last executing test programs: 17.842875727s ago: executing program 3 (id=31365): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.782948103s ago: executing program 3 (id=31367): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)=""/95}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) 15.628514968s ago: executing program 1 (id=31389): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.51117332s ago: executing program 1 (id=31391): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301081, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) 15.197463591s ago: executing program 1 (id=31392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 15.092394392s ago: executing program 1 (id=31394): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x4, 0x4, 0x0, 0x800000000000000, 0xc21bc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8000000c, 0x1, @perf_bp={0x0, 0xd}, 0x924, 0x2, 0x6, 0x7, 0x81, 0xff, 0x103, 0x0, 0x9, 0x0, 0x40000000000d}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 14.869860254s ago: executing program 1 (id=31395): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r1}, 0xc) 14.803974791s ago: executing program 1 (id=31396): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000011c390be00003db59ce73ae67a1b1b6163e46979df22b2e33194ce0a2b5e2bf6252446fcede689a208f2189ef806fa19d090f2d7fbf3205d2426a9edfe3e9411be89000b", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=r0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x2f, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 10.329184418s ago: executing program 4 (id=31417): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x3, 0x0, &(0x7f0000000300)="882f12", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x86e46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0xff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x2400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x11}, 0x204, 0x2, 0x8, 0x3, 0x4, 0x12, 0x99b, 0x0, 0x2, 0x0, 0x24000}) 7.522924488s ago: executing program 4 (id=31421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000006c0)={0x2, 0x80, 0x2, 0xeb, 0x2, 0xf3, 0x0, 0x7, 0x10, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x400, 0x7, 0x1, 0x6, 0x4, 0xffff, 0xf, 0x0, 0x7, 0x0, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000680), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000980), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f00000009c0)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000b00), 0x4bd) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000c00), 0x127) close(r7) 6.819297499s ago: executing program 4 (id=31426): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000100001000000000000000000c3a20000f100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x99, &(0x7f0000000240)=""/153, 0x41000, 0x2c}, 0x94) 6.665514434s ago: executing program 4 (id=31427): bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x17, 0x4, &(0x7f0000002800)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.6028774s ago: executing program 4 (id=31428): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) write$cgroup_type(r1, &(0x7f00000006c0), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301081, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='/dev/net/tun\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000001000000000b703000000000000850000000c000000b700000000000000180100000400000000000000575243207b1af8ff00000000bfa100000000000007010000f8ff950000000085000000070000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) 4.193725301s ago: executing program 4 (id=31433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x3, 0x100, 0x0, 0xffffffffffffffff, 0x1e}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.887990481s ago: executing program 0 (id=31435): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="840a00000000000061f67000000000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 3.887792941s ago: executing program 0 (id=31436): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x58}, 0x28) 3.863066694s ago: executing program 0 (id=31437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x42, 0x40, 0xc2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x1, r0}, 0x38) 3.617004689s ago: executing program 0 (id=31438): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x81142, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0x0, 0x4, 0x0, 0x200, 0x901e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x480, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xa, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000800000500000000fdffffff95"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x87}, 0x0, 0x400000, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x5, 0xfd90, &(0x7f00000017c0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000018c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 2.075918753s ago: executing program 0 (id=31439): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="8520000067a1010095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.912339669s ago: executing program 0 (id=31441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.778342492s ago: executing program 2 (id=31442): perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu==1|\x00\x10') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r1) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.59985275s ago: executing program 3 (id=31373): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 1.535948137s ago: executing program 3 (id=31443): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x31052, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x1ff}, 0xa100, 0xd8, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, 0x0) 1.449092445s ago: executing program 2 (id=31444): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) write$cgroup_type(r1, &(0x7f00000006c0), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301081, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='/dev/net/tun\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000001000000000b703000000000000850000000c000000b700000000000000180100000400000000000000575243207b1af8ff00000000bfa100000000000007010000f8ff950000000085000000070000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) 1.448787645s ago: executing program 3 (id=31445): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910180000000000710045000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001ec0)={'\x00', 0x1}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1f, 0x18, &(0x7f0000001d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000611806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000001f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001f80)={0x1, 0x80, 0x4, 0x7, 0x26, 0x2, 0x0, 0xa, 0x0, 0x13, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x4, 0x5}, 0x10d10, 0xffffffff, 0x80, 0x8, 0x938, 0x8, 0x9, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xa, r2, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000ac0)='GPL\x00', 0x2, 0x1002, &(0x7f0000000b00)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xf, &(0x7f0000000780)=ANY=[@ANYRESDEC=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfef0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x9, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, @ldst={0x1, 0x0, 0x2, 0x6, 0xa, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xaf}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000002000)={r8, &(0x7f0000002040)='A\x00', &(0x7f0000002080)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000002140)={r8, &(0x7f0000002180), &(0x7f00000021c0)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002280)={r8, &(0x7f00000022c0)}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001e40)=r7, 0x4) 884.494892ms ago: executing program 3 (id=31446): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) 82.153602ms ago: executing program 2 (id=31447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x81142, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0x0, 0x4, 0x0, 0x200, 0x901e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x480, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xa, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000800000500000000fdffffff95"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x87}, 0x0, 0x400000, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x5, 0xfd90, &(0x7f00000017c0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000018c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000001cc0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 81.623952ms ago: executing program 2 (id=31448): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x8, &(0x7f0000001040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001080)='syzkaller\x00', 0x7, 0xf9, &(0x7f00000010c0)=""/249}, 0x24) 1.20879ms ago: executing program 2 (id=31449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x5f, 0x9, 0x3, 0x0, 0x0, 0x2, 0x679, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x4, @perf_config_ext={0x4, 0xffff}, 0x2b13d, 0x0, 0x0, 0x8, 0x0, 0x8000e, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0xffffffffffffffff, 0x2001, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 2 (id=31450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) kernel console output (not intermixed with test programs): devinet_exit_net+0x220/0x220 [ 2245.354097][T15945] raw_notifier_call_chain+0xcb/0x160 [ 2245.359483][T15945] unregister_netdevice_many+0x109b/0x1a40 [ 2245.365303][T15945] ? alloc_netdev_mqs+0xc40/0xc40 [ 2245.370331][T15945] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2245.376321][T15945] ? lock_chain_count+0x20/0x20 [ 2245.381179][T15945] ? __rwlock_init+0x140/0x140 [ 2245.385952][T15945] ? queue_delayed_work_on+0x110/0x1f0 [ 2245.391420][T15945] ? lockdep_hardirqs_on+0x94/0x140 [ 2245.396627][T15945] unregister_netdevice_queue+0x2e1/0x320 [ 2245.402350][T15945] ? delayed_work_timer_fn+0x80/0x80 [ 2245.407642][T15945] ? list_netdevice+0x460/0x460 [ 2245.412499][T15945] ? linkwatch_fire_event+0x2b7/0x370 [ 2245.417959][T15945] __tun_detach+0xdb7/0x1580 [ 2245.422575][T15945] tun_chr_close+0x109/0x1b0 [ 2245.427166][T15945] ? tun_chr_open+0x4d0/0x4d0 [ 2245.431846][T15945] __fput+0x212/0x8c0 [ 2245.435842][T15945] task_work_run+0x125/0x1a0 [ 2245.440446][T15945] exit_to_user_mode_loop+0x10f/0x130 [ 2245.445823][T15945] exit_to_user_mode_prepare+0xee/0x180 [ 2245.451373][T15945] syscall_exit_to_user_mode+0x16/0x40 [ 2245.456837][T15945] do_syscall_64+0x58/0xa0 [ 2245.461256][T15945] ? clear_bhb_loop+0x30/0x80 [ 2245.465934][T15945] ? clear_bhb_loop+0x30/0x80 [ 2245.470618][T15945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2245.476517][T15945] RIP: 0033:0x7ff871a99559 [ 2245.480936][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2245.500542][T15945] RSP: 002b:00007ff86fcf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2245.508962][T15945] RAX: 0000000000000000 RBX: 00007ff871d1ffa0 RCX: 00007ff871a99559 [ 2245.516934][T15945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2245.524905][T15945] RBP: 00007ff86fcf0090 R08: 0000000000000000 R09: 0000000000000000 [ 2245.532880][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2245.540856][T15945] R13: 00007ff871d20038 R14: 00007ff871d1ffa0 R15: 00007ffdb740cd38 [ 2245.548845][T15945] [ 2245.680493][T15955] netlink: 'syz.1.30440': attribute type 2 has an invalid length. [ 2245.717428][T15955] netlink: 'syz.1.30440': attribute type 8 has an invalid length. [ 2245.725266][T15955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30440'. [ 2245.738391][T15958] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.30443'. [ 2246.707243][T15992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30456'. [ 2247.416506][T16028] validate_nla: 3 callbacks suppressed [ 2247.416524][T16028] netlink: 'syz.3.30471': attribute type 2 has an invalid length. [ 2247.497464][T16028] netlink: 'syz.3.30471': attribute type 8 has an invalid length. [ 2247.531104][T16028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30471'. [ 2248.062668][T16060] netlink: 'syz.2.30484': attribute type 2 has an invalid length. [ 2248.071275][T16063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.30486'. [ 2248.079834][T16060] netlink: 'syz.2.30484': attribute type 8 has an invalid length. [ 2248.099748][T16060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30484'. [ 2248.501827][T16085] FAULT_INJECTION: forcing a failure. [ 2248.501827][T16085] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.548156][T16085] CPU: 1 PID: 16085 Comm: syz.2.30494 Not tainted syzkaller #0 [ 2248.555732][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2248.565791][T16085] Call Trace: [ 2248.569075][T16085] [ 2248.572008][T16085] dump_stack_lvl+0x188/0x250 [ 2248.576698][T16085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2248.582866][T16085] ? show_regs_print_info+0x20/0x20 [ 2248.588077][T16085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2248.594255][T16085] should_fail+0x383/0x4b0 [ 2248.598688][T16085] should_failslab+0x5/0x20 [ 2248.603195][T16085] slab_pre_alloc_hook+0x51/0xc0 [ 2248.608143][T16085] __kmalloc+0x6b/0x340 [ 2248.612303][T16085] ? tomoyo_encode+0x28a/0x550 [ 2248.617079][T16085] tomoyo_encode+0x28a/0x550 [ 2248.621680][T16085] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 2248.627336][T16085] tomoyo_path_number_perm+0x251/0x6b0 [ 2248.632803][T16085] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2248.638271][T16085] ? verify_lock_unused+0x140/0x140 [ 2248.643489][T16085] ? hrtimer_interrupt+0x4c1/0x8b0 [ 2248.648663][T16085] security_file_ioctl+0x6c/0xa0 [ 2248.653611][T16085] __se_sys_ioctl+0x48/0x170 [ 2248.658254][T16085] do_syscall_64+0x4c/0xa0 [ 2248.662672][T16085] ? clear_bhb_loop+0x30/0x80 [ 2248.667350][T16085] ? clear_bhb_loop+0x30/0x80 [ 2248.672035][T16085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2248.677930][T16085] RIP: 0033:0x7f90ab1a6559 [ 2248.682347][T16085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2248.701953][T16085] RSP: 002b:00007f90a93fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2248.710373][T16085] RAX: ffffffffffffffda RBX: 00007f90ab42cfa0 RCX: 00007f90ab1a6559 [ 2248.718349][T16085] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f [ 2248.726327][T16085] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2248.734299][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2248.742273][T16085] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2248.750260][T16085] [ 2248.888022][T16098] netlink: 'syz.4.30499': attribute type 2 has an invalid length. [ 2248.906247][T16098] netlink: 'syz.4.30499': attribute type 8 has an invalid length. [ 2248.914647][T16098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30499'. [ 2249.172644][T16085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2249.710892][T16127] netlink: 'syz.1.30511': attribute type 2 has an invalid length. [ 2249.729086][T16127] netlink: 'syz.1.30511': attribute type 8 has an invalid length. [ 2249.748466][T16127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30511'. [ 2250.045036][T16139] netlink: 'syz.4.30516': attribute type 10 has an invalid length. [ 2250.178528][T16143] FAULT_INJECTION: forcing a failure. [ 2250.178528][T16143] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.268247][T16139] netlink: 'syz.4.30516': attribute type 27 has an invalid length. [ 2250.279121][T16139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.30516'. [ 2250.304027][T16139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2250.347391][T16143] CPU: 0 PID: 16143 Comm: syz.0.30517 Not tainted syzkaller #0 [ 2250.354961][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2250.365016][T16143] Call Trace: [ 2250.368296][T16143] [ 2250.371232][T16143] dump_stack_lvl+0x188/0x250 [ 2250.375923][T16143] ? show_regs_print_info+0x20/0x20 [ 2250.381131][T16143] ? load_image+0x410/0x410 [ 2250.385644][T16143] ? __might_sleep+0xf0/0xf0 [ 2250.390240][T16143] ? __lock_acquire+0x7d40/0x7d40 [ 2250.395277][T16143] should_fail+0x383/0x4b0 [ 2250.399707][T16143] should_failslab+0x5/0x20 [ 2250.404215][T16143] slab_pre_alloc_hook+0x51/0xc0 [ 2250.409170][T16143] kmem_cache_alloc_node+0x47/0x2c0 [ 2250.414374][T16143] ? __alloc_skb+0xf4/0x750 [ 2250.418890][T16143] __alloc_skb+0xf4/0x750 [ 2250.423232][T16143] alloc_skb_with_frags+0xa7/0x720 [ 2250.428368][T16143] sock_alloc_send_pskb+0x87f/0x9a0 [ 2250.433583][T16143] ? sock_kzfree_s+0x50/0x50 [ 2250.438181][T16143] ? do_raw_spin_lock+0x128/0x2f0 [ 2250.443204][T16143] ? __rwlock_init+0x140/0x140 [ 2250.447963][T16143] ? __lock_acquire+0x12df/0x7d40 [ 2250.452990][T16143] ? do_raw_spin_unlock+0x11d/0x230 [ 2250.458189][T16143] unix_dgram_sendmsg+0x6f8/0x19c0 [ 2250.463389][T16143] ? aa_sk_perm+0x7dc/0x910 [ 2250.467895][T16143] ? aa_af_perm+0x340/0x340 [ 2250.472395][T16143] ? unix_dgram_poll+0x680/0x680 [ 2250.477326][T16143] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2250.483743][T16143] ? apparmor_socket_sendmsg+0x88/0x230 [ 2250.489280][T16143] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2250.494561][T16143] ? security_socket_sendmsg+0x7c/0xa0 [ 2250.500012][T16143] ? unix_dgram_poll+0x680/0x680 [ 2250.504946][T16143] ____sys_sendmsg+0x5be/0x8f0 [ 2250.509714][T16143] ? __sys_sendmsg_sock+0x30/0x30 [ 2250.514738][T16143] ? import_iovec+0x6f/0xa0 [ 2250.519239][T16143] ___sys_sendmsg+0x236/0x2e0 [ 2250.523919][T16143] ? __sys_sendmsg+0x290/0x290 [ 2250.528707][T16143] __se_sys_sendmsg+0x1b7/0x2a0 [ 2250.533558][T16143] ? __x64_sys_sendmsg+0x80/0x80 [ 2250.538488][T16143] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2250.544473][T16143] ? lockdep_hardirqs_on+0x94/0x140 [ 2250.549670][T16143] do_syscall_64+0x4c/0xa0 [ 2250.554076][T16143] ? clear_bhb_loop+0x30/0x80 [ 2250.558744][T16143] ? clear_bhb_loop+0x30/0x80 [ 2250.563416][T16143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2250.569303][T16143] RIP: 0033:0x7ff871a99559 [ 2250.573711][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2250.593353][T16143] RSP: 002b:00007ff86fcf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2250.601762][T16143] RAX: ffffffffffffffda RBX: 00007ff871d1ffa0 RCX: 00007ff871a99559 [ 2250.609740][T16143] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000006 [ 2250.617704][T16143] RBP: 00007ff86fcf0090 R08: 0000000000000000 R09: 0000000000000000 [ 2250.625664][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2250.633626][T16143] R13: 00007ff871d20038 R14: 00007ff871d1ffa0 R15: 00007ffdb740cd38 [ 2250.641603][T16143] [ 2250.862741][T16161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30524'. [ 2251.831841][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30540'. [ 2252.737856][T16235] validate_nla: 4 callbacks suppressed [ 2252.737872][T16235] netlink: 'syz.2.30553': attribute type 2 has an invalid length. [ 2252.788718][T16235] netlink: 'syz.2.30553': attribute type 8 has an invalid length. [ 2252.806808][T16235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30553'. [ 2253.119626][T16253] FAULT_INJECTION: forcing a failure. [ 2253.119626][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.135659][T16246] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.30557'. [ 2253.152728][T16253] CPU: 0 PID: 16253 Comm: syz.3.30561 Not tainted syzkaller #0 [ 2253.160300][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2253.170363][T16253] Call Trace: [ 2253.173648][T16253] [ 2253.176582][T16253] dump_stack_lvl+0x188/0x250 [ 2253.181272][T16253] ? show_regs_print_info+0x20/0x20 [ 2253.186467][T16253] ? load_image+0x410/0x410 [ 2253.190960][T16253] ? __might_sleep+0xf0/0xf0 [ 2253.195542][T16253] ? __lock_acquire+0x7d40/0x7d40 [ 2253.200567][T16253] should_fail+0x383/0x4b0 [ 2253.204988][T16253] should_failslab+0x5/0x20 [ 2253.209481][T16253] slab_pre_alloc_hook+0x51/0xc0 [ 2253.214407][T16253] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 2253.220110][T16253] ? __get_vm_area_node+0x119/0x2d0 [ 2253.225298][T16253] __get_vm_area_node+0x119/0x2d0 [ 2253.230314][T16253] __vmalloc_node_range+0xef/0x8b0 [ 2253.235410][T16253] ? copy_process+0x61f/0x3e70 [ 2253.240162][T16253] ? rcu_is_watching+0x11/0xa0 [ 2253.244913][T16253] ? kmem_cache_alloc_node+0x1b2/0x2c0 [ 2253.250365][T16253] dup_task_struct+0x41a/0xbc0 [ 2253.255139][T16253] ? copy_process+0x61f/0x3e70 [ 2253.259900][T16253] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2253.265103][T16253] ? lockdep_hardirqs_on+0x94/0x140 [ 2253.270316][T16253] copy_process+0x61f/0x3e70 [ 2253.274932][T16253] ? __pidfd_prepare+0x140/0x140 [ 2253.279867][T16253] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2253.285414][T16253] kernel_clone+0x23f/0x990 [ 2253.289904][T16253] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2253.296480][T16253] ? create_io_thread+0x180/0x180 [ 2253.301508][T16253] __x64_sys_clone+0x19a/0x210 [ 2253.306264][T16253] ? __ia32_sys_vfork+0x130/0x130 [ 2253.311292][T16253] ? lockdep_hardirqs_on+0x94/0x140 [ 2253.316485][T16253] do_syscall_64+0x4c/0xa0 [ 2253.320893][T16253] ? clear_bhb_loop+0x30/0x80 [ 2253.325568][T16253] ? clear_bhb_loop+0x30/0x80 [ 2253.330246][T16253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2253.336131][T16253] RIP: 0033:0x7fbf4437c559 [ 2253.340535][T16253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2253.360127][T16253] RSP: 002b:00007fbf425d2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2253.368573][T16253] RAX: ffffffffffffffda RBX: 00007fbf44602fa0 RCX: 00007fbf4437c559 [ 2253.376533][T16253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000061000600 [ 2253.384532][T16253] RBP: 00007fbf425d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.392493][T16253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2253.400449][T16253] R13: 00007fbf44603038 R14: 00007fbf44602fa0 R15: 00007fffef631e58 [ 2253.408421][T16253] [ 2253.428079][T16249] netlink: 'syz.0.30557': attribute type 10 has an invalid length. [ 2253.747410][T16253] syz.3.30561: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2253.762894][T16253] CPU: 0 PID: 16253 Comm: syz.3.30561 Not tainted syzkaller #0 [ 2253.770459][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2253.780520][T16253] Call Trace: [ 2253.783807][T16253] [ 2253.786752][T16253] dump_stack_lvl+0x188/0x250 [ 2253.791443][T16253] ? rcu_lock_release+0x5/0x20 [ 2253.796219][T16253] ? show_regs_print_info+0x20/0x20 [ 2253.801434][T16253] ? load_image+0x410/0x410 [ 2253.805968][T16253] warn_alloc+0x245/0x320 [ 2253.810320][T16253] ? zone_watermark_ok_safe+0x250/0x250 [ 2253.815889][T16253] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 2253.821878][T16253] ? __get_vm_area_node+0x119/0x2d0 [ 2253.827107][T16253] __vmalloc_node_range+0x2b1/0x8b0 [ 2253.831724][T16268] netlink: 'syz.4.30566': attribute type 2 has an invalid length. [ 2253.832318][T16253] ? rcu_is_watching+0x11/0xa0 [ 2253.832343][T16253] ? kmem_cache_alloc_node+0x1b2/0x2c0 [ 2253.832367][T16253] dup_task_struct+0x41a/0xbc0 [ 2253.832388][T16253] ? copy_process+0x61f/0x3e70 [ 2253.859858][T16253] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2253.865066][T16253] ? lockdep_hardirqs_on+0x94/0x140 [ 2253.870281][T16253] copy_process+0x61f/0x3e70 [ 2253.870702][T16268] netlink: 'syz.4.30566': attribute type 8 has an invalid length. [ 2253.874908][T16253] ? __pidfd_prepare+0x140/0x140 [ 2253.874937][T16253] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2253.874966][T16253] kernel_clone+0x23f/0x990 [ 2253.874985][T16253] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2253.875011][T16253] ? create_io_thread+0x180/0x180 [ 2253.875049][T16253] __x64_sys_clone+0x19a/0x210 [ 2253.914085][T16253] ? __ia32_sys_vfork+0x130/0x130 [ 2253.919142][T16253] ? lockdep_hardirqs_on+0x94/0x140 [ 2253.924359][T16253] do_syscall_64+0x4c/0xa0 [ 2253.928603][T16268] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30566'. [ 2253.937866][T16253] ? clear_bhb_loop+0x30/0x80 [ 2253.937892][T16253] ? clear_bhb_loop+0x30/0x80 [ 2253.937912][T16253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2253.937930][T16253] RIP: 0033:0x7fbf4437c559 [ 2253.937948][T16253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2253.937962][T16253] RSP: 002b:00007fbf425d2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2253.937983][T16253] RAX: ffffffffffffffda RBX: 00007fbf44602fa0 RCX: 00007fbf4437c559 [ 2253.937997][T16253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000061000600 [ 2253.938008][T16253] RBP: 00007fbf425d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.938020][T16253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2253.938031][T16253] R13: 00007fbf44603038 R14: 00007fbf44602fa0 R15: 00007fffef631e58 [ 2253.938065][T16253] [ 2254.227431][T16253] Mem-Info: [ 2254.230609][T16253] active_anon:282 inactive_anon:65065 isolated_anon:0 [ 2254.230609][T16253] active_file:26873 inactive_file:42871 isolated_file:0 [ 2254.230609][T16253] unevictable:768 dirty:183 writeback:0 [ 2254.230609][T16253] slab_reclaimable:25328 slab_unreclaimable:105676 [ 2254.230609][T16253] mapped:45560 shmem:55951 pagetables:846 bounce:0 [ 2254.230609][T16253] kernel_misc_reclaimable:0 [ 2254.230609][T16253] free:1287989 free_pcp:3825 free_cma:0 [ 2254.376161][T16253] Node 0 active_anon:1096kB inactive_anon:270248kB active_file:107292kB inactive_file:171484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179140kB dirty:732kB writeback:0kB shmem:232224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11168kB pagetables:3384kB all_unreclaimable? no [ 2254.429927][T16280] netlink: 'syz.2.30581': attribute type 2 has an invalid length. [ 2254.447633][T16280] netlink: 'syz.2.30581': attribute type 8 has an invalid length. [ 2254.455555][T16280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30581'. [ 2254.470075][T16253] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 2254.567523][T16253] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2254.644427][T16253] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 2254.670433][T16253] Node 0 DMA32 free:1193324kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1096kB inactive_anon:266944kB active_file:107292kB inactive_file:171484kB unevictable:1536kB writepending:740kB present:3129332kB managed:2590808kB mlocked:0kB bounce:0kB free_pcp:26480kB local_pcp:19360kB free_cma:0kB [ 2254.797467][T16253] lowmem_reserve[]: 0 0 0 0 0 [ 2254.802302][T16253] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2254.908594][T16253] lowmem_reserve[]: 0 0 0 0 0 [ 2254.917369][T16253] Node 1 Normal free:3919332kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5712kB local_pcp:1904kB free_cma:0kB [ 2255.037902][T16253] lowmem_reserve[]: 0 0 0 0 0 [ 2255.042667][T16253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2255.106162][T16253] Node 0 DMA32: 607*4kB (UM) 2020*8kB (UE) 1569*16kB (UE) 445*32kB (UE) 1157*64kB (UME) 819*128kB (UME) 466*256kB (UME) 245*512kB (UME) 84*1024kB (UME) 27*2048kB (UM) 139*4096kB (UM) = 1192204kB [ 2255.176253][T16253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2255.227407][T16253] Node 1 Normal: 189*4kB (UME) 50*8kB (UME) 34*16kB (UME) 162*32kB (UME) 72*64kB (UME) 22*128kB (UE) 12*256kB (UM) 3*512kB (U) 1*1024kB (U) 2*2048kB (UM) 951*4096kB (ME) = 3919332kB [ 2255.306556][T16253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2255.316267][T16253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2255.366234][T16253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2255.414127][T16253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2255.454488][T16253] 123714 total pagecache pages [ 2255.464069][T16253] 0 pages in swap cache [ 2255.469833][T16253] Swap cache stats: add 0, delete 0, find 0/0 [ 2255.475909][T16253] Free swap = 124996kB [ 2255.507379][T16253] Total swap = 124996kB [ 2255.517975][T16253] 2097051 pages RAM [ 2255.521791][T16253] 0 pages HighMem/MovableOnly [ 2255.526462][T16253] 415362 pages reserved [ 2255.557385][T16253] 0 pages cma reserved [ 2261.398716][T16518] FAULT_INJECTION: forcing a failure. [ 2261.398716][T16518] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.477871][T16527] device sit0 left promiscuous mode [ 2261.483463][T16518] CPU: 0 PID: 16518 Comm: syz.4.30654 Not tainted syzkaller #0 [ 2261.491018][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2261.501075][T16518] Call Trace: [ 2261.504358][T16518] [ 2261.507290][T16518] dump_stack_lvl+0x188/0x250 [ 2261.511979][T16518] ? show_regs_print_info+0x20/0x20 [ 2261.517170][T16518] ? load_image+0x410/0x410 [ 2261.521663][T16518] ? __might_sleep+0xf0/0xf0 [ 2261.526240][T16518] ? __lock_acquire+0x7d40/0x7d40 [ 2261.531256][T16518] should_fail+0x383/0x4b0 [ 2261.535662][T16518] should_failslab+0x5/0x20 [ 2261.540146][T16518] slab_pre_alloc_hook+0x51/0xc0 [ 2261.545073][T16518] __kmalloc+0x6b/0x340 [ 2261.549212][T16518] ? tomoyo_encode+0x28a/0x550 [ 2261.553963][T16518] tomoyo_encode+0x28a/0x550 [ 2261.558555][T16518] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 2261.564187][T16518] tomoyo_path_number_perm+0x251/0x6b0 [ 2261.569632][T16518] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2261.575080][T16518] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2261.581079][T16518] security_file_ioctl+0x6c/0xa0 [ 2261.586001][T16518] __se_sys_ioctl+0x48/0x170 [ 2261.590577][T16518] do_syscall_64+0x4c/0xa0 [ 2261.594980][T16518] ? clear_bhb_loop+0x30/0x80 [ 2261.599638][T16518] ? clear_bhb_loop+0x30/0x80 [ 2261.604297][T16518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2261.610172][T16518] RIP: 0033:0x7fa4a053c559 [ 2261.614573][T16518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.634161][T16518] RSP: 002b:00007fa49e793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2261.642558][T16518] RAX: ffffffffffffffda RBX: 00007fa4a07c2fa0 RCX: 00007fa4a053c559 [ 2261.650515][T16518] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 2261.658495][T16518] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2261.666451][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2261.674406][T16518] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2261.682374][T16518] [ 2261.777524][T16518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2261.803477][T16530] device sit0 entered promiscuous mode [ 2261.831182][T16532] rxe_eth0 speed is unknown, defaulting to 1000 [ 2262.763118][T16552] netlink: 'syz.1.30666': attribute type 2 has an invalid length. [ 2262.807396][T16552] netlink: 'syz.1.30666': attribute type 8 has an invalid length. [ 2262.840477][T16552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30666'. [ 2264.213101][T16605] netlink: 'syz.3.30689': attribute type 2 has an invalid length. [ 2264.247502][T16605] netlink: 'syz.3.30689': attribute type 8 has an invalid length. [ 2264.287954][T16605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30689'. [ 2264.566202][T16612] netlink: 'syz.2.30692': attribute type 2 has an invalid length. [ 2264.585911][T16612] netlink: 'syz.2.30692': attribute type 8 has an invalid length. [ 2264.594537][T16612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30692'. [ 2265.317177][T16665] netlink: 'syz.3.30714': attribute type 2 has an invalid length. [ 2265.333674][T16665] netlink: 'syz.3.30714': attribute type 8 has an invalid length. [ 2265.350731][T16665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30714'. [ 2265.637018][T16686] netlink: 'syz.3.30722': attribute type 2 has an invalid length. [ 2265.652688][T16686] netlink: 'syz.3.30722': attribute type 8 has an invalid length. [ 2265.691466][T16686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30722'. [ 2266.150325][T16704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30730'. [ 2266.643152][T16737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30738'. [ 2267.116425][T16752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30745'. [ 2267.915506][T16787] validate_nla: 6 callbacks suppressed [ 2267.915523][T16787] netlink: 'syz.1.30758': attribute type 2 has an invalid length. [ 2267.938418][T16787] netlink: 'syz.1.30758': attribute type 8 has an invalid length. [ 2267.946785][T16787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30758'. [ 2267.959945][T16789] netlink: 'syz.0.30755': attribute type 2 has an invalid length. [ 2268.005525][T16789] netlink: 'syz.0.30755': attribute type 8 has an invalid length. [ 2268.013908][T16789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30755'. [ 2268.623054][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.30770'. [ 2268.655648][T16814] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2268.981949][T16822] netlink: 'syz.2.30771': attribute type 2 has an invalid length. [ 2269.045318][T16822] netlink: 'syz.2.30771': attribute type 8 has an invalid length. [ 2269.087835][T16822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30771'. [ 2269.867539][T16862] FAULT_INJECTION: forcing a failure. [ 2269.867539][T16862] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.880832][T16856] netlink: 'syz.1.30782': attribute type 2 has an invalid length. [ 2269.907523][T16856] netlink: 'syz.1.30782': attribute type 8 has an invalid length. [ 2269.916521][T16856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30782'. [ 2269.946368][T16862] CPU: 1 PID: 16862 Comm: syz.2.30784 Not tainted syzkaller #0 [ 2269.953945][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2269.964004][T16862] Call Trace: [ 2269.967285][T16862] [ 2269.970213][T16862] dump_stack_lvl+0x188/0x250 [ 2269.974901][T16862] ? show_regs_print_info+0x20/0x20 [ 2269.980108][T16862] ? load_image+0x410/0x410 [ 2269.984638][T16862] ? __might_sleep+0xf0/0xf0 [ 2269.989222][T16862] ? __lock_acquire+0x7d40/0x7d40 [ 2269.994263][T16862] should_fail+0x383/0x4b0 [ 2269.998698][T16862] should_failslab+0x5/0x20 [ 2270.003205][T16862] slab_pre_alloc_hook+0x51/0xc0 [ 2270.008156][T16862] kmem_cache_alloc_node+0x47/0x2c0 [ 2270.013356][T16862] ? __alloc_skb+0xf4/0x750 [ 2270.017861][T16862] __alloc_skb+0xf4/0x750 [ 2270.022195][T16862] netlink_dump+0x1cc/0xdd0 [ 2270.026696][T16862] ? lockdep_hardirqs_on+0x94/0x140 [ 2270.031900][T16862] ? slab_free_freelist_hook+0xec/0x170 [ 2270.037448][T16862] ? netlink_lookup+0x1d0/0x1d0 [ 2270.042316][T16862] netlink_recvmsg+0x685/0xe50 [ 2270.047087][T16862] ? netlink_sendmsg+0xbe0/0xbe0 [ 2270.052021][T16862] ? aa_sk_perm+0x7dc/0x910 [ 2270.056530][T16862] ? aa_af_perm+0x340/0x340 [ 2270.061033][T16862] ? perf_trace_lock+0xe4/0x390 [ 2270.065901][T16862] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2270.071185][T16862] ? security_socket_recvmsg+0x85/0xb0 [ 2270.076656][T16862] ? netlink_sendmsg+0xbe0/0xbe0 [ 2270.081594][T16862] ____sys_recvmsg+0x2ca/0x5b0 [ 2270.086373][T16862] ? __sys_recvmsg_sock+0x40/0x40 [ 2270.091411][T16862] ? import_iovec+0x6f/0xa0 [ 2270.095919][T16862] ___sys_recvmsg+0x213/0x5c0 [ 2270.100602][T16862] ? __sys_recvmsg+0x280/0x280 [ 2270.105390][T16862] ? __fget_files+0x402/0x470 [ 2270.110079][T16862] __x64_sys_recvmsg+0x201/0x2d0 [ 2270.115014][T16862] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2270.119858][T16862] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2270.125847][T16862] ? lockdep_hardirqs_on+0x94/0x140 [ 2270.131043][T16862] do_syscall_64+0x4c/0xa0 [ 2270.135452][T16862] ? clear_bhb_loop+0x30/0x80 [ 2270.140132][T16862] ? clear_bhb_loop+0x30/0x80 [ 2270.144804][T16862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2270.150692][T16862] RIP: 0033:0x7f90ab1a6559 [ 2270.155107][T16862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2270.174706][T16862] RSP: 002b:00007f90a93fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2270.183115][T16862] RAX: ffffffffffffffda RBX: 00007f90ab42cfa0 RCX: 00007f90ab1a6559 [ 2270.191085][T16862] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2270.199050][T16862] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2270.207011][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.214972][T16862] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2270.222958][T16862] [ 2271.796818][T16920] device syzkaller0 entered promiscuous mode [ 2272.827493][T16956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.30818'. [ 2272.836623][T16956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.30818'. [ 2272.954599][T16967] rxe_eth0 speed is unknown, defaulting to 1000 [ 2273.184975][T16972] FAULT_INJECTION: forcing a failure. [ 2273.184975][T16972] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.289711][T16972] CPU: 1 PID: 16972 Comm: syz.3.30822 Not tainted syzkaller #0 [ 2273.297304][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2273.307371][T16972] Call Trace: [ 2273.310659][T16972] [ 2273.313591][T16972] dump_stack_lvl+0x188/0x250 [ 2273.318282][T16972] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2273.324449][T16972] ? show_regs_print_info+0x20/0x20 [ 2273.329664][T16972] ? load_image+0x410/0x410 [ 2273.334193][T16972] should_fail+0x383/0x4b0 [ 2273.338628][T16972] should_failslab+0x5/0x20 [ 2273.343138][T16972] slab_pre_alloc_hook+0x51/0xc0 [ 2273.348087][T16972] __kmalloc+0x6b/0x340 [ 2273.352252][T16972] ? tomoyo_encode+0x28a/0x550 [ 2273.357035][T16972] tomoyo_encode+0x28a/0x550 [ 2273.361644][T16972] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 2273.367304][T16972] tomoyo_path_number_perm+0x251/0x6b0 [ 2273.372779][T16972] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2273.378272][T16972] ? perf_trace_lock+0xe4/0x390 [ 2273.383190][T16972] security_file_ioctl+0x6c/0xa0 [ 2273.388142][T16972] __se_sys_ioctl+0x48/0x170 [ 2273.392747][T16972] do_syscall_64+0x4c/0xa0 [ 2273.397171][T16972] ? clear_bhb_loop+0x30/0x80 [ 2273.401850][T16972] ? clear_bhb_loop+0x30/0x80 [ 2273.406535][T16972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2273.412427][T16972] RIP: 0033:0x7fbf4437c559 [ 2273.416849][T16972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.436457][T16972] RSP: 002b:00007fbf425d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2273.444885][T16972] RAX: ffffffffffffffda RBX: 00007fbf44602fa0 RCX: 00007fbf4437c559 [ 2273.452861][T16972] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000025 [ 2273.460830][T16972] RBP: 00007fbf425d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.468795][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.476757][T16972] R13: 00007fbf44603038 R14: 00007fbf44602fa0 R15: 00007fffef631e58 [ 2273.484743][T16972] [ 2274.310811][T17002] device syzkaller0 entered promiscuous mode [ 2274.539436][T17017] FAULT_INJECTION: forcing a failure. [ 2274.539436][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.634826][T17017] CPU: 1 PID: 17017 Comm: syz.0.30834 Not tainted syzkaller #0 [ 2274.642454][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2274.646743][T17012] device syzkaller0 entered promiscuous mode [ 2274.652552][T17017] Call Trace: [ 2274.652591][T17017] [ 2274.652601][T17017] dump_stack_lvl+0x188/0x250 [ 2274.669517][T17017] ? show_regs_print_info+0x20/0x20 [ 2274.674776][T17017] ? load_image+0x410/0x410 [ 2274.679340][T17017] ? __might_sleep+0xf0/0xf0 [ 2274.683968][T17017] ? __lock_acquire+0x7d40/0x7d40 [ 2274.689062][T17017] should_fail+0x383/0x4b0 [ 2274.693557][T17017] should_failslab+0x5/0x20 [ 2274.698097][T17017] slab_pre_alloc_hook+0x51/0xc0 [ 2274.703076][T17017] kmem_cache_alloc_node+0x47/0x2c0 [ 2274.708297][T17017] ? __alloc_skb+0xf4/0x750 [ 2274.712874][T17017] __alloc_skb+0xf4/0x750 [ 2274.717262][T17017] alloc_skb_with_frags+0xa7/0x720 [ 2274.722417][T17017] ? __lock_acquire+0x7d40/0x7d40 [ 2274.727517][T17017] sock_alloc_send_pskb+0x87f/0x9a0 [ 2274.732752][T17017] ? __might_fault+0xb3/0x110 [ 2274.737541][T17017] ? sock_kzfree_s+0x50/0x50 [ 2274.742238][T17017] tun_get_user+0x8f7/0x3b10 [ 2274.746863][T17017] ? perf_trace_lock+0x301/0x390 [ 2274.751878][T17017] ? trace_event_raw_event_lock+0x250/0x250 [ 2274.757848][T17017] ? tun_ring_recv+0xc90/0xc90 [ 2274.762703][T17017] ? rcu_lock_release+0x5/0x20 [ 2274.767530][T17017] ? __lock_acquire+0x7d40/0x7d40 [ 2274.772597][T17017] ? trace_event_raw_event_lock+0x250/0x250 [ 2274.778566][T17017] tun_chr_write_iter+0x112/0x1e0 [ 2274.783612][T17017] vfs_write+0x748/0xd70 [ 2274.787890][T17017] ? file_end_write+0x250/0x250 [ 2274.792788][T17017] ? __fget_files+0x402/0x470 [ 2274.797493][T17017] ? __fdget_pos+0x1e2/0x370 [ 2274.802080][T17017] ? ksys_write+0x70/0x260 [ 2274.806505][T17017] ksys_write+0x153/0x260 [ 2274.810877][T17017] ? __ia32_sys_read+0x80/0x80 [ 2274.815677][T17017] ? lockdep_hardirqs_on+0x94/0x140 [ 2274.820921][T17017] do_syscall_64+0x4c/0xa0 [ 2274.825348][T17017] ? clear_bhb_loop+0x30/0x80 [ 2274.830032][T17017] ? clear_bhb_loop+0x30/0x80 [ 2274.834717][T17017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2274.840610][T17017] RIP: 0033:0x7ff871a99559 [ 2274.845050][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.864660][T17017] RSP: 002b:00007ff86fccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2274.873083][T17017] RAX: ffffffffffffffda RBX: 00007ff871d20090 RCX: 00007ff871a99559 [ 2274.881078][T17017] RDX: 0000000000000012 RSI: 0000200000000440 RDI: 0000000000000003 [ 2274.889051][T17017] RBP: 00007ff86fccf090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.897032][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.905008][T17017] R13: 00007ff871d20128 R14: 00007ff871d20090 R15: 00007ffdb740cd38 [ 2274.913028][T17017] [ 2275.037468][T16972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2276.536374][T17056] device syzkaller0 entered promiscuous mode [ 2277.351678][T17083] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.30857'. [ 2278.045857][T17099] device syzkaller0 entered promiscuous mode [ 2278.114088][T17104] FAULT_INJECTION: forcing a failure. [ 2278.114088][T17104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.128158][T17106] FAULT_INJECTION: forcing a failure. [ 2278.128158][T17106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.163497][T17104] CPU: 1 PID: 17104 Comm: syz.4.30865 Not tainted syzkaller #0 [ 2278.171118][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2278.181219][T17104] Call Trace: [ 2278.184537][T17104] [ 2278.187506][T17104] dump_stack_lvl+0x188/0x250 [ 2278.192240][T17104] ? show_regs_print_info+0x20/0x20 [ 2278.197478][T17104] ? load_image+0x410/0x410 [ 2278.202054][T17104] ? __lock_acquire+0x7d40/0x7d40 [ 2278.207137][T17104] should_fail+0x383/0x4b0 [ 2278.211628][T17104] _copy_to_user+0x2e/0x130 [ 2278.216207][T17104] simple_read_from_buffer+0xe3/0x150 [ 2278.221648][T17104] proc_fail_nth_read+0x1a6/0x220 [ 2278.226712][T17104] ? proc_fault_inject_write+0x310/0x310 [ 2278.232410][T17104] ? fsnotify_perm+0x254/0x560 [ 2278.237253][T17104] ? proc_fault_inject_write+0x310/0x310 [ 2278.242925][T17104] vfs_read+0x2ff/0xd50 [ 2278.247135][T17104] ? __lock_acquire+0x7d40/0x7d40 [ 2278.252218][T17104] ? kernel_read+0x1e0/0x1e0 [ 2278.256921][T17104] ? mutex_lock_nested+0x17/0x20 [ 2278.261892][T17104] ? __fdget_pos+0x2bf/0x370 [ 2278.266510][T17104] ? ksys_read+0x70/0x260 [ 2278.270888][T17104] ksys_read+0x153/0x260 [ 2278.275182][T17104] ? vfs_write+0xd70/0xd70 [ 2278.279651][T17104] ? lockdep_hardirqs_on+0x94/0x140 [ 2278.284903][T17104] do_syscall_64+0x4c/0xa0 [ 2278.289351][T17104] ? clear_bhb_loop+0x30/0x80 [ 2278.294056][T17104] ? clear_bhb_loop+0x30/0x80 [ 2278.298778][T17104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2278.304710][T17104] RIP: 0033:0x7fa4a04fcd8e [ 2278.309162][T17104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2278.328813][T17104] RSP: 002b:00007fa49e792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2278.337261][T17104] RAX: ffffffffffffffda RBX: 00007fa49e7936c0 RCX: 00007fa4a04fcd8e [ 2278.345273][T17104] RDX: 000000000000000f RSI: 00007fa49e7930a0 RDI: 0000000000000006 [ 2278.353297][T17104] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2278.361312][T17104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.369329][T17104] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2278.377416][T17104] [ 2278.400605][T17106] CPU: 1 PID: 17106 Comm: syz.2.30866 Not tainted syzkaller #0 [ 2278.408183][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2278.418244][T17106] Call Trace: [ 2278.421538][T17106] [ 2278.424483][T17106] dump_stack_lvl+0x188/0x250 [ 2278.429175][T17106] ? show_regs_print_info+0x20/0x20 [ 2278.434384][T17106] ? load_image+0x410/0x410 [ 2278.438914][T17106] ? __lock_acquire+0x7d40/0x7d40 [ 2278.443953][T17106] should_fail+0x383/0x4b0 [ 2278.448384][T17106] _copy_to_user+0x2e/0x130 [ 2278.452896][T17106] simple_read_from_buffer+0xe3/0x150 [ 2278.458321][T17106] proc_fail_nth_read+0x1a6/0x220 [ 2278.463358][T17106] ? proc_fault_inject_write+0x310/0x310 [ 2278.469003][T17106] ? fsnotify_perm+0x254/0x560 [ 2278.473774][T17106] ? proc_fault_inject_write+0x310/0x310 [ 2278.479417][T17106] vfs_read+0x2ff/0xd50 [ 2278.483581][T17106] ? __lock_acquire+0x7d40/0x7d40 [ 2278.488621][T17106] ? kernel_read+0x1e0/0x1e0 [ 2278.493233][T17106] ? mutex_lock_nested+0x17/0x20 [ 2278.498179][T17106] ? __fdget_pos+0x2bf/0x370 [ 2278.502769][T17106] ? ksys_read+0x70/0x260 [ 2278.507111][T17106] ksys_read+0x153/0x260 [ 2278.511361][T17106] ? vfs_write+0xd70/0xd70 [ 2278.515786][T17106] ? lockdep_hardirqs_on+0x94/0x140 [ 2278.520996][T17106] do_syscall_64+0x4c/0xa0 [ 2278.525413][T17106] ? clear_bhb_loop+0x30/0x80 [ 2278.530093][T17106] ? clear_bhb_loop+0x30/0x80 [ 2278.534780][T17106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2278.540680][T17106] RIP: 0033:0x7f90ab166d8e [ 2278.545101][T17106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2278.564712][T17106] RSP: 002b:00007f90a93fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2278.573141][T17106] RAX: ffffffffffffffda RBX: 00007f90a93fd6c0 RCX: 00007f90ab166d8e [ 2278.581126][T17106] RDX: 000000000000000f RSI: 00007f90a93fd0a0 RDI: 0000000000000003 [ 2278.589107][T17106] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2278.597091][T17106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.605070][T17106] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2278.613069][T17106] [ 2279.015201][T17126] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.30873'. [ 2280.398171][T17162] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.30888'. [ 2281.634179][T17215] FAULT_INJECTION: forcing a failure. [ 2281.634179][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.698678][T17215] CPU: 1 PID: 17215 Comm: syz.2.30908 Not tainted syzkaller #0 [ 2281.706256][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2281.716318][T17215] Call Trace: [ 2281.719605][T17215] [ 2281.722606][T17215] dump_stack_lvl+0x188/0x250 [ 2281.727313][T17215] ? show_regs_print_info+0x20/0x20 [ 2281.732523][T17215] ? load_image+0x410/0x410 [ 2281.737040][T17215] ? __lock_acquire+0x7d40/0x7d40 [ 2281.742078][T17215] ? __lock_acquire+0x13b3/0x7d40 [ 2281.747117][T17215] should_fail+0x383/0x4b0 [ 2281.751544][T17215] strncpy_from_user+0x32/0x350 [ 2281.756410][T17215] bpf_prog_load+0x1fd/0x14e0 [ 2281.761108][T17215] ? map_freeze+0x360/0x360 [ 2281.765626][T17215] ? __might_fault+0xb7/0x110 [ 2281.770331][T17215] ? __might_fault+0xb3/0x110 [ 2281.775016][T17215] ? bpf_lsm_bpf+0x5/0x10 [ 2281.779349][T17215] ? security_bpf+0x7a/0xa0 [ 2281.783866][T17215] __sys_bpf+0x532/0x6f0 [ 2281.788127][T17215] ? bpf_link_show_fdinfo+0x380/0x380 [ 2281.793508][T17215] ? rcu_nmi_exit+0x6f/0xf0 [ 2281.798037][T17215] __x64_sys_bpf+0x78/0x90 [ 2281.802463][T17215] do_syscall_64+0x4c/0xa0 [ 2281.806888][T17215] ? clear_bhb_loop+0x30/0x80 [ 2281.811571][T17215] ? clear_bhb_loop+0x30/0x80 [ 2281.816254][T17215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2281.822153][T17215] RIP: 0033:0x7f90ab1a6559 [ 2281.826567][T17215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.846173][T17215] RSP: 002b:00007f90a93fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2281.854598][T17215] RAX: ffffffffffffffda RBX: 00007f90ab42cfa0 RCX: 00007f90ab1a6559 [ 2281.862579][T17215] RDX: 0000000000000094 RSI: 0000200000001980 RDI: 0000000000000005 [ 2281.870555][T17215] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.878538][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.886514][T17215] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2281.894513][T17215] [ 2282.113738][T17233] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.30913'. [ 2283.009476][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.015845][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.027746][T17267] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.30926'. [ 2283.083521][T17267] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.30926'. [ 2289.091698][T17434] rxe_eth0 speed is unknown, defaulting to 1000 [ 2289.823226][T17434] chnl_net:caif_netlink_parms(): no params data found [ 2290.031331][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2290.039825][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.048558][T17434] device bridge_slave_0 entered promiscuous mode [ 2290.057093][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2290.065566][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.074373][T17434] device bridge_slave_1 entered promiscuous mode [ 2290.100867][T17434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2290.142268][T17434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2290.208947][T17434] team0: Port device team_slave_0 added [ 2290.247913][T17434] team0: Port device team_slave_1 added [ 2290.399111][T17434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2290.440090][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2290.493788][T17434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2290.529985][T17434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2290.547658][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2290.644070][T17434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2290.696984][ T155] tipc: Left network mode [ 2290.970406][T17434] device hsr_slave_0 entered promiscuous mode [ 2290.991220][T17434] device hsr_slave_1 entered promiscuous mode [ 2291.016179][T17434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2291.045429][T17434] Cannot create hsr debugfs directory [ 2291.087447][T14575] Bluetooth: hci5: command 0x0409 tx timeout [ 2291.858924][T17526] FAULT_INJECTION: forcing a failure. [ 2291.858924][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.878400][T17526] CPU: 1 PID: 17526 Comm: syz.2.31012 Not tainted syzkaller #0 [ 2291.885989][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2291.896054][T17526] Call Trace: [ 2291.899340][T17526] [ 2291.902276][T17526] dump_stack_lvl+0x188/0x250 [ 2291.906968][T17526] ? show_regs_print_info+0x20/0x20 [ 2291.912183][T17526] ? load_image+0x410/0x410 [ 2291.916700][T17526] ? __might_sleep+0xf0/0xf0 [ 2291.921303][T17526] ? __lock_acquire+0x7d40/0x7d40 [ 2291.926335][T17526] ? netlink_insert+0xe90/0x11f0 [ 2291.931289][T17526] should_fail+0x383/0x4b0 [ 2291.935723][T17526] should_failslab+0x5/0x20 [ 2291.940233][T17526] slab_pre_alloc_hook+0x51/0xc0 [ 2291.945182][T17526] kmem_cache_alloc_node+0x47/0x2c0 [ 2291.950389][T17526] ? __alloc_skb+0xf4/0x750 [ 2291.954905][T17526] __alloc_skb+0xf4/0x750 [ 2291.959251][T17526] netlink_sendmsg+0x654/0xbe0 [ 2291.964035][T17526] ? netlink_getsockopt+0x570/0x570 [ 2291.969236][T17526] ? aa_sock_msg_perm+0x94/0x150 [ 2291.974186][T17526] ? apparmor_socket_sendmsg+0x88/0x230 [ 2291.979741][T17526] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2291.985034][T17526] ? security_socket_sendmsg+0x7c/0xa0 [ 2291.990500][T17526] ? netlink_getsockopt+0x570/0x570 [ 2291.995711][T17526] ____sys_sendmsg+0x5be/0x8f0 [ 2292.000500][T17526] ? __sys_sendmsg_sock+0x30/0x30 [ 2292.005540][T17526] ? import_iovec+0x6f/0xa0 [ 2292.010058][T17526] ___sys_sendmsg+0x236/0x2e0 [ 2292.014754][T17526] ? __sys_sendmsg+0x290/0x290 [ 2292.019558][T17526] __se_sys_sendmsg+0x1b7/0x2a0 [ 2292.024427][T17526] ? __x64_sys_sendmsg+0x80/0x80 [ 2292.029377][T17526] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2292.035382][T17526] ? lockdep_hardirqs_on+0x94/0x140 [ 2292.040594][T17526] do_syscall_64+0x4c/0xa0 [ 2292.045015][T17526] ? clear_bhb_loop+0x30/0x80 [ 2292.049699][T17526] ? clear_bhb_loop+0x30/0x80 [ 2292.054385][T17526] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2292.060287][T17526] RIP: 0033:0x7f90ab1a6559 [ 2292.064708][T17526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.084319][T17526] RSP: 002b:00007f90a93fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2292.092741][T17526] RAX: ffffffffffffffda RBX: 00007f90ab42cfa0 RCX: 00007f90ab1a6559 [ 2292.100702][T17526] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2292.108665][T17526] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2292.116629][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.124588][T17526] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2292.132569][T17526] [ 2292.146939][ T155] device erspan0 left promiscuous mode [ 2292.153476][ T155] ¥: port 1(erspan0) entered disabled state [ 2292.223290][ T155] device gretap0 left promiscuous mode [ 2292.236011][ T155] Ÿë: port 1(gretap0) entered disabled state [ 2292.333724][T17547] FAULT_INJECTION: forcing a failure. [ 2292.333724][T17547] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.377765][T17547] CPU: 0 PID: 17547 Comm: syz.4.31017 Not tainted syzkaller #0 [ 2292.385369][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2292.395446][T17547] Call Trace: [ 2292.398756][T17547] [ 2292.401709][T17547] dump_stack_lvl+0x188/0x250 [ 2292.406428][T17547] ? show_regs_print_info+0x20/0x20 [ 2292.411661][T17547] ? load_image+0x410/0x410 [ 2292.416204][T17547] ? __might_sleep+0xf0/0xf0 [ 2292.420828][T17547] ? __lock_acquire+0x7d40/0x7d40 [ 2292.425883][T17547] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2292.431554][T17547] should_fail+0x383/0x4b0 [ 2292.436016][T17547] should_failslab+0x5/0x20 [ 2292.440540][T17547] slab_pre_alloc_hook+0x51/0xc0 [ 2292.445519][T17547] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 2292.451263][T17547] ? __get_vm_area_node+0x119/0x2d0 [ 2292.456507][T17547] __get_vm_area_node+0x119/0x2d0 [ 2292.461577][T17547] __vmalloc_node_range+0xef/0x8b0 [ 2292.466718][T17547] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2292.472289][T17547] ? end_current_label_crit_section+0x170/0x170 [ 2292.478559][T17547] ? __lock_acquire+0x7d40/0x7d40 [ 2292.483612][T17547] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2292.489283][T17547] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2292.494853][T17547] __vmalloc+0x76/0x80 [ 2292.498950][T17547] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2292.504524][T17547] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2292.509927][T17547] bpf_prog_alloc+0x1a/0x1e0 [ 2292.514553][T17547] bpf_prog_load+0x7d1/0x14e0 [ 2292.519288][T17547] ? map_freeze+0x360/0x360 [ 2292.523818][T17547] ? __might_fault+0xb7/0x110 [ 2292.528565][T17547] ? __might_fault+0xb3/0x110 [ 2292.533275][T17547] ? bpf_lsm_bpf+0x5/0x10 [ 2292.537626][T17547] ? security_bpf+0x7a/0xa0 [ 2292.542164][T17547] __sys_bpf+0x532/0x6f0 [ 2292.546443][T17547] ? bpf_link_show_fdinfo+0x380/0x380 [ 2292.551906][T17547] __x64_sys_bpf+0x78/0x90 [ 2292.556354][T17547] do_syscall_64+0x4c/0xa0 [ 2292.560787][T17547] ? clear_bhb_loop+0x30/0x80 [ 2292.565488][T17547] ? clear_bhb_loop+0x30/0x80 [ 2292.570194][T17547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2292.576115][T17547] RIP: 0033:0x7fa4a053c559 [ 2292.580554][T17547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.600180][T17547] RSP: 002b:00007fa49e793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2292.608627][T17547] RAX: ffffffffffffffda RBX: 00007fa4a07c2fa0 RCX: 00007fa4a053c559 [ 2292.616624][T17547] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2292.624616][T17547] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2292.632606][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.640598][T17547] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2292.648642][T17547] [ 2292.770321][T17552] FAULT_INJECTION: forcing a failure. [ 2292.770321][T17552] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.797529][T17552] CPU: 0 PID: 17552 Comm: syz.2.31018 Not tainted syzkaller #0 [ 2292.805118][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2292.815179][T17552] Call Trace: [ 2292.818449][T17552] [ 2292.821384][T17552] dump_stack_lvl+0x188/0x250 [ 2292.826089][T17552] ? show_regs_print_info+0x20/0x20 [ 2292.827408][T17547] syz.4.31017: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset= [ 2292.831281][T17552] ? load_image+0x410/0x410 [ 2292.831298][T17547] syz4 [ 2292.845856][T17552] ? __might_sleep+0xf0/0xf0 [ 2292.845878][T17552] ? __lock_acquire+0x7d40/0x7d40 [ 2292.845901][T17552] should_fail+0x383/0x4b0 [ 2292.863153][T17547] ,mems_allowed=0-1 [ 2292.867184][T17552] should_failslab+0x5/0x20 [ 2292.867208][T17552] slab_pre_alloc_hook+0x51/0xc0 [ 2292.872071][T17547] [ 2292.875472][T17552] __kmalloc+0x6b/0x340 [ 2292.875491][T17552] ? tomoyo_encode+0x28a/0x550 [ 2292.875517][T17552] tomoyo_encode+0x28a/0x550 [ 2292.896176][T17552] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 2292.901818][T17552] tomoyo_path_number_perm+0x251/0x6b0 [ 2292.907274][T17552] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2292.912726][T17552] ? ksys_write+0x1d4/0x260 [ 2292.917262][T17552] security_file_ioctl+0x6c/0xa0 [ 2292.922212][T17552] __se_sys_ioctl+0x48/0x170 [ 2292.926818][T17552] do_syscall_64+0x4c/0xa0 [ 2292.931235][T17552] ? clear_bhb_loop+0x30/0x80 [ 2292.935905][T17552] ? clear_bhb_loop+0x30/0x80 [ 2292.940577][T17552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2292.946464][T17552] RIP: 0033:0x7f90ab1a6559 [ 2292.950871][T17552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.970471][T17552] RSP: 002b:00007f90a93fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2292.978879][T17552] RAX: ffffffffffffffda RBX: 00007f90ab42cfa0 RCX: 00007f90ab1a6559 [ 2292.986848][T17552] RDX: 0000200000003a40 RSI: 00000000400454d9 RDI: 0000000000000005 [ 2292.994821][T17552] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.002891][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.010861][T17552] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2293.018846][T17552] [ 2293.021866][T17547] CPU: 1 PID: 17547 Comm: syz.4.31017 Not tainted syzkaller #0 [ 2293.029421][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2293.039481][T17547] Call Trace: [ 2293.042766][T17547] [ 2293.045702][T17547] dump_stack_lvl+0x188/0x250 [ 2293.050393][T17547] ? rcu_lock_release+0x5/0x20 [ 2293.052743][T17552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2293.055164][T17547] ? show_regs_print_info+0x20/0x20 [ 2293.055192][T17547] ? load_image+0x410/0x410 [ 2293.055213][T17547] ? __rcu_read_unlock+0x78/0xd0 [ 2293.055238][T17547] warn_alloc+0x245/0x320 [ 2293.055265][T17547] ? zone_watermark_ok_safe+0x250/0x250 [ 2293.086482][T17547] ? __get_vm_area_node+0x2b5/0x2d0 [ 2293.091674][T17547] __vmalloc_node_range+0x2b1/0x8b0 [ 2293.096888][T17547] ? end_current_label_crit_section+0x170/0x170 [ 2293.103114][T17547] ? __lock_acquire+0x7d40/0x7d40 [ 2293.108131][T17547] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2293.113755][T17547] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2293.119300][T17547] __vmalloc+0x76/0x80 [ 2293.123379][T17547] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2293.128939][T17547] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2293.134320][T17547] bpf_prog_alloc+0x1a/0x1e0 [ 2293.138923][T17547] bpf_prog_load+0x7d1/0x14e0 [ 2293.143622][T17547] ? map_freeze+0x360/0x360 [ 2293.148135][T17547] ? __might_fault+0xb7/0x110 [ 2293.152834][T17547] ? __might_fault+0xb3/0x110 [ 2293.157518][T17547] ? bpf_lsm_bpf+0x5/0x10 [ 2293.161851][T17547] ? security_bpf+0x7a/0xa0 [ 2293.166365][T17547] __sys_bpf+0x532/0x6f0 [ 2293.168722][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 2293.170612][T17547] ? bpf_link_show_fdinfo+0x380/0x380 [ 2293.181964][T17547] __x64_sys_bpf+0x78/0x90 [ 2293.186392][T17547] do_syscall_64+0x4c/0xa0 [ 2293.190812][T17547] ? clear_bhb_loop+0x30/0x80 [ 2293.195493][T17547] ? clear_bhb_loop+0x30/0x80 [ 2293.200182][T17547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2293.206084][T17547] RIP: 0033:0x7fa4a053c559 [ 2293.210504][T17547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2293.230119][T17547] RSP: 002b:00007fa49e793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2293.238541][T17547] RAX: ffffffffffffffda RBX: 00007fa4a07c2fa0 RCX: 00007fa4a053c559 [ 2293.246521][T17547] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2293.254564][T17547] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.262543][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.270521][T17547] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2293.278512][T17547] [ 2293.330694][T17434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2293.337934][T17547] Mem-Info: [ 2293.339916][T17434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2293.350712][T17547] active_anon:275 inactive_anon:10517 isolated_anon:0 [ 2293.350712][T17547] active_file:26902 inactive_file:42860 isolated_file:0 [ 2293.350712][T17547] unevictable:768 dirty:141 writeback:0 [ 2293.350712][T17547] slab_reclaimable:25049 slab_unreclaimable:106253 [ 2293.350712][T17547] mapped:31620 shmem:1635 pagetables:629 bounce:0 [ 2293.350712][T17547] kernel_misc_reclaimable:0 [ 2293.350712][T17547] free:1335415 free_pcp:12013 free_cma:0 [ 2293.393362][T17547] Node 0 active_anon:1068kB inactive_anon:41556kB active_file:107408kB inactive_file:171440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126480kB dirty:564kB writeback:0kB shmem:4460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:2516kB all_unreclaimable? no [ 2293.395839][T17434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2293.431635][T17547] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 2293.460868][T17547] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2293.491422][T17547] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 2293.497197][T17547] Node 0 DMA32 free:1406948kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:41556kB active_file:107408kB inactive_file:171440kB unevictable:1536kB writepending:564kB present:3129332kB managed:2590808kB mlocked:0kB bounce:0kB free_pcp:42412kB local_pcp:20956kB free_cma:0kB [ 2293.579170][T17434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2293.658219][T17547] lowmem_reserve[]: 0 0 0 0 0 [ 2293.668464][T17547] Node 0 Normal free:8kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2293.887642][T17547] lowmem_reserve[]: 0 0 0 0 0 [ 2293.894162][T17547] Node 1 Normal free:3919332kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5712kB local_pcp:3808kB free_cma:0kB [ 2293.948102][T17547] lowmem_reserve[]: 0 0 0 0 0 [ 2293.973418][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2293.976072][T17547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2294.024341][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 2294.037792][T17547] Node 0 DMA32: 4982*4kB (UME) 5280*8kB (UME) 5887*16kB (UM) 3225*32kB (UME) 1731*64kB (UME) 770*128kB (UME) 368*256kB (UME) 235*512kB (UME) 87*1024kB (UME) 32*2048kB (UM) 139*4096kB (UM) = 1407400kB [ 2294.092578][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2294.102432][T17547] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2294.119927][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2294.137409][T17547] Node 1 Normal: 189*4kB (UME) 50*8kB (UME) 34*16kB (UME) 162*32kB (UME) 72*64kB (UME) 22*128kB (UE) 12*256kB (UM) 3*512kB (U) 1*1024kB (U) 2*2048kB (UM) 951*4096kB (ME) = 3919332kB [ 2294.180528][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2294.186682][T17547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.228407][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2294.238760][T17547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2294.274955][T17547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2294.284378][T22199] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.291636][T22199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2294.320056][T17547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2294.361729][T17547] 71397 total pagecache pages [ 2294.386381][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2294.398984][T17547] 0 pages in swap cache [ 2294.408229][T17547] Swap cache stats: add 0, delete 0, find 0/0 [ 2294.426760][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2294.435572][T17547] Free swap = 124996kB [ 2294.443008][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2294.451901][T17547] Total swap = 124996kB [ 2294.456187][T17547] 2097051 pages RAM [ 2294.503631][T17547] 0 pages HighMem/MovableOnly [ 2294.510109][T22199] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.517224][T22199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2294.529362][T17547] 415362 pages reserved [ 2294.533529][T17547] 0 pages cma reserved [ 2294.602160][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2294.635243][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2294.645382][T17613] FAULT_INJECTION: forcing a failure. [ 2294.645382][T17613] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.670176][T17613] CPU: 0 PID: 17613 Comm: syz.4.31028 Not tainted syzkaller #0 [ 2294.677747][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2294.687806][T17613] Call Trace: [ 2294.691088][T17613] [ 2294.694024][T17613] dump_stack_lvl+0x188/0x250 [ 2294.698722][T17613] ? show_regs_print_info+0x20/0x20 [ 2294.703933][T17613] ? load_image+0x410/0x410 [ 2294.708454][T17613] ? __might_sleep+0xf0/0xf0 [ 2294.713057][T17613] ? __lock_acquire+0x7d40/0x7d40 [ 2294.718101][T17613] should_fail+0x383/0x4b0 [ 2294.722532][T17613] should_failslab+0x5/0x20 [ 2294.727039][T17613] slab_pre_alloc_hook+0x51/0xc0 [ 2294.727283][T17434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2294.731980][T17613] __kmalloc+0x6b/0x340 [ 2294.732003][T17613] ? sk_prot_alloc+0xe7/0x210 [ 2294.751095][T17613] sk_prot_alloc+0xe7/0x210 [ 2294.755588][T17613] ? sk_alloc+0x1d/0x310 [ 2294.759820][T17613] sk_alloc+0x2f/0x310 [ 2294.763879][T17613] __netlink_create+0x6c/0x290 [ 2294.768628][T17613] ? __lock_acquire+0x7d40/0x7d40 [ 2294.773642][T17613] netlink_create+0x3a7/0x510 [ 2294.778315][T17613] ? rtnetlink_rcv+0x20/0x20 [ 2294.782912][T17613] __sock_create+0x473/0x910 [ 2294.787500][T17613] __sys_socket+0xe2/0x170 [ 2294.791918][T17613] __x64_sys_socket+0x76/0x80 [ 2294.796588][T17613] do_syscall_64+0x4c/0xa0 [ 2294.800996][T17613] ? clear_bhb_loop+0x30/0x80 [ 2294.805661][T17613] ? clear_bhb_loop+0x30/0x80 [ 2294.810326][T17613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2294.816212][T17613] RIP: 0033:0x7fa4a053c559 [ 2294.820617][T17613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2294.840207][T17613] RSP: 002b:00007fa49e793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2294.848611][T17613] RAX: ffffffffffffffda RBX: 00007fa4a07c2fa0 RCX: 00007fa4a053c559 [ 2294.856569][T17613] RDX: 0000000000000000 RSI: 0000000400000002 RDI: 0000000000000010 [ 2294.864527][T17613] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2294.872481][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.880435][T17613] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2294.888433][T17613] [ 2294.938058][T17434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2294.979101][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2295.010303][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2295.033621][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2295.063590][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2295.109744][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2295.157044][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2295.168778][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2295.178338][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2295.186793][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2295.195120][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2295.259958][ T2841] Bluetooth: hci5: command 0x040f tx timeout [ 2295.618770][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2295.626388][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2295.672497][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2295.867263][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2295.889008][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2296.043066][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2296.072204][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2296.101559][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2296.118042][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2296.157661][T17434] device veth0_vlan entered promiscuous mode [ 2296.213291][T17434] device veth1_vlan entered promiscuous mode [ 2296.341968][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2296.366712][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2296.390047][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2296.405762][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2296.434022][T17434] device veth0_macvtap entered promiscuous mode [ 2296.453357][T17434] device veth1_macvtap entered promiscuous mode [ 2296.485994][T17434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2296.548687][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2296.574098][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2296.640047][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2296.663689][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2296.699959][T17434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2296.730168][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2296.749349][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2296.820248][T17434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.897487][T17434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.906240][T17434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.007142][T17434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.338674][T29144] Bluetooth: hci5: command 0x0419 tx timeout [ 2297.340317][ T2747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.396142][ T2747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.431953][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2297.545559][T13586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.612276][T13586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.630134][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2298.609400][T17757] rxe_eth0 speed is unknown, defaulting to 1000 [ 2299.052244][T17785] tap0: tun_chr_ioctl cmd 2147767520 [ 2299.262854][T17757] chnl_net:caif_netlink_parms(): no params data found [ 2299.424933][T17757] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.444669][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.465338][T17757] device bridge_slave_0 entered promiscuous mode [ 2299.493496][T17757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.522789][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.582284][T17757] device bridge_slave_1 entered promiscuous mode [ 2299.649182][T17757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2299.668270][T17757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2299.716471][T17757] team0: Port device team_slave_0 added [ 2299.741019][T17829] FAULT_INJECTION: forcing a failure. [ 2299.741019][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.744430][T17757] team0: Port device team_slave_1 added [ 2299.783211][T17829] CPU: 0 PID: 17829 Comm: syz.0.31083 Not tainted syzkaller #0 [ 2299.790779][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2299.795841][T17757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2299.800831][T17829] Call Trace: [ 2299.800840][T17829] [ 2299.800847][T17829] dump_stack_lvl+0x188/0x250 [ 2299.800875][T17829] ? show_regs_print_info+0x20/0x20 [ 2299.800895][T17829] ? load_image+0x410/0x410 [ 2299.800923][T17829] ? __might_sleep+0xf0/0xf0 [ 2299.800940][T17829] ? __lock_acquire+0x7d40/0x7d40 [ 2299.819765][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2299.823868][T17829] ? netlink_insert+0xe90/0x11f0 [ 2299.823898][T17829] should_fail+0x383/0x4b0 [ 2299.832569][T17757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2299.832978][T17829] should_failslab+0x5/0x20 [ 2299.840535][T17757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2299.863808][T17829] slab_pre_alloc_hook+0x51/0xc0 [ 2299.863835][T17829] kmem_cache_alloc_node+0x47/0x2c0 [ 2299.863851][T17829] ? __alloc_skb+0xf4/0x750 [ 2299.863871][T17829] __alloc_skb+0xf4/0x750 [ 2299.863891][T17829] netlink_sendmsg+0x654/0xbe0 [ 2299.863925][T17829] ? netlink_getsockopt+0x570/0x570 [ 2299.871801][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2299.873231][T17829] ? aa_sock_msg_perm+0x94/0x150 [ 2299.873258][T17829] ? apparmor_socket_sendmsg+0x88/0x230 [ 2299.884125][T17757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2299.888214][T17829] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2299.888237][T17829] ? security_socket_sendmsg+0x7c/0xa0 [ 2299.888257][T17829] ? netlink_getsockopt+0x570/0x570 [ 2299.888278][T17829] ____sys_sendmsg+0x5be/0x8f0 [ 2299.888304][T17829] ? __sys_sendmsg_sock+0x30/0x30 [ 2299.888328][T17829] ? import_iovec+0x6f/0xa0 [ 2300.000863][T17829] ___sys_sendmsg+0x236/0x2e0 [ 2300.005559][T17829] ? __sys_sendmsg+0x290/0x290 [ 2300.010362][T17829] __se_sys_sendmsg+0x1b7/0x2a0 [ 2300.015216][T17829] ? __x64_sys_sendmsg+0x80/0x80 [ 2300.020149][T17829] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2300.026144][T17829] ? lockdep_hardirqs_on+0x94/0x140 [ 2300.031344][T17829] do_syscall_64+0x4c/0xa0 [ 2300.035760][T17829] ? clear_bhb_loop+0x30/0x80 [ 2300.040436][T17829] ? clear_bhb_loop+0x30/0x80 [ 2300.045115][T17829] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2300.051005][T17829] RIP: 0033:0x7f13b13be559 [ 2300.055417][T17829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.075021][T17829] RSP: 002b:00007f13af615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.083435][T17829] RAX: ffffffffffffffda RBX: 00007f13b1644fa0 RCX: 00007f13b13be559 [ 2300.091404][T17829] RDX: 0000000000040000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 2300.099373][T17829] RBP: 00007f13af615090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.107342][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2300.115310][T17829] R13: 00007f13b1645038 R14: 00007f13b1644fa0 R15: 00007ffe3da14fe8 [ 2300.123296][T17829] [ 2300.133795][T17757] device hsr_slave_0 entered promiscuous mode [ 2300.187709][T17757] device hsr_slave_1 entered promiscuous mode [ 2300.237182][T17757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2300.247067][T17757] Cannot create hsr debugfs directory [ 2300.407165][T17849] netlink: 'syz.4.31091': attribute type 2 has an invalid length. [ 2300.422103][T17849] netlink: 132 bytes leftover after parsing attributes in process `syz.4.31091'. [ 2300.447966][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 2300.505312][T17853] netlink: 'syz.2.31094': attribute type 1 has an invalid length. [ 2300.645765][T17863] FAULT_INJECTION: forcing a failure. [ 2300.645765][T17863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.680572][T17863] CPU: 1 PID: 17863 Comm: syz.2.31098 Not tainted syzkaller #0 [ 2300.688146][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2300.698198][T17863] Call Trace: [ 2300.701477][T17863] [ 2300.704407][T17863] dump_stack_lvl+0x188/0x250 [ 2300.709098][T17863] ? show_regs_print_info+0x20/0x20 [ 2300.714304][T17863] ? load_image+0x410/0x410 [ 2300.718824][T17863] ? __lock_acquire+0x7d40/0x7d40 [ 2300.723858][T17863] should_fail+0x383/0x4b0 [ 2300.728287][T17863] _copy_to_user+0x2e/0x130 [ 2300.732797][T17863] simple_read_from_buffer+0xe3/0x150 [ 2300.738179][T17863] proc_fail_nth_read+0x1a6/0x220 [ 2300.743215][T17863] ? proc_fault_inject_write+0x310/0x310 [ 2300.748856][T17863] ? fsnotify_perm+0x254/0x560 [ 2300.753624][T17863] ? proc_fault_inject_write+0x310/0x310 [ 2300.759259][T17863] vfs_read+0x2ff/0xd50 [ 2300.763425][T17863] ? __lock_acquire+0x7d40/0x7d40 [ 2300.768458][T17863] ? kernel_read+0x1e0/0x1e0 [ 2300.773065][T17863] ? mutex_lock_nested+0x17/0x20 [ 2300.778008][T17863] ? __fdget_pos+0x2bf/0x370 [ 2300.782599][T17863] ? ksys_read+0x70/0x260 [ 2300.786931][T17863] ksys_read+0x153/0x260 [ 2300.791179][T17863] ? vfs_write+0xd70/0xd70 [ 2300.795606][T17863] ? lockdep_hardirqs_on+0x94/0x140 [ 2300.800820][T17863] do_syscall_64+0x4c/0xa0 [ 2300.805238][T17863] ? clear_bhb_loop+0x30/0x80 [ 2300.809918][T17863] ? clear_bhb_loop+0x30/0x80 [ 2300.814600][T17863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2300.820497][T17863] RIP: 0033:0x7f90ab166d8e [ 2300.824910][T17863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2300.844515][T17863] RSP: 002b:00007f90a93fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2300.852930][T17863] RAX: ffffffffffffffda RBX: 00007f90a93fd6c0 RCX: 00007f90ab166d8e [ 2300.860906][T17863] RDX: 000000000000000f RSI: 00007f90a93fd0a0 RDI: 0000000000000005 [ 2300.868878][T17863] RBP: 00007f90a93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.876848][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2300.884819][T17863] R13: 00007f90ab42d038 R14: 00007f90ab42cfa0 R15: 00007fff84096b98 [ 2300.892811][T17863] [ 2301.106954][T17875] netlink: 'syz.3.31103': attribute type 29 has an invalid length. [ 2301.161121][T17875] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 2301.231808][T17875] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 2301.247994][T17875] syzkaller0: persist enabled [ 2301.476317][T17757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2301.504015][T17757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2301.553871][T17757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2301.568747][T17897] FAULT_INJECTION: forcing a failure. [ 2301.568747][T17897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.589532][T17898] FAULT_INJECTION: forcing a failure. [ 2301.589532][T17898] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.661963][T17757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2301.665370][T17898] CPU: 1 PID: 17898 Comm: syz.0.31114 Not tainted syzkaller #0 [ 2301.676219][T17898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2301.686267][T17898] Call Trace: [ 2301.689539][T17898] [ 2301.692463][T17898] dump_stack_lvl+0x188/0x250 [ 2301.697144][T17898] ? show_regs_print_info+0x20/0x20 [ 2301.702336][T17898] ? load_image+0x410/0x410 [ 2301.706836][T17898] ? __might_sleep+0xf0/0xf0 [ 2301.711417][T17898] ? __lock_acquire+0x7d40/0x7d40 [ 2301.716432][T17898] ? netlink_insert+0xe90/0x11f0 [ 2301.721373][T17898] should_fail+0x383/0x4b0 [ 2301.725793][T17898] should_failslab+0x5/0x20 [ 2301.730288][T17898] slab_pre_alloc_hook+0x51/0xc0 [ 2301.735221][T17898] kmem_cache_alloc_node+0x47/0x2c0 [ 2301.740406][T17898] ? __alloc_skb+0xf4/0x750 [ 2301.744907][T17898] __alloc_skb+0xf4/0x750 [ 2301.749235][T17898] netlink_sendmsg+0x654/0xbe0 [ 2301.754007][T17898] ? netlink_getsockopt+0x570/0x570 [ 2301.759198][T17898] ? aa_sock_msg_perm+0x94/0x150 [ 2301.764132][T17898] ? apparmor_socket_sendmsg+0x88/0x230 [ 2301.769670][T17898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2301.774942][T17898] ? security_socket_sendmsg+0x7c/0xa0 [ 2301.780391][T17898] ? netlink_getsockopt+0x570/0x570 [ 2301.785605][T17898] ____sys_sendmsg+0x5be/0x8f0 [ 2301.790377][T17898] ? __sys_sendmsg_sock+0x30/0x30 [ 2301.795410][T17898] ? import_iovec+0x6f/0xa0 [ 2301.799910][T17898] ___sys_sendmsg+0x236/0x2e0 [ 2301.804593][T17898] ? __sys_sendmsg+0x290/0x290 [ 2301.809371][T17898] ? trace_event_raw_event_lock+0x250/0x250 [ 2301.815304][T17898] __se_sys_sendmsg+0x1b7/0x2a0 [ 2301.820149][T17898] ? __x64_sys_sendmsg+0x80/0x80 [ 2301.825072][T17898] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2301.831071][T17898] ? lockdep_hardirqs_on+0x94/0x140 [ 2301.836266][T17898] do_syscall_64+0x4c/0xa0 [ 2301.840669][T17898] ? clear_bhb_loop+0x30/0x80 [ 2301.845337][T17898] ? clear_bhb_loop+0x30/0x80 [ 2301.850005][T17898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2301.855891][T17898] RIP: 0033:0x7f13b13be559 [ 2301.860303][T17898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2301.879896][T17898] RSP: 002b:00007f13af615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2301.888302][T17898] RAX: ffffffffffffffda RBX: 00007f13b1644fa0 RCX: 00007f13b13be559 [ 2301.896261][T17898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2301.904219][T17898] RBP: 00007f13af615090 R08: 0000000000000000 R09: 0000000000000000 [ 2301.912177][T17898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2301.920137][T17898] R13: 00007f13b1645038 R14: 00007f13b1644fa0 R15: 00007ffe3da14fe8 [ 2301.928129][T17898] [ 2301.933442][T17897] CPU: 1 PID: 17897 Comm: syz.4.31113 Not tainted syzkaller #0 [ 2301.941024][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2301.951087][T17897] Call Trace: [ 2301.954361][T17897] [ 2301.957287][T17897] dump_stack_lvl+0x188/0x250 [ 2301.961977][T17897] ? show_regs_print_info+0x20/0x20 [ 2301.967173][T17897] ? load_image+0x410/0x410 [ 2301.971697][T17897] ? __lock_acquire+0x7d40/0x7d40 [ 2301.976720][T17897] should_fail+0x383/0x4b0 [ 2301.981134][T17897] _copy_to_user+0x2e/0x130 [ 2301.985632][T17897] simple_read_from_buffer+0xe3/0x150 [ 2301.991027][T17897] proc_fail_nth_read+0x1a6/0x220 [ 2301.996082][T17897] ? proc_fault_inject_write+0x310/0x310 [ 2302.001753][T17897] ? fsnotify_perm+0x254/0x560 [ 2302.006540][T17897] ? proc_fault_inject_write+0x310/0x310 [ 2302.012198][T17897] vfs_read+0x2ff/0xd50 [ 2302.016385][T17897] ? __lock_acquire+0x7d40/0x7d40 [ 2302.021442][T17897] ? kernel_read+0x1e0/0x1e0 [ 2302.026106][T17897] ? mutex_lock_nested+0x17/0x20 [ 2302.031067][T17897] ? __fdget_pos+0x2bf/0x370 [ 2302.035673][T17897] ? ksys_read+0x70/0x260 [ 2302.040034][T17897] ksys_read+0x153/0x260 [ 2302.044297][T17897] ? vfs_write+0xd70/0xd70 [ 2302.048741][T17897] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.053971][T17897] do_syscall_64+0x4c/0xa0 [ 2302.058404][T17897] ? clear_bhb_loop+0x30/0x80 [ 2302.063097][T17897] ? clear_bhb_loop+0x30/0x80 [ 2302.067797][T17897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2302.073707][T17897] RIP: 0033:0x7fa4a04fcd8e [ 2302.078142][T17897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2302.097752][T17897] RSP: 002b:00007fa49e792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2302.106177][T17897] RAX: ffffffffffffffda RBX: 00007fa49e7936c0 RCX: 00007fa4a04fcd8e [ 2302.114152][T17897] RDX: 000000000000000f RSI: 00007fa49e7930a0 RDI: 0000000000000005 [ 2302.122127][T17897] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.130104][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.138077][T17897] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2302.146071][T17897] [ 2302.331297][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2302.372517][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2302.388294][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2302.399727][T17757] 8021q: adding VLAN 0 to HW filter on device team0 [ 2302.432956][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2302.442225][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2302.465592][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2302.472706][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2302.510935][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2302.521369][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2302.529773][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 2302.537011][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2302.560492][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2302.567586][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2302.588201][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2302.607290][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2302.627172][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2302.640732][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2302.698261][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2302.699615][T17922] FAULT_INJECTION: forcing a failure. [ 2302.699615][T17922] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.706642][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2302.765489][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2302.779362][T17926] FAULT_INJECTION: forcing a failure. [ 2302.779362][T17926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.784461][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2302.820537][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2302.833482][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2302.834050][T17922] CPU: 1 PID: 17922 Comm: syz.0.31123 Not tainted syzkaller #0 [ 2302.845273][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2302.848826][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2302.848839][T17922] Call Trace: [ 2302.848846][T17922] [ 2302.848854][T17922] dump_stack_lvl+0x188/0x250 [ 2302.877502][T17922] ? show_regs_print_info+0x20/0x20 [ 2302.882712][T17922] ? load_image+0x410/0x410 [ 2302.887211][T17922] ? __might_sleep+0xf0/0xf0 [ 2302.891804][T17922] ? __lock_acquire+0x7d40/0x7d40 [ 2302.896843][T17922] should_fail+0x383/0x4b0 [ 2302.901275][T17922] should_failslab+0x5/0x20 [ 2302.905783][T17922] slab_pre_alloc_hook+0x51/0xc0 [ 2302.910725][T17922] ? sk_prot_alloc+0x57/0x210 [ 2302.915403][T17922] kmem_cache_alloc+0x3d/0x280 [ 2302.920177][T17922] sk_prot_alloc+0x57/0x210 [ 2302.924696][T17922] ? sk_alloc+0x1d/0x310 [ 2302.928949][T17922] sk_alloc+0x2f/0x310 [ 2302.933023][T17922] smc_sock_alloc+0x4b/0x480 [ 2302.937687][T17922] smc_create+0xb9/0x360 [ 2302.941932][T17922] __sock_create+0x473/0x910 [ 2302.946539][T17922] __sys_socket+0xe2/0x170 [ 2302.950970][T17922] __x64_sys_socket+0x76/0x80 [ 2302.955641][T17922] do_syscall_64+0x4c/0xa0 [ 2302.960052][T17922] ? clear_bhb_loop+0x30/0x80 [ 2302.964742][T17922] ? clear_bhb_loop+0x30/0x80 [ 2302.969426][T17922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2302.975321][T17922] RIP: 0033:0x7f13b13be559 [ 2302.979739][T17922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2302.999344][T17922] RSP: 002b:00007f13af615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2303.007764][T17922] RAX: ffffffffffffffda RBX: 00007f13b1644fa0 RCX: 00007f13b13be559 [ 2303.015728][T17922] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 2303.023695][T17922] RBP: 00007f13af615090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.031659][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.039628][T17922] R13: 00007f13b1645038 R14: 00007f13b1644fa0 R15: 00007ffe3da14fe8 [ 2303.047622][T17922] [ 2303.053636][T17926] CPU: 0 PID: 17926 Comm: syz.3.31125 Not tainted syzkaller #0 [ 2303.055797][T17917] device lo entered promiscuous mode [ 2303.061197][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2303.061211][T17926] Call Trace: [ 2303.061218][T17926] [ 2303.061226][T17926] dump_stack_lvl+0x188/0x250 [ 2303.061255][T17926] ? show_regs_print_info+0x20/0x20 [ 2303.061273][T17926] ? load_image+0x410/0x410 [ 2303.061298][T17926] ? __lock_acquire+0x7d40/0x7d40 [ 2303.084672][T17917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2303.087482][T17926] should_fail+0x383/0x4b0 [ 2303.087517][T17926] _copy_to_user+0x2e/0x130 [ 2303.087538][T17926] simple_read_from_buffer+0xe3/0x150 [ 2303.123357][T17926] proc_fail_nth_read+0x1a6/0x220 [ 2303.128396][T17926] ? proc_fault_inject_write+0x310/0x310 [ 2303.134049][T17926] ? fsnotify_perm+0x254/0x560 [ 2303.138822][T17926] ? proc_fault_inject_write+0x310/0x310 [ 2303.144566][T17926] vfs_read+0x2ff/0xd50 [ 2303.148742][T17926] ? __lock_acquire+0x7d40/0x7d40 [ 2303.153786][T17926] ? kernel_read+0x1e0/0x1e0 [ 2303.158401][T17926] ? mutex_lock_nested+0x17/0x20 [ 2303.163349][T17926] ? __fdget_pos+0x2bf/0x370 [ 2303.167942][T17926] ? ksys_read+0x70/0x260 [ 2303.172278][T17926] ksys_read+0x153/0x260 [ 2303.176529][T17926] ? vfs_write+0xd70/0xd70 [ 2303.180955][T17926] ? lockdep_hardirqs_on+0x94/0x140 [ 2303.186167][T17926] do_syscall_64+0x4c/0xa0 [ 2303.190590][T17926] ? clear_bhb_loop+0x30/0x80 [ 2303.195270][T17926] ? clear_bhb_loop+0x30/0x80 [ 2303.199956][T17926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2303.205856][T17926] RIP: 0033:0x7fbf4433cd8e [ 2303.210287][T17926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2303.229899][T17926] RSP: 002b:00007fbf425d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2303.238319][T17926] RAX: ffffffffffffffda RBX: 00007fbf425d36c0 RCX: 00007fbf4433cd8e [ 2303.246295][T17926] RDX: 000000000000000f RSI: 00007fbf425d30a0 RDI: 0000000000000005 [ 2303.254269][T17926] RBP: 00007fbf425d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.262249][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.270219][T17926] R13: 00007fbf44603038 R14: 00007fbf44602fa0 R15: 00007fffef631e58 [ 2303.278212][T17926] [ 2303.286519][ T155] tipc: Left network mode [ 2303.292695][T17757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2303.434665][ T155] device ip6gretap0 left promiscuous mode [ 2303.444418][ T155] : port 1(ip6gretap0) entered disabled state [ 2303.784886][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2303.797840][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2303.809562][T17957] FAULT_INJECTION: forcing a failure. [ 2303.809562][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2303.859671][T17757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2303.877653][T17957] CPU: 0 PID: 17957 Comm: syz.4.31133 Not tainted syzkaller #0 [ 2303.885226][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2303.895288][T17957] Call Trace: [ 2303.898583][T17957] [ 2303.901525][T17957] dump_stack_lvl+0x188/0x250 [ 2303.906223][T17957] ? show_regs_print_info+0x20/0x20 [ 2303.911435][T17957] ? load_image+0x410/0x410 [ 2303.916012][T17957] ? __lock_acquire+0x7d40/0x7d40 [ 2303.921064][T17957] should_fail+0x383/0x4b0 [ 2303.925508][T17957] _copy_to_user+0x2e/0x130 [ 2303.930025][T17957] simple_read_from_buffer+0xe3/0x150 [ 2303.935419][T17957] proc_fail_nth_read+0x1a6/0x220 [ 2303.940464][T17957] ? proc_fault_inject_write+0x310/0x310 [ 2303.946120][T17957] ? fsnotify_perm+0x254/0x560 [ 2303.950899][T17957] ? proc_fault_inject_write+0x310/0x310 [ 2303.956546][T17957] vfs_read+0x2ff/0xd50 [ 2303.960717][T17957] ? __lock_acquire+0x7d40/0x7d40 [ 2303.965764][T17957] ? kernel_read+0x1e0/0x1e0 [ 2303.970399][T17957] ? mutex_lock_nested+0x17/0x20 [ 2303.975349][T17957] ? __fdget_pos+0x2bf/0x370 [ 2303.979945][T17957] ? ksys_read+0x70/0x260 [ 2303.984290][T17957] ksys_read+0x153/0x260 [ 2303.988554][T17957] ? vfs_write+0xd70/0xd70 [ 2303.993088][T17957] ? lockdep_hardirqs_on+0x94/0x140 [ 2303.998320][T17957] do_syscall_64+0x4c/0xa0 [ 2304.002749][T17957] ? clear_bhb_loop+0x30/0x80 [ 2304.007433][T17957] ? clear_bhb_loop+0x30/0x80 [ 2304.012124][T17957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2304.018030][T17957] RIP: 0033:0x7fa4a04fcd8e [ 2304.022456][T17957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2304.042068][T17957] RSP: 002b:00007fa49e792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2304.050497][T17957] RAX: ffffffffffffffda RBX: 00007fa49e7936c0 RCX: 00007fa4a04fcd8e [ 2304.058477][T17957] RDX: 000000000000000f RSI: 00007fa49e7930a0 RDI: 0000000000000005 [ 2304.066450][T17957] RBP: 00007fa49e793090 R08: 0000000000000000 R09: 0000000000000000 [ 2304.074424][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2304.082399][T17957] R13: 00007fa4a07c3038 R14: 00007fa4a07c2fa0 R15: 00007ffeeb34ada8 [ 2304.090404][T17957] [ 2304.233012][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2304.254567][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2304.440268][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2304.460611][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2304.481595][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2304.518023][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2304.550389][T17972] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2304.566725][T17972] device syzkaller0 entered promiscuous mode [ 2304.607506][ T2844] Bluetooth: hci2: command 0x040f tx timeout [ 2304.628754][T17757] device veth0_vlan entered promiscuous mode [ 2304.654134][ T155] device erspan0 left promiscuous mode [ 2304.669901][ T155] ¥: port 1(erspan0) entered disabled state [ 2304.694343][T17757] device veth1_vlan entered promiscuous mode [ 2304.776336][T17757] device veth0_macvtap entered promiscuous mode [ 2304.816070][ T155] device gretap0 left promiscuous mode [ 2304.870477][ T155] Ÿë: port 1(gretap0) entered disabled state [ 2305.079447][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2305.098246][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2305.160747][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2305.198536][T17757] device veth1_macvtap entered promiscuous mode [ 2305.228707][T17757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2305.261039][T17757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2305.282315][T17757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2305.297736][T17991] rxe_eth0 speed is unknown, defaulting to 1000 [ 2305.301307][T17757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2305.331475][T17757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2305.360142][T17757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2305.386857][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2305.418104][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2305.426746][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2305.464781][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2305.485894][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2305.506336][T17757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.540856][T17757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.577462][T17757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.727540][T17757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.919657][T18007] device syzkaller0 entered promiscuous mode [ 2306.377762][ T2747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2306.405719][ T2747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.437973][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2306.546481][ T2747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2306.569873][ T2747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.716811][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 2306.749635][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2308.656554][T18065] rxe_eth0 speed is unknown, defaulting to 1000 [ 2309.095867][T18063] rxe_eth0 speed is unknown, defaulting to 1000 [ 2310.037256][T18063] chnl_net:caif_netlink_parms(): no params data found [ 2310.454156][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.515175][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2310.605366][T18063] device bridge_slave_0 entered promiscuous mode [ 2310.611896][T14575] Bluetooth: hci1: command 0x0409 tx timeout [ 2310.681034][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.691641][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2310.721269][T18063] device bridge_slave_1 entered promiscuous mode [ 2310.846034][T18063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2310.916183][T18063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2311.020042][T18063] team0: Port device team_slave_0 added [ 2311.064072][T18063] team0: Port device team_slave_1 added [ 2311.124678][T18063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2311.143095][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.197466][T18063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2311.227866][T18063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2311.245293][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.310545][T18063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2311.372151][T18122] IPv6: Can't replace route, no match found [ 2311.445653][T18124] netlink: 'syz.1.31187': attribute type 29 has an invalid length. [ 2311.446279][T18063] device hsr_slave_0 entered promiscuous mode [ 2311.478415][T18063] device hsr_slave_1 entered promiscuous mode [ 2311.495276][T18063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2311.503754][T18063] Cannot create hsr debugfs directory [ 2311.522421][T18124] netlink: 'syz.1.31187': attribute type 29 has an invalid length. [ 2311.546040][T18127] netlink: 'syz.1.31187': attribute type 29 has an invalid length. [ 2311.611276][T18125] netlink: 'syz.1.31187': attribute type 29 has an invalid length. [ 2312.687467][T14575] Bluetooth: hci1: command 0x041b tx timeout [ 2312.698212][T18063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2312.770279][T18063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2312.807187][T18063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2312.831593][T18063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2312.918741][T18159] netlink: 'syz.3.31201': attribute type 29 has an invalid length. [ 2313.038276][T18157] netlink: 'syz.2.31200': attribute type 10 has an invalid length. [ 2313.046195][T18157] netlink: 2 bytes leftover after parsing attributes in process `syz.2.31200'. [ 2313.055367][T18159] netlink: 'syz.3.31201': attribute type 29 has an invalid length. [ 2313.065179][T18162] netlink: 'syz.3.31201': attribute type 29 has an invalid length. [ 2313.096847][T18164] netlink: 'syz.3.31201': attribute type 29 has an invalid length. [ 2313.218079][T18063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2313.256074][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2313.277518][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2313.317030][T18063] 8021q: adding VLAN 0 to HW filter on device team0 [ 2313.337090][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2313.355221][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2313.372633][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.379749][T13586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2313.389134][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2313.418249][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2313.427095][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2313.447162][T22199] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.454287][T22199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2313.492105][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2313.514575][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2313.536150][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2313.563620][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2313.582189][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2313.591114][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31214'. [ 2313.614796][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2313.672111][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31214'. [ 2313.715048][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2313.731236][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2313.763563][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2313.828200][T18190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31214'. [ 2313.855999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2313.885868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2313.953575][T18063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2314.079477][T18201] netlink: 'syz.1.31217': attribute type 29 has an invalid length. [ 2314.526337][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2314.534704][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2314.552346][T18063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2314.767443][T14575] Bluetooth: hci1: command 0x040f tx timeout [ 2315.664743][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2315.681049][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2315.762668][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2315.783870][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2315.816736][T18063] device veth0_vlan entered promiscuous mode [ 2315.828860][T18265] IPv6: Can't replace route, no match found [ 2315.835277][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2315.852419][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2315.873682][T18063] device veth1_vlan entered promiscuous mode [ 2316.063965][T18063] device veth0_macvtap entered promiscuous mode [ 2316.084677][T18063] device veth1_macvtap entered promiscuous mode [ 2316.113254][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2316.130821][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2316.188352][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2316.207073][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2316.228649][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2316.252012][T18277] rxe_eth0 speed is unknown, defaulting to 1000 [ 2316.275134][T18063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2316.299204][T18063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2316.318405][T18063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2316.337445][T18063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2316.359211][T18063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2316.366584][T18283] netlink: 128 bytes leftover after parsing attributes in process `syz.2.31250'. [ 2316.387128][T18283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2316.772589][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2316.781112][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2316.793344][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2316.804714][T18063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2316.816294][T18063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2316.826664][T18063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2316.840683][T18063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2316.849616][T14569] Bluetooth: hci1: command 0x0419 tx timeout [ 2316.853400][T18063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2316.933614][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2316.942645][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2316.958566][T18063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.969347][T18063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.979533][T18063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.989321][T18063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2317.149461][T13586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2317.170661][T13586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2317.219576][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2317.243670][ T2747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2317.258264][ T2747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2317.297724][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2317.369582][T18313] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.31263'. [ 2317.656196][ T155] tipc: Left network mode [ 2317.874044][T18336] rxe_eth0 speed is unknown, defaulting to 1000 [ 2318.171809][T18356] validate_nla: 10 callbacks suppressed [ 2318.171824][T18356] netlink: 'syz.4.31279': attribute type 5 has an invalid length. [ 2318.306547][ T155] device gretap0 left promiscuous mode [ 2318.327725][ T155] Ÿë: port 1(gretap0) entered disabled state [ 2318.348581][T18336] chnl_net:caif_netlink_parms(): no params data found [ 2318.559062][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.577802][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.612634][T18336] device bridge_slave_0 entered promiscuous mode [ 2318.641498][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.657795][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.666007][T18336] device bridge_slave_1 entered promiscuous mode [ 2318.754529][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2318.775736][T18396] device syzkaller0 entered promiscuous mode [ 2318.797575][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2318.897436][T18336] team0: Port device team_slave_0 added [ 2318.925441][T18336] team0: Port device team_slave_1 added [ 2318.998758][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.005767][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.085677][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.121516][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.137475][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.187342][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2319.208346][T18415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31307'. [ 2319.317652][T18336] device hsr_slave_0 entered promiscuous mode [ 2319.328559][T18336] device hsr_slave_1 entered promiscuous mode [ 2319.347419][T18336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2319.355013][T18336] Cannot create hsr debugfs directory [ 2319.372875][T18423] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.31310'. [ 2319.606451][T18439] device syzkaller0 entered promiscuous mode [ 2319.890481][T14576] Bluetooth: hci3: command 0x0409 tx timeout [ 2320.138757][T18336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2321.541290][ T155] device hsr_slave_0 left promiscuous mode [ 2321.728460][T20591] Bluetooth: hci2: command 0x2016 tx timeout [ 2321.738089][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2321.761760][ T155] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2321.825735][ T155] bond0 (unregistering): Released all slaves [ 2321.849655][T18336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2321.870750][T18336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2321.882340][T18336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2321.977441][T20591] Bluetooth: hci3: command 0x041b tx timeout [ 2322.073677][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2322.137854][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2322.167973][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2322.221228][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 2322.323706][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2322.335904][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2322.376878][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2322.384025][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2322.425688][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2322.450504][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2322.490500][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2322.497608][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2322.536432][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2322.566579][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2323.357678][T18512] device sit0 entered promiscuous mode [ 2323.409674][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2323.500710][T18518] rxe_eth0 speed is unknown, defaulting to 1000 [ 2323.516946][T18336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2323.557481][T18336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2323.659206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2323.681004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2323.741411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2323.775061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2323.792849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2323.817027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2323.842434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2323.852546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2323.882287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2323.904496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2324.035531][T18531] device syzkaller0 entered promiscuous mode [ 2324.057715][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 2324.191136][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2324.208630][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2324.234248][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2324.291184][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2324.310645][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2324.371930][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2324.387994][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2324.409775][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2324.435371][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2324.462306][T18336] device veth0_vlan entered promiscuous mode [ 2324.515558][T18336] device veth1_vlan entered promiscuous mode [ 2324.602753][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2324.622319][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2324.663654][T18336] device veth0_macvtap entered promiscuous mode [ 2324.743176][T18336] device veth1_macvtap entered promiscuous mode [ 2324.791110][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.817126][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.867410][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.917496][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.928028][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.939064][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.956631][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2324.975773][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2324.988100][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2325.037967][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2325.046591][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2325.080639][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.114037][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.137407][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.168197][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.197437][T18336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.218113][T18336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.369542][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2325.393087][T18566] rxe_eth0 speed is unknown, defaulting to 1000 [ 2325.408312][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2325.435828][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2325.469009][T18336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.478538][T18336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.497229][T18336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.516343][T18336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.666196][ T2747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2325.697817][ T2747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2325.714748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2325.749916][ T2747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2325.761201][ T2747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2325.793891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2325.870145][T18573] rxe_eth0 speed is unknown, defaulting to 1000 [ 2326.137705][T29144] Bluetooth: hci3: command 0x0419 tx timeout [ 2326.164504][ T155] tipc: Left network mode [ 2326.626143][T18600] rxe_eth0 speed is unknown, defaulting to 1000 [ 2327.040714][ T155] device erspan0 left promiscuous mode [ 2327.056419][ T155] ¥: port 1(erspan0) entered disabled state [ 2327.110050][ T155] device gretap0 left promiscuous mode [ 2327.121724][ T155] Ÿë: port 1(gretap0) entered disabled state [ 2327.190872][T18600] chnl_net:caif_netlink_parms(): no params data found [ 2327.443978][T18600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.461613][T18600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.487028][T18600] device bridge_slave_0 entered promiscuous mode [ 2327.575161][T18630] rxe_eth0 speed is unknown, defaulting to 1000 [ 2327.581687][T18600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.592321][T18600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.619482][T18600] device bridge_slave_1 entered promiscuous mode [ 2327.780515][T18600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2327.865834][T18600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2328.155145][T18600] team0: Port device team_slave_0 added [ 2328.216027][T18600] team0: Port device team_slave_1 added [ 2328.449153][T18600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.456125][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2328.552522][T18600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.603190][T18600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2328.612501][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2328.639109][T14575] Bluetooth: hci0: command 0x0409 tx timeout [ 2328.643682][T18600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.836070][T18600] device hsr_slave_0 entered promiscuous mode [ 2328.863753][T18600] device hsr_slave_1 entered promiscuous mode [ 2329.946394][T18600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2330.056957][T18600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2330.106613][T18600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2330.187862][T18600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2330.426653][T18671] device syzkaller0 entered promiscuous mode [ 2330.690818][T14575] Bluetooth: hci0: command 0x041b tx timeout [ 2331.063889][T18682] device syzkaller0 entered promiscuous mode [ 2331.080998][T18648] rxe_eth0 speed is unknown, defaulting to 1000 [ 2331.125674][T18600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.334268][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2331.354645][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2331.392818][T18600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.501589][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2331.528059][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2331.564687][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.571820][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2331.666836][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2331.758190][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2331.787730][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2331.794856][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.853549][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2331.956055][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2331.981776][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2332.013033][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2332.070121][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2332.113455][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2332.155156][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2332.273035][T18600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2332.302298][T18600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2332.337019][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2332.365657][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2332.395334][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2332.421577][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2332.445640][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2332.505642][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2332.767621][T14569] Bluetooth: hci0: command 0x040f tx timeout [ 2334.978653][T14569] Bluetooth: hci0: command 0x0419 tx timeout [ 2335.276013][T18716] device sit0 entered promiscuous mode [ 2335.921053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2335.957513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2336.028893][T18600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2336.167376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2336.201771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2336.275368][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2336.308197][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2336.373405][T18600] device veth0_vlan entered promiscuous mode [ 2336.398366][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2336.406244][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2336.457166][T18600] device veth1_vlan entered promiscuous mode [ 2336.631785][T18600] device veth0_macvtap entered promiscuous mode [ 2336.676276][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2336.697904][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2336.733744][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2336.931986][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2338.206191][T18752] device syzkaller0 entered promiscuous mode [ 2338.238818][T18600] device veth1_macvtap entered promiscuous mode [ 2338.597531][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2338.615729][T22199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2338.663285][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.730547][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.981667][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2339.041044][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.069207][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2339.092567][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.120888][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2339.145985][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.173548][T18600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2339.203717][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2339.221438][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.242847][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2339.264758][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.286890][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2339.314099][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.356261][T18600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2339.394919][T18600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.409347][T18600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.719050][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2340.728218][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2340.743673][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2340.752896][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2340.779698][T18600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.795988][T18600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.805659][T18600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.819869][T18600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.081012][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.099761][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.132483][T13586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2341.189091][T13586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.208145][T13586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.236463][T18786] device syzkaller0 entered promiscuous mode [ 2341.254811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2342.624321][T18794] device syzkaller0 entered promiscuous mode [ 2342.951342][T18809] ------------[ cut here ]------------ [ 2342.956982][T18809] trace type BPF program uses run-time allocation [ 2342.969616][T18809] WARNING: CPU: 0 PID: 18809 at kernel/bpf/verifier.c:11786 check_map_prog_compatibility+0x6cf/0x870 [ 2342.986991][T18809] Modules linked in: [ 2342.994490][T18809] CPU: 0 PID: 18809 Comm: syz.2.31450 Not tainted syzkaller #0 [ 2343.006099][T18809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2343.021271][T18809] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 2343.032381][T18809] Code: ff e8 a5 af ef ff 48 c7 c6 40 47 31 8a e9 0d fd ff ff e8 94 af ef ff c6 05 33 e4 cf 0c 01 48 c7 c7 a0 43 31 8a e8 f1 55 34 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 2343.057944][T18809] RSP: 0018:ffffc9000362f470 EFLAGS: 00010246 [ 2343.064233][T18809] RAX: cc3c1d049b006400 RBX: 0000000000000001 RCX: 0000000000080000 [ 2343.076881][T18809] RDX: ffffc90006351000 RSI: 0000000000004270 RDI: 0000000000004271 [ 2343.088871][T18809] RBP: ffff88805b4ec000 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 2343.097189][T18809] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffffc90001268038 [ 2343.113114][T18809] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200024d007 [ 2343.122613][T18809] FS: 00007f97417de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2343.136146][T18809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2343.144243][T18809] CR2: 00007f97435d4c40 CR3: 000000006a05f000 CR4: 00000000003506f0 [ 2343.156786][T18809] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2343.166231][T18809] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2343.187529][T18809] Call Trace: [ 2343.190889][T18809] [ 2343.194256][T18809] resolve_pseudo_ldimm64+0x616/0xfd0 [ 2343.200116][T18809] ? check_attach_btf_id+0xde0/0xde0 [ 2343.205485][T18809] ? __mark_reg_known+0x1a0/0x1a0 [ 2343.210782][T18809] bpf_check+0x2c59/0xf5f0 [ 2343.215295][T18809] ? mark_lock+0x94/0x320 [ 2343.219873][T18809] ? __lock_acquire+0x13b3/0x7d40 [ 2343.230156][T18809] ? bpf_get_btf_vmlinux+0x60/0x60 [ 2343.235387][T18809] ? mark_lock+0x94/0x320 [ 2343.242097][T18809] ? verify_lock_unused+0x140/0x140 [ 2343.252724][T18809] ? __mutex_trylock_common+0x15c/0x260 [ 2343.260713][T18809] ? verify_lock_unused+0x140/0x140 [ 2343.266068][T18809] ? rcu_lock_release+0x5/0x20 [ 2343.276271][T18809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2343.285017][T18809] ? lock_chain_count+0x20/0x20 [ 2343.295603][T18809] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2343.304437][T18809] ? lockdep_hardirqs_on+0x94/0x140 [ 2343.313238][T18809] ? ktime_get_with_offset+0xff/0x320 [ 2343.321383][T18809] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2343.333532][T18809] ? ktime_get_real_ts64+0x440/0x440 [ 2343.342279][T18809] ? pcpu_alloc+0x11e6/0x16d0 [ 2343.347123][T18809] ? __might_fault+0xb3/0x110 [ 2343.357226][T18809] ? memset+0x1e/0x40 [ 2343.364557][T18809] ? bpf_obj_name_cpy+0x190/0x1d0 [ 2343.373228][T18809] bpf_prog_load+0xfdf/0x14e0 [ 2343.380355][T18809] ? map_freeze+0x360/0x360 [ 2343.385013][T18809] ? __might_fault+0xb7/0x110 [ 2343.393686][T18809] ? __might_fault+0xb3/0x110 [ 2343.403171][T18809] ? bpf_lsm_bpf+0x5/0x10 [ 2343.410900][T18809] ? security_bpf+0x7a/0xa0 [ 2343.415604][T18809] __sys_bpf+0x532/0x6f0 [ 2343.422350][T18809] ? bpf_link_show_fdinfo+0x380/0x380 [ 2343.431233][T18809] __x64_sys_bpf+0x78/0x90 [ 2343.435770][T18809] do_syscall_64+0x4c/0xa0 [ 2343.442734][T18809] ? clear_bhb_loop+0x30/0x80 [ 2343.450852][T18809] ? clear_bhb_loop+0x30/0x80 [ 2343.455690][T18809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2343.464157][T18809] RIP: 0033:0x7f9743587559 [ 2343.472046][T18809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2343.497899][T18809] RSP: 002b:00007f97417de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2343.506480][T18809] RAX: ffffffffffffffda RBX: 00007f974380dfa0 RCX: 00007f9743587559 [ 2343.522777][T18809] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2343.532198][T18809] RBP: 00007f974361eb20 R08: 0000000000000000 R09: 0000000000000000 [ 2343.544737][T18809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2343.554267][T18809] R13: 00007f974380e038 R14: 00007f974380dfa0 R15: 00007ffef0a1be28 [ 2343.566833][T18809] [ 2343.571276][T18809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2343.578559][T18809] CPU: 1 PID: 18809 Comm: syz.2.31450 Not tainted syzkaller #0 [ 2343.586102][T18809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2343.596154][T18809] Call Trace: [ 2343.599436][T18809] [ 2343.602363][T18809] dump_stack_lvl+0x188/0x250 [ 2343.607051][T18809] ? show_regs_print_info+0x20/0x20 [ 2343.612254][T18809] ? load_image+0x410/0x410 [ 2343.616770][T18809] panic+0x2f8/0x850 [ 2343.620669][T18809] ? bpf_jit_dump+0xd0/0xd0 [ 2343.625186][T18809] ? check_map_prog_compatibility+0x6cf/0x870 [ 2343.631252][T18809] __warn+0x248/0x2b0 [ 2343.635231][T18809] ? check_map_prog_compatibility+0x6cf/0x870 [ 2343.641297][T18809] report_bug+0x1b9/0x2e0 [ 2343.645638][T18809] handle_bug+0x3a/0x70 [ 2343.649790][T18809] exc_invalid_op+0x16/0x40 [ 2343.654290][T18809] asm_exc_invalid_op+0x16/0x20 [ 2343.659136][T18809] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 2343.665814][T18809] Code: ff e8 a5 af ef ff 48 c7 c6 40 47 31 8a e9 0d fd ff ff e8 94 af ef ff c6 05 33 e4 cf 0c 01 48 c7 c7 a0 43 31 8a e8 f1 55 34 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 2343.685417][T18809] RSP: 0018:ffffc9000362f470 EFLAGS: 00010246 [ 2343.691491][T18809] RAX: cc3c1d049b006400 RBX: 0000000000000001 RCX: 0000000000080000 [ 2343.699459][T18809] RDX: ffffc90006351000 RSI: 0000000000004270 RDI: 0000000000004271 [ 2343.707438][T18809] RBP: ffff88805b4ec000 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 2343.715409][T18809] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffffc90001268038 [ 2343.723385][T18809] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200024d007 [ 2343.731378][T18809] resolve_pseudo_ldimm64+0x616/0xfd0 [ 2343.736769][T18809] ? check_attach_btf_id+0xde0/0xde0 [ 2343.742055][T18809] ? __mark_reg_known+0x1a0/0x1a0 [ 2343.747083][T18809] bpf_check+0x2c59/0xf5f0 [ 2343.751515][T18809] ? mark_lock+0x94/0x320 [ 2343.755850][T18809] ? __lock_acquire+0x13b3/0x7d40 [ 2343.760880][T18809] ? bpf_get_btf_vmlinux+0x60/0x60 [ 2343.765989][T18809] ? mark_lock+0x94/0x320 [ 2343.770332][T18809] ? verify_lock_unused+0x140/0x140 [ 2343.775530][T18809] ? __mutex_trylock_common+0x15c/0x260 [ 2343.781081][T18809] ? verify_lock_unused+0x140/0x140 [ 2343.786287][T18809] ? rcu_lock_release+0x5/0x20 [ 2343.791065][T18809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2343.797046][T18809] ? lock_chain_count+0x20/0x20 [ 2343.801901][T18809] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2343.808138][T18809] ? lockdep_hardirqs_on+0x94/0x140 [ 2343.813334][T18809] ? ktime_get_with_offset+0xff/0x320 [ 2343.818702][T18809] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2343.824938][T18809] ? ktime_get_real_ts64+0x440/0x440 [ 2343.830222][T18809] ? pcpu_alloc+0x11e6/0x16d0 [ 2343.834906][T18809] ? __might_fault+0xb3/0x110 [ 2343.839588][T18809] ? memset+0x1e/0x40 [ 2343.843574][T18809] ? bpf_obj_name_cpy+0x190/0x1d0 [ 2343.848600][T18809] bpf_prog_load+0xfdf/0x14e0 [ 2343.853290][T18809] ? map_freeze+0x360/0x360 [ 2343.857797][T18809] ? __might_fault+0xb7/0x110 [ 2343.862485][T18809] ? __might_fault+0xb3/0x110 [ 2343.867161][T18809] ? bpf_lsm_bpf+0x5/0x10 [ 2343.871487][T18809] ? security_bpf+0x7a/0xa0 [ 2343.875988][T18809] __sys_bpf+0x532/0x6f0 [ 2343.880230][T18809] ? bpf_link_show_fdinfo+0x380/0x380 [ 2343.885620][T18809] __x64_sys_bpf+0x78/0x90 [ 2343.890034][T18809] do_syscall_64+0x4c/0xa0 [ 2343.894447][T18809] ? clear_bhb_loop+0x30/0x80 [ 2343.899122][T18809] ? clear_bhb_loop+0x30/0x80 [ 2343.903807][T18809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2343.909697][T18809] RIP: 0033:0x7f9743587559 [ 2343.914111][T18809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2343.933713][T18809] RSP: 002b:00007f97417de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2343.942126][T18809] RAX: ffffffffffffffda RBX: 00007f974380dfa0 RCX: 00007f9743587559 [ 2343.950093][T18809] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2343.958057][T18809] RBP: 00007f974361eb20 R08: 0000000000000000 R09: 0000000000000000 [ 2343.966022][T18809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2343.973999][T18809] R13: 00007f974380e038 R14: 00007f974380dfa0 R15: 00007ffef0a1be28 [ 2343.981985][T18809] [ 2343.985234][T18809] Kernel Offset: disabled [ 2343.989571][T18809] Rebooting in 86400 seconds..