last executing test programs: 5.966954165s ago: executing program 0 (id=7292): socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121280, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 4.039500924s ago: executing program 0 (id=7297): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="94020000af"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) r7 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) 3.903092252s ago: executing program 1 (id=7300): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 3.766841831s ago: executing program 1 (id=7302): getpid() socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='[-#]-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @cgroup_sock=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x8, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) 3.418062523s ago: executing program 1 (id=7305): socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121280, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 3.310383955s ago: executing program 2 (id=7306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 3.234635021s ago: executing program 2 (id=7307): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc070, 0x0, 0xff, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x8c, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x0) close(0x3) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x11b) 1.441659112s ago: executing program 2 (id=7308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000140)="00feb08be2093a", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x55, 0x7a, 0x60, 0x8, 0x0, 0x400, 0x410, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x8008, 0xc, 0xfffff3f8, 0x8, 0x3, 0x0, 0xff02, 0x0, 0x0, 0x0, 0xc6c5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r2, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7}, &(0x7f0000000c00), &(0x7f0000000c40)=r5}, 0x20) 1.395586451s ago: executing program 1 (id=7309): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) (fail_nth: 2) 1.355909089s ago: executing program 3 (id=7310): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 1.251215681s ago: executing program 2 (id=7311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 973.651669ms ago: executing program 2 (id=7312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="0500f900"/14, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 959.839471ms ago: executing program 3 (id=7313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0xb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='G', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 900.011574ms ago: executing program 0 (id=7314): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 830.648568ms ago: executing program 1 (id=7315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 830.332188ms ago: executing program 2 (id=7316): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="94020000af"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) r7 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) 792.879246ms ago: executing program 3 (id=7317): socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121280, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 761.049053ms ago: executing program 1 (id=7318): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000ac0)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e000000040000"], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 686.591378ms ago: executing program 0 (id=7319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000140)="00feb08be2093a", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x55, 0x7a, 0x60, 0x8, 0x0, 0x400, 0x410, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x8008, 0xc, 0xfffff3f8, 0x8, 0x3, 0x0, 0xff02, 0x0, 0x0, 0x0, 0xc6c5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r2, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7}, &(0x7f0000000c00), &(0x7f0000000c40)=r5}, 0x20) 593.668677ms ago: executing program 0 (id=7320): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700042005"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 540.895638ms ago: executing program 3 (id=7321): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 433.0306ms ago: executing program 0 (id=7322): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) (fail_nth: 2) 387.38894ms ago: executing program 3 (id=7323): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff000000000000000085000000530000008500000007000000950000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=7324): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="0500f900"/14, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 7176] __se_sys_sendmsg+0x1d0/0x2c0 [ 1866.817052][T27176] ? __x64_sys_sendmsg+0x80/0x80 [ 1866.822031][T27176] ? lockdep_hardirqs_on+0x98/0x150 [ 1866.827254][T27176] do_syscall_64+0x55/0xb0 [ 1866.831710][T27176] ? clear_bhb_loop+0x40/0x90 [ 1866.836417][T27176] ? clear_bhb_loop+0x40/0x90 [ 1866.841125][T27176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.847044][T27176] RIP: 0033:0x7f836c59e159 [ 1866.851482][T27176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.871122][T27176] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1866.879561][T27176] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1866.887559][T27176] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1866.895554][T27176] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.903548][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.911542][T27176] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1866.919637][T27176] [ 1866.923064][T27179] netlink: 'syz.0.6820': attribute type 4 has an invalid length. [ 1866.952100][T27179] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1866.983434][T27180] netlink: 'syz.1.6819': attribute type 10 has an invalid length. [ 1866.998860][T27180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1867.051058][T27180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.105384][T27180] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1867.121034][T27187] netlink: 'syz.2.6821': attribute type 33 has an invalid length. [ 1867.433545][T27200] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1867.464008][T27200] openvswitch: netlink: Flow actions attr not present in new flow. [ 1867.687304][T27212] netlink: 'syz.0.6832': attribute type 33 has an invalid length. [ 1867.895528][T27215] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1867.967780][T27215] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1868.686982][T27230] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6839'. [ 1868.718481][T27230] openvswitch: netlink: Flow actions attr not present in new flow. [ 1869.161566][T27248] FAULT_INJECTION: forcing a failure. [ 1869.161566][T27248] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.200715][T27248] CPU: 1 PID: 27248 Comm: syz.0.6846 Not tainted syzkaller #0 [ 1869.208254][T27248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1869.218352][T27248] Call Trace: [ 1869.221670][T27248] [ 1869.224640][T27248] dump_stack_lvl+0x18c/0x250 [ 1869.229392][T27248] ? show_regs_print_info+0x20/0x20 [ 1869.234650][T27248] ? load_image+0x420/0x420 [ 1869.239206][T27248] ? __might_sleep+0xe0/0xe0 [ 1869.243850][T27248] ? __lock_acquire+0x7d80/0x7d80 [ 1869.248942][T27248] should_fail_ex+0x394/0x4c0 [ 1869.253682][T27248] should_failslab+0x9/0x20 [ 1869.258247][T27248] slab_pre_alloc_hook+0x59/0x300 [ 1869.263328][T27248] ? tomoyo_encode+0x2ad/0x570 [ 1869.268132][T27248] ? tomoyo_encode+0x2ad/0x570 [ 1869.272939][T27248] __kmem_cache_alloc_node+0x53/0x250 [ 1869.278371][T27248] ? tomoyo_encode+0x2ad/0x570 [ 1869.283171][T27248] __kmalloc+0xa7/0x240 [ 1869.287388][T27248] tomoyo_encode+0x2ad/0x570 [ 1869.292053][T27248] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1869.297735][T27248] ? tomoyo_domain+0xd6/0x120 [ 1869.302456][T27248] tomoyo_path_number_perm+0x248/0x5e0 [ 1869.307942][T27248] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1869.313671][T27248] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1869.319163][T27248] ? ksys_write+0x1d2/0x260 [ 1869.323716][T27248] ? __fget_files+0x28/0x460 [ 1869.328350][T27248] security_file_ioctl+0x70/0xa0 [ 1869.333329][T27248] __se_sys_ioctl+0x48/0x170 [ 1869.337948][T27248] do_syscall_64+0x55/0xb0 [ 1869.342403][T27248] ? clear_bhb_loop+0x40/0x90 [ 1869.347108][T27248] ? clear_bhb_loop+0x40/0x90 [ 1869.351815][T27248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.357731][T27248] RIP: 0033:0x7fd04bb9e159 [ 1869.362164][T27248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.381790][T27248] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.390224][T27248] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1869.398239][T27248] RDX: 0000200000000040 RSI: 00000000000089b1 RDI: 0000000000000003 [ 1869.406225][T27248] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.414213][T27248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.422219][T27248] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1869.430227][T27248] [ 1869.443478][T27248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1869.840761][T27263] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1869.866902][T27266] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6851'. [ 1869.877806][T27266] openvswitch: netlink: Flow actions attr not present in new flow. [ 1871.029524][T12362] wlan1: Trigger new scan to find an IBSS to join [ 1871.104047][T27298] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6865'. [ 1871.125765][T27298] openvswitch: netlink: Flow actions attr not present in new flow. [ 1871.141925][T27287] netlink: 'syz.0.6861': attribute type 10 has an invalid length. [ 1871.156057][T27287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1871.214481][T27287] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1871.226931][T27293] netlink: 'syz.0.6861': attribute type 3 has an invalid length. [ 1871.244365][T27287] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1871.304797][T27293] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1871.332305][T27287] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1871.548504][T27314] netlink: 'syz.0.6872': attribute type 33 has an invalid length. [ 1871.556441][T27314] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6872'. [ 1871.756718][T27327] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1871.768392][T27327] openvswitch: netlink: Flow actions attr not present in new flow. [ 1872.121267][T27342] netlink: 'syz.1.6883': attribute type 33 has an invalid length. [ 1872.129667][T27342] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1872.169958][T27335] FAULT_INJECTION: forcing a failure. [ 1872.169958][T27335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.184518][T27335] CPU: 1 PID: 27335 Comm: syz.3.6880 Not tainted syzkaller #0 [ 1872.192042][T27335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1872.202136][T27335] Call Trace: [ 1872.205444][T27335] [ 1872.208406][T27335] dump_stack_lvl+0x18c/0x250 [ 1872.213142][T27335] ? show_regs_print_info+0x20/0x20 [ 1872.218398][T27335] ? load_image+0x420/0x420 [ 1872.222972][T27335] ? __lock_acquire+0x7d80/0x7d80 [ 1872.228050][T27335] ? snprintf+0xe9/0x140 [ 1872.232354][T27335] should_fail_ex+0x394/0x4c0 [ 1872.237089][T27335] _copy_to_user+0x2f/0xa0 [ 1872.241562][T27335] simple_read_from_buffer+0xe7/0x150 [ 1872.246982][T27335] proc_fail_nth_read+0x1e8/0x260 [ 1872.252062][T27335] ? proc_fault_inject_write+0x360/0x360 [ 1872.257751][T27335] ? fsnotify_perm+0x271/0x5e0 [ 1872.262562][T27335] ? proc_fault_inject_write+0x360/0x360 [ 1872.268250][T27335] vfs_read+0x298/0x990 [ 1872.272468][T27335] ? kernel_read+0x1e0/0x1e0 [ 1872.277110][T27335] ? __fget_files+0x28/0x460 [ 1872.281745][T27335] ? __fget_files+0x3fc/0x460 [ 1872.286477][T27335] ? __fdget_pos+0x2a3/0x330 [ 1872.291106][T27335] ? ksys_read+0x74/0x260 [ 1872.295492][T27335] ksys_read+0x151/0x260 [ 1872.299813][T27335] ? vfs_write+0x9a0/0x9a0 [ 1872.304287][T27335] ? lockdep_hardirqs_on+0x98/0x150 [ 1872.309537][T27335] do_syscall_64+0x55/0xb0 [ 1872.314002][T27335] ? clear_bhb_loop+0x40/0x90 [ 1872.318729][T27335] ? clear_bhb_loop+0x40/0x90 [ 1872.323455][T27335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.329398][T27335] RIP: 0033:0x7f836c55e98e [ 1872.333849][T27335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1872.353493][T27335] RSP: 002b:00007f836d3b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1872.361946][T27335] RAX: ffffffffffffffda RBX: 00007f836d3b26c0 RCX: 00007f836c55e98e [ 1872.369953][T27335] RDX: 000000000000000f RSI: 00007f836d3b20a0 RDI: 0000000000000004 [ 1872.377996][T27335] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.386027][T27335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.394048][T27335] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1872.402077][T27335] [ 1872.583888][T27353] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6887'. [ 1872.613849][T27353] openvswitch: netlink: Flow actions attr not present in new flow. [ 1873.063924][T27371] FAULT_INJECTION: forcing a failure. [ 1873.063924][T27371] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.081052][T27371] CPU: 0 PID: 27371 Comm: syz.3.6894 Not tainted syzkaller #0 [ 1873.088558][T27371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.098675][T27371] Call Trace: [ 1873.102023][T27371] [ 1873.105009][T27371] dump_stack_lvl+0x18c/0x250 [ 1873.109748][T27371] ? show_regs_print_info+0x20/0x20 [ 1873.114981][T27371] ? load_image+0x420/0x420 [ 1873.119501][T27371] ? __might_sleep+0xe0/0xe0 [ 1873.124110][T27371] ? __lock_acquire+0x7d80/0x7d80 [ 1873.129167][T27371] ? mark_lock+0x94/0x320 [ 1873.133585][T27371] should_fail_ex+0x394/0x4c0 [ 1873.138304][T27371] should_failslab+0x9/0x20 [ 1873.142849][T27371] slab_pre_alloc_hook+0x59/0x300 [ 1873.147898][T27371] ? __get_vm_area_node+0x125/0x370 [ 1873.153119][T27371] __kmem_cache_alloc_node+0x53/0x250 [ 1873.158553][T27371] ? __get_vm_area_node+0x125/0x370 [ 1873.163770][T27371] kmalloc_node_trace+0x26/0xe0 [ 1873.168688][T27371] __get_vm_area_node+0x125/0x370 [ 1873.173795][T27371] __vmalloc_node_range+0x36f/0x1320 [ 1873.179098][T27371] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.184659][T27371] ? mark_lock+0x94/0x320 [ 1873.189008][T27371] ? __lock_acquire+0x1336/0x7d80 [ 1873.194095][T27371] ? aa_get_newest_label+0xfd/0x5c0 [ 1873.199323][T27371] ? free_vm_area+0x50/0x50 [ 1873.203874][T27371] ? end_current_label_crit_section+0x170/0x170 [ 1873.210155][T27371] ? verify_lock_unused+0x140/0x140 [ 1873.215373][T27371] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.220951][T27371] __vmalloc+0x7a/0x90 [ 1873.225040][T27371] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.230623][T27371] bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.236030][T27371] bpf_prog_alloc+0x3d/0x1a0 [ 1873.240667][T27371] bpf_prog_load+0x6b2/0x1610 [ 1873.245367][T27371] ? map_freeze+0x420/0x420 [ 1873.249901][T27371] ? __might_fault+0xaa/0x120 [ 1873.254611][T27371] ? __lock_acquire+0x7d80/0x7d80 [ 1873.259652][T27371] ? file_end_write+0x159/0x250 [ 1873.264520][T27371] ? __might_fault+0xaa/0x120 [ 1873.269211][T27371] ? __might_fault+0xc6/0x120 [ 1873.273897][T27371] ? __might_fault+0xaa/0x120 [ 1873.278614][T27371] ? bpf_lsm_bpf+0x9/0x10 [ 1873.283009][T27371] ? security_bpf+0x7e/0xa0 [ 1873.287553][T27371] __sys_bpf+0x5ba/0x890 [ 1873.291833][T27371] ? bpf_link_show_fdinfo+0x560/0x560 [ 1873.297263][T27371] ? lock_chain_count+0x20/0x20 [ 1873.302131][T27371] __x64_sys_bpf+0x7c/0x90 [ 1873.306558][T27371] do_syscall_64+0x55/0xb0 [ 1873.310985][T27371] ? clear_bhb_loop+0x40/0x90 [ 1873.315677][T27371] ? clear_bhb_loop+0x40/0x90 [ 1873.320372][T27371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.326303][T27371] RIP: 0033:0x7f836c59e159 [ 1873.330731][T27371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.350346][T27371] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1873.358775][T27371] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1873.366852][T27371] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1873.374838][T27371] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.382824][T27371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.390807][T27371] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1873.398805][T27371] [ 1873.403576][T27371] syz.3.6894: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1873.420329][T27371] CPU: 1 PID: 27371 Comm: syz.3.6894 Not tainted syzkaller #0 [ 1873.427840][T27371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.437937][T27371] Call Trace: [ 1873.441258][T27371] [ 1873.444228][T27371] dump_stack_lvl+0x18c/0x250 [ 1873.448946][T27371] ? show_regs_print_info+0x20/0x20 [ 1873.454261][T27371] ? load_image+0x420/0x420 [ 1873.458797][T27371] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1873.465238][T27371] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1873.471777][T27371] warn_alloc+0x246/0x340 [ 1873.476129][T27371] ? __get_vm_area_node+0x125/0x370 [ 1873.481381][T27371] ? zone_watermark_ok_safe+0x230/0x230 [ 1873.486951][T27371] ? rcu_is_watching+0x15/0xb0 [ 1873.491751][T27371] ? __get_vm_area_node+0x356/0x370 [ 1873.496990][T27371] __vmalloc_node_range+0x394/0x1320 [ 1873.502412][T27371] ? mark_lock+0x94/0x320 [ 1873.506775][T27371] ? __lock_acquire+0x1336/0x7d80 [ 1873.511870][T27371] ? aa_get_newest_label+0xfd/0x5c0 [ 1873.517282][T27371] ? free_vm_area+0x50/0x50 [ 1873.521917][T27371] ? end_current_label_crit_section+0x170/0x170 [ 1873.528194][T27371] ? verify_lock_unused+0x140/0x140 [ 1873.533427][T27371] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.539000][T27371] __vmalloc+0x7a/0x90 [ 1873.543101][T27371] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.548678][T27371] bpf_prog_alloc_no_stats+0x46/0x430 [ 1873.554081][T27371] bpf_prog_alloc+0x3d/0x1a0 [ 1873.558703][T27371] bpf_prog_load+0x6b2/0x1610 [ 1873.563423][T27371] ? map_freeze+0x420/0x420 [ 1873.567955][T27371] ? __might_fault+0xaa/0x120 [ 1873.572662][T27371] ? __lock_acquire+0x7d80/0x7d80 [ 1873.577727][T27371] ? file_end_write+0x159/0x250 [ 1873.582619][T27371] ? __might_fault+0xaa/0x120 [ 1873.587319][T27371] ? __might_fault+0xc6/0x120 [ 1873.592025][T27371] ? __might_fault+0xaa/0x120 [ 1873.596721][T27371] ? bpf_lsm_bpf+0x9/0x10 [ 1873.601082][T27371] ? security_bpf+0x7e/0xa0 [ 1873.605609][T27371] __sys_bpf+0x5ba/0x890 [ 1873.609882][T27371] ? bpf_link_show_fdinfo+0x560/0x560 [ 1873.615302][T27371] ? lock_chain_count+0x20/0x20 [ 1873.620188][T27371] __x64_sys_bpf+0x7c/0x90 [ 1873.624630][T27371] do_syscall_64+0x55/0xb0 [ 1873.629071][T27371] ? clear_bhb_loop+0x40/0x90 [ 1873.633780][T27371] ? clear_bhb_loop+0x40/0x90 [ 1873.638495][T27371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.644415][T27371] RIP: 0033:0x7f836c59e159 [ 1873.648851][T27371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.668482][T27371] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1873.676919][T27371] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1873.684945][T27371] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1873.692943][T27371] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.700937][T27371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.708927][T27371] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1873.716965][T27371] [ 1873.728815][T27371] Mem-Info: [ 1873.732157][T27371] active_anon:5221 inactive_anon:0 isolated_anon:0 [ 1873.732157][T27371] active_file:19218 inactive_file:40520 isolated_file:0 [ 1873.732157][T27371] unevictable:768 dirty:443 writeback:0 [ 1873.732157][T27371] slab_reclaimable:10829 slab_unreclaimable:93174 [ 1873.732157][T27371] mapped:24779 shmem:1361 pagetables:524 [ 1873.732157][T27371] sec_pagetables:0 bounce:0 [ 1873.732157][T27371] kernel_misc_reclaimable:0 [ 1873.732157][T27371] free:1346031 free_pcp:9564 free_cma:0 [ 1873.781756][T27371] Node 0 active_anon:20884kB inactive_anon:0kB active_file:76872kB inactive_file:161880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99116kB dirty:1772kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10188kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 1873.814631][T27371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1873.845968][T27371] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1873.884204][T27371] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1873.890272][T27371] Node 0 DMA32 free:1481284kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20848kB inactive_anon:0kB active_file:76872kB inactive_file:161056kB unevictable:1536kB writepending:1768kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:18580kB local_pcp:6748kB free_cma:0kB [ 1873.922614][T27371] lowmem_reserve[]: 0 0 0 0 0 [ 1873.927399][T27371] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1873.958239][T27371] lowmem_reserve[]: 0 0 0 0 0 [ 1873.964351][T27371] Node 1 Normal free:3887480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:13828kB free_cma:0kB [ 1874.000323][ T6113] wlan1: Trigger new scan to find an IBSS to join [ 1874.018373][T27371] lowmem_reserve[]: 0 0 0 0 0 [ 1874.036130][T27371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1874.111422][T27371] Node 0 DMA32: 137*4kB (ME) 960*8kB (M) 726*16kB (UME) 844*32kB (UME) 432*64kB (UME) 207*128kB (UME) 72*256kB (UM) 37*512kB (UM) 21*1024kB (UME) 7*2048kB (ME) 319*4096kB (UM) = 1480836kB [ 1874.132481][T27371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1874.144723][T27371] Node 1 Normal: 266*4kB (UM) 58*8kB (UME) 48*16kB (UME) 74*32kB (UME) 19*64kB (UME) 5*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3887480kB [ 1874.163135][T27371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.172916][T27371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1874.182396][T27371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.192077][T27371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1874.202570][T27371] 61099 total pagecache pages [ 1874.207943][T27371] 0 pages in swap cache [ 1874.214499][T27371] Free swap = 124996kB [ 1874.220931][T27371] Total swap = 124996kB [ 1874.225589][T27371] 2097051 pages RAM [ 1874.247188][T27371] 0 pages HighMem/MovableOnly [ 1874.254809][T27371] 416965 pages reserved [ 1874.259714][T27371] 0 pages cma reserved [ 1874.817441][T27402] FAULT_INJECTION: forcing a failure. [ 1874.817441][T27402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.836868][T27402] CPU: 0 PID: 27402 Comm: syz.1.6906 Not tainted syzkaller #0 [ 1874.844379][T27402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1874.854493][T27402] Call Trace: [ 1874.857822][T27402] [ 1874.860792][T27402] dump_stack_lvl+0x18c/0x250 [ 1874.865532][T27402] ? show_regs_print_info+0x20/0x20 [ 1874.870782][T27402] ? load_image+0x420/0x420 [ 1874.875323][T27402] ? __lock_acquire+0x7d80/0x7d80 [ 1874.880379][T27402] should_fail_ex+0x394/0x4c0 [ 1874.885097][T27402] _copy_from_user+0x2f/0xe0 [ 1874.889717][T27402] __copy_msghdr+0x388/0x560 [ 1874.894372][T27402] ___sys_sendmsg+0x214/0x360 [ 1874.899104][T27402] ? __sys_sendmsg+0x2b0/0x2b0 [ 1874.903934][T27402] ? __lock_acquire+0x7d80/0x7d80 [ 1874.909026][T27402] __se_sys_sendmsg+0x1d0/0x2c0 [ 1874.913914][T27402] ? __x64_sys_sendmsg+0x80/0x80 [ 1874.918900][T27402] ? lockdep_hardirqs_on+0x98/0x150 [ 1874.924249][T27402] do_syscall_64+0x55/0xb0 [ 1874.928698][T27402] ? clear_bhb_loop+0x40/0x90 [ 1874.933434][T27402] ? clear_bhb_loop+0x40/0x90 [ 1874.938145][T27402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.944073][T27402] RIP: 0033:0x7f2665d9e159 [ 1874.948534][T27402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.968179][T27402] RSP: 002b:00007f2666c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1874.976624][T27402] RAX: ffffffffffffffda RBX: 00007f2666025fa0 RCX: 00007f2665d9e159 [ 1874.984632][T27402] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1874.992625][T27402] RBP: 00007f2666c12090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.000612][T27402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.008601][T27402] R13: 00007f2666026038 R14: 00007f2666025fa0 R15: 00007ffd400fe038 [ 1875.016616][T27402] [ 1875.074483][T27405] IPv6: Can't replace route, no match found [ 1875.215540][T27410] IPv6: Can't replace route, no match found [ 1875.529787][T27425] netlink: 'syz.2.6915': attribute type 27 has an invalid length. [ 1875.548667][T27425] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1875.574333][T27421] netlink: 'syz.3.6913': attribute type 21 has an invalid length. [ 1875.596160][T27421] žÿ: renamed from team_slave_1 (while UP) [ 1876.207393][T27433] netlink: 'syz.3.6917': attribute type 10 has an invalid length. [ 1876.217190][T27433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1876.242616][T27433] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1876.252376][T27433] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.255621][T27439] netlink: 'syz.3.6917': attribute type 3 has an invalid length. [ 1876.302977][T27444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1876.318735][T27439] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1876.335365][T27433] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1876.376271][T27444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1876.397199][T27448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1876.453688][T27444] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1876.685565][T27460] netlink: 'syz.0.6926': attribute type 21 has an invalid length. [ 1876.753622][T27460] žÿ: renamed from team_slave_1 [ 1877.028700][T12362] wlan1: Creating new IBSS network, BSSID 6e:47:ea:22:01:d8 [ 1877.151425][T27471] netlink: 'syz.3.6931': attribute type 27 has an invalid length. [ 1877.160230][T27471] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1877.513433][T27484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1877.544345][T27484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1877.592550][T27484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1877.827441][T27482] netlink: 'syz.2.6936': attribute type 10 has an invalid length. [ 1877.857908][T27482] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1877.895258][T27489] netlink: 'syz.2.6936': attribute type 3 has an invalid length. [ 1877.901388][T27482] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.937392][T27482] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1878.214650][T27503] netlink: 'syz.1.6942': attribute type 21 has an invalid length. [ 1878.329928][T27495] žÿ: renamed from team_slave_1 [ 1878.683009][T27516] netlink: 'syz.1.6949': attribute type 27 has an invalid length. [ 1878.951034][T27529] IPv6: Can't replace route, no match found [ 1879.325235][T27548] FAULT_INJECTION: forcing a failure. [ 1879.325235][T27548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1879.344126][T27548] CPU: 1 PID: 27548 Comm: syz.3.6965 Not tainted syzkaller #0 [ 1879.351646][T27548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1879.361729][T27548] Call Trace: [ 1879.365031][T27548] [ 1879.367983][T27548] dump_stack_lvl+0x18c/0x250 [ 1879.372693][T27548] ? show_regs_print_info+0x20/0x20 [ 1879.377914][T27548] ? load_image+0x420/0x420 [ 1879.382451][T27548] ? __lock_acquire+0x7d80/0x7d80 [ 1879.387510][T27548] should_fail_ex+0x394/0x4c0 [ 1879.392215][T27548] _copy_from_user+0x2f/0xe0 [ 1879.396824][T27548] __copy_msghdr+0x388/0x560 [ 1879.401437][T27548] ___sys_sendmsg+0x214/0x360 [ 1879.406138][T27548] ? get_pid_task+0x20/0x1e0 [ 1879.410775][T27548] ? __sys_sendmsg+0x2b0/0x2b0 [ 1879.415573][T27548] ? __lock_acquire+0x7d80/0x7d80 [ 1879.420643][T27548] __se_sys_sendmsg+0x1d0/0x2c0 [ 1879.425515][T27548] ? __x64_sys_sendmsg+0x80/0x80 [ 1879.430488][T27548] ? lockdep_hardirqs_on+0x98/0x150 [ 1879.435706][T27548] do_syscall_64+0x55/0xb0 [ 1879.440152][T27548] ? clear_bhb_loop+0x40/0x90 [ 1879.444852][T27548] ? clear_bhb_loop+0x40/0x90 [ 1879.449557][T27548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1879.455477][T27548] RIP: 0033:0x7f836c59e159 [ 1879.459923][T27548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1879.479548][T27548] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1879.487983][T27548] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1879.495972][T27548] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 1879.503965][T27548] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1879.511954][T27548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1879.519941][T27548] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1879.527971][T27548] [ 1880.211800][T27569] openvswitch: netlink: Flow actions attr not present in new flow. [ 1880.462725][T27576] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1880.860295][T27588] FAULT_INJECTION: forcing a failure. [ 1880.860295][T27588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.874531][T27588] CPU: 0 PID: 27588 Comm: syz.2.6979 Not tainted syzkaller #0 [ 1880.882052][T27588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1880.892162][T27588] Call Trace: [ 1880.895468][T27588] [ 1880.898436][T27588] dump_stack_lvl+0x18c/0x250 [ 1880.903157][T27588] ? show_regs_print_info+0x20/0x20 [ 1880.908406][T27588] ? load_image+0x420/0x420 [ 1880.912973][T27588] ? __might_fault+0xaa/0x120 [ 1880.917701][T27588] should_fail_ex+0x394/0x4c0 [ 1880.922440][T27588] copyout+0x1a/0x90 [ 1880.926366][T27588] _copy_to_iter+0x42b/0x1110 [ 1880.931077][T27588] ? __virt_addr_valid+0x10c/0x380 [ 1880.936228][T27588] ? iov_iter_init+0x1e0/0x1e0 [ 1880.941021][T27588] ? __virt_addr_valid+0x10c/0x380 [ 1880.946168][T27588] ? __virt_addr_valid+0x10c/0x380 [ 1880.951317][T27588] ? __virt_addr_valid+0x10c/0x380 [ 1880.956466][T27588] ? __check_object_size+0x4fc/0xa40 [ 1880.961803][T27588] __skb_datagram_iter+0xdb/0x780 [ 1880.966860][T27588] ? skb_copy_datagram_iter+0x200/0x200 [ 1880.972435][T27588] skb_copy_datagram_iter+0xb1/0x200 [ 1880.977834][T27588] netlink_recvmsg+0x2d4/0xe60 [ 1880.982635][T27588] ? netlink_sendmsg+0xbf0/0xbf0 [ 1880.987607][T27588] ? aa_af_perm+0x330/0x330 [ 1880.992152][T27588] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1880.997464][T27588] ? security_socket_recvmsg+0x89/0xb0 [ 1881.002943][T27588] ? netlink_sendmsg+0xbf0/0xbf0 [ 1881.007916][T27588] ____sys_recvmsg+0x2bd/0x5d0 [ 1881.012731][T27588] ? __sys_recvmsg_sock+0x50/0x50 [ 1881.017828][T27588] ? import_iovec+0x73/0xa0 [ 1881.022367][T27588] ___sys_recvmsg+0x214/0x590 [ 1881.027073][T27588] ? __sys_recvmsg+0x2a0/0x2a0 [ 1881.031873][T27588] ? ksys_write+0x1d2/0x260 [ 1881.036412][T27588] ? __fget_files+0x3fc/0x460 [ 1881.041146][T27588] __x64_sys_recvmsg+0x21e/0x2f0 [ 1881.046112][T27588] ? ___sys_recvmsg+0x590/0x590 [ 1881.051002][T27588] ? lockdep_hardirqs_on+0x98/0x150 [ 1881.056221][T27588] do_syscall_64+0x55/0xb0 [ 1881.060701][T27588] ? clear_bhb_loop+0x40/0x90 [ 1881.065413][T27588] ? clear_bhb_loop+0x40/0x90 [ 1881.070119][T27588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1881.076044][T27588] RIP: 0033:0x7fc003f9e159 [ 1881.080482][T27588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.100111][T27588] RSP: 002b:00007fc004e23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1881.108553][T27588] RAX: ffffffffffffffda RBX: 00007fc004225fa0 RCX: 00007fc003f9e159 [ 1881.116578][T27588] RDX: 0000000000000102 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 1881.124575][T27588] RBP: 00007fc004e23090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.132575][T27588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.140581][T27588] R13: 00007fc004226038 R14: 00007fc004225fa0 R15: 00007ffd8a4e0208 [ 1881.148611][T27588] [ 1881.410852][T27596] __nla_validate_parse: 18 callbacks suppressed [ 1881.410887][T27596] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1881.435050][T27596] openvswitch: netlink: Flow actions attr not present in new flow. [ 1881.451089][T27598] FAULT_INJECTION: forcing a failure. [ 1881.451089][T27598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.488537][T27598] CPU: 0 PID: 27598 Comm: syz.0.6984 Not tainted syzkaller #0 [ 1881.496093][T27598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1881.506200][T27598] Call Trace: [ 1881.509545][T27598] [ 1881.512525][T27598] dump_stack_lvl+0x18c/0x250 [ 1881.517258][T27598] ? show_regs_print_info+0x20/0x20 [ 1881.522502][T27598] ? load_image+0x420/0x420 [ 1881.527056][T27598] ? __might_fault+0xaa/0x120 [ 1881.531784][T27598] ? __lock_acquire+0x7d80/0x7d80 [ 1881.536859][T27598] should_fail_ex+0x394/0x4c0 [ 1881.541615][T27598] _copy_from_user+0x2f/0xe0 [ 1881.546256][T27598] sk_setsockopt+0x2b9/0x2b20 [ 1881.550998][T27598] ? sockopt_capable+0x60/0x60 [ 1881.555819][T27598] ? trace_event_raw_event_lock+0x240/0x240 [ 1881.561749][T27598] ? ksys_write+0x1d2/0x260 [ 1881.566333][T27598] ? aa_sk_perm+0x83c/0x970 [ 1881.570889][T27598] udp_lib_setsockopt+0xf7/0x8a0 [ 1881.575956][T27598] ? udp_destroy_sock+0x2b0/0x2b0 [ 1881.581038][T27598] ? __fget_files+0x28/0x460 [ 1881.585693][T27598] udp_setsockopt+0x77/0xb0 [ 1881.590241][T27598] ? udp_set_csum+0x6f0/0x6f0 [ 1881.594954][T27598] ? sock_common_recvmsg+0x190/0x190 [ 1881.600313][T27598] do_sock_setsockopt+0x175/0x1a0 [ 1881.605384][T27598] __x64_sys_setsockopt+0x182/0x200 [ 1881.610629][T27598] do_syscall_64+0x55/0xb0 [ 1881.615081][T27598] ? clear_bhb_loop+0x40/0x90 [ 1881.619799][T27598] ? clear_bhb_loop+0x40/0x90 [ 1881.624518][T27598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1881.630458][T27598] RIP: 0033:0x7fd04bb9e159 [ 1881.634912][T27598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.654546][T27598] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1881.662997][T27598] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1881.671007][T27598] RDX: 000000000000003e RSI: 0000000000000001 RDI: 0000000000000003 [ 1881.679010][T27598] RBP: 00007fd04cadc090 R08: 0000000000000004 R09: 0000000000000000 [ 1881.687010][T27598] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1881.695094][T27598] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1881.703112][T27598] [ 1882.072543][T27614] FAULT_INJECTION: forcing a failure. [ 1882.072543][T27614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.118963][T27614] CPU: 0 PID: 27614 Comm: syz.1.6992 Not tainted syzkaller #0 [ 1882.126523][T27614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1882.136656][T27614] Call Trace: [ 1882.139987][T27614] [ 1882.142940][T27614] dump_stack_lvl+0x18c/0x250 [ 1882.147656][T27614] ? show_regs_print_info+0x20/0x20 [ 1882.152892][T27614] ? load_image+0x420/0x420 [ 1882.157426][T27614] ? __might_fault+0xaa/0x120 [ 1882.162132][T27614] ? __lock_acquire+0x7d80/0x7d80 [ 1882.167194][T27614] should_fail_ex+0x394/0x4c0 [ 1882.171912][T27614] _copy_from_user+0x2f/0xe0 [ 1882.176535][T27614] ___sys_sendmsg+0x1c7/0x360 [ 1882.181237][T27614] ? get_pid_task+0x20/0x1e0 [ 1882.185854][T27614] ? __sys_sendmsg+0x2b0/0x2b0 [ 1882.190659][T27614] ? __lock_acquire+0x7d80/0x7d80 [ 1882.195725][T27614] __se_sys_sendmsg+0x1d0/0x2c0 [ 1882.200606][T27614] ? __x64_sys_sendmsg+0x80/0x80 [ 1882.205585][T27614] ? lockdep_hardirqs_on+0x98/0x150 [ 1882.210805][T27614] do_syscall_64+0x55/0xb0 [ 1882.215249][T27614] ? clear_bhb_loop+0x40/0x90 [ 1882.219953][T27614] ? clear_bhb_loop+0x40/0x90 [ 1882.224660][T27614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1882.230574][T27614] RIP: 0033:0x7f2665d9e159 [ 1882.235017][T27614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.254670][T27614] RSP: 002b:00007f2666c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1882.263110][T27614] RAX: ffffffffffffffda RBX: 00007f2666025fa0 RCX: 00007f2665d9e159 [ 1882.271110][T27614] RDX: 0000000020000080 RSI: 0000200000000840 RDI: 0000000000000003 [ 1882.279116][T27614] RBP: 00007f2666c12090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.287111][T27614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.295099][T27614] R13: 00007f2666026038 R14: 00007f2666025fa0 R15: 00007ffd400fe038 [ 1882.303105][T27614] [ 1882.376146][T27620] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1882.402626][T27620] openvswitch: netlink: Flow actions attr not present in new flow. [ 1882.488847][T27623] netlink: 'syz.1.6995': attribute type 10 has an invalid length. [ 1882.496738][T27623] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6995'. [ 1882.547209][T27623] hsr0: entered promiscuous mode [ 1882.949428][T20418] wlan1: Trigger new scan to find an IBSS to join [ 1883.075028][T27649] FAULT_INJECTION: forcing a failure. [ 1883.075028][T27649] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.100416][T27647] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1883.116411][T27649] CPU: 0 PID: 27649 Comm: syz.2.7006 Not tainted syzkaller #0 [ 1883.120234][T27647] openvswitch: netlink: Flow actions attr not present in new flow. [ 1883.123914][T27649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1883.123931][T27649] Call Trace: [ 1883.123941][T27649] [ 1883.123951][T27649] dump_stack_lvl+0x18c/0x250 [ 1883.123994][T27649] ? show_regs_print_info+0x20/0x20 [ 1883.124027][T27649] ? load_image+0x420/0x420 [ 1883.124058][T27649] ? __might_sleep+0xe0/0xe0 [ 1883.167483][T27649] ? __lock_acquire+0x7d80/0x7d80 [ 1883.172572][T27649] should_fail_ex+0x394/0x4c0 [ 1883.177313][T27649] should_failslab+0x9/0x20 [ 1883.181899][T27649] slab_pre_alloc_hook+0x59/0x300 [ 1883.186983][T27649] ? tomoyo_encode+0x2ad/0x570 [ 1883.191789][T27649] ? tomoyo_encode+0x2ad/0x570 [ 1883.196592][T27649] __kmem_cache_alloc_node+0x53/0x250 [ 1883.202018][T27649] ? tomoyo_encode+0x2ad/0x570 [ 1883.206836][T27649] __kmalloc+0xa7/0x240 [ 1883.211043][T27649] tomoyo_encode+0x2ad/0x570 [ 1883.215665][T27649] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1883.221315][T27649] ? tomoyo_domain+0xd6/0x120 [ 1883.226027][T27649] tomoyo_path_number_perm+0x248/0x5e0 [ 1883.231519][T27649] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1883.237176][T27649] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1883.242665][T27649] ? ksys_write+0x1d2/0x260 [ 1883.247223][T27649] ? __fget_files+0x28/0x460 [ 1883.251875][T27649] security_file_ioctl+0x70/0xa0 [ 1883.256865][T27649] __se_sys_ioctl+0x48/0x170 [ 1883.261485][T27649] do_syscall_64+0x55/0xb0 [ 1883.265928][T27649] ? clear_bhb_loop+0x40/0x90 [ 1883.270635][T27649] ? clear_bhb_loop+0x40/0x90 [ 1883.275343][T27649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1883.281262][T27649] RIP: 0033:0x7fc003f9e159 [ 1883.285702][T27649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.305329][T27649] RSP: 002b:00007fc004e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.313767][T27649] RAX: ffffffffffffffda RBX: 00007fc004225fa0 RCX: 00007fc003f9e159 [ 1883.321760][T27649] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000025 [ 1883.329756][T27649] RBP: 00007fc004e23090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.337758][T27649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.345751][T27649] R13: 00007fc004226038 R14: 00007fc004225fa0 R15: 00007ffd8a4e0208 [ 1883.353778][T27649] [ 1883.377175][T27649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1883.844241][T27662] bridge_slave_0: entered promiscuous mode [ 1883.861888][T27662] bridge_slave_0: entered allmulticast mode [ 1884.151332][T27672] netlink: 'syz.1.7021': attribute type 10 has an invalid length. [ 1884.175931][T27672] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1884.206777][T27672] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1884.218186][T27672] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1884.230888][T27672] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1884.340667][T27678] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1884.350065][T27678] openvswitch: netlink: Flow actions attr not present in new flow. [ 1884.539006][T27685] FAULT_INJECTION: forcing a failure. [ 1884.539006][T27685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.569648][T27685] CPU: 0 PID: 27685 Comm: syz.1.7019 Not tainted syzkaller #0 [ 1884.577201][T27685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1884.587329][T27685] Call Trace: [ 1884.590649][T27685] [ 1884.593624][T27685] dump_stack_lvl+0x18c/0x250 [ 1884.598359][T27685] ? show_regs_print_info+0x20/0x20 [ 1884.603609][T27685] ? load_image+0x420/0x420 [ 1884.608167][T27685] ? __might_fault+0xaa/0x120 [ 1884.612897][T27685] ? __lock_acquire+0x7d80/0x7d80 [ 1884.617981][T27685] should_fail_ex+0x394/0x4c0 [ 1884.622719][T27685] strncpy_from_user+0x36/0x2f0 [ 1884.627621][T27685] getname_flags+0xf6/0x500 [ 1884.632190][T27685] do_sys_openat2+0xda/0x1d0 [ 1884.636831][T27685] ? atomic_notifier_call_chain+0x16e/0x180 [ 1884.642774][T27685] ? do_sys_open+0xe0/0xe0 [ 1884.647237][T27685] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1884.653274][T27685] ? srcu_init_notifier_head+0x90/0x90 [ 1884.658764][T27685] ? lock_chain_count+0x20/0x20 [ 1884.663649][T27685] __x64_sys_openat+0x139/0x160 [ 1884.668537][T27685] do_syscall_64+0x55/0xb0 [ 1884.673019][T27685] ? clear_bhb_loop+0x40/0x90 [ 1884.677730][T27685] ? clear_bhb_loop+0x40/0x90 [ 1884.682440][T27685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.688376][T27685] RIP: 0033:0x7f2665d5e98e [ 1884.692819][T27685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1884.712449][T27685] RSP: 002b:00007f2666c11ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1884.720890][T27685] RAX: ffffffffffffffda RBX: 00007f2666c126c0 RCX: 00007f2665d5e98e [ 1884.728892][T27685] RDX: 0000000000000002 RSI: 00007f2666c11f90 RDI: ffffffffffffff9c [ 1884.736886][T27685] RBP: 00007f2666c12090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.744880][T27685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.752873][T27685] R13: 00007f2666026038 R14: 00007f2666025fa0 R15: 00007ffd400fe038 [ 1884.760882][T27685] [ 1884.887086][T27691] FAULT_INJECTION: forcing a failure. [ 1884.887086][T27691] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.921652][T27691] CPU: 0 PID: 27691 Comm: syz.1.7023 Not tainted syzkaller #0 [ 1884.929189][T27691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1884.939317][T27691] Call Trace: [ 1884.942634][T27691] [ 1884.945603][T27691] dump_stack_lvl+0x18c/0x250 [ 1884.950357][T27691] ? show_regs_print_info+0x20/0x20 [ 1884.955645][T27691] ? load_image+0x420/0x420 [ 1884.960212][T27691] ? __might_sleep+0xe0/0xe0 [ 1884.964855][T27691] ? __lock_acquire+0x7d80/0x7d80 [ 1884.969939][T27691] should_fail_ex+0x394/0x4c0 [ 1884.974678][T27691] should_failslab+0x9/0x20 [ 1884.979235][T27691] slab_pre_alloc_hook+0x59/0x300 [ 1884.984413][T27691] ? __lock_acquire+0x7d80/0x7d80 [ 1884.989501][T27691] kmem_cache_alloc_node+0x5e/0x310 [ 1884.994851][T27691] ? __alloc_skb+0x103/0x2c0 [ 1884.999500][T27691] __alloc_skb+0x103/0x2c0 [ 1885.003967][T27691] netlink_sendmsg+0x66a/0xbf0 [ 1885.008787][T27691] ? netlink_getsockopt+0x590/0x590 [ 1885.014039][T27691] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1885.019647][T27691] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1885.024984][T27691] ? security_socket_sendmsg+0x80/0xa0 [ 1885.030497][T27691] ? netlink_getsockopt+0x590/0x590 [ 1885.035737][T27691] ____sys_sendmsg+0x61b/0x980 [ 1885.040535][T27691] ? __asan_memset+0x22/0x40 [ 1885.045153][T27691] ? __sys_sendmsg_sock+0x30/0x30 [ 1885.050206][T27691] ? __import_iovec+0x5f2/0x850 [ 1885.055094][T27691] ? import_iovec+0x73/0xa0 [ 1885.059631][T27691] ___sys_sendmsg+0x2a6/0x360 [ 1885.064345][T27691] ? __sys_sendmsg+0x2b0/0x2b0 [ 1885.069156][T27691] ? __lock_acquire+0x7d80/0x7d80 [ 1885.074232][T27691] __se_sys_sendmsg+0x1d0/0x2c0 [ 1885.079120][T27691] ? __x64_sys_sendmsg+0x80/0x80 [ 1885.084096][T27691] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1885.090016][T27691] do_syscall_64+0x55/0xb0 [ 1885.094465][T27691] ? clear_bhb_loop+0x40/0x90 [ 1885.099167][T27691] ? clear_bhb_loop+0x40/0x90 [ 1885.103873][T27691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.109798][T27691] RIP: 0033:0x7f2665d9e159 [ 1885.114241][T27691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.133883][T27691] RSP: 002b:00007f2666c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1885.142321][T27691] RAX: ffffffffffffffda RBX: 00007f2666025fa0 RCX: 00007f2665d9e159 [ 1885.150338][T27691] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1885.158336][T27691] RBP: 00007f2666c12090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.166333][T27691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.174325][T27691] R13: 00007f2666026038 R14: 00007f2666025fa0 R15: 00007ffd400fe038 [ 1885.182342][T27691] [ 1885.430411][T27702] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1885.465386][T27702] openvswitch: netlink: Flow actions attr not present in new flow. [ 1886.340606][T27726] netlink: 'syz.2.7036': attribute type 15 has an invalid length. [ 1886.348934][T27726] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1886.575059][T27731] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7038'. [ 1886.586201][T27731] openvswitch: netlink: Flow actions attr not present in new flow. [ 1886.696397][T27737] netlink: 'syz.3.7041': attribute type 10 has an invalid length. [ 1886.785556][T27737] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7041'. [ 1887.579149][T27759] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7049'. [ 1887.588257][T27759] openvswitch: netlink: Flow actions attr not present in new flow. [ 1887.793987][T20341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1887.805398][T20341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1887.814894][T20341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1887.824362][T20341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1887.839838][T20341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1887.848036][T20341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1887.990229][T12179] wlan1: Trigger new scan to find an IBSS to join [ 1888.121038][T27765] chnl_net:caif_netlink_parms(): no params data found [ 1888.210907][T27776] FAULT_INJECTION: forcing a failure. [ 1888.210907][T27776] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.248936][T27776] CPU: 1 PID: 27776 Comm: syz.3.7054 Not tainted syzkaller #0 [ 1888.256475][T27776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1888.266565][T27776] Call Trace: [ 1888.269882][T27776] [ 1888.272863][T27776] dump_stack_lvl+0x18c/0x250 [ 1888.277590][T27776] ? show_regs_print_info+0x20/0x20 [ 1888.282837][T27776] ? load_image+0x420/0x420 [ 1888.287396][T27776] ? __might_sleep+0xe0/0xe0 [ 1888.292032][T27776] ? __lock_acquire+0x7d80/0x7d80 [ 1888.297114][T27776] should_fail_ex+0x394/0x4c0 [ 1888.301865][T27776] should_failslab+0x9/0x20 [ 1888.306425][T27776] slab_pre_alloc_hook+0x59/0x300 [ 1888.311518][T27776] ? tomoyo_encode+0x2ad/0x570 [ 1888.316324][T27776] ? tomoyo_encode+0x2ad/0x570 [ 1888.321127][T27776] __kmem_cache_alloc_node+0x53/0x250 [ 1888.326558][T27776] ? tomoyo_encode+0x2ad/0x570 [ 1888.331365][T27776] __kmalloc+0xa7/0x240 [ 1888.335578][T27776] tomoyo_encode+0x2ad/0x570 [ 1888.340219][T27776] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1888.345899][T27776] ? tomoyo_domain+0xd6/0x120 [ 1888.350658][T27776] tomoyo_path_number_perm+0x248/0x5e0 [ 1888.356167][T27776] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1888.361845][T27776] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1888.367356][T27776] ? ksys_write+0x1d2/0x260 [ 1888.371921][T27776] ? __fget_files+0x28/0x460 [ 1888.376559][T27776] security_file_ioctl+0x70/0xa0 [ 1888.381530][T27776] __se_sys_ioctl+0x48/0x170 [ 1888.386159][T27776] do_syscall_64+0x55/0xb0 [ 1888.390611][T27776] ? clear_bhb_loop+0x40/0x90 [ 1888.395325][T27776] ? clear_bhb_loop+0x40/0x90 [ 1888.400032][T27776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.405975][T27776] RIP: 0033:0x7f836c59e159 [ 1888.410414][T27776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.430041][T27776] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1888.438476][T27776] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1888.446473][T27776] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 000000000000000b [ 1888.454458][T27776] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.462449][T27776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.470441][T27776] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1888.478461][T27776] [ 1888.492396][T27776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1888.502347][T27776] hsr0: entered promiscuous mode [ 1888.507501][T27776] hsr0: entered allmulticast mode [ 1888.524194][T27776] hsr_slave_0: entered allmulticast mode [ 1888.530548][T27776] hsr_slave_1: entered allmulticast mode [ 1888.651519][T27765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.659639][T27765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.666993][T27765] bridge_slave_0: entered allmulticast mode [ 1888.675169][T27765] bridge_slave_0: entered promiscuous mode [ 1888.684033][T27779] Ÿë: port 1(ip6gretap0) entered blocking state [ 1888.693034][T27779] Ÿë: port 1(ip6gretap0) entered disabled state [ 1888.700598][T27779] ip6gretap0: entered allmulticast mode [ 1888.736917][T27779] ip6gretap0: entered promiscuous mode [ 1888.777655][T27765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.791984][T27765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.804030][T27765] bridge_slave_1: entered allmulticast mode [ 1888.814004][T27765] bridge_slave_1: entered promiscuous mode [ 1888.824374][T27791] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1888.839629][T27791] openvswitch: netlink: Flow actions attr not present in new flow. [ 1888.954911][T27793] FAULT_INJECTION: forcing a failure. [ 1888.954911][T27793] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.974744][T27793] CPU: 0 PID: 27793 Comm: syz.3.7058 Not tainted syzkaller #0 [ 1888.982011][T27765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.982255][T27793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1889.001381][T27793] Call Trace: [ 1889.004693][T27793] [ 1889.007667][T27793] dump_stack_lvl+0x18c/0x250 [ 1889.012405][T27793] ? show_regs_print_info+0x20/0x20 [ 1889.017653][T27793] ? load_image+0x420/0x420 [ 1889.022199][T27793] ? __might_sleep+0xe0/0xe0 [ 1889.026817][T27793] ? __lock_acquire+0x7d80/0x7d80 [ 1889.031872][T27793] should_fail_ex+0x394/0x4c0 [ 1889.036623][T27793] should_failslab+0x9/0x20 [ 1889.041164][T27793] slab_pre_alloc_hook+0x59/0x300 [ 1889.046227][T27793] ? lockdep_hardirqs_on+0x98/0x150 [ 1889.051460][T27793] kmem_cache_alloc_node+0x5e/0x310 [ 1889.056695][T27793] ? __alloc_skb+0x103/0x2c0 [ 1889.061418][T27793] __alloc_skb+0x103/0x2c0 [ 1889.065892][T27793] netlink_sendmsg+0x66a/0xbf0 [ 1889.070708][T27793] ? aa_sock_msg_perm+0x94/0x150 [ 1889.075689][T27793] ? netlink_getsockopt+0x590/0x590 [ 1889.080927][T27793] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1889.086508][T27793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1889.091826][T27793] ? security_socket_sendmsg+0x80/0xa0 [ 1889.097312][T27793] ? netlink_getsockopt+0x590/0x590 [ 1889.102552][T27793] ____sys_sendmsg+0x61b/0x980 [ 1889.107350][T27793] ? __asan_memset+0x22/0x40 [ 1889.111972][T27793] ? __sys_sendmsg_sock+0x30/0x30 [ 1889.117016][T27793] ? __import_iovec+0x5f2/0x850 [ 1889.121913][T27793] ? import_iovec+0x73/0xa0 [ 1889.126457][T27793] ___sys_sendmsg+0x2a6/0x360 [ 1889.131176][T27793] ? __sys_sendmsg+0x2b0/0x2b0 [ 1889.136004][T27793] __se_sys_sendmsg+0x1d0/0x2c0 [ 1889.140882][T27793] ? __x64_sys_sendmsg+0x80/0x80 [ 1889.145869][T27793] ? lockdep_hardirqs_on+0x98/0x150 [ 1889.151098][T27793] do_syscall_64+0x55/0xb0 [ 1889.155540][T27793] ? clear_bhb_loop+0x40/0x90 [ 1889.160247][T27793] ? clear_bhb_loop+0x40/0x90 [ 1889.164949][T27793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.170868][T27793] RIP: 0033:0x7f836c59e159 [ 1889.175300][T27793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.194920][T27793] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1889.203347][T27793] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1889.211352][T27793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1889.219356][T27793] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.227347][T27793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.235335][T27793] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1889.243372][T27793] [ 1889.279755][T27765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.334304][T20418] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1889.385918][T27765] team0: Port device team_slave_0 added [ 1889.402480][T27765] team0: Port device team_slave_1 added [ 1889.436960][T27765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1889.444108][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.470289][T27765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.483345][T27765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.490444][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.528162][T27765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.620860][T27765] hsr_slave_0: entered promiscuous mode [ 1889.639169][T27765] hsr_slave_1: entered promiscuous mode [ 1889.659141][T27765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1889.683557][T27765] Cannot create hsr debugfs directory [ 1889.909915][T13351] Bluetooth: hci3: command tx timeout [ 1890.095487][T27765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.232838][T27816] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1890.252584][T27816] openvswitch: netlink: Flow actions attr not present in new flow. [ 1890.259567][T27765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.299016][T27818] netlink: 'syz.0.7066': attribute type 10 has an invalid length. [ 1890.307270][T27818] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1890.472687][T13351] Bluetooth: hci0: unexpected event 0x14 length: 151 > 6 [ 1890.494201][T27765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.604254][T27765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.633400][T27824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7070'. [ 1890.869835][T27765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1890.888168][T27765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1890.912306][T27765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1890.940461][T27765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1890.970904][T27831] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1891.009742][T27830] netlink: 'syz.3.7073': attribute type 39 has an invalid length. [ 1891.063597][T27831] netlink: 'syz.3.7073': attribute type 39 has an invalid length. [ 1891.167068][T27765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.197700][T27765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.213517][T22650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.220804][T22650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.242252][T20418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.249478][T20418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.403412][T27838] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1891.438963][T27838] openvswitch: netlink: Flow actions attr not present in new flow. [ 1891.450101][T27765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1891.488425][T27765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1891.706524][T27844] FAULT_INJECTION: forcing a failure. [ 1891.706524][T27844] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.762877][T27849] netlink: 'syz.3.7079': attribute type 10 has an invalid length. [ 1891.788501][T27844] CPU: 1 PID: 27844 Comm: syz.2.7077 Not tainted syzkaller #0 [ 1891.796073][T27844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1891.806204][T27844] Call Trace: [ 1891.809534][T27844] [ 1891.812519][T27844] dump_stack_lvl+0x18c/0x250 [ 1891.817263][T27844] ? show_regs_print_info+0x20/0x20 [ 1891.822513][T27844] ? load_image+0x420/0x420 [ 1891.827091][T27844] ? __might_sleep+0xe0/0xe0 [ 1891.831737][T27844] ? __lock_acquire+0x7d80/0x7d80 [ 1891.836825][T27844] should_fail_ex+0x394/0x4c0 [ 1891.841572][T27844] should_failslab+0x9/0x20 [ 1891.846136][T27844] slab_pre_alloc_hook+0x59/0x300 [ 1891.851228][T27844] ? __lock_acquire+0x7d80/0x7d80 [ 1891.856312][T27844] kmem_cache_alloc_node+0x5e/0x310 [ 1891.861564][T27844] ? __alloc_skb+0x103/0x2c0 [ 1891.866235][T27844] __alloc_skb+0x103/0x2c0 [ 1891.870796][T27844] netlink_sendmsg+0x66a/0xbf0 [ 1891.875631][T27844] ? netlink_getsockopt+0x590/0x590 [ 1891.880887][T27844] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1891.886487][T27844] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1891.891842][T27844] ? security_socket_sendmsg+0x80/0xa0 [ 1891.897370][T27844] ? netlink_getsockopt+0x590/0x590 [ 1891.902625][T27844] ____sys_sendmsg+0x61b/0x980 [ 1891.907446][T27844] ? __asan_memset+0x22/0x40 [ 1891.912089][T27844] ? __sys_sendmsg_sock+0x30/0x30 [ 1891.917160][T27844] ? __import_iovec+0x5f2/0x850 [ 1891.922086][T27844] ? import_iovec+0x73/0xa0 [ 1891.926660][T27844] ___sys_sendmsg+0x2a6/0x360 [ 1891.931412][T27844] ? __sys_sendmsg+0x2b0/0x2b0 [ 1891.936285][T27844] ? ktime_get+0x7f/0x280 [ 1891.940704][T27844] __se_sys_sendmsg+0x1d0/0x2c0 [ 1891.945612][T27844] ? perf_trace_preemptirq_template+0x269/0x330 [ 1891.951922][T27844] ? __x64_sys_sendmsg+0x80/0x80 [ 1891.956960][T27844] ? lockdep_hardirqs_on+0x98/0x150 [ 1891.962246][T27844] do_syscall_64+0x55/0xb0 [ 1891.966718][T27844] ? clear_bhb_loop+0x40/0x90 [ 1891.971462][T27844] ? clear_bhb_loop+0x40/0x90 [ 1891.976287][T27844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.982376][T27844] RIP: 0033:0x7fc003f9e159 [ 1891.986851][T27844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1892.006512][T27844] RSP: 002b:00007fc004e23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1892.014982][T27844] RAX: ffffffffffffffda RBX: 00007fc004225fa0 RCX: 00007fc003f9e159 [ 1892.022999][T27844] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1892.031016][T27844] RBP: 00007fc004e23090 R08: 0000000000000000 R09: 0000000000000000 [ 1892.039031][T27844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.047042][T27844] R13: 00007fc004226038 R14: 00007fc004225fa0 R15: 00007ffd8a4e0208 [ 1892.055126][T27844] [ 1892.065759][T27855] netlink: 'syz.3.7079': attribute type 10 has an invalid length. [ 1892.091062][T13351] Bluetooth: hci3: command tx timeout [ 1892.335421][T27765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1892.421415][T27765] veth0_vlan: entered promiscuous mode [ 1892.455149][T27867] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7085'. [ 1892.464691][T27765] veth1_vlan: entered promiscuous mode [ 1892.478505][T27867] openvswitch: netlink: Flow actions attr not present in new flow. [ 1892.533967][T27765] veth0_macvtap: entered promiscuous mode [ 1892.554203][T27765] veth1_macvtap: entered promiscuous mode [ 1892.611292][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.631350][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.651781][T27765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1892.672893][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.689961][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.704777][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.716576][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.727087][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.737930][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.748050][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.759439][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.771450][T27765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.804878][T27765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.813667][T27873] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1892.831059][T27765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.841046][T27765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.853982][T27765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.027469][T12179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.040713][T27875] FAULT_INJECTION: forcing a failure. [ 1893.040713][T27875] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.046161][T12179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.085064][T27875] CPU: 1 PID: 27875 Comm: syz.3.7089 Not tainted syzkaller #0 [ 1893.092608][T27875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1893.102702][T27875] Call Trace: [ 1893.106007][T27875] [ 1893.108966][T27875] dump_stack_lvl+0x18c/0x250 [ 1893.113683][T27875] ? show_regs_print_info+0x20/0x20 [ 1893.118925][T27875] ? load_image+0x420/0x420 [ 1893.123452][T27875] ? __might_sleep+0xe0/0xe0 [ 1893.128065][T27875] ? __lock_acquire+0x7d80/0x7d80 [ 1893.133125][T27875] should_fail_ex+0x394/0x4c0 [ 1893.137834][T27875] should_failslab+0x9/0x20 [ 1893.142362][T27875] slab_pre_alloc_hook+0x59/0x300 [ 1893.147420][T27875] ? prepend_path+0x8a7/0x950 [ 1893.152123][T27875] ? tomoyo_encode+0x2ad/0x570 [ 1893.156910][T27875] ? tomoyo_encode+0x2ad/0x570 [ 1893.161685][T27875] __kmem_cache_alloc_node+0x53/0x250 [ 1893.167084][T27875] ? tomoyo_encode+0x2ad/0x570 [ 1893.171879][T27875] __kmalloc+0xa7/0x240 [ 1893.176075][T27875] tomoyo_encode+0x2ad/0x570 [ 1893.180688][T27875] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1893.186338][T27875] ? tomoyo_domain+0xd6/0x120 [ 1893.191045][T27875] tomoyo_path_number_perm+0x248/0x5e0 [ 1893.196531][T27875] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1893.202190][T27875] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1893.207678][T27875] ? ksys_write+0x1d2/0x260 [ 1893.212231][T27875] ? __fget_files+0x28/0x460 [ 1893.216859][T27875] security_file_ioctl+0x70/0xa0 [ 1893.221831][T27875] __se_sys_ioctl+0x48/0x170 [ 1893.226457][T27875] do_syscall_64+0x55/0xb0 [ 1893.230903][T27875] ? clear_bhb_loop+0x40/0x90 [ 1893.235609][T27875] ? clear_bhb_loop+0x40/0x90 [ 1893.240320][T27875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1893.246247][T27875] RIP: 0033:0x7f836c59e159 [ 1893.250690][T27875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.270321][T27875] RSP: 002b:00007f836d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1893.278756][T27875] RAX: ffffffffffffffda RBX: 00007f836c825fa0 RCX: 00007f836c59e159 [ 1893.286745][T27875] RDX: 0000200000000a80 RSI: 00000000400454ca RDI: 0000000000000006 [ 1893.294756][T27875] RBP: 00007f836d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.302769][T27875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.310770][T27875] R13: 00007f836c826038 R14: 00007f836c825fa0 R15: 00007ffe0570b518 [ 1893.318780][T27875] [ 1893.410879][T27875] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1893.420983][T12179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.498519][T12179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.148486][T13351] Bluetooth: hci3: command tx timeout [ 1894.172490][T27891] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7094'. [ 1894.182214][T27891] openvswitch: netlink: Flow actions attr not present in new flow. [ 1894.387590][T27902] FAULT_INJECTION: forcing a failure. [ 1894.387590][T27902] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.446648][T27900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.456483][T27900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.471827][T27902] CPU: 1 PID: 27902 Comm: syz.2.7096 Not tainted syzkaller #0 [ 1894.479361][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1894.489459][T27902] Call Trace: [ 1894.492786][T27902] [ 1894.495754][T27902] dump_stack_lvl+0x18c/0x250 [ 1894.500487][T27900] bridge0: entered allmulticast mode [ 1894.500492][T27902] ? show_regs_print_info+0x20/0x20 [ 1894.505821][T27902] ? load_image+0x420/0x420 [ 1894.505854][T27902] ? __might_sleep+0xe0/0xe0 [ 1894.505883][T27902] ? __lock_acquire+0x7d80/0x7d80 [ 1894.505916][T27902] should_fail_ex+0x394/0x4c0 [ 1894.505953][T27902] should_failslab+0x9/0x20 [ 1894.534561][T27902] slab_pre_alloc_hook+0x59/0x300 [ 1894.539645][T27902] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1894.545422][T27902] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1894.551212][T27902] __kmem_cache_alloc_node+0x53/0x250 [ 1894.556660][T27902] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1894.562428][T27902] __kmalloc+0xa7/0x240 [ 1894.566645][T27902] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1894.572244][T27902] ? tomoyo_domain+0xd6/0x120 [ 1894.576991][T27902] tomoyo_path_number_perm+0x248/0x5e0 [ 1894.582507][T27902] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1894.588188][T27902] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1894.593686][T27902] ? ksys_write+0x1d2/0x260 [ 1894.598241][T27902] ? __fget_files+0x28/0x460 [ 1894.602879][T27902] security_file_ioctl+0x70/0xa0 [ 1894.607933][T27902] __se_sys_ioctl+0x48/0x170 [ 1894.612558][T27902] do_syscall_64+0x55/0xb0 [ 1894.617021][T27902] ? clear_bhb_loop+0x40/0x90 [ 1894.621724][T27902] ? clear_bhb_loop+0x40/0x90 [ 1894.626429][T27902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1894.632367][T27902] RIP: 0033:0x7fc003f9e159 [ 1894.636802][T27902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.656436][T27902] RSP: 002b:00007fc004e02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1894.664871][T27902] RAX: ffffffffffffffda RBX: 00007fc004226090 RCX: 00007fc003f9e159 [ 1894.672863][T27902] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 000000000000000c [ 1894.680853][T27902] RBP: 00007fc004e02090 R08: 0000000000000000 R09: 0000000000000000 [ 1894.688848][T27902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.696842][T27902] R13: 00007fc004226128 R14: 00007fc004226090 R15: 00007ffd8a4e0208 [ 1894.704850][T27902] [ 1894.765043][T27902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1894.809503][T27900] bridge_slave_1: left allmulticast mode [ 1894.815463][T27900] bridge_slave_1: left promiscuous mode [ 1894.822752][T27900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.844971][T27900] bridge_slave_0: left allmulticast mode [ 1894.854953][T27900] bridge_slave_0: left promiscuous mode [ 1894.866785][T27900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.332869][T27923] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7104'. [ 1895.342846][T27923] openvswitch: netlink: Flow actions attr not present in new flow. [ 1895.592500][T27927] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1895.790160][T27936] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7109'. [ 1895.807716][T27936] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1895.954832][T27941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1895.991064][T27939] FAULT_INJECTION: forcing a failure. [ 1895.991064][T27939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.007739][T27939] CPU: 0 PID: 27939 Comm: syz.1.7110 Not tainted syzkaller #0 [ 1896.015278][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1896.025383][T27939] Call Trace: [ 1896.028735][T27939] [ 1896.031712][T27939] dump_stack_lvl+0x18c/0x250 [ 1896.036457][T27939] ? show_regs_print_info+0x20/0x20 [ 1896.041712][T27939] ? load_image+0x420/0x420 [ 1896.046267][T27939] ? __lock_acquire+0x7d80/0x7d80 [ 1896.051345][T27939] ? snprintf+0xe9/0x140 [ 1896.055638][T27939] should_fail_ex+0x394/0x4c0 [ 1896.060386][T27939] _copy_to_user+0x2f/0xa0 [ 1896.064946][T27939] simple_read_from_buffer+0xe7/0x150 [ 1896.070373][T27939] proc_fail_nth_read+0x1e8/0x260 [ 1896.075458][T27939] ? proc_fault_inject_write+0x360/0x360 [ 1896.081151][T27939] ? fsnotify_perm+0x271/0x5e0 [ 1896.085979][T27939] ? proc_fault_inject_write+0x360/0x360 [ 1896.091665][T27939] vfs_read+0x298/0x990 [ 1896.095881][T27939] ? kernel_read+0x1e0/0x1e0 [ 1896.100529][T27939] ? __fget_files+0x28/0x460 [ 1896.105166][T27939] ? __fget_files+0x3fc/0x460 [ 1896.109892][T27939] ? __fdget_pos+0x2a3/0x330 [ 1896.114539][T27939] ? ksys_read+0x74/0x260 [ 1896.118926][T27939] ksys_read+0x151/0x260 [ 1896.123226][T27939] ? vfs_write+0x9a0/0x9a0 [ 1896.127705][T27939] ? lockdep_hardirqs_on+0x98/0x150 [ 1896.132953][T27939] do_syscall_64+0x55/0xb0 [ 1896.137422][T27939] ? clear_bhb_loop+0x40/0x90 [ 1896.142149][T27939] ? clear_bhb_loop+0x40/0x90 [ 1896.146882][T27939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.152836][T27939] RIP: 0033:0x7fdac795e98e [ 1896.157290][T27939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1896.176945][T27939] RSP: 002b:00007fdac88c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1896.185413][T27939] RAX: ffffffffffffffda RBX: 00007fdac88c36c0 RCX: 00007fdac795e98e [ 1896.193427][T27939] RDX: 000000000000000f RSI: 00007fdac88c30a0 RDI: 0000000000000004 [ 1896.201441][T27939] RBP: 00007fdac88c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1896.209454][T27939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.217464][T27939] R13: 00007fdac7c26038 R14: 00007fdac7c25fa0 R15: 00007ffd994e74a8 [ 1896.225499][T27939] [ 1896.238517][T13351] Bluetooth: hci3: command tx timeout [ 1897.516800][T27967] FAULT_INJECTION: forcing a failure. [ 1897.516800][T27967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.536570][T27967] CPU: 0 PID: 27967 Comm: syz.1.7122 Not tainted syzkaller #0 [ 1897.544178][T27967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1897.554265][T27967] Call Trace: [ 1897.557575][T27967] [ 1897.560537][T27967] dump_stack_lvl+0x18c/0x250 [ 1897.565273][T27967] ? show_regs_print_info+0x20/0x20 [ 1897.570529][T27967] ? load_image+0x420/0x420 [ 1897.575084][T27967] ? __lock_acquire+0x7d80/0x7d80 [ 1897.580159][T27967] ? snprintf+0xe9/0x140 [ 1897.584454][T27967] should_fail_ex+0x394/0x4c0 [ 1897.589194][T27967] _copy_to_user+0x2f/0xa0 [ 1897.593658][T27967] simple_read_from_buffer+0xe7/0x150 [ 1897.599085][T27967] proc_fail_nth_read+0x1e8/0x260 [ 1897.604173][T27967] ? proc_fault_inject_write+0x360/0x360 [ 1897.609874][T27967] ? fsnotify_perm+0x271/0x5e0 [ 1897.614700][T27967] ? proc_fault_inject_write+0x360/0x360 [ 1897.620395][T27967] vfs_read+0x298/0x990 [ 1897.624632][T27967] ? kernel_read+0x1e0/0x1e0 [ 1897.629285][T27967] ? __fget_files+0x28/0x460 [ 1897.633938][T27967] ? __fget_files+0x3fc/0x460 [ 1897.638687][T27967] ? __fdget_pos+0x2a3/0x330 [ 1897.643333][T27967] ? ksys_read+0x74/0x260 [ 1897.647719][T27967] ksys_read+0x151/0x260 [ 1897.652019][T27967] ? vfs_write+0x9a0/0x9a0 [ 1897.656500][T27967] ? lockdep_hardirqs_on+0x98/0x150 [ 1897.661760][T27967] do_syscall_64+0x55/0xb0 [ 1897.666230][T27967] ? clear_bhb_loop+0x40/0x90 [ 1897.670969][T27967] ? clear_bhb_loop+0x40/0x90 [ 1897.675709][T27967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1897.681658][T27967] RIP: 0033:0x7fdac795e98e [ 1897.686132][T27967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1897.705791][T27967] RSP: 002b:00007fdac88c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1897.714271][T27967] RAX: ffffffffffffffda RBX: 00007fdac88c36c0 RCX: 00007fdac795e98e [ 1897.722288][T27967] RDX: 000000000000000f RSI: 00007fdac88c30a0 RDI: 0000000000000003 [ 1897.730301][T27967] RBP: 00007fdac88c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1897.738330][T27967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.746344][T27967] R13: 00007fdac7c26038 R14: 00007fdac7c25fa0 R15: 00007ffd994e74a8 [ 1897.754372][T27967] [ 1898.900888][T28001] FAULT_INJECTION: forcing a failure. [ 1898.900888][T28001] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.932777][T28001] CPU: 1 PID: 28001 Comm: syz.2.7132 Not tainted syzkaller #0 [ 1898.940317][T28001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1898.950414][T28001] Call Trace: [ 1898.953728][T28001] [ 1898.956700][T28001] dump_stack_lvl+0x18c/0x250 [ 1898.961446][T28001] ? show_regs_print_info+0x20/0x20 [ 1898.966711][T28001] ? load_image+0x420/0x420 [ 1898.971274][T28001] ? __might_sleep+0xe0/0xe0 [ 1898.975915][T28001] ? __lock_acquire+0x7d80/0x7d80 [ 1898.981001][T28001] should_fail_ex+0x394/0x4c0 [ 1898.985739][T28001] should_failslab+0x9/0x20 [ 1898.990295][T28001] slab_pre_alloc_hook+0x59/0x300 [ 1898.995376][T28001] ? __lock_acquire+0x7d80/0x7d80 [ 1899.000464][T28001] kmem_cache_alloc_node+0x5e/0x310 [ 1899.005729][T28001] ? __alloc_skb+0x103/0x2c0 [ 1899.010378][T28001] __alloc_skb+0x103/0x2c0 [ 1899.014846][T28001] netlink_sendmsg+0x66a/0xbf0 [ 1899.019672][T28001] ? netlink_getsockopt+0x590/0x590 [ 1899.024931][T28001] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1899.030536][T28001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1899.035888][T28001] ? security_socket_sendmsg+0x80/0xa0 [ 1899.041406][T28001] ? netlink_getsockopt+0x590/0x590 [ 1899.046657][T28001] ____sys_sendmsg+0x61b/0x980 [ 1899.051480][T28001] ? __asan_memset+0x22/0x40 [ 1899.056126][T28001] ? __sys_sendmsg_sock+0x30/0x30 [ 1899.061204][T28001] ? __import_iovec+0x5f2/0x850 [ 1899.066119][T28001] ? import_iovec+0x73/0xa0 [ 1899.070686][T28001] ___sys_sendmsg+0x2a6/0x360 [ 1899.075412][T28001] ? get_pid_task+0x20/0x1e0 [ 1899.080086][T28001] ? __sys_sendmsg+0x2b0/0x2b0 [ 1899.084921][T28001] ? __lock_acquire+0x7d80/0x7d80 [ 1899.090026][T28001] __se_sys_sendmsg+0x1d0/0x2c0 [ 1899.094929][T28001] ? __x64_sys_sendmsg+0x80/0x80 [ 1899.100020][T28001] ? lockdep_hardirqs_on+0x98/0x150 [ 1899.105274][T28001] do_syscall_64+0x55/0xb0 [ 1899.109747][T28001] ? clear_bhb_loop+0x40/0x90 [ 1899.114477][T28001] ? clear_bhb_loop+0x40/0x90 [ 1899.119203][T28001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1899.125152][T28001] RIP: 0033:0x7fc003f9e159 [ 1899.129608][T28001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.149262][T28001] RSP: 002b:00007fc004dc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1899.157723][T28001] RAX: ffffffffffffffda RBX: 00007fc004226270 RCX: 00007fc003f9e159 [ 1899.165735][T28001] RDX: 0000000000048040 RSI: 0000200000000940 RDI: 000000000000000c [ 1899.173759][T28001] RBP: 00007fc004dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.181778][T28001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1899.189796][T28001] R13: 00007fc004226308 R14: 00007fc004226270 R15: 00007ffd8a4e0208 [ 1899.197833][T28001] [ 1901.229701][T27994] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1901.247583][T27994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1901.524821][T28010] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1903.393206][T28010] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1905.189304][T22650] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1906.481919][T28075] netlink: 'syz.1.7157': attribute type 10 has an invalid length. [ 1906.560217][T28078] FAULT_INJECTION: forcing a failure. [ 1906.560217][T28078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.587910][T28071] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7157'. [ 1906.597497][T28078] CPU: 0 PID: 28078 Comm: syz.0.7159 Not tainted syzkaller #0 [ 1906.605017][T28078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1906.615109][T28078] Call Trace: [ 1906.618424][T28078] [ 1906.621389][T28078] dump_stack_lvl+0x18c/0x250 [ 1906.626124][T28078] ? show_regs_print_info+0x20/0x20 [ 1906.631381][T28078] ? load_image+0x420/0x420 [ 1906.635953][T28078] ? __might_fault+0xaa/0x120 [ 1906.640666][T28078] ? __lock_acquire+0x7d80/0x7d80 [ 1906.645732][T28078] should_fail_ex+0x394/0x4c0 [ 1906.650437][T28078] _copy_from_user+0x2f/0xe0 [ 1906.655055][T28078] ___sys_sendmsg+0x1c7/0x360 [ 1906.659762][T28078] ? get_pid_task+0x20/0x1e0 [ 1906.664398][T28078] ? __sys_sendmsg+0x2b0/0x2b0 [ 1906.669221][T28078] ? __lock_acquire+0x7d80/0x7d80 [ 1906.674299][T28078] __se_sys_sendmsg+0x1d0/0x2c0 [ 1906.679202][T28078] ? __x64_sys_sendmsg+0x80/0x80 [ 1906.684184][T28078] ? lockdep_hardirqs_on+0x98/0x150 [ 1906.689408][T28078] do_syscall_64+0x55/0xb0 [ 1906.693846][T28078] ? clear_bhb_loop+0x40/0x90 [ 1906.698543][T28078] ? clear_bhb_loop+0x40/0x90 [ 1906.703288][T28078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.709211][T28078] RIP: 0033:0x7fd04bb9e159 [ 1906.713650][T28078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.733284][T28078] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.741721][T28078] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1906.749716][T28078] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1906.757715][T28078] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.765703][T28078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.773690][T28078] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1906.781779][T28078] [ 1907.516732][T28100] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1908.106865][T20341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1908.116549][T20341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1908.128675][T20341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1908.140932][T20341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1908.153549][T20341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1908.161670][T20341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1908.520830][T28109] chnl_net:caif_netlink_parms(): no params data found [ 1908.674118][T28109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.682174][T28109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.690518][T28109] bridge_slave_0: entered allmulticast mode [ 1908.699693][T28109] bridge_slave_0: entered promiscuous mode [ 1908.716866][T28109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.724472][T28109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.732047][T28109] bridge_slave_1: entered allmulticast mode [ 1908.740506][T28109] bridge_slave_1: entered promiscuous mode [ 1908.782343][T28109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.796086][T28109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.839137][T28109] team0: Port device team_slave_0 added [ 1908.848007][T28109] team0: Port device team_slave_1 added [ 1908.883805][T28109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.891000][T28109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.917632][T28109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.940618][T28109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.947944][T28109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1909.015620][T28109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.099128][T28109] hsr_slave_0: entered promiscuous mode [ 1909.106422][T28109] hsr_slave_1: entered promiscuous mode [ 1909.114146][T28109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1909.123458][T28109] Cannot create hsr debugfs directory [ 1909.293332][T28128] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1909.321792][T28128] netlink: 'syz.0.7173': attribute type 10 has an invalid length. [ 1909.334944][T28128] macvlan0: entered promiscuous mode [ 1909.342352][T28128] macvlan0: entered allmulticast mode [ 1909.395335][T28128] veth1_vlan: entered allmulticast mode [ 1909.408087][T28128] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1909.492633][T28109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.715872][T28109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.861479][T28109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.949951][T28139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1909.972885][T28139] FAULT_INJECTION: forcing a failure. [ 1909.972885][T28139] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.999046][T28139] CPU: 0 PID: 28139 Comm: syz.1.7180 Not tainted syzkaller #0 [ 1910.006582][T28139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1910.016679][T28139] Call Trace: [ 1910.020010][T28139] [ 1910.022968][T28139] dump_stack_lvl+0x18c/0x250 [ 1910.027694][T28139] ? show_regs_print_info+0x20/0x20 [ 1910.032982][T28139] ? load_image+0x420/0x420 [ 1910.037535][T28139] ? __might_sleep+0xe0/0xe0 [ 1910.042173][T28139] ? __lock_acquire+0x7d80/0x7d80 [ 1910.047249][T28139] should_fail_ex+0x394/0x4c0 [ 1910.052002][T28139] should_failslab+0x9/0x20 [ 1910.056548][T28139] slab_pre_alloc_hook+0x59/0x300 [ 1910.061622][T28139] ? __lock_acquire+0x7d80/0x7d80 [ 1910.066688][T28139] kmem_cache_alloc_node+0x5e/0x310 [ 1910.071940][T28139] ? __alloc_skb+0x103/0x2c0 [ 1910.076585][T28139] __alloc_skb+0x103/0x2c0 [ 1910.081053][T28139] netlink_sendmsg+0x66a/0xbf0 [ 1910.085874][T28139] ? netlink_getsockopt+0x590/0x590 [ 1910.091116][T28139] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1910.096718][T28139] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1910.102053][T28139] ? security_socket_sendmsg+0x80/0xa0 [ 1910.107559][T28139] ? netlink_getsockopt+0x590/0x590 [ 1910.112827][T28139] ____sys_sendmsg+0x61b/0x980 [ 1910.117631][T28139] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1910.123850][T28139] ? __asan_memset+0x22/0x40 [ 1910.128490][T28139] ? __sys_sendmsg_sock+0x30/0x30 [ 1910.133560][T28139] ? __import_iovec+0x5f2/0x850 [ 1910.138471][T28139] ? import_iovec+0x73/0xa0 [ 1910.143035][T28139] ___sys_sendmsg+0x2a6/0x360 [ 1910.147761][T28139] ? __sys_sendmsg+0x2b0/0x2b0 [ 1910.152596][T28139] ? ktime_get+0x7f/0x280 [ 1910.156971][T28139] ? trace_call_bpf+0xc3/0x6c0 [ 1910.161794][T28139] __se_sys_sendmsg+0x1d0/0x2c0 [ 1910.166686][T28139] ? perf_trace_preemptirq_template+0x269/0x330 [ 1910.172980][T28139] ? __x64_sys_sendmsg+0x80/0x80 [ 1910.178336][T28139] ? lockdep_hardirqs_on+0x98/0x150 [ 1910.183591][T28139] do_syscall_64+0x55/0xb0 [ 1910.188073][T28139] ? clear_bhb_loop+0x40/0x90 [ 1910.192798][T28139] ? clear_bhb_loop+0x40/0x90 [ 1910.197523][T28139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1910.203462][T28139] RIP: 0033:0x7fdac799e159 [ 1910.208003][T28139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.227650][T28139] RSP: 002b:00007fdac88c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.236106][T28139] RAX: ffffffffffffffda RBX: 00007fdac7c25fa0 RCX: 00007fdac799e159 [ 1910.244124][T28139] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1910.252177][T28139] RBP: 00007fdac88c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.260197][T28139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.268207][T28139] R13: 00007fdac7c26038 R14: 00007fdac7c25fa0 R15: 00007ffd994e74a8 [ 1910.276223][T28139] [ 1910.289359][T20341] Bluetooth: hci4: command tx timeout [ 1910.303271][T28109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.537113][T28109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1910.547840][T28109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1910.558716][T28109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1910.569706][T28109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1910.656102][T28109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.680007][T28109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.692956][T22650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.700153][T22650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.722545][T20418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.729802][T20418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.978098][T28109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.027965][T28109] veth0_vlan: entered promiscuous mode [ 1911.042723][T28109] veth1_vlan: entered promiscuous mode [ 1911.083440][T28109] veth0_macvtap: entered promiscuous mode [ 1911.093274][T28109] veth1_macvtap: entered promiscuous mode [ 1911.116039][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1911.128081][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.138983][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1911.150756][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.163074][T28109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.178580][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1911.189319][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.199805][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1911.210601][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.221403][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1911.233306][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.243392][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1911.254252][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.267271][T28109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1911.278036][T28109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.290150][T28109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.308876][T28109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.317708][T28109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.327989][T28109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.341978][T28109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.443678][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.462916][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.492448][T22650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.500911][T22650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.108082][T28169] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1912.315395][T20341] Bluetooth: hci4: command tx timeout [ 1912.591633][T28186] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1912.632572][T28185] netlink: 'syz.2.7196': attribute type 1 has an invalid length. [ 1912.695296][T28185] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7196'. [ 1912.736356][T28185] netlink: 'syz.2.7196': attribute type 1 has an invalid length. [ 1912.754989][T28190] FAULT_INJECTION: forcing a failure. [ 1912.754989][T28190] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.769448][T28190] CPU: 1 PID: 28190 Comm: syz.0.7197 Not tainted syzkaller #0 [ 1912.776969][T28190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1912.787081][T28190] Call Trace: [ 1912.790394][T28190] [ 1912.793391][T28190] dump_stack_lvl+0x18c/0x250 [ 1912.798145][T28190] ? show_regs_print_info+0x20/0x20 [ 1912.803441][T28190] ? load_image+0x420/0x420 [ 1912.807995][T28190] ? __might_sleep+0xe0/0xe0 [ 1912.812634][T28190] ? __lock_acquire+0x7d80/0x7d80 [ 1912.817709][T28190] ? mark_lock+0x94/0x320 [ 1912.822104][T28190] should_fail_ex+0x394/0x4c0 [ 1912.826843][T28190] should_failslab+0x9/0x20 [ 1912.831408][T28190] slab_pre_alloc_hook+0x59/0x300 [ 1912.836507][T28190] ? __get_vm_area_node+0x125/0x370 [ 1912.841762][T28190] __kmem_cache_alloc_node+0x53/0x250 [ 1912.847198][T28190] ? __get_vm_area_node+0x125/0x370 [ 1912.852459][T28190] kmalloc_node_trace+0x26/0xe0 [ 1912.857361][T28190] __get_vm_area_node+0x125/0x370 [ 1912.862679][T28190] __vmalloc_node_range+0x36f/0x1320 [ 1912.868042][T28190] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1912.873639][T28190] ? mark_lock+0x94/0x320 [ 1912.878033][T28190] ? __lock_acquire+0x1336/0x7d80 [ 1912.883126][T28190] ? aa_get_newest_label+0xfd/0x5c0 [ 1912.888395][T28190] ? free_vm_area+0x50/0x50 [ 1912.892950][T28190] ? end_current_label_crit_section+0x170/0x170 [ 1912.899250][T28190] ? verify_lock_unused+0x140/0x140 [ 1912.904501][T28190] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1912.906422][T28181] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7189'. [ 1912.910090][T28190] __vmalloc+0x7a/0x90 [ 1912.910124][T28190] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1912.910154][T28190] bpf_prog_alloc_no_stats+0x46/0x430 [ 1912.934237][T28190] bpf_prog_alloc+0x3d/0x1a0 [ 1912.938889][T28190] bpf_prog_load+0x6b2/0x1610 [ 1912.943626][T28190] ? map_freeze+0x420/0x420 [ 1912.948180][T28190] ? __might_fault+0xaa/0x120 [ 1912.952912][T28190] ? __lock_acquire+0x7d80/0x7d80 [ 1912.957986][T28190] ? file_end_write+0x159/0x250 [ 1912.962892][T28190] ? __might_fault+0xaa/0x120 [ 1912.967614][T28190] ? __might_fault+0xc6/0x120 [ 1912.972330][T28190] ? __might_fault+0xaa/0x120 [ 1912.977081][T28190] ? bpf_lsm_bpf+0x9/0x10 [ 1912.981469][T28190] ? security_bpf+0x7e/0xa0 [ 1912.986022][T28190] __sys_bpf+0x5ba/0x890 [ 1912.990308][T28190] ? bpf_link_show_fdinfo+0x560/0x560 [ 1912.995738][T28190] ? lock_chain_count+0x20/0x20 [ 1913.000648][T28190] __x64_sys_bpf+0x7c/0x90 [ 1913.005108][T28190] do_syscall_64+0x55/0xb0 [ 1913.009578][T28190] ? clear_bhb_loop+0x40/0x90 [ 1913.014304][T28190] ? clear_bhb_loop+0x40/0x90 [ 1913.019040][T28190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.020597][T28181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1913.024964][T28190] RIP: 0033:0x7fd04bb9e159 [ 1913.024988][T28190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.025010][T28190] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1913.072614][T28190] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1913.080624][T28190] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1913.088648][T28190] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1913.096687][T28190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1913.104716][T28190] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1913.112742][T28190] [ 1913.118835][T28186] netlink: 'syz.3.7193': attribute type 10 has an invalid length. [ 1913.132789][T28190] syz.0.7197: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1913.149530][T28186] macvlan0: entered promiscuous mode [ 1913.154878][T28186] macvlan0: entered allmulticast mode [ 1913.167766][T28186] veth1_vlan: entered allmulticast mode [ 1913.188558][T28190] CPU: 1 PID: 28190 Comm: syz.0.7197 Not tainted syzkaller #0 [ 1913.196120][T28190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1913.206215][T28190] Call Trace: [ 1913.209532][T28190] [ 1913.212500][T28190] dump_stack_lvl+0x18c/0x250 [ 1913.217226][T28190] ? show_regs_print_info+0x20/0x20 [ 1913.222464][T28190] ? load_image+0x420/0x420 [ 1913.227006][T28190] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1913.233470][T28190] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1913.240038][T28190] warn_alloc+0x246/0x340 [ 1913.244415][T28190] ? __get_vm_area_node+0x125/0x370 [ 1913.249671][T28190] ? zone_watermark_ok_safe+0x230/0x230 [ 1913.255263][T28190] ? rcu_is_watching+0x15/0xb0 [ 1913.260083][T28190] ? __get_vm_area_node+0x356/0x370 [ 1913.265399][T28190] __vmalloc_node_range+0x394/0x1320 [ 1913.270745][T28190] ? mark_lock+0x94/0x320 [ 1913.275122][T28190] ? __lock_acquire+0x1336/0x7d80 [ 1913.280203][T28190] ? aa_get_newest_label+0xfd/0x5c0 [ 1913.285442][T28190] ? free_vm_area+0x50/0x50 [ 1913.289993][T28190] ? end_current_label_crit_section+0x170/0x170 [ 1913.296275][T28190] ? verify_lock_unused+0x140/0x140 [ 1913.301539][T28190] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1913.307131][T28190] __vmalloc+0x7a/0x90 [ 1913.310330][T28186] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1913.311238][T28190] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1913.325501][T28190] bpf_prog_alloc_no_stats+0x46/0x430 [ 1913.330919][T28190] bpf_prog_alloc+0x3d/0x1a0 [ 1913.335555][T28190] bpf_prog_load+0x6b2/0x1610 [ 1913.340284][T28190] ? map_freeze+0x420/0x420 [ 1913.344849][T28190] ? __might_fault+0xaa/0x120 [ 1913.349602][T28190] ? __lock_acquire+0x7d80/0x7d80 [ 1913.354677][T28190] ? file_end_write+0x159/0x250 [ 1913.359591][T28190] ? __might_fault+0xaa/0x120 [ 1913.364315][T28190] ? __might_fault+0xc6/0x120 [ 1913.369036][T28190] ? __might_fault+0xaa/0x120 [ 1913.373757][T28190] ? bpf_lsm_bpf+0x9/0x10 [ 1913.378144][T28190] ? security_bpf+0x7e/0xa0 [ 1913.382707][T28190] __sys_bpf+0x5ba/0x890 [ 1913.387009][T28190] ? bpf_link_show_fdinfo+0x560/0x560 [ 1913.392442][T28190] ? lock_chain_count+0x20/0x20 [ 1913.397353][T28190] __x64_sys_bpf+0x7c/0x90 [ 1913.401821][T28190] do_syscall_64+0x55/0xb0 [ 1913.406295][T28190] ? clear_bhb_loop+0x40/0x90 [ 1913.411025][T28190] ? clear_bhb_loop+0x40/0x90 [ 1913.415761][T28190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.421703][T28190] RIP: 0033:0x7fd04bb9e159 [ 1913.426189][T28190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.445841][T28190] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1913.454308][T28190] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1913.462393][T28190] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1913.470383][T28190] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1913.478466][T28190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1913.486474][T28190] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1913.494505][T28190] [ 1913.528486][T28190] Mem-Info: [ 1913.531864][T28190] active_anon:5304 inactive_anon:0 isolated_anon:0 [ 1913.531864][T28190] active_file:19251 inactive_file:40540 isolated_file:0 [ 1913.531864][T28190] unevictable:768 dirty:569 writeback:0 [ 1913.531864][T28190] slab_reclaimable:11333 slab_unreclaimable:99823 [ 1913.531864][T28190] mapped:26946 shmem:1361 pagetables:535 [ 1913.531864][T28190] sec_pagetables:0 bounce:0 [ 1913.531864][T28190] kernel_misc_reclaimable:0 [ 1913.531864][T28190] free:1336263 free_pcp:10819 free_cma:0 [ 1913.601305][T28190] Node 0 active_anon:21216kB inactive_anon:0kB active_file:77004kB inactive_file:161960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107784kB dirty:2276kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10568kB pagetables:2140kB sec_pagetables:0kB all_unreclaimable? no [ 1913.636272][T28190] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1913.669602][T28190] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1913.697917][T28190] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1913.704015][T28190] Node 0 DMA32 free:1442212kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21180kB inactive_anon:0kB active_file:77004kB inactive_file:161136kB unevictable:1536kB writepending:2272kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:23392kB local_pcp:6176kB free_cma:0kB [ 1913.737580][T28194] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1913.748926][T28194] FAULT_INJECTION: forcing a failure. [ 1913.748926][T28194] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.761684][T28190] lowmem_reserve[]: 0 0 0 0 0 [ 1913.766458][T28190] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1913.799547][T28194] CPU: 0 PID: 28194 Comm: syz.2.7198 Not tainted syzkaller #0 [ 1913.807073][T28194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1913.817164][T28194] Call Trace: [ 1913.820481][T28194] [ 1913.823454][T28194] dump_stack_lvl+0x18c/0x250 [ 1913.828191][T28194] ? show_regs_print_info+0x20/0x20 [ 1913.833440][T28194] ? load_image+0x420/0x420 [ 1913.837981][T28194] ? __might_sleep+0xe0/0xe0 [ 1913.842603][T28194] ? __lock_acquire+0x7d80/0x7d80 [ 1913.847660][T28194] should_fail_ex+0x394/0x4c0 [ 1913.852375][T28194] should_failslab+0x9/0x20 [ 1913.856910][T28194] slab_pre_alloc_hook+0x59/0x300 [ 1913.861972][T28194] ? __lock_acquire+0x7d80/0x7d80 [ 1913.867025][T28194] kmem_cache_alloc_node+0x5e/0x310 [ 1913.872342][T28194] ? __alloc_skb+0x103/0x2c0 [ 1913.876957][T28194] __alloc_skb+0x103/0x2c0 [ 1913.881399][T28194] netlink_sendmsg+0x66a/0xbf0 [ 1913.886203][T28194] ? netlink_getsockopt+0x590/0x590 [ 1913.891438][T28194] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1913.897007][T28194] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1913.902316][T28194] ? security_socket_sendmsg+0x80/0xa0 [ 1913.907793][T28194] ? netlink_getsockopt+0x590/0x590 [ 1913.913015][T28194] ____sys_sendmsg+0x61b/0x980 [ 1913.917813][T28194] ? __asan_memset+0x22/0x40 [ 1913.922448][T28194] ? __sys_sendmsg_sock+0x30/0x30 [ 1913.927505][T28194] ? __import_iovec+0x5f2/0x850 [ 1913.932395][T28194] ? import_iovec+0x73/0xa0 [ 1913.936943][T28194] ___sys_sendmsg+0x2a6/0x360 [ 1913.941643][T28194] ? get_pid_task+0x20/0x1e0 [ 1913.946272][T28194] ? __sys_sendmsg+0x2b0/0x2b0 [ 1913.951084][T28194] ? __lock_acquire+0x7d80/0x7d80 [ 1913.956152][T28194] __se_sys_sendmsg+0x1d0/0x2c0 [ 1913.961040][T28194] ? __x64_sys_sendmsg+0x80/0x80 [ 1913.966017][T28194] ? lockdep_hardirqs_on+0x98/0x150 [ 1913.971241][T28194] do_syscall_64+0x55/0xb0 [ 1913.975691][T28194] ? clear_bhb_loop+0x40/0x90 [ 1913.980413][T28194] ? clear_bhb_loop+0x40/0x90 [ 1913.985130][T28194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.991100][T28194] RIP: 0033:0x7f94b3d9e159 [ 1913.995534][T28194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.015164][T28194] RSP: 002b:00007f94b4c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.023600][T28194] RAX: ffffffffffffffda RBX: 00007f94b4026180 RCX: 00007f94b3d9e159 [ 1914.031595][T28194] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1914.039581][T28194] RBP: 00007f94b4c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.047569][T28194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.055556][T28194] R13: 00007f94b4026218 R14: 00007f94b4026180 R15: 00007fff5e3a8698 [ 1914.063561][T28194] [ 1914.069614][T28190] lowmem_reserve[]: 0 0 0 0 0 [ 1914.074429][T28190] Node 1 Normal free:3887480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:13828kB free_cma:0kB [ 1914.105026][T28190] lowmem_reserve[]: 0 0 0 0 0 [ 1914.109980][T28190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1914.133485][T28190] Node 0 DMA32: 119*4kB (ME) 921*8kB (UM) 690*16kB (UM) 323*32kB (ME) 350*64kB (UM) 138*128kB (UM) 73*256kB (UME) 37*512kB (UME) 20*1024kB (UM) 6*2048kB (M) 318*4096kB (UM) = 1442212kB [ 1914.197136][T28190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1914.212514][T28190] Node 1 Normal: 266*4kB (UM) 58*8kB (UME) 48*16kB (UME) 74*32kB (UME) 19*64kB (UME) 5*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3887480kB [ 1914.231908][T28190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.243042][T28190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1914.252555][T28190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.262716][T28190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1914.273164][T28190] 61152 total pagecache pages [ 1914.277990][T28190] 0 pages in swap cache [ 1914.282554][T28190] Free swap = 124996kB [ 1914.286941][T28190] Total swap = 124996kB [ 1914.294301][T28190] 2097051 pages RAM [ 1914.305886][T28190] 0 pages HighMem/MovableOnly [ 1914.310995][T28190] 416965 pages reserved [ 1914.315187][T28190] 0 pages cma reserved [ 1914.392084][T20341] Bluetooth: hci4: command tx timeout [ 1914.716228][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.722923][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.281610][T28207] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1916.472183][T20341] Bluetooth: hci4: command tx timeout [ 1916.885920][T28231] FAULT_INJECTION: forcing a failure. [ 1916.885920][T28231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1916.908043][T28231] CPU: 0 PID: 28231 Comm: syz.2.7212 Not tainted syzkaller #0 [ 1916.915555][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1916.925627][T28231] Call Trace: [ 1916.928938][T28231] [ 1916.931892][T28231] dump_stack_lvl+0x18c/0x250 [ 1916.936607][T28231] ? show_regs_print_info+0x20/0x20 [ 1916.941850][T28231] ? load_image+0x420/0x420 [ 1916.946380][T28231] ? __lock_acquire+0x7d80/0x7d80 [ 1916.951468][T28231] should_fail_ex+0x394/0x4c0 [ 1916.956188][T28231] _copy_from_user+0x2f/0xe0 [ 1916.960817][T28231] __copy_msghdr+0x388/0x560 [ 1916.965444][T28231] ___sys_sendmsg+0x214/0x360 [ 1916.970142][T28231] ? get_pid_task+0x20/0x1e0 [ 1916.974758][T28231] ? __sys_sendmsg+0x2b0/0x2b0 [ 1916.979561][T28231] ? __lock_acquire+0x7d80/0x7d80 [ 1916.984627][T28231] __se_sys_sendmsg+0x1d0/0x2c0 [ 1916.989509][T28231] ? __x64_sys_sendmsg+0x80/0x80 [ 1916.994484][T28231] ? lockdep_hardirqs_on+0x98/0x150 [ 1916.999703][T28231] do_syscall_64+0x55/0xb0 [ 1917.004144][T28231] ? clear_bhb_loop+0x40/0x90 [ 1917.008861][T28231] ? clear_bhb_loop+0x40/0x90 [ 1917.013566][T28231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1917.019487][T28231] RIP: 0033:0x7f94b3d9e159 [ 1917.023931][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1917.043560][T28231] RSP: 002b:00007f94b4c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1917.051997][T28231] RAX: ffffffffffffffda RBX: 00007f94b4025fa0 RCX: 00007f94b3d9e159 [ 1917.060022][T28231] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1917.068016][T28231] RBP: 00007f94b4c70090 R08: 0000000000000000 R09: 0000000000000000 [ 1917.076012][T28231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.084003][T28231] R13: 00007f94b4026038 R14: 00007f94b4025fa0 R15: 00007fff5e3a8698 [ 1917.092021][T28231] [ 1917.493060][T28235] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7214'. [ 1918.927828][T28278] netlink: 'syz.3.7229': attribute type 10 has an invalid length. [ 1918.960555][T28278] team0: Device hsr_slave_0 failed to register rx_handler [ 1919.127152][T28285] FAULT_INJECTION: forcing a failure. [ 1919.127152][T28285] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.140329][T28285] CPU: 1 PID: 28285 Comm: syz.2.7232 Not tainted syzkaller #0 [ 1919.147840][T28285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1919.157930][T28285] Call Trace: [ 1919.161248][T28285] [ 1919.164203][T28285] dump_stack_lvl+0x18c/0x250 [ 1919.168916][T28285] ? show_regs_print_info+0x20/0x20 [ 1919.174139][T28285] ? load_image+0x420/0x420 [ 1919.178694][T28285] ? __might_sleep+0xe0/0xe0 [ 1919.183314][T28285] ? __lock_acquire+0x7d80/0x7d80 [ 1919.188370][T28285] should_fail_ex+0x394/0x4c0 [ 1919.193100][T28285] should_failslab+0x9/0x20 [ 1919.197643][T28285] slab_pre_alloc_hook+0x59/0x300 [ 1919.202704][T28285] ? __lock_acquire+0x7d80/0x7d80 [ 1919.207781][T28285] kmem_cache_alloc_node+0x5e/0x310 [ 1919.213012][T28285] ? __alloc_skb+0x103/0x2c0 [ 1919.217660][T28285] __alloc_skb+0x103/0x2c0 [ 1919.222115][T28285] netlink_sendmsg+0x66a/0xbf0 [ 1919.226932][T28285] ? netlink_getsockopt+0x590/0x590 [ 1919.232155][T28285] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1919.237746][T28285] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1919.243049][T28285] ? security_socket_sendmsg+0x80/0xa0 [ 1919.248541][T28285] ? netlink_getsockopt+0x590/0x590 [ 1919.253792][T28285] ____sys_sendmsg+0x61b/0x980 [ 1919.258607][T28285] ? __asan_memset+0x22/0x40 [ 1919.263234][T28285] ? __sys_sendmsg_sock+0x30/0x30 [ 1919.268279][T28285] ? __import_iovec+0x5f2/0x850 [ 1919.273172][T28285] ? import_iovec+0x73/0xa0 [ 1919.277708][T28285] ___sys_sendmsg+0x2a6/0x360 [ 1919.282416][T28285] ? __sys_sendmsg+0x2b0/0x2b0 [ 1919.287219][T28285] ? trace_call_bpf+0xc3/0x6c0 [ 1919.292023][T28285] __se_sys_sendmsg+0x1d0/0x2c0 [ 1919.296899][T28285] ? perf_trace_preemptirq_template+0x269/0x330 [ 1919.303175][T28285] ? __x64_sys_sendmsg+0x80/0x80 [ 1919.308150][T28285] ? lockdep_hardirqs_on+0x98/0x150 [ 1919.313408][T28285] do_syscall_64+0x55/0xb0 [ 1919.317845][T28285] ? clear_bhb_loop+0x40/0x90 [ 1919.322548][T28285] ? clear_bhb_loop+0x40/0x90 [ 1919.327252][T28285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1919.333176][T28285] RIP: 0033:0x7f94b3d9e159 [ 1919.337614][T28285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.357246][T28285] RSP: 002b:00007f94b4c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1919.365682][T28285] RAX: ffffffffffffffda RBX: 00007f94b4025fa0 RCX: 00007f94b3d9e159 [ 1919.373675][T28285] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1919.381664][T28285] RBP: 00007f94b4c70090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.389655][T28285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.397640][T28285] R13: 00007f94b4026038 R14: 00007f94b4025fa0 R15: 00007fff5e3a8698 [ 1919.405647][T28285] [ 1919.417469][ T6032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1922.497612][T28313] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1924.168952][T28366] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1933.301576][T28443] netlink: 'syz.0.7293': attribute type 10 has an invalid length. [ 1935.679797][T28473] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1936.206516][ T6113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1936.496023][T28499] ref_ctr_offset mismatch. inode: 0xea offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 1938.365742][T28503] FAULT_INJECTION: forcing a failure. [ 1938.365742][T28503] name failslab, interval 1, probability 0, space 0, times 0 [ 1938.400028][T28503] CPU: 0 PID: 28503 Comm: syz.1.7309 Not tainted syzkaller #0 [ 1938.407574][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1938.417670][T28503] Call Trace: [ 1938.420983][T28503] [ 1938.423950][T28503] dump_stack_lvl+0x18c/0x250 [ 1938.428693][T28503] ? show_regs_print_info+0x20/0x20 [ 1938.433944][T28503] ? load_image+0x420/0x420 [ 1938.438527][T28503] ? __might_sleep+0xe0/0xe0 [ 1938.443178][T28503] ? __lock_acquire+0x7d80/0x7d80 [ 1938.448261][T28503] should_fail_ex+0x394/0x4c0 [ 1938.453023][T28503] should_failslab+0x9/0x20 [ 1938.457592][T28503] slab_pre_alloc_hook+0x59/0x300 [ 1938.462677][T28503] ? tomoyo_encode+0x2ad/0x570 [ 1938.467485][T28503] ? tomoyo_encode+0x2ad/0x570 [ 1938.472295][T28503] __kmem_cache_alloc_node+0x53/0x250 [ 1938.477744][T28503] ? tomoyo_encode+0x2ad/0x570 [ 1938.482545][T28503] __kmalloc+0xa7/0x240 [ 1938.486752][T28503] tomoyo_encode+0x2ad/0x570 [ 1938.491400][T28503] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1938.497093][T28503] ? tomoyo_domain+0xd6/0x120 [ 1938.501844][T28503] tomoyo_path_number_perm+0x248/0x5e0 [ 1938.507353][T28503] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1938.513017][T28503] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1938.518507][T28503] ? trace_call_bpf+0xc3/0x6c0 [ 1938.523297][T28503] ? trace_call_bpf+0xc3/0x6c0 [ 1938.528080][T28503] ? trace_call_bpf+0x5e9/0x6c0 [ 1938.532994][T28503] ? __fget_files+0x28/0x460 [ 1938.537634][T28503] security_file_ioctl+0x70/0xa0 [ 1938.542620][T28503] __se_sys_ioctl+0x48/0x170 [ 1938.547245][T28503] do_syscall_64+0x55/0xb0 [ 1938.551698][T28503] ? clear_bhb_loop+0x40/0x90 [ 1938.556407][T28503] ? clear_bhb_loop+0x40/0x90 [ 1938.561197][T28503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1938.567157][T28503] RIP: 0033:0x7fdac799e159 [ 1938.571617][T28503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1938.591272][T28503] RSP: 002b:00007fdac88c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1938.599714][T28503] RAX: ffffffffffffffda RBX: 00007fdac7c25fa0 RCX: 00007fdac799e159 [ 1938.607714][T28503] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 1938.615702][T28503] RBP: 00007fdac88c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.623697][T28503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1938.631689][T28503] R13: 00007fdac7c26038 R14: 00007fdac7c25fa0 R15: 00007ffd994e74a8 [ 1938.639702][T28503] [ 1938.697137][T28503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1939.141869][T28527] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7320'. [ 1939.324189][T28531] FAULT_INJECTION: forcing a failure. [ 1939.324189][T28531] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.353272][T28531] CPU: 0 PID: 28531 Comm: syz.0.7322 Not tainted syzkaller #0 [ 1939.360821][T28531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1939.370929][T28531] Call Trace: [ 1939.374248][T28531] [ 1939.377220][T28531] dump_stack_lvl+0x18c/0x250 [ 1939.381984][T28531] ? show_regs_print_info+0x20/0x20 [ 1939.387250][T28531] ? load_image+0x420/0x420 [ 1939.391813][T28531] ? __might_sleep+0xe0/0xe0 [ 1939.396460][T28531] ? __lock_acquire+0x7d80/0x7d80 [ 1939.401540][T28531] ? mark_lock+0x94/0x320 [ 1939.405928][T28531] should_fail_ex+0x394/0x4c0 [ 1939.410671][T28531] should_failslab+0x9/0x20 [ 1939.415232][T28531] slab_pre_alloc_hook+0x59/0x300 [ 1939.420313][T28531] ? __get_vm_area_node+0x125/0x370 [ 1939.425573][T28531] __kmem_cache_alloc_node+0x53/0x250 [ 1939.431018][T28531] ? __get_vm_area_node+0x125/0x370 [ 1939.436282][T28531] kmalloc_node_trace+0x26/0xe0 [ 1939.441205][T28531] __get_vm_area_node+0x125/0x370 [ 1939.446290][T28531] __vmalloc_node_range+0x36f/0x1320 [ 1939.451646][T28531] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.457242][T28531] ? mark_lock+0x94/0x320 [ 1939.461627][T28531] ? __lock_acquire+0x1336/0x7d80 [ 1939.466715][T28531] ? aa_get_newest_label+0xfd/0x5c0 [ 1939.471967][T28531] ? free_vm_area+0x50/0x50 [ 1939.476521][T28531] ? end_current_label_crit_section+0x170/0x170 [ 1939.482816][T28531] ? verify_lock_unused+0x140/0x140 [ 1939.488156][T28531] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.493784][T28531] __vmalloc+0x7a/0x90 [ 1939.497904][T28531] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.503499][T28531] bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.508924][T28531] bpf_prog_alloc+0x3d/0x1a0 [ 1939.513577][T28531] bpf_prog_load+0x6b2/0x1610 [ 1939.518303][T28531] ? map_freeze+0x420/0x420 [ 1939.522870][T28531] ? __might_fault+0xaa/0x120 [ 1939.527584][T28531] ? __lock_acquire+0x7d80/0x7d80 [ 1939.532655][T28531] ? file_end_write+0x159/0x250 [ 1939.537570][T28531] ? __might_fault+0xaa/0x120 [ 1939.542287][T28531] ? __might_fault+0xc6/0x120 [ 1939.547006][T28531] ? __might_fault+0xaa/0x120 [ 1939.551730][T28531] ? bpf_lsm_bpf+0x9/0x10 [ 1939.556122][T28531] ? security_bpf+0x7e/0xa0 [ 1939.560690][T28531] __sys_bpf+0x5ba/0x890 [ 1939.564978][T28531] ? bpf_link_show_fdinfo+0x560/0x560 [ 1939.570412][T28531] ? lock_chain_count+0x20/0x20 [ 1939.575314][T28531] __x64_sys_bpf+0x7c/0x90 [ 1939.579785][T28531] do_syscall_64+0x55/0xb0 [ 1939.584267][T28531] ? clear_bhb_loop+0x40/0x90 [ 1939.589017][T28531] ? clear_bhb_loop+0x40/0x90 [ 1939.593750][T28531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1939.599686][T28531] RIP: 0033:0x7fd04bb9e159 [ 1939.604157][T28531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.623893][T28531] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1939.632358][T28531] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1939.640380][T28531] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1939.648395][T28531] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.656407][T28531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.664413][T28531] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1939.672448][T28531] [ 1939.684967][T28531] syz.0.7322: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1939.710945][T28531] CPU: 0 PID: 28531 Comm: syz.0.7322 Not tainted syzkaller #0 [ 1939.718461][T28531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1939.728622][T28531] Call Trace: [ 1939.731952][T28531] [ 1939.734923][T28531] dump_stack_lvl+0x18c/0x250 [ 1939.739743][T28531] ? show_regs_print_info+0x20/0x20 [ 1939.744999][T28531] ? load_image+0x420/0x420 [ 1939.749545][T28531] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1939.756011][T28531] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1939.762579][T28531] warn_alloc+0x246/0x340 [ 1939.766958][T28531] ? zone_watermark_ok_safe+0x230/0x230 [ 1939.772559][T28531] ? __get_vm_area_node+0x356/0x370 [ 1939.777830][T28531] __vmalloc_node_range+0x394/0x1320 [ 1939.783172][T28531] ? mark_lock+0x94/0x320 [ 1939.787686][T28531] ? __lock_acquire+0x1336/0x7d80 [ 1939.792762][T28531] ? aa_get_newest_label+0xfd/0x5c0 [ 1939.797999][T28531] ? free_vm_area+0x50/0x50 [ 1939.802528][T28531] ? end_current_label_crit_section+0x170/0x170 [ 1939.808801][T28531] ? verify_lock_unused+0x140/0x140 [ 1939.814028][T28531] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.819603][T28531] __vmalloc+0x7a/0x90 [ 1939.823703][T28531] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.829278][T28531] bpf_prog_alloc_no_stats+0x46/0x430 [ 1939.834698][T28531] bpf_prog_alloc+0x3d/0x1a0 [ 1939.839322][T28531] bpf_prog_load+0x6b2/0x1610 [ 1939.844034][T28531] ? map_freeze+0x420/0x420 [ 1939.848571][T28531] ? __might_fault+0xaa/0x120 [ 1939.853275][T28531] ? __lock_acquire+0x7d80/0x7d80 [ 1939.858329][T28531] ? file_end_write+0x159/0x250 [ 1939.863218][T28531] ? __might_fault+0xaa/0x120 [ 1939.867921][T28531] ? __might_fault+0xc6/0x120 [ 1939.872620][T28531] ? __might_fault+0xaa/0x120 [ 1939.877321][T28531] ? bpf_lsm_bpf+0x9/0x10 [ 1939.881682][T28531] ? security_bpf+0x7e/0xa0 [ 1939.886212][T28531] __sys_bpf+0x5ba/0x890 [ 1939.890486][T28531] ? bpf_link_show_fdinfo+0x560/0x560 [ 1939.895900][T28531] ? lock_chain_count+0x20/0x20 [ 1939.900784][T28531] __x64_sys_bpf+0x7c/0x90 [ 1939.905256][T28531] do_syscall_64+0x55/0xb0 [ 1939.909727][T28531] ? clear_bhb_loop+0x40/0x90 [ 1939.914435][T28531] ? clear_bhb_loop+0x40/0x90 [ 1939.919144][T28531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1939.925078][T28531] RIP: 0033:0x7fd04bb9e159 [ 1939.929531][T28531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.949179][T28531] RSP: 002b:00007fd04cadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1939.957630][T28531] RAX: ffffffffffffffda RBX: 00007fd04be25fa0 RCX: 00007fd04bb9e159 [ 1939.965623][T28531] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1939.973608][T28531] RBP: 00007fd04cadc090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.981644][T28531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.989649][T28531] R13: 00007fd04be26038 R14: 00007fd04be25fa0 R15: 00007fff90c90898 [ 1939.997688][T28531] [ 1940.033660][T28531] Mem-Info: [ 1940.038222][T28531] active_anon:5178 inactive_anon:0 isolated_anon:0 [ 1940.038222][T28531] active_file:19251 inactive_file:40550 isolated_file:0 [ 1940.038222][T28531] unevictable:768 dirty:333 writeback:50 [ 1940.038222][T28531] slab_reclaimable:11048 slab_unreclaimable:100841 [ 1940.038222][T28531] mapped:24886 shmem:1361 pagetables:504 [ 1940.038222][T28531] sec_pagetables:0 bounce:0 [ 1940.038222][T28531] kernel_misc_reclaimable:0 [ 1940.038222][T28531] free:1337320 free_pcp:8643 free_cma:0 [ 1940.087686][T28531] Node 0 active_anon:20712kB inactive_anon:0kB active_file:77004kB inactive_file:162000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99544kB dirty:1332kB writeback:100kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10416kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no [ 1940.123723][T28531] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1940.164361][T28531] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.204178][T28531] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1940.215228][T28531] Node 0 DMA32 free:1446440kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20676kB inactive_anon:0kB active_file:77004kB inactive_file:161176kB unevictable:1536kB writepending:1232kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:14616kB local_pcp:9728kB free_cma:0kB [ 1940.256231][T28531] lowmem_reserve[]: 0 0 0 0 0 [ 1940.265202][T28531] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1940.292589][T28531] lowmem_reserve[]: 0 0 0 0 0 [ 1940.297401][T28531] Node 1 Normal free:3887480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19940kB local_pcp:6112kB free_cma:0kB [ 1940.330853][T28531] lowmem_reserve[]: 0 0 0 0 0 [ 1940.335697][T28531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1940.349057][T28531] Node 0 DMA32: 554*4kB (ME) 1378*8kB (UME) 695*16kB (UME) 358*32kB (ME) 361*64kB (UME) 120*128kB (ME) 66*256kB (UM) 37*512kB (UM) 21*1024kB (UME) 6*2048kB (M) 318*4096kB (UM) = 1446440kB [ 1940.368217][T28531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1940.381827][T28531] Node 1 Normal: 266*4kB (UM) 58*8kB (UME) 48*16kB (UME) 74*32kB (UME) 19*64kB (UME) 5*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3887480kB [ 1940.400314][T28531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.411581][T28531] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1940.432658][T28531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.444926][T28531] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1940.454839][T28531] 61162 total pagecache pages [ 1940.460137][T28531] 0 pages in swap cache [ 1940.464346][T28531] Free swap = 124996kB [ 1940.469485][T28531] Total swap = 124996kB [ 1940.473792][T28531] 2097051 pages RAM [ 1940.477648][T28531] 0 pages HighMem/MovableOnly [ 1940.484581][T28531] 416965 pages reserved [ 1940.489183][T28531] 0 pages cma reserved [ 1941.877753][T28517] ------------[ cut here ]------------ [ 1941.883464][T28517] WARNING: CPU: 1 PID: 28517 at kernel/events/core.c:6808 perf_pending_task+0x357/0x480 [ 1941.893451][T28517] Modules linked in: [ 1941.897405][T28517] CPU: 1 PID: 28517 Comm: syz.2.7316 Not tainted syzkaller #0 [ 1941.905015][T28517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1941.915278][T28517] RIP: 0010:perf_pending_task+0x357/0x480 [ 1941.921155][T28517] Code: e8 8e c7 d5 ff 84 db 75 10 e8 f5 c4 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e5 c4 d5 ff e8 c0 d6 4e ff eb e9 e8 d9 c4 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1941.941570][T28517] RSP: 0018:ffffc9000b4d79c8 EFLAGS: 00010293 [ 1941.947754][T28517] RAX: ffffffff81b1c677 RBX: ffff8880316da8f8 RCX: ffff888029ea8000 [ 1941.955834][T28517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1941.963883][T28517] RBP: ffff8880316da6b8 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1941.972120][T28517] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff888029ea8000 [ 1941.980179][T28517] R13: ffff88805de59d30 R14: 0000000000000000 R15: 1ffff110062db4d7 [ 1941.988240][T28517] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1941.997385][T28517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1942.004091][T28517] CR2: 00007fd04bded158 CR3: 000000003171e000 CR4: 00000000003506e0 [ 1942.012168][T28517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1942.020289][T28517] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1942.028405][T28517] Call Trace: [ 1942.031728][T28517] [ 1942.034712][T28517] task_work_run+0x1d4/0x260 [ 1942.039441][T28517] ? task_work_cancel+0x220/0x220 [ 1942.045027][T28517] do_exit+0x986/0x2530 [ 1942.049388][T28517] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1942.055456][T28517] ? put_task_struct+0xc0/0xc0 [ 1942.060327][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.066545][T28517] ? lockdep_hardirqs_on+0x98/0x150 [ 1942.071837][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.078054][T28517] do_group_exit+0x22d/0x2f0 [ 1942.082811][T28517] ? _raw_spin_unlock_irq+0x29/0x50 [ 1942.088076][T28517] get_signal+0x12a6/0x1390 [ 1942.092719][T28517] arch_do_signal_or_restart+0xc2/0x7b0 [ 1942.098410][T28517] ? get_sigframe_size+0x20/0x20 [ 1942.103413][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.109675][T28517] ? exit_to_user_mode_loop+0x3b/0x110 [ 1942.115198][T28517] exit_to_user_mode_loop+0x70/0x110 [ 1942.120579][T28517] exit_to_user_mode_prepare+0xee/0x180 [ 1942.126185][T28517] syscall_exit_to_user_mode+0x1a/0x50 [ 1942.131761][T28517] do_syscall_64+0x61/0xb0 [ 1942.136263][T28517] ? clear_bhb_loop+0x40/0x90 [ 1942.141032][T28517] ? clear_bhb_loop+0x40/0x90 [ 1942.146316][T28517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.152496][T28517] RIP: 0033:0x7f94b3d9e159 [ 1942.156962][T28517] Code: Unable to access opcode bytes at 0x7f94b3d9e12f. [ 1942.164125][T28517] RSP: 002b:00007f94b4c700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1942.172662][T28517] RAX: fffffffffffffe00 RBX: 00007f94b4025fa8 RCX: 00007f94b3d9e159 [ 1942.180740][T28517] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94b4025fa8 [ 1942.188892][T28517] RBP: 00007f94b4025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1942.196907][T28517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.204968][T28517] R13: 00007f94b4026038 R14: 00007fff5e3a85b0 R15: 00007fff5e3a8698 [ 1942.213067][T28517] [ 1942.216120][T28517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1942.223422][T28517] CPU: 1 PID: 28517 Comm: syz.2.7316 Not tainted syzkaller #0 [ 1942.230919][T28517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1942.240997][T28517] Call Trace: [ 1942.244283][T28517] [ 1942.247230][T28517] dump_stack_lvl+0x18c/0x250 [ 1942.251951][T28517] ? show_regs_print_info+0x20/0x20 [ 1942.257194][T28517] ? load_image+0x420/0x420 [ 1942.261735][T28517] panic+0x2ca/0x720 [ 1942.265660][T28517] ? bpf_jit_dump+0xd0/0xd0 [ 1942.270194][T28517] __warn+0x2e0/0x470 [ 1942.274215][T28517] ? perf_pending_task+0x357/0x480 [ 1942.279369][T28517] ? perf_pending_task+0x357/0x480 [ 1942.284515][T28517] report_bug+0x2be/0x4f0 [ 1942.288937][T28517] ? perf_pending_task+0x357/0x480 [ 1942.294078][T28517] ? perf_pending_task+0x357/0x480 [ 1942.299216][T28517] ? perf_pending_task+0x359/0x480 [ 1942.304353][T28517] handle_bug+0xcf/0x120 [ 1942.308634][T28517] exc_invalid_op+0x1a/0x50 [ 1942.313164][T28517] asm_exc_invalid_op+0x1a/0x20 [ 1942.318036][T28517] RIP: 0010:perf_pending_task+0x357/0x480 [ 1942.323782][T28517] Code: e8 8e c7 d5 ff 84 db 75 10 e8 f5 c4 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e5 c4 d5 ff e8 c0 d6 4e ff eb e9 e8 d9 c4 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1942.343404][T28517] RSP: 0018:ffffc9000b4d79c8 EFLAGS: 00010293 [ 1942.349501][T28517] RAX: ffffffff81b1c677 RBX: ffff8880316da8f8 RCX: ffff888029ea8000 [ 1942.357504][T28517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1942.365536][T28517] RBP: ffff8880316da6b8 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1942.373534][T28517] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff888029ea8000 [ 1942.381525][T28517] R13: ffff88805de59d30 R14: 0000000000000000 R15: 1ffff110062db4d7 [ 1942.389557][T28517] ? perf_pending_task+0x357/0x480 [ 1942.394715][T28517] ? perf_pending_task+0x357/0x480 [ 1942.399887][T28517] task_work_run+0x1d4/0x260 [ 1942.404518][T28517] ? task_work_cancel+0x220/0x220 [ 1942.409581][T28517] do_exit+0x986/0x2530 [ 1942.413769][T28517] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1942.419781][T28517] ? put_task_struct+0xc0/0xc0 [ 1942.424594][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.430779][T28517] ? lockdep_hardirqs_on+0x98/0x150 [ 1942.436004][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.442190][T28517] do_group_exit+0x22d/0x2f0 [ 1942.446804][T28517] ? _raw_spin_unlock_irq+0x29/0x50 [ 1942.452047][T28517] get_signal+0x12a6/0x1390 [ 1942.456602][T28517] arch_do_signal_or_restart+0xc2/0x7b0 [ 1942.462203][T28517] ? get_sigframe_size+0x20/0x20 [ 1942.467192][T28517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.473374][T28517] ? exit_to_user_mode_loop+0x3b/0x110 [ 1942.478874][T28517] exit_to_user_mode_loop+0x70/0x110 [ 1942.484193][T28517] exit_to_user_mode_prepare+0xee/0x180 [ 1942.489767][T28517] syscall_exit_to_user_mode+0x1a/0x50 [ 1942.495275][T28517] do_syscall_64+0x61/0xb0 [ 1942.499743][T28517] ? clear_bhb_loop+0x40/0x90 [ 1942.504477][T28517] ? clear_bhb_loop+0x40/0x90 [ 1942.509195][T28517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.515120][T28517] RIP: 0033:0x7f94b3d9e159 [ 1942.519567][T28517] Code: Unable to access opcode bytes at 0x7f94b3d9e12f. [ 1942.526605][T28517] RSP: 002b:00007f94b4c700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1942.535043][T28517] RAX: fffffffffffffe00 RBX: 00007f94b4025fa8 RCX: 00007f94b3d9e159 [ 1942.543033][T28517] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94b4025fa8 [ 1942.551020][T28517] RBP: 00007f94b4025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1942.559013][T28517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.567019][T28517] R13: 00007f94b4026038 R14: 00007fff5e3a85b0 R15: 00007fff5e3a8698 [ 1942.575035][T28517] [ 1942.578658][T28517] Kernel Offset: disabled [ 1942.582999][T28517] Rebooting in 86400 seconds..