 389.422935][T10990] ? __lock_acquire+0x7c80/0x7c80 [ 389.427995][T10990] kmem_cache_alloc_node+0x60/0x330 [ 389.433219][T10990] ? __alloc_skb+0x108/0x2c0 [ 389.437950][T10990] __alloc_skb+0x108/0x2c0 [ 389.442484][T10990] netlink_sendmsg+0x65b/0xbe0 [ 389.447276][T10990] ? netlink_getsockopt+0x580/0x580 [ 389.452499][T10990] ? aa_sock_msg_perm+0x94/0x150 [ 389.457456][T10990] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 389.462760][T10990] ? security_socket_sendmsg+0x80/0xa0 [ 389.468292][T10990] ? netlink_getsockopt+0x580/0x580 [ 389.473517][T10990] ____sys_sendmsg+0x5bf/0x950 [ 389.478400][T10990] ? __asan_memset+0x22/0x40 [ 389.483012][T10990] ? __sys_sendmsg_sock+0x30/0x30 [ 389.488069][T10990] ? __import_iovec+0x5f2/0x860 [ 389.492954][T10990] ? import_iovec+0x73/0xa0 [ 389.497483][T10990] ___sys_sendmsg+0x220/0x290 [ 389.502196][T10990] ? __sys_sendmsg+0x270/0x270 [ 389.507000][T10990] ? __lock_acquire+0x7c80/0x7c80 [ 389.512169][T10990] __se_sys_sendmsg+0x1a5/0x270 [ 389.517052][T10990] ? __x64_sys_sendmsg+0x80/0x80 [ 389.522025][T10990] ? lockdep_hardirqs_on+0x98/0x150 [ 389.527271][T10990] do_syscall_64+0x55/0xb0 [ 389.531722][T10990] ? clear_bhb_loop+0x40/0x90 [ 389.536524][T10990] ? clear_bhb_loop+0x40/0x90 [ 389.541230][T10990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.547146][T10990] RIP: 0033:0x7f6f9cb8efc9 [ 389.551576][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.571297][T10990] RSP: 002b:00007f6f9d9ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.579724][T10990] RAX: ffffffffffffffda RBX: 00007f6f9cde5fa0 RCX: 00007f6f9cb8efc9 [ 389.587713][T10990] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 389.595708][T10990] RBP: 00007f6f9d9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 389.603700][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.611690][T10990] R13: 00007f6f9cde6038 R14: 00007f6f9cde5fa0 R15: 00007ffec1cffe48 [ 389.619782][T10990] [ 390.553395][T11014] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2001'. [ 390.598864][T11014] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2001'. [ 390.799533][ T5808] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 390.857816][T11021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2004'. [ 390.897305][T11021] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2004'. [ 391.004003][T11023] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 391.017391][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2005'. [ 391.026704][T11023] lo: left allmulticast mode [ 391.049897][T11023] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 391.079207][T11023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.111844][T11025] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2006'. [ 392.309653][T11058] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2019'. [ 392.527659][T11066] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2023'. [ 392.973873][T11076] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 392.984739][T11076] lo: left allmulticast mode [ 393.008908][T11076] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 393.039195][T11076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.719166][T11097] ipvlan0: entered promiscuous mode [ 393.724687][T11097] ipvlan0: entered allmulticast mode [ 393.733073][T11097] : entered allmulticast mode [ 394.697415][T11120] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 394.705324][T11120] __nla_validate_parse: 10 callbacks suppressed [ 394.705338][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2045'. [ 394.759802][T11124] FAULT_INJECTION: forcing a failure. [ 394.759802][T11124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.777131][T11124] CPU: 1 PID: 11124 Comm: syz.3.2047 Not tainted syzkaller #0 [ 394.779772][T11120] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 394.784670][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.804358][T11124] Call Trace: [ 394.807681][T11124] [ 394.810657][T11124] dump_stack_lvl+0x16c/0x230 [ 394.815401][T11124] ? show_regs_print_info+0x20/0x20 [ 394.820663][T11124] ? load_image+0x3b0/0x3b0 [ 394.825221][T11124] ? __might_fault+0xaa/0x120 [ 394.829946][T11124] ? __lock_acquire+0x7c80/0x7c80 [ 394.835025][T11124] should_fail_ex+0x39d/0x4d0 [ 394.839770][T11124] _copy_from_user+0x2f/0xe0 [ 394.844411][T11124] ___sys_sendmsg+0x159/0x290 [ 394.849168][T11124] ? __sys_sendmsg+0x270/0x270 [ 394.854030][T11124] ? __lock_acquire+0x7c80/0x7c80 [ 394.857533][T11120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.859128][T11124] __se_sys_sendmsg+0x1a5/0x270 [ 394.879123][T11124] ? __x64_sys_sendmsg+0x80/0x80 [ 394.884682][T11124] ? lockdep_hardirqs_on+0x98/0x150 [ 394.889953][T11124] do_syscall_64+0x55/0xb0 [ 394.894424][T11124] ? clear_bhb_loop+0x40/0x90 [ 394.899155][T11124] ? clear_bhb_loop+0x40/0x90 [ 394.903887][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.909834][T11124] RIP: 0033:0x7fd173d8efc9 [ 394.914305][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.933994][T11124] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.942437][T11124] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 394.950433][T11124] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 394.958434][T11124] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.966434][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.974423][T11124] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 394.982441][T11124] [ 395.771524][T11144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2062'. [ 395.807225][T11144] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2062'. [ 395.855776][T11143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2054'. [ 395.866425][T11143] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2054'. [ 396.014533][T11151] FAULT_INJECTION: forcing a failure. [ 396.014533][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 396.046459][T11151] CPU: 0 PID: 11151 Comm: syz.3.2058 Not tainted syzkaller #0 [ 396.053991][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.064113][T11151] Call Trace: [ 396.067432][T11151] [ 396.070400][T11151] dump_stack_lvl+0x16c/0x230 [ 396.075126][T11151] ? show_regs_print_info+0x20/0x20 [ 396.080384][T11151] ? load_image+0x3b0/0x3b0 [ 396.084931][T11151] ? __might_sleep+0xe0/0xe0 [ 396.089568][T11151] ? __lock_acquire+0x7c80/0x7c80 [ 396.094641][T11151] should_fail_ex+0x39d/0x4d0 [ 396.098309][T11152] syzkaller0: entered promiscuous mode [ 396.099350][T11151] should_failslab+0x9/0x20 [ 396.105088][T11152] syzkaller0: entered allmulticast mode [ 396.109427][T11151] slab_pre_alloc_hook+0x59/0x310 [ 396.109463][T11151] ? tomoyo_encode+0x28b/0x540 [ 396.109494][T11151] ? tomoyo_encode+0x28b/0x540 [ 396.109522][T11151] __kmem_cache_alloc_node+0x53/0x260 [ 396.109558][T11151] ? tomoyo_encode+0x28b/0x540 [ 396.139846][T11151] __kmalloc+0xa4/0x240 [ 396.144031][T11151] tomoyo_encode+0x28b/0x540 [ 396.148653][T11151] tomoyo_realpath_from_path+0x592/0x5d0 [ 396.154329][T11151] tomoyo_path_number_perm+0x1ea/0x590 [ 396.159818][T11151] ? tomoyo_path_number_perm+0x1ba/0x590 [ 396.165478][T11151] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 396.170965][T11151] ? ksys_write+0x1c1/0x250 [ 396.175514][T11151] ? __fget_files+0x28/0x4d0 [ 396.180130][T11151] security_file_ioctl+0x70/0xa0 [ 396.185088][T11151] __se_sys_ioctl+0x48/0x170 [ 396.189706][T11151] do_syscall_64+0x55/0xb0 [ 396.194140][T11151] ? clear_bhb_loop+0x40/0x90 [ 396.198832][T11151] ? clear_bhb_loop+0x40/0x90 [ 396.203566][T11151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.209474][T11151] RIP: 0033:0x7fd173d8efc9 [ 396.213902][T11151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.233554][T11151] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.242072][T11151] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 396.250064][T11151] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 396.258049][T11151] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 396.266053][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.274046][T11151] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 396.282050][T11151] [ 396.306435][T11151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.348638][T11159] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2060'. [ 396.358888][T11159] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2060'. [ 396.499390][T11162] netlink: 'syz.0.2057': attribute type 39 has an invalid length. [ 396.672078][T11168] FAULT_INJECTION: forcing a failure. [ 396.672078][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 396.689959][T11168] CPU: 0 PID: 11168 Comm: syz.2.2065 Not tainted syzkaller #0 [ 396.697482][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.707579][T11168] Call Trace: [ 396.710898][T11168] [ 396.713862][T11168] dump_stack_lvl+0x16c/0x230 [ 396.718592][T11168] ? show_regs_print_info+0x20/0x20 [ 396.723844][T11168] ? load_image+0x3b0/0x3b0 [ 396.728401][T11168] ? __lock_acquire+0x7c80/0x7c80 [ 396.733492][T11168] should_fail_ex+0x39d/0x4d0 [ 396.738221][T11168] should_failslab+0x9/0x20 [ 396.742775][T11168] slab_pre_alloc_hook+0x59/0x310 [ 396.747836][T11168] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 396.754474][T11168] ? bpf_test_init+0xc0/0x150 [ 396.759200][T11168] ? bpf_test_init+0xc0/0x150 [ 396.763899][T11168] __kmem_cache_alloc_node+0x53/0x260 [ 396.769296][T11168] ? bpf_test_init+0xc0/0x150 [ 396.774011][T11168] __kmalloc+0xa4/0x240 [ 396.778193][T11168] bpf_test_init+0xc0/0x150 [ 396.782725][T11168] bpf_prog_test_run_xdp+0x382/0xfa0 [ 396.788040][T11168] ? dev_put+0x80/0x80 [ 396.792226][T11168] ? dev_put+0x80/0x80 [ 396.796309][T11168] bpf_prog_test_run+0x321/0x390 [ 396.801271][T11168] __sys_bpf+0x440/0x800 [ 396.805525][T11168] ? bpf_link_show_fdinfo+0x350/0x350 [ 396.810975][T11168] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.817152][T11168] __x64_sys_bpf+0x7c/0x90 [ 396.821592][T11168] do_syscall_64+0x55/0xb0 [ 396.826017][T11168] ? clear_bhb_loop+0x40/0x90 [ 396.830704][T11168] ? clear_bhb_loop+0x40/0x90 [ 396.835396][T11168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.841309][T11168] RIP: 0033:0x7f769a38efc9 [ 396.845740][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.865367][T11168] RSP: 002b:00007f769b1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.873807][T11168] RAX: ffffffffffffffda RBX: 00007f769a5e5fa0 RCX: 00007f769a38efc9 [ 396.881797][T11168] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 396.889781][T11168] RBP: 00007f769b1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 396.897766][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.905768][T11168] R13: 00007f769a5e6038 R14: 00007f769a5e5fa0 R15: 00007ffcf4970ac8 [ 396.913802][T11168] [ 397.153482][T11175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2068'. [ 397.163731][T11175] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2068'. [ 397.386253][T11184] netlink: 'syz.1.2070': attribute type 10 has an invalid length. [ 397.935301][T11192] FAULT_INJECTION: forcing a failure. [ 397.935301][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 397.955223][T11192] CPU: 1 PID: 11192 Comm: syz.3.2074 Not tainted syzkaller #0 [ 397.962787][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.972918][T11192] Call Trace: [ 397.976862][T11192] [ 397.979855][T11192] dump_stack_lvl+0x16c/0x230 [ 397.984640][T11192] ? show_regs_print_info+0x20/0x20 [ 397.990007][T11192] ? load_image+0x3b0/0x3b0 [ 397.994605][T11192] ? __might_sleep+0xe0/0xe0 [ 397.999270][T11192] ? __lock_acquire+0x7c80/0x7c80 [ 398.004398][T11192] should_fail_ex+0x39d/0x4d0 [ 398.009264][T11192] should_failslab+0x9/0x20 [ 398.013839][T11192] slab_pre_alloc_hook+0x59/0x310 [ 398.018985][T11192] ? __lock_acquire+0x7c80/0x7c80 [ 398.024097][T11192] kmem_cache_alloc_node+0x60/0x330 [ 398.029381][T11192] ? __alloc_skb+0x108/0x2c0 [ 398.034079][T11192] __alloc_skb+0x108/0x2c0 [ 398.038599][T11192] netlink_sendmsg+0x65b/0xbe0 [ 398.043482][T11192] ? netlink_getsockopt+0x580/0x580 [ 398.048770][T11192] ? aa_sock_msg_perm+0x94/0x150 [ 398.053794][T11192] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.059155][T11192] ? security_socket_sendmsg+0x80/0xa0 [ 398.064687][T11192] ? netlink_getsockopt+0x580/0x580 [ 398.069966][T11192] ____sys_sendmsg+0x5bf/0x950 [ 398.074832][T11192] ? __asan_memset+0x22/0x40 [ 398.079496][T11192] ? __sys_sendmsg_sock+0x30/0x30 [ 398.084605][T11192] ? __import_iovec+0x5f2/0x860 [ 398.089571][T11192] ? import_iovec+0x73/0xa0 [ 398.094172][T11192] ___sys_sendmsg+0x220/0x290 [ 398.098954][T11192] ? __sys_sendmsg+0x270/0x270 [ 398.103879][T11192] ? __lock_acquire+0x7c80/0x7c80 [ 398.109077][T11192] __se_sys_sendmsg+0x1a5/0x270 [ 398.114041][T11192] ? __x64_sys_sendmsg+0x80/0x80 [ 398.119128][T11192] ? lockdep_hardirqs_on+0x98/0x150 [ 398.124421][T11192] do_syscall_64+0x55/0xb0 [ 398.128910][T11192] ? clear_bhb_loop+0x40/0x90 [ 398.133652][T11192] ? clear_bhb_loop+0x40/0x90 [ 398.138413][T11192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.144379][T11192] RIP: 0033:0x7fd173d8efc9 [ 398.148871][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.168737][T11192] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.177261][T11192] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 398.185337][T11192] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 398.193378][T11192] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.201500][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.209544][T11192] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 398.217650][T11192] [ 398.799648][T11208] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2080'. [ 399.838981][T11221] netlink: 'syz.0.2085': attribute type 10 has an invalid length. [ 400.102145][T11227] __nla_validate_parse: 2 callbacks suppressed [ 400.102187][T11227] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2089'. [ 400.120949][T11227] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2089'. [ 400.818076][T11238] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2093'. [ 401.044417][T11248] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2097'. [ 401.160368][T11250] FAULT_INJECTION: forcing a failure. [ 401.160368][T11250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.183758][T11250] CPU: 0 PID: 11250 Comm: syz.1.2098 Not tainted syzkaller #0 [ 401.191300][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.201391][T11250] Call Trace: [ 401.204683][T11250] [ 401.207631][T11250] dump_stack_lvl+0x16c/0x230 [ 401.212341][T11250] ? show_regs_print_info+0x20/0x20 [ 401.217557][T11250] ? load_image+0x3b0/0x3b0 [ 401.222086][T11250] ? __might_fault+0xaa/0x120 [ 401.226778][T11250] ? __lock_acquire+0x7c80/0x7c80 [ 401.231837][T11250] should_fail_ex+0x39d/0x4d0 [ 401.236542][T11250] _copy_from_user+0x2f/0xe0 [ 401.241156][T11250] __sys_bpf+0x1e9/0x800 [ 401.245529][T11250] ? bpf_link_show_fdinfo+0x350/0x350 [ 401.250962][T11250] ? lock_chain_count+0x20/0x20 [ 401.255846][T11250] __x64_sys_bpf+0x7c/0x90 [ 401.260291][T11250] do_syscall_64+0x55/0xb0 [ 401.264749][T11250] ? clear_bhb_loop+0x40/0x90 [ 401.269457][T11250] ? clear_bhb_loop+0x40/0x90 [ 401.274301][T11250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.280231][T11250] RIP: 0033:0x7f6f9cb8efc9 [ 401.284677][T11250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.304316][T11250] RSP: 002b:00007f6f9d9ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.312772][T11250] RAX: ffffffffffffffda RBX: 00007f6f9cde5fa0 RCX: 00007f6f9cb8efc9 [ 401.320772][T11250] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 401.328763][T11250] RBP: 00007f6f9d9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 401.336748][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.344733][T11250] R13: 00007f6f9cde6038 R14: 00007f6f9cde5fa0 R15: 00007ffec1cffe48 [ 401.352732][T11250] [ 401.408897][T11254] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2099'. [ 401.423323][T11254] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2099'. [ 401.544018][T11252] netlink: 'syz.3.2100': attribute type 3 has an invalid length. [ 401.570861][T11252] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2100'. [ 401.618075][T11256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2101'. [ 401.646704][T11256] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2101'. [ 401.716123][T11262] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 401.803323][T11266] netlink: 'syz.2.2105': attribute type 3 has an invalid length. [ 401.816742][T11266] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2105'. [ 402.180782][T11270] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 403.299407][T11282] netlink: 'syz.3.2111': attribute type 10 has an invalid length. [ 403.371587][T11282] team0: Device veth1_vlan is already a lower device of the team interface [ 404.673445][T11320] netlink: 'syz.0.2126': attribute type 3 has an invalid length. [ 404.991797][T11339] FAULT_INJECTION: forcing a failure. [ 404.991797][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 405.026049][T11339] CPU: 1 PID: 11339 Comm: syz.0.2131 Not tainted syzkaller #0 [ 405.033615][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.043800][T11339] Call Trace: [ 405.047102][T11339] [ 405.050045][T11339] dump_stack_lvl+0x16c/0x230 [ 405.054764][T11339] ? show_regs_print_info+0x20/0x20 [ 405.060004][T11339] ? load_image+0x3b0/0x3b0 [ 405.064525][T11339] ? __might_sleep+0xe0/0xe0 [ 405.069139][T11339] ? __lock_acquire+0x7c80/0x7c80 [ 405.074217][T11339] should_fail_ex+0x39d/0x4d0 [ 405.078928][T11339] should_failslab+0x9/0x20 [ 405.083569][T11339] slab_pre_alloc_hook+0x59/0x310 [ 405.088633][T11339] ? kernfs_fop_write_iter+0x159/0x520 [ 405.094139][T11339] ? kernfs_fop_write_iter+0x159/0x520 [ 405.099628][T11339] __kmem_cache_alloc_node+0x53/0x260 [ 405.105034][T11339] ? kernfs_fop_write_iter+0x159/0x520 [ 405.110515][T11339] __kmalloc+0xa4/0x240 [ 405.114704][T11339] kernfs_fop_write_iter+0x159/0x520 [ 405.120018][T11339] vfs_write+0x43b/0x940 [ 405.124283][T11339] ? file_end_write+0x250/0x250 [ 405.129168][T11339] ? __fget_files+0x44a/0x4d0 [ 405.133873][T11339] ? __fdget_pos+0x2a3/0x330 [ 405.138478][T11339] ? ksys_write+0x75/0x250 [ 405.142924][T11339] ksys_write+0x147/0x250 [ 405.147278][T11339] ? __ia32_sys_read+0x90/0x90 [ 405.152062][T11339] ? lockdep_hardirqs_on+0x98/0x150 [ 405.157289][T11339] do_syscall_64+0x55/0xb0 [ 405.161724][T11339] ? clear_bhb_loop+0x40/0x90 [ 405.166416][T11339] ? clear_bhb_loop+0x40/0x90 [ 405.171108][T11339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.177032][T11339] RIP: 0033:0x7f1a0c78efc9 [ 405.181477][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.201098][T11339] RSP: 002b:00007f1a0d566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.209533][T11339] RAX: ffffffffffffffda RBX: 00007f1a0c9e6090 RCX: 00007f1a0c78efc9 [ 405.217514][T11339] RDX: 0000000000000008 RSI: 0000200000000540 RDI: 0000000000000004 [ 405.225500][T11339] RBP: 00007f1a0d566090 R08: 0000000000000000 R09: 0000000000000000 [ 405.233489][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.241477][T11339] R13: 00007f1a0c9e6128 R14: 00007f1a0c9e6090 R15: 00007ffe8f0aac28 [ 405.249479][T11339] [ 405.530254][T11346] netlink: 'syz.0.2135': attribute type 1 has an invalid length. [ 405.542593][T11346] __nla_validate_parse: 5 callbacks suppressed [ 405.542610][T11346] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2135'. [ 406.772336][T11367] netlink: 'syz.1.2142': attribute type 3 has an invalid length. [ 406.817674][T11367] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2142'. [ 407.256180][T11376] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2145'. [ 407.270669][T11376] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2145'. [ 407.538977][T11378] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2147'. [ 407.557099][T11378] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2147'. [ 408.031824][T11400] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2157'. [ 408.068474][T11400] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2157'. [ 408.096849][T11403] FAULT_INJECTION: forcing a failure. [ 408.096849][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.123960][T11399] netlink: 'syz.2.2156': attribute type 10 has an invalid length. [ 408.135129][T11403] CPU: 0 PID: 11403 Comm: syz.3.2158 Not tainted syzkaller #0 [ 408.135159][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.135172][T11403] Call Trace: [ 408.135180][T11403] [ 408.135189][T11403] dump_stack_lvl+0x16c/0x230 [ 408.135227][T11403] ? show_regs_print_info+0x20/0x20 [ 408.135255][T11403] ? load_image+0x3b0/0x3b0 [ 408.135281][T11403] ? __lock_acquire+0x7c80/0x7c80 [ 408.135313][T11403] should_fail_ex+0x39d/0x4d0 [ 408.135348][T11403] _copy_from_user+0x2f/0xe0 [ 408.135375][T11403] __copy_msghdr+0x3bb/0x580 [ 408.135412][T11403] ___sys_sendmsg+0x1a6/0x290 [ 408.135446][T11403] ? __sys_sendmsg+0x270/0x270 [ 408.135500][T11403] ? __lock_acquire+0x7c80/0x7c80 [ 408.135550][T11403] __se_sys_sendmsg+0x1a5/0x270 [ 408.135586][T11403] ? __x64_sys_sendmsg+0x80/0x80 [ 408.135644][T11403] ? lockdep_hardirqs_on+0x98/0x150 [ 408.135680][T11403] do_syscall_64+0x55/0xb0 [ 408.135706][T11403] ? clear_bhb_loop+0x40/0x90 [ 408.135727][T11403] ? clear_bhb_loop+0x40/0x90 [ 408.135752][T11403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.135774][T11403] RIP: 0033:0x7fd173d8efc9 [ 408.135794][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.135812][T11403] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.135837][T11403] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 408.135853][T11403] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 408.135870][T11403] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 408.135883][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.135896][T11403] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 408.135929][T11403] [ 408.381189][T11399] veth1_vlan: entered allmulticast mode [ 408.418479][T11399] team0: Device veth1_vlan is already a lower device of the team interface [ 409.061034][T11432] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2168'. [ 409.095431][T11432] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2168'. [ 410.668930][T11476] netlink: 'syz.1.2186': attribute type 10 has an invalid length. [ 410.815338][T11479] __nla_validate_parse: 8 callbacks suppressed [ 410.815378][T11479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2189'. [ 410.951978][T11479] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2189'. [ 412.460501][T11500] pimreg: tun_chr_ioctl cmd 1074025672 [ 412.466055][T11500] pimreg: ignored: set checksum enabled [ 412.488310][T11500] pimreg: tun_chr_ioctl cmd 2147767511 [ 412.748585][T11507] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2199'. [ 412.772751][T11507] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2199'. [ 412.801473][T11508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2200'. [ 412.848451][T11508] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2200'. [ 413.178393][T11518] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2205'. [ 413.435294][T11531] FAULT_INJECTION: forcing a failure. [ 413.435294][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.463002][T11531] CPU: 1 PID: 11531 Comm: syz.3.2209 Not tainted syzkaller #0 [ 413.470563][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.480839][T11531] Call Trace: [ 413.484334][T11531] [ 413.487390][T11531] dump_stack_lvl+0x16c/0x230 [ 413.492132][T11531] ? show_regs_print_info+0x20/0x20 [ 413.497386][T11531] ? load_image+0x3b0/0x3b0 [ 413.501949][T11531] ? __lock_acquire+0x7c80/0x7c80 [ 413.507030][T11531] ? snprintf+0xdb/0x120 [ 413.511380][T11531] should_fail_ex+0x39d/0x4d0 [ 413.516121][T11531] _copy_to_user+0x2f/0xa0 [ 413.520590][T11531] simple_read_from_buffer+0xe7/0x150 [ 413.526025][T11531] proc_fail_nth_read+0x1e3/0x250 [ 413.531112][T11531] ? proc_fault_inject_write+0x340/0x340 [ 413.536812][T11531] ? fsnotify_perm+0x271/0x5e0 [ 413.541699][T11531] ? proc_fault_inject_write+0x340/0x340 [ 413.547382][T11531] vfs_read+0x27e/0x920 [ 413.551595][T11531] ? kernel_read+0x1e0/0x1e0 [ 413.556243][T11531] ? __fget_files+0x28/0x4d0 [ 413.560887][T11531] ? __fget_files+0x44a/0x4d0 [ 413.565623][T11531] ? __fdget_pos+0x2a3/0x330 [ 413.570266][T11531] ? ksys_read+0x75/0x250 [ 413.574659][T11531] ksys_read+0x147/0x250 [ 413.578958][T11531] ? vfs_write+0x940/0x940 [ 413.583430][T11531] ? lockdep_hardirqs_on+0x98/0x150 [ 413.588693][T11531] do_syscall_64+0x55/0xb0 [ 413.593174][T11531] ? clear_bhb_loop+0x40/0x90 [ 413.598003][T11531] ? clear_bhb_loop+0x40/0x90 [ 413.602735][T11531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.608670][T11531] RIP: 0033:0x7fd173d8d9dc [ 413.613135][T11531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.632821][T11531] RSP: 002b:00007fd174c1d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.641306][T11531] RAX: ffffffffffffffda RBX: 00007fd173fe6090 RCX: 00007fd173d8d9dc [ 413.649326][T11531] RDX: 000000000000000f RSI: 00007fd174c1d0a0 RDI: 0000000000000006 [ 413.657347][T11531] RBP: 00007fd174c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 413.665360][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.673357][T11531] R13: 00007fd173fe6128 R14: 00007fd173fe6090 R15: 00007ffcb4cbc988 [ 413.681365][T11531] [ 416.531330][T11538] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2212'. [ 416.540772][T11538] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2212'. [ 416.550229][T11540] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2213'. [ 416.560333][T11540] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2213'. [ 416.847367][T11560] FAULT_INJECTION: forcing a failure. [ 416.847367][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 416.871441][T11560] CPU: 0 PID: 11560 Comm: syz.0.2222 Not tainted syzkaller #0 [ 416.878999][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.889100][T11560] Call Trace: [ 416.892422][T11560] [ 416.895391][T11560] dump_stack_lvl+0x16c/0x230 [ 416.900130][T11560] ? show_regs_print_info+0x20/0x20 [ 416.905377][T11560] ? load_image+0x3b0/0x3b0 [ 416.909931][T11560] ? __might_sleep+0xe0/0xe0 [ 416.914576][T11560] ? __lock_acquire+0x7c80/0x7c80 [ 416.919656][T11560] should_fail_ex+0x39d/0x4d0 [ 416.924388][T11560] should_failslab+0x9/0x20 [ 416.928940][T11560] slab_pre_alloc_hook+0x59/0x310 [ 416.934036][T11560] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 416.939725][T11560] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 416.945325][T11560] __kmem_cache_alloc_node+0x53/0x260 [ 416.950749][T11560] ? __lock_acquire+0x7c80/0x7c80 [ 416.955830][T11560] ? bpf_prog_test_run_skb+0x22c/0x11c0 [ 416.961436][T11560] __kmalloc+0xa4/0x240 [ 416.965659][T11560] bpf_prog_test_run_skb+0x22c/0x11c0 [ 416.971079][T11560] ? __fget_files+0x28/0x4d0 [ 416.975717][T11560] ? __fget_files+0x44a/0x4d0 [ 416.980465][T11560] ? cpu_online+0x60/0x60 [ 416.984846][T11560] bpf_prog_test_run+0x321/0x390 [ 416.989840][T11560] __sys_bpf+0x440/0x800 [ 416.994124][T11560] ? bpf_link_show_fdinfo+0x350/0x350 [ 416.999551][T11560] ? lock_chain_count+0x20/0x20 [ 417.004453][T11560] __x64_sys_bpf+0x7c/0x90 [ 417.008920][T11560] do_syscall_64+0x55/0xb0 [ 417.013394][T11560] ? clear_bhb_loop+0x40/0x90 [ 417.018115][T11560] ? clear_bhb_loop+0x40/0x90 [ 417.022834][T11560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.028779][T11560] RIP: 0033:0x7f1a0c78efc9 [ 417.033299][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.052954][T11560] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.061430][T11560] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 417.069467][T11560] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 417.077476][T11560] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 417.085463][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.093446][T11560] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 417.101443][T11560] [ 417.383893][T11574] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2228'. [ 417.403067][T11574] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2228'. [ 417.481611][T11577] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2229'. [ 417.506432][T11577] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2229'. [ 417.663977][T11583] FAULT_INJECTION: forcing a failure. [ 417.663977][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.713293][T11583] CPU: 1 PID: 11583 Comm: syz.1.2232 Not tainted syzkaller #0 [ 417.720853][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.730974][T11583] Call Trace: [ 417.734298][T11583] [ 417.737284][T11583] dump_stack_lvl+0x16c/0x230 [ 417.742044][T11583] ? show_regs_print_info+0x20/0x20 [ 417.747313][T11583] ? load_image+0x3b0/0x3b0 [ 417.751880][T11583] ? __might_fault+0xaa/0x120 [ 417.756608][T11583] ? __lock_acquire+0x7c80/0x7c80 [ 417.761701][T11583] should_fail_ex+0x39d/0x4d0 [ 417.766450][T11583] _copy_from_user+0x2f/0xe0 [ 417.771105][T11583] ___sys_sendmsg+0x159/0x290 [ 417.775881][T11583] ? __sys_sendmsg+0x270/0x270 [ 417.780782][T11583] ? __lock_acquire+0x7c80/0x7c80 [ 417.785928][T11583] __se_sys_sendmsg+0x1a5/0x270 [ 417.790948][T11583] ? __x64_sys_sendmsg+0x80/0x80 [ 417.795989][T11583] ? lockdep_hardirqs_on+0x98/0x150 [ 417.801278][T11583] do_syscall_64+0x55/0xb0 [ 417.805768][T11583] ? clear_bhb_loop+0x40/0x90 [ 417.810506][T11583] ? clear_bhb_loop+0x40/0x90 [ 417.815236][T11583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.821171][T11583] RIP: 0033:0x7f6f9cb8efc9 [ 417.825632][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.845275][T11583] RSP: 002b:00007f6f9d9ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.853719][T11583] RAX: ffffffffffffffda RBX: 00007f6f9cde5fa0 RCX: 00007f6f9cb8efc9 [ 417.861740][T11583] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000006 [ 417.869735][T11583] RBP: 00007f6f9d9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 417.877732][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.885729][T11583] R13: 00007f6f9cde6038 R14: 00007f6f9cde5fa0 R15: 00007ffec1cffe48 [ 417.893776][T11583] [ 418.026109][T11585] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2233'. [ 418.167950][T11590] FAULT_INJECTION: forcing a failure. [ 418.167950][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.217242][T11590] CPU: 0 PID: 11590 Comm: syz.1.2235 Not tainted syzkaller #0 [ 418.224797][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.234902][T11590] Call Trace: [ 418.238222][T11590] [ 418.241196][T11590] dump_stack_lvl+0x16c/0x230 [ 418.245928][T11590] ? show_regs_print_info+0x20/0x20 [ 418.251171][T11590] ? load_image+0x3b0/0x3b0 [ 418.255724][T11590] ? __lock_acquire+0x7c80/0x7c80 [ 418.260892][T11590] should_fail_ex+0x39d/0x4d0 [ 418.265633][T11590] _copy_from_user+0x2f/0xe0 [ 418.270279][T11590] __copy_msghdr+0x3bb/0x580 [ 418.274931][T11590] ___sys_sendmsg+0x1a6/0x290 [ 418.279676][T11590] ? __sys_sendmsg+0x270/0x270 [ 418.284515][T11590] ? __lock_acquire+0x7c80/0x7c80 [ 418.289622][T11590] __se_sys_sendmsg+0x1a5/0x270 [ 418.294593][T11590] ? __x64_sys_sendmsg+0x80/0x80 [ 418.299611][T11590] ? lockdep_hardirqs_on+0x98/0x150 [ 418.304877][T11590] do_syscall_64+0x55/0xb0 [ 418.309344][T11590] ? clear_bhb_loop+0x40/0x90 [ 418.314063][T11590] ? clear_bhb_loop+0x40/0x90 [ 418.318788][T11590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.324731][T11590] RIP: 0033:0x7f6f9cb8efc9 [ 418.329192][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.348860][T11590] RSP: 002b:00007f6f9d9ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.357300][T11590] RAX: ffffffffffffffda RBX: 00007f6f9cde5fa0 RCX: 00007f6f9cb8efc9 [ 418.365286][T11590] RDX: 0000000000004044 RSI: 0000200000000200 RDI: 0000000000000003 [ 418.373275][T11590] RBP: 00007f6f9d9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 418.381260][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.389245][T11590] R13: 00007f6f9cde6038 R14: 00007f6f9cde5fa0 R15: 00007ffec1cffe48 [ 418.397264][T11590] [ 419.254001][T11607] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2241'. [ 419.659948][T11623] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 419.756160][T11623] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 419.793409][T11626] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 421.217923][ T5808] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 421.705618][T11679] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 421.714068][T11681] FAULT_INJECTION: forcing a failure. [ 421.714068][T11681] name failslab, interval 1, probability 0, space 0, times 0 [ 421.754898][T11681] CPU: 1 PID: 11681 Comm: syz.0.2272 Not tainted syzkaller #0 [ 421.762453][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.772565][T11681] Call Trace: [ 421.775896][T11681] [ 421.778867][T11681] dump_stack_lvl+0x16c/0x230 [ 421.783702][T11681] ? show_regs_print_info+0x20/0x20 [ 421.788966][T11681] ? load_image+0x3b0/0x3b0 [ 421.793544][T11681] ? __might_sleep+0xe0/0xe0 [ 421.798218][T11681] ? __lock_acquire+0x7c80/0x7c80 [ 421.803311][T11681] should_fail_ex+0x39d/0x4d0 [ 421.808058][T11681] should_failslab+0x9/0x20 [ 421.812624][T11681] slab_pre_alloc_hook+0x59/0x310 [ 421.817711][T11681] ? tomoyo_encode+0x28b/0x540 [ 421.822537][T11681] ? tomoyo_encode+0x28b/0x540 [ 421.827362][T11681] __kmem_cache_alloc_node+0x53/0x260 [ 421.832911][T11681] ? tomoyo_encode+0x28b/0x540 [ 421.837737][T11681] __kmalloc+0xa4/0x240 [ 421.841951][T11681] tomoyo_encode+0x28b/0x540 [ 421.846611][T11681] tomoyo_realpath_from_path+0x592/0x5d0 [ 421.852293][T11681] tomoyo_path_number_perm+0x1ea/0x590 [ 421.857774][T11681] ? tomoyo_path_number_perm+0x1ba/0x590 [ 421.863433][T11681] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 421.868928][T11681] ? ksys_write+0x1c1/0x250 [ 421.873502][T11681] ? __fget_files+0x28/0x4d0 [ 421.878140][T11681] security_file_ioctl+0x70/0xa0 [ 421.883117][T11681] __se_sys_ioctl+0x48/0x170 [ 421.887828][T11681] do_syscall_64+0x55/0xb0 [ 421.892268][T11681] ? clear_bhb_loop+0x40/0x90 [ 421.896968][T11681] ? clear_bhb_loop+0x40/0x90 [ 421.901694][T11681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.907631][T11681] RIP: 0033:0x7f1a0c78efc9 [ 421.912065][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.931698][T11681] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.940133][T11681] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 421.948124][T11681] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 421.956211][T11681] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 421.964203][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.972251][T11681] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 421.980278][T11681] [ 422.002458][T11681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.477830][T11691] __nla_validate_parse: 13 callbacks suppressed [ 422.477870][T11691] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2276'. [ 422.499097][T11691] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2276'. [ 422.631776][T11696] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2279'. [ 423.245386][T11716] FAULT_INJECTION: forcing a failure. [ 423.245386][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 423.307482][T11716] CPU: 1 PID: 11716 Comm: syz.3.2286 Not tainted syzkaller #0 [ 423.315038][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.325247][T11716] Call Trace: [ 423.328669][T11716] [ 423.331650][T11716] dump_stack_lvl+0x16c/0x230 [ 423.336395][T11716] ? show_regs_print_info+0x20/0x20 [ 423.341662][T11716] ? load_image+0x3b0/0x3b0 [ 423.346217][T11716] ? __might_sleep+0xe0/0xe0 [ 423.350862][T11716] ? __lock_acquire+0x7c80/0x7c80 [ 423.356120][T11716] should_fail_ex+0x39d/0x4d0 [ 423.360859][T11716] should_failslab+0x9/0x20 [ 423.365396][T11716] slab_pre_alloc_hook+0x59/0x310 [ 423.370456][T11716] ? alloc_fd+0x58f/0x630 [ 423.374822][T11716] kmem_cache_alloc_node+0x60/0x330 [ 423.380059][T11716] ? perf_event_alloc+0x15a/0x21b0 [ 423.385198][T11716] perf_event_alloc+0x15a/0x21b0 [ 423.390168][T11716] ? _raw_spin_unlock+0x28/0x40 [ 423.395041][T11716] ? alloc_fd+0x58f/0x630 [ 423.399408][T11716] __se_sys_perf_event_open+0x5ed/0x1c20 [ 423.405079][T11716] ? mutex_unlock+0x10/0x10 [ 423.409620][T11716] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 423.415289][T11716] ? lock_chain_count+0x20/0x20 [ 423.420170][T11716] ? lockdep_hardirqs_on+0x98/0x150 [ 423.425397][T11716] ? __x64_sys_perf_event_open+0x20/0xc0 [ 423.431055][T11716] do_syscall_64+0x55/0xb0 [ 423.435512][T11716] ? clear_bhb_loop+0x40/0x90 [ 423.440209][T11716] ? clear_bhb_loop+0x40/0x90 [ 423.444951][T11716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.450864][T11716] RIP: 0033:0x7fd173d8efc9 [ 423.455304][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.475018][T11716] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 423.483453][T11716] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 423.491461][T11716] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000200 [ 423.499494][T11716] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 423.507479][T11716] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 423.515500][T11716] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 423.523519][T11716] [ 423.793707][T11718] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 424.105755][T11718] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 424.125233][T11718] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 424.140276][T11726] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2288'. [ 424.152659][T11726] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2288'. [ 424.415048][T11731] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2290'. [ 425.257444][ T5808] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 425.266786][ T5808] Bluetooth: hci0: Injecting HCI hardware error event [ 425.275090][ T5808] Bluetooth: hci0: hardware error 0x00 [ 425.752720][T11760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2301'. [ 425.762596][T11760] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2301'. [ 425.898542][T11765] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2303'. [ 426.037452][T11769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2305'. [ 426.384217][T11778] FAULT_INJECTION: forcing a failure. [ 426.384217][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 426.410300][T11778] CPU: 1 PID: 11778 Comm: syz.2.2308 Not tainted syzkaller #0 [ 426.417852][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.427955][T11778] Call Trace: [ 426.431271][T11778] [ 426.434229][T11778] dump_stack_lvl+0x16c/0x230 [ 426.438956][T11778] ? show_regs_print_info+0x20/0x20 [ 426.444206][T11778] ? load_image+0x3b0/0x3b0 [ 426.448750][T11778] ? __might_sleep+0xe0/0xe0 [ 426.453385][T11778] ? __lock_acquire+0x7c80/0x7c80 [ 426.458452][T11778] should_fail_ex+0x39d/0x4d0 [ 426.463179][T11778] should_failslab+0x9/0x20 [ 426.468150][T11778] slab_pre_alloc_hook+0x59/0x310 [ 426.473215][T11778] ? __lock_acquire+0x7c80/0x7c80 [ 426.478289][T11778] kmem_cache_alloc_node+0x60/0x330 [ 426.483551][T11778] ? __alloc_skb+0x108/0x2c0 [ 426.488189][T11778] __alloc_skb+0x108/0x2c0 [ 426.492645][T11778] netlink_sendmsg+0x65b/0xbe0 [ 426.497455][T11778] ? netlink_getsockopt+0x580/0x580 [ 426.502698][T11778] ? aa_sock_msg_perm+0x94/0x150 [ 426.507664][T11778] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 426.513009][T11778] ? security_socket_sendmsg+0x80/0xa0 [ 426.518506][T11778] ? netlink_getsockopt+0x580/0x580 [ 426.523758][T11778] ____sys_sendmsg+0x5bf/0x950 [ 426.528670][T11778] ? __asan_memset+0x22/0x40 [ 426.533394][T11778] ? __sys_sendmsg_sock+0x30/0x30 [ 426.538462][T11778] ? __import_iovec+0x5f2/0x860 [ 426.543366][T11778] ? import_iovec+0x73/0xa0 [ 426.547952][T11778] ___sys_sendmsg+0x220/0x290 [ 426.552757][T11778] ? __sys_sendmsg+0x270/0x270 [ 426.557588][T11778] ? __lock_acquire+0x7c80/0x7c80 [ 426.562669][T11778] __se_sys_sendmsg+0x1a5/0x270 [ 426.567564][T11778] ? __x64_sys_sendmsg+0x80/0x80 [ 426.572557][T11778] ? lockdep_hardirqs_on+0x98/0x150 [ 426.577794][T11778] do_syscall_64+0x55/0xb0 [ 426.582378][T11778] ? clear_bhb_loop+0x40/0x90 [ 426.587105][T11778] ? clear_bhb_loop+0x40/0x90 [ 426.591843][T11778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.597771][T11778] RIP: 0033:0x7f769a38efc9 [ 426.602214][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.621854][T11778] RSP: 002b:00007f769b1d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.630310][T11778] RAX: ffffffffffffffda RBX: 00007f769a5e5fa0 RCX: 00007f769a38efc9 [ 426.638309][T11778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 426.646308][T11778] RBP: 00007f769b1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 426.654299][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.662292][T11778] R13: 00007f769a5e6038 R14: 00007f769a5e5fa0 R15: 00007ffcf4970ac8 [ 426.670334][T11778] [ 426.822583][T11785] FAULT_INJECTION: forcing a failure. [ 426.822583][T11785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.843414][T11785] CPU: 1 PID: 11785 Comm: syz.1.2311 Not tainted syzkaller #0 [ 426.850957][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.861063][T11785] Call Trace: [ 426.864371][T11785] [ 426.867325][T11785] dump_stack_lvl+0x16c/0x230 [ 426.872066][T11785] ? show_regs_print_info+0x20/0x20 [ 426.877285][T11785] ? load_image+0x3b0/0x3b0 [ 426.881827][T11785] ? __lock_acquire+0x7c80/0x7c80 [ 426.886872][T11785] ? snprintf+0xdb/0x120 [ 426.891139][T11785] should_fail_ex+0x39d/0x4d0 [ 426.895856][T11785] _copy_to_user+0x2f/0xa0 [ 426.900330][T11785] simple_read_from_buffer+0xe7/0x150 [ 426.905752][T11785] proc_fail_nth_read+0x1e3/0x250 [ 426.910803][T11785] ? proc_fault_inject_write+0x340/0x340 [ 426.916464][T11785] ? fsnotify_perm+0x271/0x5e0 [ 426.921339][T11785] ? proc_fault_inject_write+0x340/0x340 [ 426.926992][T11785] vfs_read+0x27e/0x920 [ 426.931171][T11785] ? kernel_read+0x1e0/0x1e0 [ 426.935780][T11785] ? __fget_files+0x28/0x4d0 [ 426.940389][T11785] ? __fget_files+0x44a/0x4d0 [ 426.945179][T11785] ? __fdget_pos+0x2a3/0x330 [ 426.949996][T11785] ? ksys_read+0x75/0x250 [ 426.954350][T11785] ksys_read+0x147/0x250 [ 426.958617][T11785] ? vfs_write+0x940/0x940 [ 426.963055][T11785] ? lockdep_hardirqs_on+0x98/0x150 [ 426.968279][T11785] do_syscall_64+0x55/0xb0 [ 426.972716][T11785] ? clear_bhb_loop+0x40/0x90 [ 426.977431][T11785] ? clear_bhb_loop+0x40/0x90 [ 426.982128][T11785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.988039][T11785] RIP: 0033:0x7f6f9cb8d9dc [ 426.992469][T11785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.012099][T11785] RSP: 002b:00007f6f9d98a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.020535][T11785] RAX: ffffffffffffffda RBX: 00007f6f9cde6090 RCX: 00007f6f9cb8d9dc [ 427.028527][T11785] RDX: 000000000000000f RSI: 00007f6f9d98a0a0 RDI: 000000000000000c [ 427.036508][T11785] RBP: 00007f6f9d98a090 R08: 0000000000000000 R09: 0000000000000000 [ 427.044588][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.052572][T11785] R13: 00007f6f9cde6128 R14: 00007f6f9cde6090 R15: 00007ffec1cffe48 [ 427.060750][T11785] [ 427.343043][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.902956][T11804] __nla_validate_parse: 5 callbacks suppressed [ 427.903005][T11804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2317'. [ 427.944471][T11804] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2317'. [ 428.250516][T11811] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2323'. [ 428.267323][T11811] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2323'. [ 428.623116][T11824] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2326'. [ 428.946492][T11827] netlink: 'syz.2.2327': attribute type 10 has an invalid length. [ 429.641552][T11840] FAULT_INJECTION: forcing a failure. [ 429.641552][T11840] name failslab, interval 1, probability 0, space 0, times 0 [ 429.654546][T11840] CPU: 1 PID: 11840 Comm: syz.3.2333 Not tainted syzkaller #0 [ 429.662064][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.672164][T11840] Call Trace: [ 429.675485][T11840] [ 429.678460][T11840] dump_stack_lvl+0x16c/0x230 [ 429.683198][T11840] ? show_regs_print_info+0x20/0x20 [ 429.688453][T11840] ? load_image+0x3b0/0x3b0 [ 429.693010][T11840] ? __lock_acquire+0x7c80/0x7c80 [ 429.698100][T11840] should_fail_ex+0x39d/0x4d0 [ 429.702837][T11840] should_failslab+0x9/0x20 [ 429.707394][T11840] slab_pre_alloc_hook+0x59/0x310 [ 429.712477][T11840] ? bpf_test_init+0xc0/0x150 [ 429.717206][T11840] ? bpf_test_init+0xc0/0x150 [ 429.721965][T11840] __kmem_cache_alloc_node+0x53/0x260 [ 429.727379][T11840] ? bpf_test_init+0xc0/0x150 [ 429.732082][T11840] __kmalloc+0xa4/0x240 [ 429.736285][T11840] bpf_test_init+0xc0/0x150 [ 429.740819][T11840] bpf_prog_test_run_xdp+0x382/0xfa0 [ 429.746132][T11840] ? dev_put+0x80/0x80 [ 429.750224][T11840] ? dev_put+0x80/0x80 [ 429.754304][T11840] bpf_prog_test_run+0x321/0x390 [ 429.759275][T11840] __sys_bpf+0x440/0x800 [ 429.763541][T11840] ? bpf_link_show_fdinfo+0x350/0x350 [ 429.768945][T11840] ? lock_chain_count+0x20/0x20 [ 429.773827][T11840] __x64_sys_bpf+0x7c/0x90 [ 429.778262][T11840] do_syscall_64+0x55/0xb0 [ 429.782709][T11840] ? clear_bhb_loop+0x40/0x90 [ 429.787402][T11840] ? clear_bhb_loop+0x40/0x90 [ 429.792095][T11840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.798030][T11840] RIP: 0033:0x7fd173d8efc9 [ 429.802457][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.822082][T11840] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.830512][T11840] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 429.838520][T11840] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 429.846510][T11840] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 429.854491][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.862490][T11840] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 429.870494][T11840] [ 429.920044][T11842] netlink: 'syz.2.2334': attribute type 39 has an invalid length. [ 429.946523][T11842] netlink: 'syz.2.2334': attribute type 2 has an invalid length. [ 429.977016][T11842] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 430.003837][T11842] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2334'. [ 430.347737][T11856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2339'. [ 430.358941][T11856] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2339'. [ 430.381675][T11851] netlink: 'syz.3.2338': attribute type 21 has an invalid length. [ 430.832240][T11872] FAULT_INJECTION: forcing a failure. [ 430.832240][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 430.847704][T11866] ipvlan0: entered promiscuous mode [ 430.857022][T11866] ipvlan0: entered allmulticast mode [ 430.865907][T11866] : entered allmulticast mode [ 430.912447][T11872] CPU: 0 PID: 11872 Comm: syz.3.2343 Not tainted syzkaller #0 [ 430.920078][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.930176][T11872] Call Trace: [ 430.933494][T11872] [ 430.936465][T11872] dump_stack_lvl+0x16c/0x230 [ 430.941198][T11872] ? show_regs_print_info+0x20/0x20 [ 430.946570][T11872] ? load_image+0x3b0/0x3b0 [ 430.951126][T11872] ? __might_sleep+0xe0/0xe0 [ 430.955767][T11872] ? __lock_acquire+0x7c80/0x7c80 [ 430.960851][T11872] should_fail_ex+0x39d/0x4d0 [ 430.965597][T11872] should_failslab+0x9/0x20 [ 430.970160][T11872] slab_pre_alloc_hook+0x59/0x310 [ 430.975239][T11872] ? tomoyo_encode+0x28b/0x540 [ 430.980060][T11872] ? tomoyo_encode+0x28b/0x540 [ 430.984889][T11872] __kmem_cache_alloc_node+0x53/0x260 [ 430.990321][T11872] ? tomoyo_encode+0x28b/0x540 [ 430.995315][T11872] __kmalloc+0xa4/0x240 [ 430.999550][T11872] tomoyo_encode+0x28b/0x540 [ 431.004216][T11872] tomoyo_realpath_from_path+0x592/0x5d0 [ 431.009929][T11872] tomoyo_path_number_perm+0x1ea/0x590 [ 431.015445][T11872] ? tomoyo_path_number_perm+0x1ba/0x590 [ 431.021130][T11872] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 431.026651][T11872] ? ksys_write+0x1c1/0x250 [ 431.031245][T11872] ? __fget_files+0x28/0x4d0 [ 431.035898][T11872] security_file_ioctl+0x70/0xa0 [ 431.040889][T11872] __se_sys_ioctl+0x48/0x170 [ 431.045527][T11872] do_syscall_64+0x55/0xb0 [ 431.049989][T11872] ? clear_bhb_loop+0x40/0x90 [ 431.054708][T11872] ? clear_bhb_loop+0x40/0x90 [ 431.059435][T11872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.065371][T11872] RIP: 0033:0x7fd173d8efc9 [ 431.069826][T11872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.089483][T11872] RSP: 002b:00007fd174bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.097951][T11872] RAX: ffffffffffffffda RBX: 00007fd173fe6180 RCX: 00007fd173d8efc9 [ 431.105972][T11872] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000003 [ 431.113987][T11872] RBP: 00007fd174bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 431.122008][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.130026][T11872] R13: 00007fd173fe6218 R14: 00007fd173fe6180 R15: 00007ffcb4cbc988 [ 431.138064][T11872] [ 431.156478][T11872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.324027][T11877] team0: Port device team_slave_0 removed [ 432.355147][T11877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 433.212007][T11754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.224070][T11754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.239832][T11754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.253237][T11754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.263776][T11754] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 433.282813][T11754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 433.652022][T11899] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2350'. [ 433.693749][T11899] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2350'. [ 434.104579][T11909] netlink: 'syz.2.2353': attribute type 29 has an invalid length. [ 434.140245][T11896] chnl_net:caif_netlink_parms(): no params data found [ 434.165529][T11909] netlink: 'syz.2.2353': attribute type 29 has an invalid length. [ 434.479184][ T3474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.526627][T11925] FAULT_INJECTION: forcing a failure. [ 434.526627][T11925] name failslab, interval 1, probability 0, space 0, times 0 [ 434.548131][T11925] CPU: 0 PID: 11925 Comm: syz.0.2358 Not tainted syzkaller #0 [ 434.555675][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.565773][T11925] Call Trace: [ 434.569097][T11925] [ 434.572060][T11925] dump_stack_lvl+0x16c/0x230 [ 434.576784][T11925] ? show_regs_print_info+0x20/0x20 [ 434.582045][T11925] ? load_image+0x3b0/0x3b0 [ 434.586613][T11925] ? __might_sleep+0xe0/0xe0 [ 434.591278][T11925] ? __lock_acquire+0x7c80/0x7c80 [ 434.596333][T11925] ? mark_lock+0x94/0x320 [ 434.600717][T11925] should_fail_ex+0x39d/0x4d0 [ 434.605449][T11925] should_failslab+0x9/0x20 [ 434.609999][T11925] slab_pre_alloc_hook+0x59/0x310 [ 434.615071][T11925] ? __get_vm_area_node+0x125/0x370 [ 434.620303][T11925] __kmem_cache_alloc_node+0x53/0x260 [ 434.625739][T11925] ? __get_vm_area_node+0x125/0x370 [ 434.631017][T11925] kmalloc_node_trace+0x26/0xe0 [ 434.635916][T11925] __get_vm_area_node+0x125/0x370 [ 434.640984][T11925] __vmalloc_node_range+0x36e/0x1320 [ 434.646360][T11925] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 434.651931][T11925] ? mark_lock+0x94/0x320 [ 434.656377][T11925] ? __lock_acquire+0x1334/0x7c80 [ 434.661515][T11925] ? verify_lock_unused+0x140/0x140 [ 434.666746][T11925] ? free_vm_area+0x50/0x50 [ 434.671277][T11925] ? end_current_label_crit_section+0x170/0x170 [ 434.677558][T11925] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 434.683137][T11925] __vmalloc+0x7a/0x90 [ 434.687241][T11925] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 434.692809][T11925] bpf_prog_alloc_no_stats+0x47/0x440 [ 434.698291][T11925] ? bpf_prog_alloc+0x2b/0x1b0 [ 434.703083][T11925] bpf_prog_alloc+0x3d/0x1b0 [ 434.707702][T11925] bpf_prog_load+0x6b8/0x16d0 [ 434.712407][T11925] ? map_freeze+0x420/0x420 [ 434.716956][T11925] ? __might_fault+0xaa/0x120 [ 434.721676][T11925] ? __lock_acquire+0x7c80/0x7c80 [ 434.726737][T11925] ? file_end_write+0x159/0x250 [ 434.731711][T11925] ? __might_fault+0xaa/0x120 [ 434.736419][T11925] ? __might_fault+0xc6/0x120 [ 434.741115][T11925] ? __might_fault+0xaa/0x120 [ 434.745810][T11925] ? bpf_lsm_bpf+0x9/0x10 [ 434.750160][T11925] ? security_bpf+0x7e/0xa0 [ 434.754683][T11925] __sys_bpf+0x55a/0x800 [ 434.758951][T11925] ? bpf_link_show_fdinfo+0x350/0x350 [ 434.764350][T11925] ? lock_chain_count+0x20/0x20 [ 434.769234][T11925] __x64_sys_bpf+0x7c/0x90 [ 434.773673][T11925] do_syscall_64+0x55/0xb0 [ 434.778134][T11925] ? clear_bhb_loop+0x40/0x90 [ 434.782835][T11925] ? clear_bhb_loop+0x40/0x90 [ 434.787547][T11925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.795199][T11925] RIP: 0033:0x7f1a0c78efc9 [ 434.799641][T11925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.819277][T11925] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.827720][T11925] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 434.835709][T11925] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 434.843697][T11925] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 434.851688][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.859676][T11925] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 434.867695][T11925] [ 434.895669][T11923] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 434.899549][T11925] syz.0.2358: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 434.920593][T11923] team0: Device veth1_vlan is already a lower device of the team interface [ 434.926201][T11925] CPU: 1 PID: 11925 Comm: syz.0.2358 Not tainted syzkaller #0 [ 434.936797][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.946868][T11925] Call Trace: [ 434.950162][T11925] [ 434.953107][T11925] dump_stack_lvl+0x16c/0x230 [ 434.957819][T11925] ? show_regs_print_info+0x20/0x20 [ 434.963035][T11925] ? load_image+0x3b0/0x3b0 [ 434.967553][T11925] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.973985][T11925] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 434.980509][T11925] warn_alloc+0x210/0x300 [ 434.984871][T11925] ? __get_vm_area_node+0x125/0x370 [ 434.990096][T11925] ? zone_watermark_ok_safe+0x230/0x230 [ 434.995669][T11925] ? rcu_is_watching+0x15/0xb0 [ 435.000464][T11925] ? __get_vm_area_node+0x356/0x370 [ 435.005690][T11925] __vmalloc_node_range+0x393/0x1320 [ 435.011009][T11925] ? mark_lock+0x94/0x320 [ 435.015359][T11925] ? __lock_acquire+0x1334/0x7c80 [ 435.020402][T11925] ? verify_lock_unused+0x140/0x140 [ 435.025656][T11925] ? free_vm_area+0x50/0x50 [ 435.030187][T11925] ? end_current_label_crit_section+0x170/0x170 [ 435.036450][T11925] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 435.042013][T11925] __vmalloc+0x7a/0x90 [ 435.046107][T11925] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 435.051672][T11925] bpf_prog_alloc_no_stats+0x47/0x440 [ 435.057100][T11925] ? bpf_prog_alloc+0x2b/0x1b0 [ 435.061880][T11925] bpf_prog_alloc+0x3d/0x1b0 [ 435.066491][T11925] bpf_prog_load+0x6b8/0x16d0 [ 435.071207][T11925] ? map_freeze+0x420/0x420 [ 435.075739][T11925] ? __might_fault+0xaa/0x120 [ 435.080456][T11925] ? __lock_acquire+0x7c80/0x7c80 [ 435.085500][T11925] ? file_end_write+0x159/0x250 [ 435.090376][T11925] ? __might_fault+0xaa/0x120 [ 435.095069][T11925] ? __might_fault+0xc6/0x120 [ 435.099757][T11925] ? __might_fault+0xaa/0x120 [ 435.104445][T11925] ? bpf_lsm_bpf+0x9/0x10 [ 435.108794][T11925] ? security_bpf+0x7e/0xa0 [ 435.113321][T11925] __sys_bpf+0x55a/0x800 [ 435.117585][T11925] ? bpf_link_show_fdinfo+0x350/0x350 [ 435.122983][T11925] ? lock_chain_count+0x20/0x20 [ 435.127859][T11925] __x64_sys_bpf+0x7c/0x90 [ 435.132320][T11925] do_syscall_64+0x55/0xb0 [ 435.136759][T11925] ? clear_bhb_loop+0x40/0x90 [ 435.141546][T11925] ? clear_bhb_loop+0x40/0x90 [ 435.146238][T11925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.152149][T11925] RIP: 0033:0x7f1a0c78efc9 [ 435.156580][T11925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.176208][T11925] RSP: 002b:00007f1a0d587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.184641][T11925] RAX: ffffffffffffffda RBX: 00007f1a0c9e5fa0 RCX: 00007f1a0c78efc9 [ 435.192660][T11925] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 435.200647][T11925] RBP: 00007f1a0d587090 R08: 0000000000000000 R09: 0000000000000000 [ 435.208633][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.216618][T11925] R13: 00007f1a0c9e6038 R14: 00007f1a0c9e5fa0 R15: 00007ffe8f0aac28 [ 435.224621][T11925] [ 435.228828][T11925] Mem-Info: [ 435.232107][T11925] active_anon:5915 inactive_anon:0 isolated_anon:0 [ 435.232107][T11925] active_file:15864 inactive_file:40012 isolated_file:0 [ 435.232107][T11925] unevictable:768 dirty:348 writeback:0 [ 435.232107][T11925] slab_reclaimable:10250 slab_unreclaimable:92678 [ 435.232107][T11925] mapped:24671 shmem:1361 pagetables:500 [ 435.232107][T11925] sec_pagetables:0 bounce:0 [ 435.232107][T11925] kernel_misc_reclaimable:0 [ 435.232107][T11925] free:1351417 free_pcp:8169 free_cma:0 [ 435.311261][T11925] Node 0 active_anon:23784kB inactive_anon:0kB active_file:63456kB inactive_file:159848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98520kB dirty:1404kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10456kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 435.348511][T11754] Bluetooth: hci4: command tx timeout [ 435.400634][T11925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 435.437888][T11925] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.477175][T11925] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 435.483162][T11925] Node 0 DMA32 free:1498388kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23540kB inactive_anon:0kB active_file:63456kB inactive_file:158520kB unevictable:1536kB writepending:1404kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:13924kB local_pcp:1244kB free_cma:0kB [ 435.519994][ T3474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.525339][T11925] lowmem_reserve[]: 0 0 1 1 1 [ 435.542095][T11925] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 435.570216][T11925] lowmem_reserve[]: 0 0 0 0 0 [ 435.575162][T11925] Node 1 Normal free:3891920kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:8800kB free_cma:0kB [ 435.576617][T11930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2360'. [ 435.606773][T11925] lowmem_reserve[]: 0 0 0 0 0 [ 435.606839][T11925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.607066][T11925] Node 0 DMA32: 1982*4kB (UME) 986*8kB (UME) 945*16kB (UME) 910*32kB (UME) 326*64kB (UME) 180*128kB (UME) 88*256kB (UME) 27*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 325*4096kB (M) = 1498136kB [ 435.607299][T11925] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 435.607514][T11925] Node 1 Normal: 270*4kB (UME) 71*8kB (UME) 58*16kB (UME) 146*32kB (UME) 32*64kB (UME) 7*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3891920kB [ 435.607738][T11925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.607759][T11925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.607780][T11925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.607800][T11925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.607820][T11925] 57237 total pagecache pages [ 435.607831][T11925] 0 pages in swap cache [ 435.607840][T11925] Free swap = 124996kB [ 435.607849][T11925] Total swap = 124996kB [ 435.607860][T11925] 2097051 pages RAM [ 435.607869][T11925] 0 pages HighMem/MovableOnly [ 435.607878][T11925] 416136 pages reserved [ 435.607887][T11925] 0 pages cma reserved [ 435.766837][T11930] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2360'. [ 435.780318][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.789664][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.830652][T11896] bridge_slave_0: entered allmulticast mode [ 435.889052][T11896] bridge_slave_0: entered promiscuous mode [ 435.955378][ T3474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.041841][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.075793][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.103703][T11896] bridge_slave_1: entered allmulticast mode [ 436.112829][T11896] bridge_slave_1: entered promiscuous mode [ 436.143657][ T3474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.329294][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.349432][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.464300][T11896] team0: Port device team_slave_0 added [ 436.501298][T11896] team0: Port device team_slave_1 added [ 436.632015][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.639385][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.668322][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.716343][T11951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2368'. [ 436.743225][T11951] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2368'. [ 436.794745][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.807113][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.834143][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.979934][T11950] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2369'. [ 437.013828][T11954] netlink: 'syz.3.2370': attribute type 21 has an invalid length. [ 437.030992][T11954] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2370'. [ 437.041456][T11954] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2370'. [ 437.060144][T11896] hsr_slave_0: entered promiscuous mode [ 437.067432][T11896] hsr_slave_1: entered promiscuous mode [ 437.073782][T11896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.082662][T11896] Cannot create hsr debugfs directory [ 437.103276][T11956] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2371'. [ 437.417347][T11754] Bluetooth: hci4: command tx timeout [ 439.497191][T11754] Bluetooth: hci4: command tx timeout [ 439.898987][T11896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.923970][ T3474] bond0: (slave wlan1): Releasing backup interface [ 439.943685][T12026] netlink: 'syz.2.2389': attribute type 21 has an invalid length. [ 439.956013][T12026] __nla_validate_parse: 3 callbacks suppressed [ 439.956031][T12026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2389'. [ 439.974048][T12028] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2391'. [ 439.984140][T12028] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2391'. [ 440.004591][T11896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.044440][T11896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.203851][T11896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.327149][ T3474] hsr_slave_0: left promiscuous mode [ 440.366803][ T3474] hsr_slave_1: left promiscuous mode [ 440.382219][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388660][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.422473][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.443305][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.474874][ T3474] dummy0: left allmulticast mode [ 440.484995][ T3474] bridge0: port 3(dummy0) entered disabled state [ 440.530117][ T3474] bridge_slave_1: left allmulticast mode [ 440.550053][ T3474] bridge_slave_1: left promiscuous mode [ 440.573315][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.584932][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.625614][ T3474] veth1_macvtap: left allmulticast mode [ 440.632876][ T3474] veth1_macvtap: left promiscuous mode [ 440.644235][ T3474] veth0_macvtap: left promiscuous mode [ 440.652217][ T3474] veth1_vlan: left promiscuous mode [ 440.658593][ T3474] : left promiscuous mode [ 440.668614][ T3474] bridge0: left promiscuous mode [ 440.784982][ T3474] team0 (unregistering): Port device geneve1 removed [ 440.904868][ T3474] team0 (unregistering): Port device macvlan1 removed [ 441.168936][ T3474] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 441.219943][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 441.269915][ T3474] team0 (unregistering): Port device C removed [ 441.314963][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.582938][T11754] Bluetooth: hci4: command tx timeout [ 441.753274][ T3474] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 441.762472][ T3474] bond0 (unregistering): Released all slaves [ 441.844263][T12051] netlink: 'syz.0.2398': attribute type 19 has an invalid length. [ 441.877542][T12053] netlink: 'syz.0.2398': attribute type 19 has an invalid length. [ 442.275639][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.358246][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.510265][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.517598][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.535207][T12067] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2402'. [ 442.563280][T12067] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2402'. [ 442.679720][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.686992][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.734669][T11896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.745651][T11896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.953179][T12081] netlink: 'syz.0.2403': attribute type 10 has an invalid length. [ 443.222611][T12087] netlink: 'syz.2.2404': attribute type 19 has an invalid length. [ 443.365167][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.488207][T11896] veth0_vlan: entered promiscuous mode [ 443.511999][T11896] veth1_vlan: entered promiscuous mode [ 443.578155][T11896] veth0_macvtap: entered promiscuous mode [ 443.599793][T12091] netlink: 'syz.3.2405': attribute type 19 has an invalid length. [ 443.681220][T12094] netlink: 'syz.3.2405': attribute type 19 has an invalid length. [ 443.713376][T11896] veth1_macvtap: entered promiscuous mode [ 443.790960][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.825812][T11896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.838661][T11896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.849885][T11896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.873616][T11896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.884068][T11896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.907635][T11896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.932391][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.003949][T11896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.017684][T11896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.029936][T11896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.041295][T11896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.065950][T12103] netlink: 'syz.3.2411': attribute type 21 has an invalid length. [ 444.075671][T12103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2411'. [ 444.238453][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.246351][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.353992][T12109] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 444.370761][T12109] bond0: (slave wlan1): Releasing backup interface [ 444.396600][T12109] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 444.418679][T12109] team0: Port device wlan1 added [ 444.425549][T12105] netlink: 'syz.0.2419': attribute type 19 has an invalid length. [ 444.434822][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.445628][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.451587][T12110] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2413'. [ 444.539801][T12108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.976125][T12120] FAULT_INJECTION: forcing a failure. [ 444.976125][T12120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.025538][T12120] CPU: 1 PID: 12120 Comm: syz.2.2416 Not tainted syzkaller #0 [ 445.033094][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.043211][T12120] Call Trace: [ 445.046533][T12120] [ 445.049515][T12120] dump_stack_lvl+0x16c/0x230 [ 445.054272][T12120] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.060486][T12120] ? show_regs_print_info+0x20/0x20 [ 445.065755][T12120] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.072000][T12120] should_fail_ex+0x39d/0x4d0 [ 445.076756][T12120] _copy_from_user+0x2f/0xe0 [ 445.081416][T12120] __tun_chr_ioctl+0x203/0x1fd0 [ 445.086351][T12120] ? tun_flow_create+0x310/0x310 [ 445.091386][T12120] ? bpf_lsm_file_ioctl+0x9/0x10 [ 445.096843][T12120] ? security_file_ioctl+0x80/0xa0 [ 445.102033][T12120] ? tun_chr_poll+0x630/0x630 [ 445.106783][T12120] __se_sys_ioctl+0xfd/0x170 [ 445.111536][T12120] do_syscall_64+0x55/0xb0 [ 445.116046][T12120] ? clear_bhb_loop+0x40/0x90 [ 445.120787][T12120] ? clear_bhb_loop+0x40/0x90 [ 445.125539][T12120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.131498][T12120] RIP: 0033:0x7f769a38efc9 [ 445.136070][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.140495][T12127] FAULT_INJECTION: forcing a failure. [ 445.140495][T12127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.155879][T12120] RSP: 002b:00007f769b1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.155917][T12120] RAX: ffffffffffffffda RBX: 00007f769a5e5fa0 RCX: 00007f769a38efc9 [ 445.155935][T12120] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 445.155950][T12120] RBP: 00007f769b1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.155965][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.155980][T12120] R13: 00007f769a5e6038 R14: 00007f769a5e5fa0 R15: 00007ffcf4970ac8 [ 445.156026][T12120] [ 445.232105][T12127] CPU: 0 PID: 12127 Comm: syz.3.2418 Not tainted syzkaller #0 [ 445.239640][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.249757][T12127] Call Trace: [ 445.253075][T12127] [ 445.256047][T12127] dump_stack_lvl+0x16c/0x230 [ 445.260774][T12127] ? show_regs_print_info+0x20/0x20 [ 445.265997][T12127] ? load_image+0x3b0/0x3b0 [ 445.270523][T12127] ? __lock_acquire+0x7c80/0x7c80 [ 445.275598][T12127] ? verify_lock_unused+0x140/0x140 [ 445.280825][T12127] should_fail_ex+0x39d/0x4d0 [ 445.285528][T12127] prepare_alloc_pages+0x1e2/0x5f0 [ 445.290673][T12127] __alloc_pages+0x127/0x460 [ 445.295297][T12127] ? zone_statistics+0x170/0x170 [ 445.300275][T12127] ? mt_find+0x13e/0x5b0 [ 445.304539][T12127] ? handle_mm_fault+0xd1/0x4920 [ 445.309511][T12127] __folio_alloc+0x10/0x20 [ 445.313957][T12127] vma_alloc_folio+0x47a/0x8f0 [ 445.318771][T12127] handle_mm_fault+0x1a38/0x4920 [ 445.323734][T12127] ? handle_mm_fault+0xd1/0x4920 [ 445.328726][T12127] ? numa_migrate_prep+0x350/0x350 [ 445.333893][T12127] ? perf_trace_lock+0xf7/0x380 [ 445.338794][T12127] ? lock_mm_and_find_vma+0x9c/0x300 [ 445.344122][T12127] do_user_addr_fault+0x738/0x12e0 [ 445.349294][T12127] exc_page_fault+0x67/0x110 [ 445.353942][T12127] asm_exc_page_fault+0x26/0x30 [ 445.358809][T12127] RIP: 0010:__put_user_8+0x11/0x20 [ 445.363946][T12127] Code: ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 445.383582][T12127] RSP: 0018:ffffc900046ffa38 EFLAGS: 00050206 [ 445.389670][T12127] RAX: ffffffffa000095c RBX: 0000000000000000 RCX: 0000200000001000 [ 445.397737][T12127] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc64c0 [ 445.405749][T12127] RBP: ffffc900046ffd70 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 445.413743][T12127] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: 0000000000000008 [ 445.421733][T12127] R13: 0000000000000000 R14: 00000000ffffffff R15: 1ffff920008dff5c [ 445.429734][T12127] ? 0xffffffffa000095c [ 445.433920][T12127] bpf_obj_get_info_by_fd+0x24c3/0x2d90 [ 445.439515][T12127] ? bpf_map_get_fd_by_id+0x310/0x310 [ 445.444909][T12127] ? __might_fault+0xaa/0x120 [ 445.449601][T12127] ? perf_trace_lock+0xf7/0x380 [ 445.454510][T12127] ? trace_event_raw_event_lock+0x230/0x230 [ 445.460474][T12127] ? file_end_write+0x159/0x250 [ 445.465353][T12127] ? __might_fault+0xaa/0x120 [ 445.470071][T12127] ? __might_fault+0xc6/0x120 [ 445.474762][T12127] ? __might_fault+0xaa/0x120 [ 445.479456][T12127] ? bpf_lsm_bpf+0x9/0x10 [ 445.483812][T12127] ? security_bpf+0x7e/0xa0 [ 445.488356][T12127] __sys_bpf+0x781/0x800 [ 445.492624][T12127] ? bpf_link_show_fdinfo+0x350/0x350 [ 445.498030][T12127] ? lock_chain_count+0x20/0x20 [ 445.502911][T12127] __x64_sys_bpf+0x7c/0x90 [ 445.507350][T12127] do_syscall_64+0x55/0xb0 [ 445.511785][T12127] ? clear_bhb_loop+0x40/0x90 [ 445.516477][T12127] ? clear_bhb_loop+0x40/0x90 [ 445.521190][T12127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.527125][T12127] RIP: 0033:0x7fd173d8efc9 [ 445.531575][T12127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.551207][T12127] RSP: 002b:00007fd174c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.559729][T12127] RAX: ffffffffffffffda RBX: 00007fd173fe5fa0 RCX: 00007fd173d8efc9 [ 445.567717][T12127] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 445.575702][T12127] RBP: 00007fd174c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 445.583692][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.591772][T12127] R13: 00007fd173fe6038 R14: 00007fd173fe5fa0 R15: 00007ffcb4cbc988 [ 445.599778][T12127] [ 445.869752][T12131] validate_nla: 1 callbacks suppressed [ 445.869885][T12131] netlink: 'syz.1.2420': attribute type 21 has an invalid length. [ 445.911168][T12131] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2420'. [ 446.066625][T12135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2422'. [ 446.107730][T12135] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2422'. [ 446.145283][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.155369][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.171664][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.201813][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.212249][ T5808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 446.222096][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.623595][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.835220][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.906269][T12149] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2427'. [ 446.929860][T12149] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2427'. [ 447.020583][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.104321][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.149063][T12159] netlink: 'syz.2.2429': attribute type 10 has an invalid length. [ 447.157457][T12159] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2429'. [ 447.429868][T12159] team0: Port device macvlan1 removed [ 447.473451][T12162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2431'. [ 447.486378][T12162] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2431'. [ 447.666500][T12136] chnl_net:caif_netlink_parms(): no params data found [ 447.856324][T12169] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2433'. [ 447.866381][T12169] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2433'. [ 448.064116][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.085304][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.094591][T12136] bridge_slave_0: entered allmulticast mode [ 448.111290][T12136] bridge_slave_0: entered promiscuous mode [ 448.203405][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.222109][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.234126][T12136] bridge_slave_1: entered allmulticast mode [ 448.258850][T12136] bridge_slave_1: entered promiscuous mode [ 448.297849][T11754] Bluetooth: hci1: command tx timeout [ 448.432653][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.893522][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.040739][T12136] team0: Port device team_slave_0 added [ 449.114976][T12136] team0: Port device team_slave_1 added [ 449.190209][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.197389][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.226104][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.272474][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.279880][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.305962][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.384231][T12136] hsr_slave_0: entered promiscuous mode [ 449.391854][T12136] hsr_slave_1: entered promiscuous mode [ 449.401761][T12136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.410921][T12136] Cannot create hsr debugfs directory [ 449.887043][T12216] netlink: 'syz.1.2442': attribute type 10 has an invalid length. [ 450.378544][T11754] Bluetooth: hci1: command tx timeout [ 450.621454][T12225] netlink: 'syz.3.2445': attribute type 10 has an invalid length. [ 450.731265][T12225] team0: Port device wlan1 added [ 450.795312][T12224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.243546][ T42] bond0: (slave wlan1): Releasing backup interface [ 451.292113][ T42] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 451.323896][T12252] __nla_validate_parse: 8 callbacks suppressed [ 451.323941][T12252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2452'. [ 451.361682][T12252] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2452'. [ 451.930641][T12263] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2457'. [ 451.952553][T12263] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2457'. [ 452.129109][ T42] hsr_slave_0: left promiscuous mode [ 452.157836][ T42] žåÓD`¼ê: left promiscuous mode [ 452.189509][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.204450][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.213620][ T42] bridge_slave_1: left allmulticast mode [ 452.225934][ T42] bridge_slave_1: left promiscuous mode [ 452.233873][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.251897][ T42] bridge_slave_0: left promiscuous mode [ 452.262735][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.314915][ T42] veth1_macvtap: left allmulticast mode [ 452.322382][ T42] veth1_macvtap: left promiscuous mode [ 452.328096][ T42] veth0_macvtap: left promiscuous mode [ 452.333776][ T42] veth0_vlan: left promiscuous mode [ 452.457021][T11754] Bluetooth: hci1: command tx timeout [ 454.199457][ T42] team0 (unregistering): Port device macvlan1 removed [ 454.459938][ T42] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 454.469906][ T42] batadv_slave_0 (unregistering): left promiscuous mode [ 454.514511][ T42] team0 (unregistering): Port device team_slave_1 removed [ 454.547176][T11754] Bluetooth: hci1: command tx timeout [ 454.566364][ T42] team0 (unregistering): Port device team_slave_0 removed [ 454.605844][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.616208][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 455.062774][ T42] bond0 (unregistering): Released all slaves [ 455.174259][T12266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2458'. [ 455.183904][T11754] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 455.193052][T11754] Bluetooth: hci4: Injecting HCI hardware error event [ 455.200839][ T5808] Bluetooth: hci4: hardware error 0x00 [ 455.207124][T12266] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2458'. [ 455.544712][T12136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.611247][T12136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.632598][T12280] netlink: 'syz.1.2462': attribute type 10 has an invalid length. [ 455.650201][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.685716][T12280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.852922][T12280] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 455.868585][T12136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.907258][T12136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.324228][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.412395][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.476286][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.483551][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.533358][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.540659][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.554652][T12296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2465'. [ 456.573442][T12296] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2465'. [ 456.598931][T12298] FAULT_INJECTION: forcing a failure. [ 456.598931][T12298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.598970][T12298] CPU: 0 PID: 12298 Comm: syz.1.2466 Not tainted syzkaller #0 [ 456.599001][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.599015][T12298] Call Trace: [ 456.599024][T12298] [ 456.599034][T12298] dump_stack_lvl+0x16c/0x230 [ 456.599072][T12298] ? show_regs_print_info+0x20/0x20 [ 456.599101][T12298] ? load_image+0x3b0/0x3b0 [ 456.599131][T12298] ? __might_fault+0xaa/0x120 [ 456.599155][T12298] ? __lock_acquire+0x7c80/0x7c80 [ 456.599186][T12298] should_fail_ex+0x39d/0x4d0 [ 456.599222][T12298] _copy_to_user+0x2f/0xa0 [ 456.599250][T12298] bpf_obj_get_info_by_fd+0x2843/0x2d90 [ 456.599297][T12298] ? bpf_map_get_fd_by_id+0x310/0x310 [ 456.599327][T12298] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 456.599409][T12298] ? file_end_write+0x159/0x250 [ 456.599441][T12298] ? __might_fault+0xaa/0x120 [ 456.599463][T12298] ? __might_fault+0xc6/0x120 [ 456.599483][T12298] ? __might_fault+0xaa/0x120 [ 456.599507][T12298] ? bpf_lsm_bpf+0x9/0x10 [ 456.599536][T12298] ? security_bpf+0x7e/0xa0 [ 456.599565][T12298] __sys_bpf+0x781/0x800 [ 456.599593][T12298] ? bpf_link_show_fdinfo+0x350/0x350 [ 456.599637][T12298] ? lock_chain_count+0x20/0x20 [ 456.599675][T12298] __x64_sys_bpf+0x7c/0x90 [ 456.599700][T12298] do_syscall_64+0x55/0xb0 [ 456.599727][T12298] ? clear_bhb_loop+0x40/0x90 [ 456.599751][T12298] ? clear_bhb_loop+0x40/0x90 [ 456.599778][T12298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.599802][T12298] RIP: 0033:0x7fd0b778efc9 [ 456.599822][T12298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.599844][T12298] RSP: 002b:00007fd0b868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.599871][T12298] RAX: ffffffffffffffda RBX: 00007fd0b79e5fa0 RCX: 00007fd0b778efc9 [ 456.599889][T12298] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 000000000000000f [ 456.599905][T12298] RBP: 00007fd0b868f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.599921][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.599936][T12298] R13: 00007fd0b79e6038 R14: 00007fd0b79e5fa0 R15: 00007ffc9088a4b8 [ 456.599972][T12298] [ 457.158836][T12304] netlink: 'syz.1.2467': attribute type 10 has an invalid length. [ 457.257591][ T5808] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 457.328123][T12304] team0: Port device wlan1 added [ 457.333505][T12313] netlink: 'syz.3.2468': attribute type 3 has an invalid length. [ 457.376609][T12308] team0: Port device team_slave_0 removed [ 457.397658][T12308] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 457.415242][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.574896][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.740142][T12136] veth0_vlan: entered promiscuous mode [ 457.852180][T12136] veth1_vlan: entered promiscuous mode [ 458.009244][T12136] veth0_macvtap: entered promiscuous mode [ 458.041162][T12136] veth1_macvtap: entered promiscuous mode [ 458.350550][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.442478][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.483280][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.519574][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.550128][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.578267][T12337] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2473'. [ 458.597514][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.640380][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.699184][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.821703][T12342] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2475'. [ 458.867296][T12342] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2475'. [ 458.980552][T12136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.037229][T12136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.082519][T12136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.111751][T12136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.598902][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.623304][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.753253][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.797956][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.893472][T12365] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 459.991291][T12364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.751984][T12383] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 461.114186][T12383] team0: Port device team_slave_0 removed [ 461.186967][T12383] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 461.256486][T11754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.268416][T11754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.292795][T11754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.303720][T11754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.312035][T11754] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 461.321168][T11754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.372389][T12387] netlink: 'syz.2.2486': attribute type 39 has an invalid length. [ 462.135120][T12414] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2492'. [ 462.145952][T12414] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2492'. [ 462.431574][T12424] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2495'. [ 462.473407][T12394] chnl_net:caif_netlink_parms(): no params data found [ 462.642689][T12394] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.650146][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.657922][T12394] bridge_slave_0: entered allmulticast mode [ 462.665481][T12394] bridge_slave_0: entered promiscuous mode [ 462.677878][T12394] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.695202][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.713217][T12394] bridge_slave_1: entered allmulticast mode [ 462.721038][T12394] bridge_slave_1: entered promiscuous mode [ 462.786415][T12394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.809914][T12394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.883844][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.921557][T12394] team0: Port device team_slave_0 added [ 462.939162][T12394] team0: Port device team_slave_1 added [ 462.989532][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.031102][T12394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.045466][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.078944][T12394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.134051][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.174382][T12394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.196937][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.248464][T12394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.343350][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.371952][T12444] FAULT_INJECTION: forcing a failure. [ 463.371952][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.397506][T12444] CPU: 1 PID: 12444 Comm: syz.1.2503 Not tainted syzkaller #0 [ 463.405051][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.415151][T12444] Call Trace: [ 463.418473][T12444] [ 463.421438][T12444] dump_stack_lvl+0x16c/0x230 [ 463.426170][T12444] ? show_regs_print_info+0x20/0x20 [ 463.431416][T12444] ? load_image+0x3b0/0x3b0 [ 463.436149][T12444] ? __might_fault+0xaa/0x120 [ 463.440870][T12444] ? __lock_acquire+0x7c80/0x7c80 [ 463.445957][T12444] should_fail_ex+0x39d/0x4d0 [ 463.450695][T12444] _copy_to_user+0x2f/0xa0 [ 463.455169][T12444] bpf_test_finish+0x24b/0x620 [ 463.460002][T12444] ? convert___skb_to_skb+0x590/0x590 [ 463.465427][T12444] ? convert_skb_to___skb+0x420/0x420 [ 463.465860][T11754] Bluetooth: hci2: command tx timeout [ 463.470838][T12444] ? bpf_test_init+0x134/0x150 [ 463.470876][T12444] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 463.470918][T12444] ? dev_put+0x80/0x80 [ 463.490667][T12444] ? dev_put+0x80/0x80 [ 463.494773][T12444] bpf_prog_test_run+0x321/0x390 [ 463.499765][T12444] __sys_bpf+0x440/0x800 [ 463.504055][T12444] ? bpf_link_show_fdinfo+0x350/0x350 [ 463.509499][T12444] ? lock_chain_count+0x20/0x20 [ 463.514405][T12444] __x64_sys_bpf+0x7c/0x90 [ 463.518883][T12444] do_syscall_64+0x55/0xb0 [ 463.523398][T12444] ? clear_bhb_loop+0x40/0x90 [ 463.528120][T12444] ? clear_bhb_loop+0x40/0x90 [ 463.532839][T12444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.538771][T12444] RIP: 0033:0x7fd0b778efc9 [ 463.543219][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.562878][T12444] RSP: 002b:00007fd0b868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.571347][T12444] RAX: ffffffffffffffda RBX: 00007fd0b79e5fa0 RCX: 00007fd0b778efc9 [ 463.579365][T12444] RDX: 000000000000004c RSI: 0000200000000440 RDI: 000000000000000a [ 463.587560][T12444] RBP: 00007fd0b868f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.595572][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.603586][T12444] R13: 00007fd0b79e6038 R14: 00007fd0b79e5fa0 R15: 00007ffc9088a4b8 [ 463.611626][T12444] [ 463.823351][T12394] hsr_slave_0: entered promiscuous mode [ 463.845602][T12394] hsr_slave_1: entered promiscuous mode [ 463.866646][T12394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.895376][T12394] Cannot create hsr debugfs directory [ 464.314352][T12455] FAULT_INJECTION: forcing a failure. [ 464.314352][T12455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.373653][T12455] CPU: 0 PID: 12455 Comm: syz.2.2508 Not tainted syzkaller #0 [ 464.381282][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.391477][T12455] Call Trace: [ 464.394803][T12455] [ 464.397787][T12455] dump_stack_lvl+0x16c/0x230 [ 464.402527][T12455] ? show_regs_print_info+0x20/0x20 [ 464.407787][T12455] ? load_image+0x3b0/0x3b0 [ 464.412340][T12455] ? __lock_acquire+0x7c80/0x7c80 [ 464.417420][T12455] should_fail_ex+0x39d/0x4d0 [ 464.422240][T12455] _copy_to_user+0x2f/0xa0 [ 464.426717][T12455] simple_read_from_buffer+0xe7/0x150 [ 464.432145][T12455] proc_fail_nth_read+0x1e3/0x250 [ 464.437226][T12455] ? proc_fault_inject_write+0x340/0x340 [ 464.442926][T12455] ? fsnotify_perm+0x271/0x5e0 [ 464.447756][T12455] ? proc_fault_inject_write+0x340/0x340 [ 464.453434][T12455] vfs_read+0x27e/0x920 [ 464.457642][T12455] ? kernel_read+0x1e0/0x1e0 [ 464.462282][T12455] ? __fget_files+0x28/0x4d0 [ 464.467007][T12455] ? __fget_files+0x44a/0x4d0 [ 464.471743][T12455] ? __fdget_pos+0x2a3/0x330 [ 464.476355][T12455] ? ksys_read+0x75/0x250 [ 464.480722][T12455] ksys_read+0x147/0x250 [ 464.484990][T12455] ? vfs_write+0x940/0x940 [ 464.489434][T12455] ? syscall_enter_from_user_mode+0x2e/0x80 [ 464.495358][T12455] do_syscall_64+0x55/0xb0 [ 464.499797][T12455] ? clear_bhb_loop+0x40/0x90 [ 464.504494][T12455] ? clear_bhb_loop+0x40/0x90 [ 464.509321][T12455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.515241][T12455] RIP: 0033:0x7f769a38d9dc [ 464.519681][T12455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.539328][T12455] RSP: 002b:00007f769b1d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.547765][T12455] RAX: ffffffffffffffda RBX: 00007f769a5e5fa0 RCX: 00007f769a38d9dc [ 464.555757][T12455] RDX: 000000000000000f RSI: 00007f769b1d30a0 RDI: 0000000000000009 [ 464.563756][T12455] RBP: 00007f769b1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 464.571828][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.579848][T12455] R13: 00007f769a5e6038 R14: 00007f769a5e5fa0 R15: 00007ffcf4970ac8 [ 464.587852][T12455] [ 464.799925][T12460] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2509'. [ 464.819386][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.835582][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.847814][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.871447][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.883198][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.899943][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.914009][T12460] batadv_slave_1: entered promiscuous mode [ 464.926438][T12463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2510'. [ 464.941507][T12463] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2510'. [ 465.382309][T12478] netlink: 'syz.1.2513': attribute type 10 has an invalid length. [ 465.465824][T12481] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2513'. [ 465.496424][T12477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.506382][T11754] Bluetooth: hci2: command tx timeout [ 466.009178][T12499] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 466.098369][T12500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.515995][T12394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.562332][T12394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.586831][T12394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.612855][T12394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.714648][ T48] [ 466.717136][ T48] ====================================================== [ 466.724182][ T48] WARNING: possible circular locking dependency detected [ 466.731248][ T48] syzkaller #0 Not tainted [ 466.735690][ T48] ------------------------------------------------------ [ 466.742735][ T48] kworker/u4:3/48 is trying to acquire lock: [ 466.748745][ T48] ffff888079d6cd00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 466.758238][ T48] [ 466.758238][ T48] but task is already holding lock: [ 466.765634][ T48] ffff88801d3b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 466.776048][ T48] [ 466.776048][ T48] which lock already depends on the new lock. [ 466.776048][ T48] [ 466.786464][ T48] [ 466.786464][ T48] the existing dependency chain (in reverse order) is: [ 466.795746][ T48] [ 466.795746][ T48] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 466.803499][ T48] __mutex_lock+0x129/0xcc0 [ 466.808549][ T48] ieee80211_open+0x144/0x200 [ 466.813769][ T48] __dev_open+0x2bc/0x430 [ 466.818801][ T48] dev_open+0xab/0x170 [ 466.823406][ T48] team_add_slave+0xae7/0x2660 [ 466.828701][ T48] do_setlink+0xe14/0x3fb0 [ 466.834146][ T48] rtnl_newlink+0x175b/0x2020 [ 466.839450][ T48] rtnetlink_rcv_msg+0x7c7/0xf10 [ 466.844928][ T48] netlink_rcv_skb+0x216/0x480 [ 466.850232][ T48] netlink_unicast+0x751/0x8d0 [ 466.855535][ T48] netlink_sendmsg+0x8c1/0xbe0 [ 466.860830][ T48] ____sys_sendmsg+0x5bf/0x950 [ 466.866132][ T48] ___sys_sendmsg+0x220/0x290 [ 466.871352][ T48] __se_sys_sendmsg+0x1a5/0x270 [ 466.876747][ T48] do_syscall_64+0x55/0xb0 [ 466.881734][ T48] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.888181][ T48] [ 466.888181][ T48] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 466.896191][ T48] __lock_acquire+0x2ddb/0x7c80 [ 466.901577][ T48] lock_acquire+0x197/0x410 [ 466.906611][ T48] __mutex_lock+0x129/0xcc0 [ 466.911654][ T48] team_del_slave+0x32/0x1c0 [ 466.916775][ T48] team_device_event+0x28d/0xa20 [ 466.922256][ T48] notifier_call_chain+0x197/0x390 [ 466.927916][ T48] unregister_netdevice_many_notify+0xf36/0x1810 [ 466.934790][ T48] unregister_netdevice_queue+0x324/0x360 [ 466.941053][ T48] _cfg80211_unregister_wdev+0x16b/0x580 [ 466.947225][ T48] ieee80211_remove_interfaces+0x496/0x680 [ 466.953568][ T48] ieee80211_unregister_hw+0x5d/0x2a0 [ 466.959476][ T48] mac80211_hwsim_del_radio+0x274/0x450 [ 466.965558][ T48] hwsim_exit_net+0x585/0x640 [ 466.970769][ T48] cleanup_net+0x6f4/0xb90 [ 466.975721][ T48] process_scheduled_works+0xa45/0x15b0 [ 466.981799][ T48] worker_thread+0xa55/0xfc0 [ 466.986935][ T48] kthread+0x2fa/0x390 [ 466.991546][ T48] ret_from_fork+0x48/0x80 [ 466.996493][ T48] ret_from_fork_asm+0x11/0x20 [ 467.001971][ T48] [ 467.001971][ T48] other info that might help us debug this: [ 467.001971][ T48] [ 467.012313][ T48] Possible unsafe locking scenario: [ 467.012313][ T48] [ 467.019768][ T48] CPU0 CPU1 [ 467.025140][ T48] ---- ---- [ 467.030513][ T48] lock(&rdev->wiphy.mtx); [ 467.035025][ T48] lock(team->team_lock_key); [ 467.042317][ T48] lock(&rdev->wiphy.mtx); [ 467.049349][ T48] lock(team->team_lock_key); [ 467.054124][ T48] [ 467.054124][ T48] *** DEADLOCK *** [ 467.054124][ T48] [ 467.062305][ T48] 5 locks held by kworker/u4:3/48: [ 467.067422][ T48] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 467.078330][ T48] #1: ffffc90000b97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 467.088899][ T48] #2: ffffffff8dfae850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 467.098367][ T48] #3: ffffffff8dfbb688 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 467.108242][ T48] #4: ffff88801d3b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 467.119074][ T48] [ 467.119074][ T48] stack backtrace: [ 467.125005][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 467.132390][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.142466][ T48] Workqueue: netns cleanup_net [ 467.147256][ T48] Call Trace: [ 467.150546][ T48] [ 467.153487][ T48] dump_stack_lvl+0x16c/0x230 [ 467.158213][ T48] ? load_image+0x3b0/0x3b0 [ 467.162729][ T48] ? show_regs_print_info+0x20/0x20 [ 467.167945][ T48] ? print_circular_bug+0x12b/0x1a0 [ 467.173250][ T48] check_noncircular+0x2bd/0x3c0 [ 467.178233][ T48] ? print_deadlock_bug+0x5d0/0x5d0 [ 467.183448][ T48] ? lockdep_lock+0xe0/0x220 [ 467.188051][ T48] ? __lock_acquire+0x1334/0x7c80 [ 467.193115][ T48] ? _find_first_zero_bit+0xd3/0x100 [ 467.198443][ T48] __lock_acquire+0x2ddb/0x7c80 [ 467.203344][ T48] ? verify_lock_unused+0x140/0x140 [ 467.208568][ T48] ? verify_lock_unused+0x140/0x140 [ 467.213796][ T48] lock_acquire+0x197/0x410 [ 467.218312][ T48] ? team_del_slave+0x32/0x1c0 [ 467.223093][ T48] ? __might_sleep+0xe0/0xe0 [ 467.227699][ T48] ? read_lock_is_recursive+0x20/0x20 [ 467.233091][ T48] __mutex_lock+0x129/0xcc0 [ 467.237642][ T48] ? team_del_slave+0x32/0x1c0 [ 467.242422][ T48] ? __lock_acquire+0x7c80/0x7c80 [ 467.247465][ T48] ? rcu_is_watching+0x15/0xb0 [ 467.252245][ T48] ? trace_contention_end+0x39/0xe0 [ 467.257483][ T48] ? __mutex_lock+0x304/0xcc0 [ 467.262173][ T48] ? team_del_slave+0x32/0x1c0 [ 467.266950][ T48] ? mutex_lock_nested+0x20/0x20 [ 467.271916][ T48] ? bond_netdev_event+0xe1/0xef0 [ 467.276974][ T48] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 467.282650][ T48] ? bond_ipsec_offload_ok+0x410/0x410 [ 467.288133][ T48] team_del_slave+0x32/0x1c0 [ 467.292739][ T48] team_device_event+0x28d/0xa20 [ 467.297688][ T48] notifier_call_chain+0x197/0x390 [ 467.302817][ T48] unregister_netdevice_many_notify+0xf36/0x1810 [ 467.309165][ T48] ? trace_event_raw_event_lock+0x230/0x230 [ 467.315083][ T48] ? unregister_netdevice_many+0x20/0x20 [ 467.320743][ T48] ? kernfs_remove_by_name_ns+0x117/0x150 [ 467.326487][ T48] ? __lock_acquire+0x7c80/0x7c80 [ 467.331526][ T48] unregister_netdevice_queue+0x324/0x360 [ 467.337264][ T48] ? list_netdevice+0x730/0x730 [ 467.342131][ T48] ? kernfs_remove_by_name_ns+0x117/0x150 [ 467.347893][ T48] _cfg80211_unregister_wdev+0x16b/0x580 [ 467.353649][ T48] ieee80211_remove_interfaces+0x496/0x680 [ 467.359492][ T48] ? ieee80211_do_stop+0x1db0/0x1db0 [ 467.364796][ T48] ? rcu_is_watching+0x15/0xb0 [ 467.369582][ T48] ieee80211_unregister_hw+0x5d/0x2a0 [ 467.374975][ T48] mac80211_hwsim_del_radio+0x274/0x450 [ 467.380553][ T48] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 467.386119][ T48] hwsim_exit_net+0x585/0x640 [ 467.390811][ T48] ? hwsim_init_net+0x90/0x90 [ 467.395590][ T48] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 467.401493][ T48] cleanup_net+0x6f4/0xb90 [ 467.405926][ T48] ? ops_free_list+0x3b0/0x3b0 [ 467.410711][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.415920][ T48] ? process_scheduled_works+0x957/0x15b0 [ 467.421653][ T48] ? process_scheduled_works+0x957/0x15b0 [ 467.427393][ T48] process_scheduled_works+0xa45/0x15b0 [ 467.432972][ T48] ? assign_work+0x400/0x400 [ 467.437583][ T48] ? assign_work+0x39e/0x400 [ 467.442190][ T48] worker_thread+0xa55/0xfc0 [ 467.446809][ T48] kthread+0x2fa/0x390 [ 467.450897][ T48] ? pr_cont_work+0x560/0x560 [ 467.455590][ T48] ? kthread_blkcg+0xd0/0xd0 [ 467.460194][ T48] ret_from_fork+0x48/0x80 [ 467.464647][ T48] ? kthread_blkcg+0xd0/0xd0 [ 467.469256][ T48] ret_from_fork_asm+0x11/0x20 [ 467.474045][ T48] [ 467.533792][ T48] team0: Port device wlan1 removed [ 467.578309][T11754] Bluetooth: hci2: command tx timeout [ 467.716775][ T48] hsr_slave_0: left promiscuous mode [ 467.725443][ T48] hsr_slave_1: left promiscuous mode [ 467.733604][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.742262][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.752180][ T48] bridge_slave_1: left allmulticast mode [ 467.758263][ T48] bridge_slave_1: left promiscuous mode [ 467.763970][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.772774][ T48] bridge_slave_0: left promiscuous mode [ 467.778507][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.789625][ T48] : left promiscuous mode [ 467.923467][ T48] team0 (unregistering): Port device macvlan1 removed [ 467.944289][ T48] .` (unregistering): (slave macvlan0): Releasing backup interface [ 468.096446][ T48] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 468.137432][ T48] team0 (unregistering): Port device team_slave_1 removed [ 468.195879][ T48] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.270591][ T48] .` (unregistering): (slave dummy0): Releasing backup interface [ 468.395135][ T48] .` (unregistering): Released all slaves [ 468.470846][T12394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.492141][T12394] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.505586][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.512851][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.527137][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.534289][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.740533][T12394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.786155][T12394] veth0_vlan: entered promiscuous mode [ 468.799483][T12394] veth1_vlan: entered promiscuous mode [ 468.827665][T12394] veth0_macvtap: entered promiscuous mode [ 468.836639][T12394] veth1_macvtap: entered promiscuous mode [ 468.853874][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.864489][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.876150][T12394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.890048][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.900755][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.911197][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.921937][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.931850][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.942330][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.953603][T12394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.964131][T12394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.973193][T12394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.982488][T12394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.991633][T12394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.025184][T12394] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 469.050970][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.053194][T12394] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 469.066029][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.089549][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.099274][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.657121][T11754] Bluetooth: hci2: command tx timeout