last executing test programs: 3.280776394s ago: executing program 1 (id=12522): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.859477014s ago: executing program 1 (id=12531): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001dc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0], 0x0, 0x74, &(0x7f0000001e80)=[{}], 0x8, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002140)={0xffffffffffffffff, 0x7f, 0x10}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x125f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.822591076s ago: executing program 1 (id=12532): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.72059033s ago: executing program 1 (id=12536): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000008500000023000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x22) 2.651014034s ago: executing program 1 (id=12537): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r1, 0x20, &(0x7f00000009c0)={&(0x7f0000000700)=""/63, 0x3f, 0x0, &(0x7f0000000900)=""/165, 0xa5}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x4, 0x4}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x82100, 0x1c, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@o_path={&(0x7f00000004c0)='./file0\x00', r6, 0x4000, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7a, '\x00', r8, r6, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1f, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000ac0)='GPL\x00', 0x3ff, 0xe8, &(0x7f0000000b80)=""/232, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x24, r3, 0x8, &(0x7f0000000c80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x3, 0xfffffff8, 0x20000000}, 0x10, r2, r0, 0x3, &(0x7f0000000d00)=[r4, r1, r6], &(0x7f0000000d40)=[{0x5, 0x4, 0x1, 0x9}, {0x3, 0x5, 0x7, 0x1}, {0x5, 0x4, 0xa, 0x9}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r9}, 0x38) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.046339543s ago: executing program 1 (id=12555): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xf}, 0x17640, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x100008, 0x253}, 0x48) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0xff, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0xfff, 0x6}, 0x401, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x2, 0x400000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 1.184999284s ago: executing program 3 (id=12577): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x20}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.073009699s ago: executing program 3 (id=12579): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) 1.027169631s ago: executing program 3 (id=12580): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) 894.024997ms ago: executing program 3 (id=12582): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa7, 0xa}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 825.451001ms ago: executing program 2 (id=12585): syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 777.030583ms ago: executing program 0 (id=12586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x90ff, 0x800003}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 776.838753ms ago: executing program 0 (id=12587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 612.816181ms ago: executing program 4 (id=12589): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x20}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 502.624536ms ago: executing program 4 (id=12590): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 338.162254ms ago: executing program 2 (id=12591): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) 307.822596ms ago: executing program 2 (id=12592): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) 307.573985ms ago: executing program 2 (id=12593): socketpair(0xa, 0x3, 0x0, &(0x7f0000000400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) write$cgroup_type(r1, &(0x7f0000000000), 0x9) 307.217696ms ago: executing program 2 (id=12594): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x10a041, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x4) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x549}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x440, 0x0, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1000000000000000}, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r6, 0x35, 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0]}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYBLOB="e93f00"/19, @ANYRES32, @ANYBLOB="00000000020000088099f99790f24502390d239426d905bd73d77200"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x10, 0x2, 0x10, &(0x7f0000000000)) 276.750087ms ago: executing program 3 (id=12595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 218.64998ms ago: executing program 0 (id=12596): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x8, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85f76882762ffd44", 0x0, 0x83f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 154.633112ms ago: executing program 0 (id=12597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f10bbd4de5b9912}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x361402, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00'}) 154.281323ms ago: executing program 0 (id=12598): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x42fd7240416dc548, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0xf, 0xff, 0x7, 0x0, 0x7fffffff, 0x81, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x593, 0x0, 0x3, 0xc63a0b2a6da3642e, 0x200000000081, 0x18009, 0x4, 0x0, 0x2cb, 0x0, 0xfffffffffffffffb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 153.753023ms ago: executing program 0 (id=12599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800003}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x6, 0x79, 0x7, 0x8020, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) socketpair(0x2, 0x2, 0x1, &(0x7f0000000bc0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, 0x0, 0x0, 0xfe}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000dc0)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x40000004}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r9, 0x0, 0x20008004) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x1ff, 0x0}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf93, 0x0, @perf_config_ext={0x80000000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000500)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6, 0xfd, 0x0, 0xfffffffd}]}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d80)={&(0x7f00000003c0)="c5f29c039fe0c6202ec217bb1a74bcfaeb7e0e9f8c703564c7a30e37ae0979acac2974c4a3d1f02eff4255c71f22287ef2ca9b5e084f567f4ef809305cd61878abcdc2be112bafb12f080e81907eaa030b7051f5102591335378d2638421", &(0x7f0000000c00)=""/235, &(0x7f0000000d00)="14658d2cf33cea0bd71ceb689098ddb6cc54f2d15312a25abaea5474f017eab936", &(0x7f0000000d40)="43d94e0f29608d3effaead166cb3cd0789643f307a4b68b8cdfdb0e3e7d8", 0x2, r9, 0x4}, 0x38) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x35, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x0, 0x1, 0x3, 0x5, 0x2, 0xc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24a}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xe59}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x19}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x9, 0x61, &(0x7f0000000740)=""/97, 0x41000, 0x2, '\x00', r8, @fallback=0xd, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0x5, 0x2, 0x401}, 0x10, r10, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[r12, r13, r14, r15, r16, r17], &(0x7f0000000b00)=[{0x5, 0x2, 0x4, 0x8}], 0x10, 0xc6f4}, 0x94) 136.447334ms ago: executing program 4 (id=12600): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400001e0100000000000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x20}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 108.404075ms ago: executing program 4 (id=12601): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.965317ms ago: executing program 4 (id=12602): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) 56.760117ms ago: executing program 4 (id=12603): syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 52.282018ms ago: executing program 3 (id=12604): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) 0s ago: executing program 2 (id=12605): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x100, 0x1, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x401, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _text_address+0x177/0x190 [ 1347.597662][ T4250] ? kernel_text_address+0xa0/0xd0 [ 1347.602770][ T4250] ? __kernel_text_address+0xd/0x30 [ 1347.607973][ T4250] ? unwind_get_return_address+0x4d/0x90 [ 1347.613605][ T4250] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1347.619759][ T4250] ? arch_stack_walk+0xfc/0x150 [ 1347.624615][ T4250] ? stack_trace_save+0xa6/0xf0 [ 1347.629466][ T4250] ? __stack_depot_save+0x36/0x490 [ 1347.634578][ T4250] ? kasan_set_track+0x60/0x70 [ 1347.639338][ T4250] ? kasan_set_track+0x4b/0x70 [ 1347.644097][ T4250] ? kasan_save_alloc_info+0x1f/0x30 [ 1347.649380][ T4250] ? __kasan_kmalloc+0x95/0xb0 [ 1347.654141][ T4250] ? kmalloc_trace+0x40/0xb0 [ 1347.658729][ T4250] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1347.664188][ T4250] ? security_bpf_prog_alloc+0x73/0xa0 [ 1347.669649][ T4250] ? bpf_prog_load+0xa03/0x1670 [ 1347.674499][ T4250] ? __sys_bpf+0x57b/0x850 [ 1347.678909][ T4250] ? __x64_sys_bpf+0x7c/0x90 [ 1347.683494][ T4250] ? x64_sys_call+0x488/0x9a0 [ 1347.688167][ T4250] ? do_syscall_64+0x4c/0xa0 [ 1347.692757][ T4250] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.698831][ T4250] ? __kasan_check_write+0x14/0x20 [ 1347.703940][ T4250] ? _raw_spin_lock+0x94/0xf0 [ 1347.708623][ T4250] ? __cfi__raw_spin_lock+0x10/0x10 [ 1347.713823][ T4250] ? _raw_spin_unlock+0x4c/0x70 [ 1347.718679][ T4250] ? memset+0x35/0x40 [ 1347.722660][ T4250] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1347.727686][ T4250] bpf_prog_load+0x10f4/0x1670 [ 1347.732466][ T4250] ? map_freeze+0x3a0/0x3a0 [ 1347.736976][ T4250] ? selinux_bpf+0xc7/0xf0 [ 1347.741392][ T4250] ? security_bpf+0x93/0xb0 [ 1347.745898][ T4250] __sys_bpf+0x57b/0x850 [ 1347.750136][ T4250] ? bpf_link_show_fdinfo+0x330/0x330 [ 1347.755509][ T4250] ? __cfi_ksys_write+0x10/0x10 [ 1347.760354][ T4250] ? do_user_addr_fault+0x9a5/0x1030 [ 1347.765639][ T4250] ? debug_smp_processor_id+0x17/0x20 [ 1347.771018][ T4250] __x64_sys_bpf+0x7c/0x90 [ 1347.775430][ T4250] x64_sys_call+0x488/0x9a0 [ 1347.779931][ T4250] do_syscall_64+0x4c/0xa0 [ 1347.784359][ T4250] ? clear_bhb_loop+0x30/0x80 [ 1347.789034][ T4250] ? clear_bhb_loop+0x30/0x80 [ 1347.793711][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.799598][ T4250] RIP: 0033:0x7f8ff439e159 [ 1347.804011][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.823618][ T4250] RSP: 002b:00007f8ff5253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1347.832050][ T4250] RAX: ffffffffffffffda RBX: 00007f8ff4625fa0 RCX: 00007f8ff439e159 [ 1347.840017][ T4250] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1347.847984][ T4250] RBP: 00007f8ff5253090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.855952][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.863928][ T4250] R13: 00007f8ff4626038 R14: 00007f8ff4625fa0 R15: 00007ffee18100b8 [ 1347.871906][ T4250] [ 1348.783852][ T4303] IPv6: …: Disabled Multicast RS [ 1348.910648][ T4311] device veth0_vlan left promiscuous mode [ 1348.917659][ T4311] device veth0_vlan entered promiscuous mode [ 1349.537275][ T4355] FAULT_INJECTION: forcing a failure. [ 1349.537275][ T4355] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.580070][ T4355] CPU: 0 PID: 4355 Comm: syz.0.11737 Tainted: G W syzkaller #0 [ 1349.589066][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.599130][ T4355] Call Trace: [ 1349.602419][ T4355] [ 1349.605360][ T4355] __dump_stack+0x21/0x24 [ 1349.609715][ T4355] dump_stack_lvl+0x110/0x170 [ 1349.614415][ T4355] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1349.619455][ T4355] ? kasan_set_track+0x60/0x70 [ 1349.624235][ T4355] ? kasan_set_track+0x4b/0x70 [ 1349.629008][ T4355] ? kasan_save_alloc_info+0x1f/0x30 [ 1349.634304][ T4355] ? __kasan_kmalloc+0x95/0xb0 [ 1349.639087][ T4355] dump_stack+0x15/0x24 [ 1349.643269][ T4355] should_fail_ex+0x3bf/0x510 [ 1349.647965][ T4355] __should_failslab+0xac/0xf0 [ 1349.652748][ T4355] should_failslab+0x9/0x20 [ 1349.657261][ T4355] kmem_cache_alloc_node+0x42/0x330 [ 1349.662475][ T4355] ? alloc_vmap_area+0x184/0x18c0 [ 1349.667512][ T4355] alloc_vmap_area+0x184/0x18c0 [ 1349.672388][ T4355] ? vm_map_ram+0x930/0x930 [ 1349.676900][ T4355] ? __kasan_kmalloc+0x95/0xb0 [ 1349.681676][ T4355] ? kmalloc_node_trace+0x3d/0xb0 [ 1349.686697][ T4355] __get_vm_area_node+0x160/0x360 [ 1349.691724][ T4355] __vmalloc_node_range+0x326/0x1440 [ 1349.697006][ T4355] ? bpf_check+0x22a/0x10e90 [ 1349.701595][ T4355] ? __this_cpu_preempt_check+0x13/0x20 [ 1349.707141][ T4355] ? __mod_node_page_state+0x9e/0xd0 [ 1349.712432][ T4355] ? kvmalloc_node+0x28a/0x460 [ 1349.717191][ T4355] ? __kmalloc_node+0x11f/0x1e0 [ 1349.722036][ T4355] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1349.727838][ T4355] ? kvmalloc_node+0x2b3/0x460 [ 1349.732601][ T4355] ? __cfi_kvmalloc_node+0x10/0x10 [ 1349.737709][ T4355] ? page_ext_put+0x1c/0x30 [ 1349.742216][ T4355] ? bpf_check+0x22a/0x10e90 [ 1349.746808][ T4355] vzalloc+0x78/0x90 [ 1349.750703][ T4355] ? bpf_check+0x22a/0x10e90 [ 1349.755293][ T4355] bpf_check+0x22a/0x10e90 [ 1349.759707][ T4355] ? prep_new_page+0x1c/0x110 [ 1349.764381][ T4355] ? get_page_from_freelist+0x2ca9/0x2d20 [ 1349.770104][ T4355] ? unwind_get_return_address+0x4d/0x90 [ 1349.775740][ T4355] ? __cfi_gfp_zone+0x10/0x10 [ 1349.780414][ T4355] ? __cfi_bpf_check+0x10/0x10 [ 1349.785187][ T4355] ? 0xffffffffa0003e2c [ 1349.789339][ T4355] ? is_bpf_text_address+0x177/0x190 [ 1349.794624][ T4355] ? kernel_text_address+0xa0/0xd0 [ 1349.799733][ T4355] ? __kernel_text_address+0xd/0x30 [ 1349.804939][ T4355] ? unwind_get_return_address+0x4d/0x90 [ 1349.810568][ T4355] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1349.816720][ T4355] ? arch_stack_walk+0xfc/0x150 [ 1349.821580][ T4355] ? stack_trace_save+0xa6/0xf0 [ 1349.826437][ T4355] ? __stack_depot_save+0x36/0x490 [ 1349.831550][ T4355] ? kasan_set_track+0x60/0x70 [ 1349.836314][ T4355] ? kasan_set_track+0x4b/0x70 [ 1349.841073][ T4355] ? kasan_save_alloc_info+0x1f/0x30 [ 1349.846356][ T4355] ? __kasan_kmalloc+0x95/0xb0 [ 1349.851121][ T4355] ? kmalloc_trace+0x40/0xb0 [ 1349.855710][ T4355] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1349.861173][ T4355] ? security_bpf_prog_alloc+0x73/0xa0 [ 1349.866636][ T4355] ? bpf_prog_load+0xa03/0x1670 [ 1349.871489][ T4355] ? __sys_bpf+0x57b/0x850 [ 1349.875904][ T4355] ? __x64_sys_bpf+0x7c/0x90 [ 1349.880496][ T4355] ? x64_sys_call+0x488/0x9a0 [ 1349.885172][ T4355] ? do_syscall_64+0x4c/0xa0 [ 1349.889763][ T4355] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.895835][ T4355] ? __kasan_check_write+0x14/0x20 [ 1349.900948][ T4355] ? _raw_spin_lock+0x94/0xf0 [ 1349.905628][ T4355] ? __cfi__raw_spin_lock+0x10/0x10 [ 1349.910830][ T4355] ? _raw_spin_unlock+0x4c/0x70 [ 1349.915684][ T4355] ? memset+0x35/0x40 [ 1349.919660][ T4355] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1349.924690][ T4355] bpf_prog_load+0x10f4/0x1670 [ 1349.929457][ T4355] ? map_freeze+0x3a0/0x3a0 [ 1349.933959][ T4355] ? selinux_bpf+0xc7/0xf0 [ 1349.938373][ T4355] ? security_bpf+0x93/0xb0 [ 1349.942888][ T4355] __sys_bpf+0x57b/0x850 [ 1349.947135][ T4355] ? bpf_link_show_fdinfo+0x330/0x330 [ 1349.952515][ T4355] ? __cfi_ksys_write+0x10/0x10 [ 1349.957362][ T4355] ? debug_smp_processor_id+0x17/0x20 [ 1349.962732][ T4355] __x64_sys_bpf+0x7c/0x90 [ 1349.967147][ T4355] x64_sys_call+0x488/0x9a0 [ 1349.971655][ T4355] do_syscall_64+0x4c/0xa0 [ 1349.976073][ T4355] ? clear_bhb_loop+0x30/0x80 [ 1349.980750][ T4355] ? clear_bhb_loop+0x30/0x80 [ 1349.985427][ T4355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.991318][ T4355] RIP: 0033:0x7f8ff439e159 [ 1349.995729][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.015333][ T4355] RSP: 002b:00007f8ff5253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.023743][ T4355] RAX: ffffffffffffffda RBX: 00007f8ff4625fa0 RCX: 00007f8ff439e159 [ 1350.031712][ T4355] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1350.039677][ T4355] RBP: 00007f8ff5253090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.047655][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.055625][ T4355] R13: 00007f8ff4626038 R14: 00007f8ff4625fa0 R15: 00007ffee18100b8 [ 1350.063599][ T4355] [ 1350.145514][ T4363] FAULT_INJECTION: forcing a failure. [ 1350.145514][ T4363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.179375][ T4363] CPU: 1 PID: 4363 Comm: syz.2.11741 Tainted: G W syzkaller #0 [ 1350.188389][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.198455][ T4363] Call Trace: [ 1350.201741][ T4363] [ 1350.204680][ T4363] __dump_stack+0x21/0x24 [ 1350.209031][ T4363] dump_stack_lvl+0x110/0x170 [ 1350.213721][ T4363] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1350.218766][ T4363] ? irqentry_exit+0x37/0x40 [ 1350.223369][ T4363] dump_stack+0x15/0x24 [ 1350.227542][ T4363] should_fail_ex+0x3bf/0x510 [ 1350.232234][ T4363] should_fail+0xb/0x10 [ 1350.236400][ T4363] should_fail_usercopy+0x1a/0x20 [ 1350.241445][ T4363] copyin+0x20/0xa0 [ 1350.245274][ T4363] _copy_from_iter+0x3cd/0xfe0 [ 1350.250058][ T4363] ? __cfi__copy_from_iter+0x10/0x10 [ 1350.255364][ T4363] ? __cfi__copy_from_iter+0x10/0x10 [ 1350.260676][ T4363] copy_page_from_iter+0x1de/0x2c0 [ 1350.265809][ T4363] skb_copy_datagram_from_iter+0x2cb/0x6b0 [ 1350.271638][ T4363] unix_dgram_sendmsg+0x683/0x1710 [ 1350.276771][ T4363] ? selinux_socket_sendmsg+0x22f/0x340 [ 1350.282332][ T4363] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1350.288507][ T4363] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1350.294436][ T4363] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1350.299993][ T4363] ? stack_trace_save+0xa6/0xf0 [ 1350.304859][ T4363] ? __stack_depot_save+0x36/0x490 [ 1350.309985][ T4363] ? security_socket_sendmsg+0x93/0xb0 [ 1350.315468][ T4363] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1350.321027][ T4363] ____sys_sendmsg+0x5fb/0x9c0 [ 1350.325810][ T4363] ? __sys_sendmsg_sock+0x40/0x40 [ 1350.330854][ T4363] ? import_iovec+0x7c/0xb0 [ 1350.335370][ T4363] ___sys_sendmsg+0x2a2/0x360 [ 1350.340068][ T4363] ? __sys_sendmsg+0x290/0x290 [ 1350.344851][ T4363] ? __kasan_check_write+0x14/0x20 [ 1350.349974][ T4363] ? proc_fail_nth_write+0x180/0x200 [ 1350.355274][ T4363] ? vfs_write+0xa51/0xd00 [ 1350.359709][ T4363] ? __fdget+0x19c/0x220 [ 1350.363962][ T4363] __x64_sys_sendmsg+0x20d/0x2e0 [ 1350.368917][ T4363] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1350.374396][ T4363] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1350.380488][ T4363] x64_sys_call+0x171/0x9a0 [ 1350.385004][ T4363] do_syscall_64+0x4c/0xa0 [ 1350.389450][ T4363] ? clear_bhb_loop+0x30/0x80 [ 1350.394139][ T4363] ? clear_bhb_loop+0x30/0x80 [ 1350.398827][ T4363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1350.404816][ T4363] RIP: 0033:0x7f2867b9e159 [ 1350.409241][ T4363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.428867][ T4363] RSP: 002b:00007f28689e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.437294][ T4363] RAX: ffffffffffffffda RBX: 00007f2867e25fa0 RCX: 00007f2867b9e159 [ 1350.445282][ T4363] RDX: 0000000000040840 RSI: 0000200000000440 RDI: 0000000000000005 [ 1350.453269][ T4363] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.461253][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.469231][ T4363] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1350.477222][ T4363] [ 1350.811354][ T4389] device veth1_macvtap left promiscuous mode [ 1350.917088][ T4389] device veth1_macvtap entered promiscuous mode [ 1350.924141][ T4389] device macsec0 entered promiscuous mode [ 1350.935257][ T4385] ªªªªªª: renamed from vlan0 [ 1351.307912][ T4416] FAULT_INJECTION: forcing a failure. [ 1351.307912][ T4416] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.330294][ T4416] CPU: 0 PID: 4416 Comm: syz.4.11758 Tainted: G W syzkaller #0 [ 1351.339273][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1351.349344][ T4416] Call Trace: [ 1351.352639][ T4416] [ 1351.355586][ T4416] __dump_stack+0x21/0x24 [ 1351.359941][ T4416] dump_stack_lvl+0x110/0x170 [ 1351.364642][ T4416] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1351.369691][ T4416] ? kasan_set_track+0x60/0x70 [ 1351.374472][ T4416] ? kasan_set_track+0x4b/0x70 [ 1351.379250][ T4416] ? kasan_save_alloc_info+0x1f/0x30 [ 1351.384547][ T4416] ? __kasan_kmalloc+0x95/0xb0 [ 1351.389332][ T4416] dump_stack+0x15/0x24 [ 1351.393505][ T4416] should_fail_ex+0x3bf/0x510 [ 1351.398206][ T4416] __should_failslab+0xac/0xf0 [ 1351.402986][ T4416] should_failslab+0x9/0x20 [ 1351.407587][ T4416] kmem_cache_alloc_node+0x42/0x330 [ 1351.412805][ T4416] ? alloc_vmap_area+0x184/0x18c0 [ 1351.417860][ T4416] alloc_vmap_area+0x184/0x18c0 [ 1351.422731][ T4416] ? vm_map_ram+0x930/0x930 [ 1351.427247][ T4416] ? __kasan_kmalloc+0x95/0xb0 [ 1351.432026][ T4416] ? kmalloc_node_trace+0x3d/0xb0 [ 1351.437067][ T4416] __get_vm_area_node+0x160/0x360 [ 1351.442111][ T4416] __vmalloc_node_range+0x326/0x1440 [ 1351.447417][ T4416] ? bpf_check+0x22a/0x10e90 [ 1351.452030][ T4416] ? __this_cpu_preempt_check+0x13/0x20 [ 1351.457594][ T4416] ? __mod_node_page_state+0x9e/0xd0 [ 1351.462901][ T4416] ? kvmalloc_node+0x28a/0x460 [ 1351.467680][ T4416] ? __kmalloc_node+0x11f/0x1e0 [ 1351.472550][ T4416] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1351.478286][ T4416] ? kvmalloc_node+0x2b3/0x460 [ 1351.483063][ T4416] ? __cfi_kvmalloc_node+0x10/0x10 [ 1351.488183][ T4416] ? page_ext_put+0x1c/0x30 [ 1351.492704][ T4416] ? bpf_check+0x22a/0x10e90 [ 1351.497313][ T4416] vzalloc+0x78/0x90 [ 1351.501222][ T4416] ? bpf_check+0x22a/0x10e90 [ 1351.505831][ T4416] bpf_check+0x22a/0x10e90 [ 1351.510260][ T4416] ? prep_new_page+0x1c/0x110 [ 1351.514955][ T4416] ? get_page_from_freelist+0x2ca9/0x2d20 [ 1351.520693][ T4416] ? unwind_get_return_address+0x4d/0x90 [ 1351.526348][ T4416] ? __cfi_gfp_zone+0x10/0x10 [ 1351.531037][ T4416] ? __cfi_bpf_check+0x10/0x10 [ 1351.535826][ T4416] ? 0xffffffffa0003e2c [ 1351.540001][ T4416] ? is_bpf_text_address+0x177/0x190 [ 1351.545306][ T4416] ? kernel_text_address+0xa0/0xd0 [ 1351.550439][ T4416] ? __kernel_text_address+0xd/0x30 [ 1351.555655][ T4416] ? unwind_get_return_address+0x4d/0x90 [ 1351.561304][ T4416] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1351.567478][ T4416] ? arch_stack_walk+0xfc/0x150 [ 1351.572363][ T4416] ? stack_trace_save+0xa6/0xf0 [ 1351.577237][ T4416] ? __stack_depot_save+0x36/0x490 [ 1351.582371][ T4416] ? kasan_set_track+0x60/0x70 [ 1351.587157][ T4416] ? kasan_set_track+0x4b/0x70 [ 1351.591975][ T4416] ? kasan_save_alloc_info+0x1f/0x30 [ 1351.597277][ T4416] ? __kasan_kmalloc+0x95/0xb0 [ 1351.602062][ T4416] ? kmalloc_trace+0x40/0xb0 [ 1351.606668][ T4416] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1351.612151][ T4416] ? security_bpf_prog_alloc+0x73/0xa0 [ 1351.617633][ T4416] ? bpf_prog_load+0xa03/0x1670 [ 1351.622501][ T4416] ? __sys_bpf+0x57b/0x850 [ 1351.626948][ T4416] ? __x64_sys_bpf+0x7c/0x90 [ 1351.631549][ T4416] ? x64_sys_call+0x488/0x9a0 [ 1351.636245][ T4416] ? do_syscall_64+0x4c/0xa0 [ 1351.640859][ T4416] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.646952][ T4416] ? __kasan_check_write+0x14/0x20 [ 1351.652080][ T4416] ? _raw_spin_lock+0x94/0xf0 [ 1351.656782][ T4416] ? __cfi__raw_spin_lock+0x10/0x10 [ 1351.662011][ T4416] ? _raw_spin_unlock+0x4c/0x70 [ 1351.666883][ T4416] ? memset+0x35/0x40 [ 1351.670885][ T4416] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1351.675944][ T4416] bpf_prog_load+0x10f4/0x1670 [ 1351.680734][ T4416] ? map_freeze+0x3a0/0x3a0 [ 1351.685254][ T4416] ? selinux_bpf+0xc7/0xf0 [ 1351.689691][ T4416] ? security_bpf+0x93/0xb0 [ 1351.694214][ T4416] __sys_bpf+0x57b/0x850 [ 1351.698478][ T4416] ? bpf_link_show_fdinfo+0x330/0x330 [ 1351.703878][ T4416] ? __cfi_ksys_write+0x10/0x10 [ 1351.708761][ T4416] ? debug_smp_processor_id+0x17/0x20 [ 1351.714156][ T4416] __x64_sys_bpf+0x7c/0x90 [ 1351.718596][ T4416] x64_sys_call+0x488/0x9a0 [ 1351.723143][ T4416] do_syscall_64+0x4c/0xa0 [ 1351.727588][ T4416] ? clear_bhb_loop+0x30/0x80 [ 1351.732289][ T4416] ? clear_bhb_loop+0x30/0x80 [ 1351.736987][ T4416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.742894][ T4416] RIP: 0033:0x7f7db219e159 [ 1351.747322][ T4416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.766947][ T4416] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1351.775388][ T4416] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1351.783383][ T4416] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1351.791373][ T4416] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.799366][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.807354][ T4416] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1351.815348][ T4416] [ 1352.068523][ T4452] FAULT_INJECTION: forcing a failure. [ 1352.068523][ T4452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.113616][ T4452] CPU: 0 PID: 4452 Comm: syz.2.11771 Tainted: G W syzkaller #0 [ 1352.122618][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.132706][ T4452] Call Trace: [ 1352.136006][ T4452] [ 1352.138956][ T4452] __dump_stack+0x21/0x24 [ 1352.143320][ T4452] dump_stack_lvl+0x110/0x170 [ 1352.148032][ T4452] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1352.153085][ T4452] ? vsnprintf+0x14e/0x1990 [ 1352.157616][ T4452] ? memcpy+0x56/0x70 [ 1352.161709][ T4452] dump_stack+0x15/0x24 [ 1352.165891][ T4452] should_fail_ex+0x3bf/0x510 [ 1352.170635][ T4452] should_fail+0xb/0x10 [ 1352.174811][ T4452] should_fail_usercopy+0x1a/0x20 [ 1352.179858][ T4452] _copy_to_user+0x1e/0x90 [ 1352.184314][ T4452] bpf_verifier_vlog+0x179/0x390 [ 1352.189289][ T4452] __btf_verifier_log+0xdf/0x130 [ 1352.194254][ T4452] ? kasan_save_alloc_info+0x1f/0x30 [ 1352.199560][ T4452] ? __kasan_kmalloc+0x95/0xb0 [ 1352.204350][ T4452] ? btf_check_sec_info+0x350/0x350 [ 1352.209582][ T4452] ? btf_parse_hdr+0x1ee/0x800 [ 1352.214372][ T4452] ? memcpy+0x56/0x70 [ 1352.218377][ T4452] btf_parse_hdr+0x486/0x800 [ 1352.222996][ T4452] btf_new_fd+0x398/0x7a0 [ 1352.227360][ T4452] bpf_btf_load+0x6f/0x90 [ 1352.231712][ T4452] __sys_bpf+0x5d5/0x850 [ 1352.235976][ T4452] ? bpf_link_show_fdinfo+0x330/0x330 [ 1352.241376][ T4452] ? __cfi_ksys_write+0x10/0x10 [ 1352.246242][ T4452] ? do_user_addr_fault+0x9a5/0x1030 [ 1352.251554][ T4452] ? debug_smp_processor_id+0x17/0x20 [ 1352.256949][ T4452] __x64_sys_bpf+0x7c/0x90 [ 1352.261392][ T4452] x64_sys_call+0x488/0x9a0 [ 1352.265929][ T4452] do_syscall_64+0x4c/0xa0 [ 1352.270374][ T4452] ? clear_bhb_loop+0x30/0x80 [ 1352.275072][ T4452] ? clear_bhb_loop+0x30/0x80 [ 1352.279776][ T4452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.285691][ T4452] RIP: 0033:0x7f2867b9e159 [ 1352.290125][ T4452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.309753][ T4452] RSP: 002b:00007f28689e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.318201][ T4452] RAX: ffffffffffffffda RBX: 00007f2867e25fa0 RCX: 00007f2867b9e159 [ 1352.326197][ T4452] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 1352.334208][ T4452] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.342179][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.350146][ T4452] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1352.358118][ T4452] [ 1352.474455][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.512823][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.552715][ T4458] device bridge_slave_0 entered promiscuous mode [ 1352.562335][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.578609][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.586698][ T4458] device bridge_slave_1 entered promiscuous mode [ 1352.706127][ T4473] device wg2 entered promiscuous mode [ 1352.980740][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.003692][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.031066][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1353.055582][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1353.078738][T25328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.085853][T25328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.094340][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1353.112627][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1353.126461][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1353.141937][T25328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.149003][T25328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.194620][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1353.221991][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.253697][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1353.292306][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1353.320782][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1353.344767][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1353.376906][ T4458] device veth0_vlan entered promiscuous mode [ 1353.407530][ T4503] device veth0_vlan left promiscuous mode [ 1353.419289][ T4503] device veth0_vlan entered promiscuous mode [ 1353.462975][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1353.476088][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1353.490088][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1353.504411][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1353.540085][ T4458] device veth1_macvtap entered promiscuous mode [ 1353.564432][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1353.612121][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1353.783273][ T4584] device veth0_macvtap left promiscuous mode [ 1353.789394][ T4584] Ã9¸§³{ƒŽ: port 1(veth0_macvtap) entered disabled state [ 1353.810716][ T4584] device bridge_slave_1 left promiscuous mode [ 1353.825103][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.837825][ T4584] device bridge_slave_0 left promiscuous mode [ 1353.844881][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.869514][ T4584] device veth1_macvtap left promiscuous mode [ 1353.877755][ T4584] device veth0_vlan left promiscuous mode [ 1354.294630][ T4555] FAULT_INJECTION: forcing a failure. [ 1354.294630][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.320600][ T4555] CPU: 1 PID: 4555 Comm: syz.1.11806 Tainted: G W syzkaller #0 [ 1354.329597][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.339673][ T4555] Call Trace: [ 1354.342962][ T4555] [ 1354.345901][ T4555] __dump_stack+0x21/0x24 [ 1354.350252][ T4555] dump_stack_lvl+0x110/0x170 [ 1354.354942][ T4555] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1354.359977][ T4555] ? alloc_vmap_area+0x17b6/0x18c0 [ 1354.365101][ T4555] dump_stack+0x15/0x24 [ 1354.369272][ T4555] should_fail_ex+0x3bf/0x510 [ 1354.373956][ T4555] __should_failslab+0xac/0xf0 [ 1354.378738][ T4555] should_failslab+0x9/0x20 [ 1354.383247][ T4555] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1354.388631][ T4555] ? __vmalloc_node_range+0x564/0x1440 [ 1354.394099][ T4555] ? _raw_spin_unlock+0x4c/0x70 [ 1354.398971][ T4555] ? __vmalloc_node_range+0x564/0x1440 [ 1354.404437][ T4555] __kmalloc_node+0xa2/0x1e0 [ 1354.409043][ T4555] __vmalloc_node_range+0x564/0x1440 [ 1354.414335][ T4555] ? __mod_node_page_state+0x9e/0xd0 [ 1354.419638][ T4555] ? __kmalloc_node+0x11f/0x1e0 [ 1354.424492][ T4555] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1354.430222][ T4555] ? kvmalloc_node+0x2b3/0x460 [ 1354.434992][ T4555] ? __cfi_kvmalloc_node+0x10/0x10 [ 1354.440110][ T4555] ? page_ext_put+0x1c/0x30 [ 1354.444631][ T4555] ? bpf_check+0x22a/0x10e90 [ 1354.449232][ T4555] vzalloc+0x78/0x90 [ 1354.453134][ T4555] ? bpf_check+0x22a/0x10e90 [ 1354.457735][ T4555] bpf_check+0x22a/0x10e90 [ 1354.462166][ T4555] ? prep_new_page+0x1c/0x110 [ 1354.466853][ T4555] ? get_page_from_freelist+0x2ca9/0x2d20 [ 1354.472592][ T4555] ? unwind_get_return_address+0x4d/0x90 [ 1354.478244][ T4555] ? __cfi_gfp_zone+0x10/0x10 [ 1354.482927][ T4555] ? __cfi_bpf_check+0x10/0x10 [ 1354.487707][ T4555] ? 0xffffffffa0003e2c [ 1354.491869][ T4555] ? is_bpf_text_address+0x177/0x190 [ 1354.497179][ T4555] ? kernel_text_address+0xa0/0xd0 [ 1354.502301][ T4555] ? __kernel_text_address+0xd/0x30 [ 1354.507509][ T4555] ? unwind_get_return_address+0x4d/0x90 [ 1354.513150][ T4555] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1354.519317][ T4555] ? arch_stack_walk+0xfc/0x150 [ 1354.524194][ T4555] ? stack_trace_save+0xa6/0xf0 [ 1354.529061][ T4555] ? __stack_depot_save+0x36/0x490 [ 1354.534183][ T4555] ? kasan_set_track+0x60/0x70 [ 1354.538957][ T4555] ? kasan_set_track+0x4b/0x70 [ 1354.543733][ T4555] ? kasan_save_alloc_info+0x1f/0x30 [ 1354.549022][ T4555] ? __kasan_kmalloc+0x95/0xb0 [ 1354.553795][ T4555] ? kmalloc_trace+0x40/0xb0 [ 1354.558391][ T4555] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1354.563866][ T4555] ? security_bpf_prog_alloc+0x73/0xa0 [ 1354.569336][ T4555] ? bpf_prog_load+0xa03/0x1670 [ 1354.574193][ T4555] ? __sys_bpf+0x57b/0x850 [ 1354.578620][ T4555] ? __x64_sys_bpf+0x7c/0x90 [ 1354.583213][ T4555] ? x64_sys_call+0x488/0x9a0 [ 1354.587900][ T4555] ? do_syscall_64+0x4c/0xa0 [ 1354.592503][ T4555] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.598593][ T4555] ? __kasan_check_write+0x14/0x20 [ 1354.603712][ T4555] ? _raw_spin_lock+0x94/0xf0 [ 1354.608403][ T4555] ? __cfi__raw_spin_lock+0x10/0x10 [ 1354.613615][ T4555] ? _raw_spin_unlock+0x4c/0x70 [ 1354.618488][ T4555] ? memset+0x35/0x40 [ 1354.622475][ T4555] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1354.627515][ T4555] bpf_prog_load+0x10f4/0x1670 [ 1354.632293][ T4555] ? map_freeze+0x3a0/0x3a0 [ 1354.636806][ T4555] ? selinux_bpf+0xc7/0xf0 [ 1354.641236][ T4555] ? security_bpf+0x93/0xb0 [ 1354.645750][ T4555] __sys_bpf+0x57b/0x850 [ 1354.649999][ T4555] ? bpf_link_show_fdinfo+0x330/0x330 [ 1354.655379][ T4555] ? __cfi_ksys_write+0x10/0x10 [ 1354.660239][ T4555] ? debug_smp_processor_id+0x17/0x20 [ 1354.665626][ T4555] __x64_sys_bpf+0x7c/0x90 [ 1354.670046][ T4555] x64_sys_call+0x488/0x9a0 [ 1354.674558][ T4555] do_syscall_64+0x4c/0xa0 [ 1354.678997][ T4555] ? clear_bhb_loop+0x30/0x80 [ 1354.683683][ T4555] ? clear_bhb_loop+0x30/0x80 [ 1354.688372][ T4555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.694270][ T4555] RIP: 0033:0x7fbacb59e159 [ 1354.698694][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.718307][ T4555] RSP: 002b:00007fbacc4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1354.726730][ T4555] RAX: ffffffffffffffda RBX: 00007fbacb825fa0 RCX: 00007fbacb59e159 [ 1354.734707][ T4555] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1354.742689][ T4555] RBP: 00007fbacc4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.750667][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.758643][ T4555] R13: 00007fbacb826038 R14: 00007fbacb825fa0 R15: 00007ffd24b5bec8 [ 1354.766623][ T4555] [ 1355.092436][ T4616] IPv6: …: Disabled Multicast RS [ 1355.166718][ T4616] device veth0_vlan left promiscuous mode [ 1355.235164][ T4616] device veth0_vlan entered promiscuous mode [ 1355.280337][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1355.291859][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1355.328343][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1355.506339][ T4634] FAULT_INJECTION: forcing a failure. [ 1355.506339][ T4634] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.567015][ T4634] CPU: 0 PID: 4634 Comm: syz.3.11835 Tainted: G W syzkaller #0 [ 1355.576007][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.586171][ T4634] Call Trace: [ 1355.589463][ T4634] [ 1355.592411][ T4634] __dump_stack+0x21/0x24 [ 1355.596769][ T4634] dump_stack_lvl+0x110/0x170 [ 1355.601465][ T4634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1355.606509][ T4634] ? kasan_set_track+0x60/0x70 [ 1355.611289][ T4634] ? kasan_set_track+0x4b/0x70 [ 1355.616078][ T4634] ? kasan_save_alloc_info+0x1f/0x30 [ 1355.621377][ T4634] ? __kasan_kmalloc+0x95/0xb0 [ 1355.626162][ T4634] dump_stack+0x15/0x24 [ 1355.630335][ T4634] should_fail_ex+0x3bf/0x510 [ 1355.635036][ T4634] __should_failslab+0xac/0xf0 [ 1355.639812][ T4634] should_failslab+0x9/0x20 [ 1355.644326][ T4634] kmem_cache_alloc_node+0x42/0x330 [ 1355.649553][ T4634] ? alloc_vmap_area+0x184/0x18c0 [ 1355.654592][ T4634] alloc_vmap_area+0x184/0x18c0 [ 1355.659457][ T4634] ? vm_map_ram+0x930/0x930 [ 1355.663974][ T4634] ? __kasan_kmalloc+0x95/0xb0 [ 1355.668753][ T4634] ? kmalloc_node_trace+0x3d/0xb0 [ 1355.673794][ T4634] __get_vm_area_node+0x160/0x360 [ 1355.678840][ T4634] __vmalloc_node_range+0x326/0x1440 [ 1355.684137][ T4634] ? bpf_check+0x22a/0x10e90 [ 1355.688747][ T4634] ? __this_cpu_preempt_check+0x13/0x20 [ 1355.694312][ T4634] ? __mod_node_page_state+0x9e/0xd0 [ 1355.699627][ T4634] ? kvmalloc_node+0x28a/0x460 [ 1355.704399][ T4634] ? __kmalloc_node+0x11f/0x1e0 [ 1355.709355][ T4634] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1355.715088][ T4634] ? kvmalloc_node+0x2b3/0x460 [ 1355.719867][ T4634] ? __cfi_kvmalloc_node+0x10/0x10 [ 1355.724988][ T4634] ? page_ext_put+0x1c/0x30 [ 1355.729520][ T4634] ? bpf_check+0x22a/0x10e90 [ 1355.734122][ T4634] vzalloc+0x78/0x90 [ 1355.738038][ T4634] ? bpf_check+0x22a/0x10e90 [ 1355.742643][ T4634] bpf_check+0x22a/0x10e90 [ 1355.747072][ T4634] ? prep_new_page+0x1c/0x110 [ 1355.751767][ T4634] ? get_page_from_freelist+0x2ca9/0x2d20 [ 1355.757509][ T4634] ? unwind_get_return_address+0x4d/0x90 [ 1355.763164][ T4634] ? irqentry_exit+0x37/0x40 [ 1355.767778][ T4634] ? __cfi_bpf_check+0x10/0x10 [ 1355.772559][ T4634] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1355.778735][ T4634] ? 0xffffffffa0003dd0 [ 1355.782897][ T4634] ? is_bpf_text_address+0x177/0x190 [ 1355.788203][ T4634] ? kernel_text_address+0xa0/0xd0 [ 1355.793332][ T4634] ? irqentry_exit+0x37/0x40 [ 1355.797945][ T4634] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 1355.803770][ T4634] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1355.809946][ T4634] ? __stack_depot_save+0x36/0x490 [ 1355.815079][ T4634] ? kasan_set_track+0x60/0x70 [ 1355.819859][ T4634] ? kasan_set_track+0x4b/0x70 [ 1355.824639][ T4634] ? kasan_save_alloc_info+0x1f/0x30 [ 1355.829943][ T4634] ? __kasan_kmalloc+0x95/0xb0 [ 1355.834722][ T4634] ? kmalloc_trace+0x40/0xb0 [ 1355.839325][ T4634] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1355.844812][ T4634] ? security_bpf_prog_alloc+0x73/0xa0 [ 1355.850288][ T4634] ? bpf_prog_load+0xa03/0x1670 [ 1355.855158][ T4634] ? __sys_bpf+0x57b/0x850 [ 1355.859592][ T4634] ? __x64_sys_bpf+0x7c/0x90 [ 1355.864191][ T4634] ? x64_sys_call+0x488/0x9a0 [ 1355.868881][ T4634] ? do_syscall_64+0x4c/0xa0 [ 1355.873502][ T4634] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.879607][ T4634] ? __kasan_check_write+0x14/0x20 [ 1355.884750][ T4634] ? _raw_spin_lock+0x94/0xf0 [ 1355.889467][ T4634] ? __cfi__raw_spin_lock+0x10/0x10 [ 1355.894694][ T4634] ? _raw_spin_unlock+0x4c/0x70 [ 1355.899575][ T4634] ? memset+0x35/0x40 [ 1355.903580][ T4634] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1355.908635][ T4634] bpf_prog_load+0x10f4/0x1670 [ 1355.913421][ T4634] ? map_freeze+0x3a0/0x3a0 [ 1355.917955][ T4634] ? selinux_bpf+0xc7/0xf0 [ 1355.922576][ T4634] ? security_bpf+0x93/0xb0 [ 1355.927120][ T4634] __sys_bpf+0x57b/0x850 [ 1355.931389][ T4634] ? bpf_link_show_fdinfo+0x330/0x330 [ 1355.936787][ T4634] ? __cfi_ksys_write+0x10/0x10 [ 1355.941665][ T4634] ? debug_smp_processor_id+0x17/0x20 [ 1355.947086][ T4634] __x64_sys_bpf+0x7c/0x90 [ 1355.951528][ T4634] x64_sys_call+0x488/0x9a0 [ 1355.956053][ T4634] do_syscall_64+0x4c/0xa0 [ 1355.960493][ T4634] ? clear_bhb_loop+0x30/0x80 [ 1355.965192][ T4634] ? clear_bhb_loop+0x30/0x80 [ 1355.969889][ T4634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.975798][ T4634] RIP: 0033:0x7ff9e239e159 [ 1355.980239][ T4634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.999869][ T4634] RSP: 002b:00007ff9e3292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.008310][ T4634] RAX: ffffffffffffffda RBX: 00007ff9e2625fa0 RCX: 00007ff9e239e159 [ 1356.016306][ T4634] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1356.024305][ T4634] RBP: 00007ff9e3292090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.032296][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.040295][ T4634] R13: 00007ff9e2626038 R14: 00007ff9e2625fa0 R15: 00007ffeeb4b3f78 [ 1356.048293][ T4634] [ 1356.209609][ T4634] warn_alloc: 3 callbacks suppressed [ 1356.209662][ T4634] syz.3.11835: vmalloc error: size 280, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 1356.236220][ T4634] CPU: 0 PID: 4634 Comm: syz.3.11835 Tainted: G W syzkaller #0 [ 1356.245197][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.255271][ T4634] Call Trace: [ 1356.258567][ T4634] [ 1356.261515][ T4634] __dump_stack+0x21/0x24 [ 1356.265883][ T4634] dump_stack_lvl+0x110/0x170 [ 1356.270593][ T4634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1356.275643][ T4634] ? pr_cont_kernfs_name+0x133/0x160 [ 1356.280935][ T4634] dump_stack+0x15/0x24 [ 1356.285097][ T4634] warn_alloc+0x1dc/0x200 [ 1356.289449][ T4634] ? __cfi_warn_alloc+0x10/0x10 [ 1356.294301][ T4634] ? __get_vm_area_node+0x175/0x360 [ 1356.299505][ T4634] __vmalloc_node_range+0x34b/0x1440 [ 1356.304795][ T4634] ? __this_cpu_preempt_check+0x13/0x20 [ 1356.310351][ T4634] ? __mod_node_page_state+0x9e/0xd0 [ 1356.315649][ T4634] ? kvmalloc_node+0x28a/0x460 [ 1356.320408][ T4634] ? __kmalloc_node+0x11f/0x1e0 [ 1356.325254][ T4634] ? __cfi___vmalloc_node_range+0x10/0x10 [ 1356.330970][ T4634] ? kvmalloc_node+0x2b3/0x460 [ 1356.335731][ T4634] ? __cfi_kvmalloc_node+0x10/0x10 [ 1356.340838][ T4634] ? page_ext_put+0x1c/0x30 [ 1356.345347][ T4634] ? bpf_check+0x22a/0x10e90 [ 1356.349937][ T4634] vzalloc+0x78/0x90 [ 1356.353833][ T4634] ? bpf_check+0x22a/0x10e90 [ 1356.358424][ T4634] bpf_check+0x22a/0x10e90 [ 1356.362840][ T4634] ? prep_new_page+0x1c/0x110 [ 1356.367522][ T4634] ? get_page_from_freelist+0x2ca9/0x2d20 [ 1356.373248][ T4634] ? unwind_get_return_address+0x4d/0x90 [ 1356.378881][ T4634] ? irqentry_exit+0x37/0x40 [ 1356.383472][ T4634] ? __cfi_bpf_check+0x10/0x10 [ 1356.388235][ T4634] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1356.394391][ T4634] ? 0xffffffffa0003dd0 [ 1356.398539][ T4634] ? is_bpf_text_address+0x177/0x190 [ 1356.403828][ T4634] ? kernel_text_address+0xa0/0xd0 [ 1356.408945][ T4634] ? irqentry_exit+0x37/0x40 [ 1356.413531][ T4634] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 1356.419333][ T4634] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1356.425497][ T4634] ? __stack_depot_save+0x36/0x490 [ 1356.430628][ T4634] ? kasan_set_track+0x60/0x70 [ 1356.435394][ T4634] ? kasan_set_track+0x4b/0x70 [ 1356.440159][ T4634] ? kasan_save_alloc_info+0x1f/0x30 [ 1356.445447][ T4634] ? __kasan_kmalloc+0x95/0xb0 [ 1356.450238][ T4634] ? kmalloc_trace+0x40/0xb0 [ 1356.454833][ T4634] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1356.460302][ T4634] ? security_bpf_prog_alloc+0x73/0xa0 [ 1356.465770][ T4634] ? bpf_prog_load+0xa03/0x1670 [ 1356.470620][ T4634] ? __sys_bpf+0x57b/0x850 [ 1356.475030][ T4634] ? __x64_sys_bpf+0x7c/0x90 [ 1356.479630][ T4634] ? x64_sys_call+0x488/0x9a0 [ 1356.484313][ T4634] ? do_syscall_64+0x4c/0xa0 [ 1356.488952][ T4634] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.495044][ T4634] ? __kasan_check_write+0x14/0x20 [ 1356.500167][ T4634] ? _raw_spin_lock+0x94/0xf0 [ 1356.504850][ T4634] ? __cfi__raw_spin_lock+0x10/0x10 [ 1356.510053][ T4634] ? _raw_spin_unlock+0x4c/0x70 [ 1356.514910][ T4634] ? memset+0x35/0x40 [ 1356.518887][ T4634] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1356.523912][ T4634] bpf_prog_load+0x10f4/0x1670 [ 1356.528679][ T4634] ? map_freeze+0x3a0/0x3a0 [ 1356.533183][ T4634] ? selinux_bpf+0xc7/0xf0 [ 1356.537602][ T4634] ? security_bpf+0x93/0xb0 [ 1356.542109][ T4634] __sys_bpf+0x57b/0x850 [ 1356.546358][ T4634] ? bpf_link_show_fdinfo+0x330/0x330 [ 1356.551751][ T4634] ? __cfi_ksys_write+0x10/0x10 [ 1356.556611][ T4634] ? debug_smp_processor_id+0x17/0x20 [ 1356.561991][ T4634] __x64_sys_bpf+0x7c/0x90 [ 1356.566414][ T4634] x64_sys_call+0x488/0x9a0 [ 1356.570923][ T4634] do_syscall_64+0x4c/0xa0 [ 1356.575346][ T4634] ? clear_bhb_loop+0x30/0x80 [ 1356.580025][ T4634] ? clear_bhb_loop+0x30/0x80 [ 1356.584704][ T4634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.590598][ T4634] RIP: 0033:0x7ff9e239e159 [ 1356.595010][ T4634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.614616][ T4634] RSP: 002b:00007ff9e3292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1356.623029][ T4634] RAX: ffffffffffffffda RBX: 00007ff9e2625fa0 RCX: 00007ff9e239e159 [ 1356.631005][ T4634] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1356.638973][ T4634] RBP: 00007ff9e3292090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.646953][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.654922][ T4634] R13: 00007ff9e2626038 R14: 00007ff9e2625fa0 R15: 00007ffeeb4b3f78 [ 1356.662893][ T4634] [ 1356.706066][ T4634] Mem-Info: [ 1356.709228][ T4634] active_anon:34680 inactive_anon:0 isolated_anon:0 [ 1356.709228][ T4634] active_file:28579 inactive_file:2920 isolated_file:0 [ 1356.709228][ T4634] unevictable:0 dirty:317 writeback:0 [ 1356.709228][ T4634] slab_reclaimable:8180 slab_unreclaimable:82697 [ 1356.709228][ T4634] mapped:30613 shmem:11517 pagetables:626 [ 1356.709228][ T4634] sec_pagetables:0 bounce:0 [ 1356.709228][ T4634] kernel_misc_reclaimable:0 [ 1356.709228][ T4634] free:1474041 free_pcp:9954 free_cma:0 [ 1356.807875][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.815309][ T4634] Node 0 active_anon:129920kB inactive_anon:0kB active_file:114316kB inactive_file:11680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122452kB dirty:1268kB writeback:0kB shmem:37068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4652kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no [ 1356.847858][ T4634] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971864kB mlocked:0kB bounce:0kB free_pcp:5380kB local_pcp:5324kB free_cma:0kB [ 1356.876083][ T4634] lowmem_reserve[]: 0 3932 3932 3932 [ 1356.881635][ T4634] Normal free:2939152kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:130120kB inactive_anon:0kB active_file:114316kB inactive_file:11680kB unevictable:0kB writepending:1268kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:33460kB local_pcp:22836kB free_cma:0kB [ 1356.934703][ T4634] lowmem_reserve[]: 0 0 0 0 [ 1356.968777][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.976722][ T4647] device bridge_slave_0 entered promiscuous mode [ 1356.984211][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.050058][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.070527][ T4647] device bridge_slave_1 entered promiscuous mode [ 1357.238539][ T4634] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (UM) = 2966484kB [ 1357.350636][ T4634] Normal: 936*4kB (M) 344*8kB (UME) 159*16kB (UME) 540*32kB (UME) 752*64kB (UME) 648*128kB (UM) 189*256kB (UM) 82*512kB (UME) 17*1024kB (UM) 6*2048kB (UME) 652*4096kB (UM) = 2948048kB [ 1357.387552][ T4634] 36620 total pagecache pages [ 1357.412637][ T4634] 0 pages in swap cache [ 1357.416883][ T4634] Free swap = 124996kB [ 1357.430185][ T4634] Total swap = 124996kB [ 1357.434422][ T4634] 2097051 pages RAM [ 1357.438235][ T4634] 0 pages HighMem/MovableOnly [ 1357.453286][ T4634] 347485 pages reserved [ 1357.457542][ T4634] 0 pages cma reserved [ 1357.463997][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1357.473821][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1357.501357][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1357.514382][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1357.524176][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.531246][ T3780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.544826][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1357.569076][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1357.579463][ T28] audit: type=1400 audit(1789718350.143:153): avc: denied { ioctl } for pid=4673 comm="syz.2.11849" path="uts:[4026533461]" dev="nsfs" ino=4026533461 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1357.581901][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.611249][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.630165][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.661279][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1357.674139][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.704935][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1357.723327][ T4647] device veth0_vlan entered promiscuous mode [ 1357.734769][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1357.744207][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1357.779091][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1357.798089][ T4647] device veth1_macvtap entered promiscuous mode [ 1357.815714][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1357.841800][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1357.854585][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1357.971908][ T4584] device ip6gretap0 left promiscuous mode [ 1357.977695][ T4584] : port 1(ip6gretap0) entered disabled state [ 1358.766549][ T4584] device bridge_slave_1 left promiscuous mode [ 1358.782956][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.830237][ T4584] device bridge_slave_0 left promiscuous mode [ 1358.861081][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.909619][ T4584] device veth1_macvtap left promiscuous mode [ 1358.936056][ T4584] device veth0_vlan left promiscuous mode [ 1360.176688][ T4779] device veth0_vlan left promiscuous mode [ 1360.187375][ T4779] device veth0_vlan entered promiscuous mode [ 1360.206021][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1360.225697][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1360.262743][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.086324][ T4829] IPv6: …: Disabled Multicast RS [ 1361.223504][ T4836] device veth0_vlan left promiscuous mode [ 1361.247946][ T4836] device veth0_vlan entered promiscuous mode [ 1361.259505][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.287625][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.299822][T25328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.495434][ T4859] FAULT_INJECTION: forcing a failure. [ 1361.495434][ T4859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.550919][ T4859] CPU: 0 PID: 4859 Comm: syz.3.11907 Tainted: G W syzkaller #0 [ 1361.559957][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1361.570035][ T4859] Call Trace: [ 1361.573331][ T4859] [ 1361.576280][ T4859] __dump_stack+0x21/0x24 [ 1361.580645][ T4859] dump_stack_lvl+0x110/0x170 [ 1361.585351][ T4859] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1361.590404][ T4859] ? irqentry_exit+0x37/0x40 [ 1361.595026][ T4859] dump_stack+0x15/0x24 [ 1361.599215][ T4859] should_fail_ex+0x3bf/0x510 [ 1361.603915][ T4859] should_fail+0xb/0x10 [ 1361.608096][ T4859] should_fail_usercopy+0x1a/0x20 [ 1361.613144][ T4859] copyin+0x20/0xa0 [ 1361.616985][ T4859] _copy_from_iter+0x3cd/0xfe0 [ 1361.621788][ T4859] ? __cfi__copy_from_iter+0x10/0x10 [ 1361.627107][ T4859] ? __cfi__copy_from_iter+0x10/0x10 [ 1361.632428][ T4859] copy_page_from_iter+0x1de/0x2c0 [ 1361.637568][ T4859] skb_copy_datagram_from_iter+0x2cb/0x6b0 [ 1361.643411][ T4859] unix_dgram_sendmsg+0x683/0x1710 [ 1361.648544][ T4859] ? selinux_socket_sendmsg+0x22f/0x340 [ 1361.654114][ T4859] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1361.660293][ T4859] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1361.666219][ T4859] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1361.671784][ T4859] ? stack_trace_save+0xa6/0xf0 [ 1361.676663][ T4859] ? __stack_depot_save+0x36/0x490 [ 1361.681800][ T4859] ? security_socket_sendmsg+0x93/0xb0 [ 1361.687284][ T4859] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1361.692859][ T4859] ____sys_sendmsg+0x5fb/0x9c0 [ 1361.697650][ T4859] ? __sys_sendmsg_sock+0x40/0x40 [ 1361.702701][ T4859] ? import_iovec+0x7c/0xb0 [ 1361.707229][ T4859] ___sys_sendmsg+0x2a2/0x360 [ 1361.711936][ T4859] ? __sys_sendmsg+0x290/0x290 [ 1361.716732][ T4859] ? __kasan_check_write+0x14/0x20 [ 1361.721868][ T4859] ? proc_fail_nth_write+0x180/0x200 [ 1361.727178][ T4859] ? vfs_write+0xa51/0xd00 [ 1361.731610][ T4859] ? __fdget+0x19c/0x220 [ 1361.735865][ T4859] __x64_sys_sendmsg+0x20d/0x2e0 [ 1361.740826][ T4859] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1361.746313][ T4859] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1361.752423][ T4859] x64_sys_call+0x171/0x9a0 [ 1361.756946][ T4859] do_syscall_64+0x4c/0xa0 [ 1361.761391][ T4859] ? clear_bhb_loop+0x30/0x80 [ 1361.766090][ T4859] ? clear_bhb_loop+0x30/0x80 [ 1361.770791][ T4859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.776704][ T4859] RIP: 0033:0x7ff9e239e159 [ 1361.781139][ T4859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.800765][ T4859] RSP: 002b:00007ff9e3292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.809212][ T4859] RAX: ffffffffffffffda RBX: 00007ff9e2625fa0 RCX: 00007ff9e239e159 [ 1361.817201][ T4859] RDX: 0000000000040840 RSI: 0000200000000440 RDI: 0000000000000005 [ 1361.825193][ T4859] RBP: 00007ff9e3292090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.833185][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.841175][ T4859] R13: 00007ff9e2626038 R14: 00007ff9e2625fa0 R15: 00007ffeeb4b3f78 [ 1361.849211][ T4859] [ 1361.899296][ T4874] sock: sock_timestamping_bind_phc: sock not bind to device [ 1361.908735][ T4869] device syzkaller0 entered promiscuous mode [ 1362.044169][ T28] audit: type=1400 audit(1789718354.613:154): avc: denied { create } for pid=4883 comm="syz.4.11915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1362.106894][ T4885] device veth0_vlan left promiscuous mode [ 1362.120913][ T4885] device veth0_vlan entered promiscuous mode [ 1362.279409][ T4892] FAULT_INJECTION: forcing a failure. [ 1362.279409][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.310759][ T4892] CPU: 0 PID: 4892 Comm: syz.3.11918 Tainted: G W syzkaller #0 [ 1362.319757][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1362.329842][ T4892] Call Trace: [ 1362.333145][ T4892] [ 1362.336099][ T4892] __dump_stack+0x21/0x24 [ 1362.340460][ T4892] dump_stack_lvl+0x110/0x170 [ 1362.345160][ T4892] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1362.350194][ T4892] ? kstrtouint+0x74/0xe0 [ 1362.354523][ T4892] dump_stack+0x15/0x24 [ 1362.358684][ T4892] should_fail_ex+0x3bf/0x510 [ 1362.363359][ T4892] __should_failslab+0xac/0xf0 [ 1362.368129][ T4892] should_failslab+0x9/0x20 [ 1362.372632][ T4892] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1362.378010][ T4892] ? kernfs_fop_write_iter+0x152/0x470 [ 1362.383470][ T4892] ? kernfs_fop_write_iter+0x152/0x470 [ 1362.388931][ T4892] __kmalloc+0xa4/0x1e0 [ 1362.393082][ T4892] kernfs_fop_write_iter+0x152/0x470 [ 1362.398386][ T4892] vfs_write+0x5ef/0xd00 [ 1362.402628][ T4892] ? __cfi_vfs_write+0x10/0x10 [ 1362.407392][ T4892] ? __cfi_mutex_lock+0x10/0x10 [ 1362.412243][ T4892] ? __fdget_pos+0x2cd/0x380 [ 1362.416836][ T4892] ? ksys_write+0x70/0x260 [ 1362.421249][ T4892] ksys_write+0x14a/0x260 [ 1362.425578][ T4892] ? __cfi_ksys_write+0x10/0x10 [ 1362.430425][ T4892] ? debug_smp_processor_id+0x17/0x20 [ 1362.435803][ T4892] __x64_sys_write+0x7b/0x90 [ 1362.440392][ T4892] x64_sys_call+0x27b/0x9a0 [ 1362.444895][ T4892] do_syscall_64+0x4c/0xa0 [ 1362.449314][ T4892] ? clear_bhb_loop+0x30/0x80 [ 1362.453988][ T4892] ? clear_bhb_loop+0x30/0x80 [ 1362.458662][ T4892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.464552][ T4892] RIP: 0033:0x7ff9e239e159 [ 1362.468965][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.488568][ T4892] RSP: 002b:00007ff9e3292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1362.496984][ T4892] RAX: ffffffffffffffda RBX: 00007ff9e2625fa0 RCX: 00007ff9e239e159 [ 1362.504957][ T4892] RDX: 0000000000000008 RSI: 0000200000003580 RDI: 0000000000000004 [ 1362.512927][ T4892] RBP: 00007ff9e3292090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.520898][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.528868][ T4892] R13: 00007ff9e2626038 R14: 00007ff9e2625fa0 R15: 00007ffeeb4b3f78 [ 1362.536842][ T4892] [ 1363.094653][ T4924] macsec0: mtu less than device minimum [ 1363.103959][ T4922] device veth0_vlan left promiscuous mode [ 1363.122910][ T4922] device veth0_vlan entered promiscuous mode [ 1363.195518][ T4926] : port 1(ip6gretap0) entered blocking state [ 1363.217302][ T4926] : port 1(ip6gretap0) entered disabled state [ 1363.230949][ T4926] device ip6gretap0 entered promiscuous mode [ 1363.297108][ T4908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.306555][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.321310][ T4908] device bridge_slave_0 entered promiscuous mode [ 1363.335593][ T4908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.344217][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.351829][ T4908] device bridge_slave_1 entered promiscuous mode [ 1363.734408][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1363.770381][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1363.812148][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1363.830954][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1363.849486][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.856605][ T3780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.882810][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1363.934187][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1363.954068][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1363.977983][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.985085][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.031301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1364.052547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1364.113091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1364.161006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1364.200562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1364.228169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1364.249088][ T4908] device veth0_vlan entered promiscuous mode [ 1364.274154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1364.309379][ T4908] device veth1_macvtap entered promiscuous mode [ 1364.392590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.421800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.611340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1364.623938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1364.825766][ T4988] FAULT_INJECTION: forcing a failure. [ 1364.825766][ T4988] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.916017][ T4988] CPU: 1 PID: 4988 Comm: syz.4.11950 Tainted: G W syzkaller #0 [ 1364.925015][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.935100][ T4988] Call Trace: [ 1364.938398][ T4988] [ 1364.941373][ T4988] __dump_stack+0x21/0x24 [ 1364.945732][ T4988] dump_stack_lvl+0x110/0x170 [ 1364.950439][ T4988] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1364.955490][ T4988] dump_stack+0x15/0x24 [ 1364.959667][ T4988] should_fail_ex+0x3bf/0x510 [ 1364.964361][ T4988] ? __kernfs_new_node+0xe1/0x670 [ 1364.969408][ T4988] __should_failslab+0xac/0xf0 [ 1364.974196][ T4988] should_failslab+0x9/0x20 [ 1364.978719][ T4988] kmem_cache_alloc+0x3b/0x320 [ 1364.983509][ T4988] ? kstrdup_const+0x8e/0xa0 [ 1364.988117][ T4988] __kernfs_new_node+0xe1/0x670 [ 1364.992985][ T4988] ? irqentry_exit+0x37/0x40 [ 1364.997593][ T4988] ? kernfs_new_node+0x260/0x260 [ 1365.002545][ T4988] ? irqentry_exit+0x37/0x40 [ 1365.007156][ T4988] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 1365.012977][ T4988] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1365.019152][ T4988] kernfs_new_node+0x150/0x260 [ 1365.023931][ T4988] kernfs_create_link+0xa4/0x200 [ 1365.028916][ T4988] sysfs_do_create_link_sd+0x8a/0x110 [ 1365.034307][ T4988] sysfs_create_link+0x68/0x80 [ 1365.039089][ T4988] device_add+0x580/0xec0 [ 1365.043440][ T4988] netdev_register_kobject+0x18e/0x330 [ 1365.048915][ T4988] ? raw_notifier_call_chain+0xfa/0x110 [ 1365.054475][ T4988] register_netdevice+0xec9/0x1550 [ 1365.059614][ T4988] ? __cfi_register_netdevice+0x10/0x10 [ 1365.065179][ T4988] ? tun_net_initialize+0x154/0x430 [ 1365.070399][ T4988] ? tun_setup+0x2b0/0x2b0 [ 1365.074842][ T4988] tun_set_iff+0x831/0xee0 [ 1365.079277][ T4988] __tun_chr_ioctl+0x88c/0x1ef0 [ 1365.084146][ T4988] ? tun_flow_create+0x320/0x320 [ 1365.089105][ T4988] ? __fget_files+0x190/0x330 [ 1365.093807][ T4988] tun_chr_ioctl+0x2a/0x40 [ 1365.098257][ T4988] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 1365.103413][ T4988] __se_sys_ioctl+0x12f/0x1b0 [ 1365.108115][ T4988] __x64_sys_ioctl+0x7b/0x90 [ 1365.112726][ T4988] x64_sys_call+0x58b/0x9a0 [ 1365.117250][ T4988] do_syscall_64+0x4c/0xa0 [ 1365.121695][ T4988] ? clear_bhb_loop+0x30/0x80 [ 1365.126389][ T4988] ? clear_bhb_loop+0x30/0x80 [ 1365.131091][ T4988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.136998][ T4988] RIP: 0033:0x7f7db219e159 [ 1365.141428][ T4988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.161048][ T4988] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.169482][ T4988] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1365.177465][ T4988] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 1365.185439][ T4988] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.193410][ T4988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.201391][ T4988] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1365.209365][ T4988] [ 1366.396508][ T5039] FAULT_INJECTION: forcing a failure. [ 1366.396508][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.409594][ T5039] CPU: 1 PID: 5039 Comm: syz.2.11969 Tainted: G W syzkaller #0 [ 1366.418556][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1366.428625][ T5039] Call Trace: [ 1366.431916][ T5039] [ 1366.434862][ T5039] __dump_stack+0x21/0x24 [ 1366.439219][ T5039] dump_stack_lvl+0x110/0x170 [ 1366.443913][ T5039] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1366.448972][ T5039] ? __stack_depot_save+0x36/0x490 [ 1366.454099][ T5039] dump_stack+0x15/0x24 [ 1366.458274][ T5039] should_fail_ex+0x3bf/0x510 [ 1366.462985][ T5039] __should_failslab+0xac/0xf0 [ 1366.467772][ T5039] should_failslab+0x9/0x20 [ 1366.472289][ T5039] slab_pre_alloc_hook+0x30/0x1d0 [ 1366.477335][ T5039] ? expand_files+0xd0/0x6a0 [ 1366.481936][ T5039] kmem_cache_alloc_lru+0x49/0x280 [ 1366.487047][ T5039] ? __d_alloc+0x34/0x6d0 [ 1366.491365][ T5039] ? node_tag_clear+0x1fb/0x330 [ 1366.496202][ T5039] __d_alloc+0x34/0x6d0 [ 1366.500347][ T5039] ? _raw_spin_lock+0x94/0xf0 [ 1366.505041][ T5039] d_alloc_pseudo+0x1d/0x70 [ 1366.509535][ T5039] alloc_file_pseudo+0xe0/0x200 [ 1366.514373][ T5039] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1366.519821][ T5039] anon_inode_getfd+0xd6/0x1d0 [ 1366.524635][ T5039] bpf_map_new_fd+0x5f/0x70 [ 1366.529128][ T5039] map_create+0x994/0xcf0 [ 1366.533441][ T5039] __sys_bpf+0x34e/0x850 [ 1366.537668][ T5039] ? bpf_link_show_fdinfo+0x330/0x330 [ 1366.543025][ T5039] ? __cfi_ksys_write+0x10/0x10 [ 1366.547866][ T5039] ? debug_smp_processor_id+0x17/0x20 [ 1366.553225][ T5039] __x64_sys_bpf+0x7c/0x90 [ 1366.557639][ T5039] x64_sys_call+0x488/0x9a0 [ 1366.562130][ T5039] do_syscall_64+0x4c/0xa0 [ 1366.566539][ T5039] ? clear_bhb_loop+0x30/0x80 [ 1366.571203][ T5039] ? clear_bhb_loop+0x30/0x80 [ 1366.575865][ T5039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.581757][ T5039] RIP: 0033:0x7f2867b9e159 [ 1366.586159][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.605751][ T5039] RSP: 002b:00007f28689e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1366.614170][ T5039] RAX: ffffffffffffffda RBX: 00007f2867e25fa0 RCX: 00007f2867b9e159 [ 1366.622129][ T5039] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 1366.630092][ T5039] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.638048][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.646006][ T5039] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1366.653967][ T5039] [ 1366.701851][ T5043] : port 1(ip6gretap0) entered blocking state [ 1366.708400][ T5043] : port 1(ip6gretap0) entered disabled state [ 1366.715975][ T5043] device ip6gretap0 entered promiscuous mode [ 1366.885387][ T5047] device ip6gretap0 left promiscuous mode [ 1366.897604][ T5047] : port 1(ip6gretap0) entered disabled state [ 1367.197583][ T5051] ªªªªªª: renamed from vlan0 [ 1367.725163][ T4584] device bridge_slave_1 left promiscuous mode [ 1367.736761][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.755453][ T4584] device bridge_slave_0 left promiscuous mode [ 1367.786007][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.826895][ T4584] device veth1_macvtap left promiscuous mode [ 1367.833798][ T4584] device veth0_vlan left promiscuous mode [ 1369.111468][ T5088] device ip6gretap0 left promiscuous mode [ 1369.123550][ T5088] : port 1(ip6gretap0) entered disabled state [ 1369.664282][ T5108] device veth1_macvtap left promiscuous mode [ 1369.727336][ T5110] device veth0_vlan left promiscuous mode [ 1369.737322][ T5110] device veth0_vlan entered promiscuous mode [ 1369.759682][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1369.768126][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1369.782914][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1369.898331][ T5121] ªªªªªª: renamed from vlan0 [ 1370.661792][ T5149] device syzkaller0 entered promiscuous mode [ 1371.111123][ T5180] device veth0_vlan left promiscuous mode [ 1371.144439][ T5180] device veth0_vlan entered promiscuous mode [ 1371.181515][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1371.202233][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1371.234898][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.498600][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.572824][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.580881][ T5197] device bridge_slave_0 entered promiscuous mode [ 1371.589104][ T5194] device veth0_vlan left promiscuous mode [ 1371.609270][ T5194] device veth0_vlan entered promiscuous mode [ 1371.639889][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.647018][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.654687][ T5197] device bridge_slave_1 entered promiscuous mode [ 1371.665151][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1371.673485][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1371.694216][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.864529][ T5219] FAULT_INJECTION: forcing a failure. [ 1371.864529][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.889566][ T5219] CPU: 1 PID: 5219 Comm: syz.4.12030 Tainted: G W syzkaller #0 [ 1371.898554][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1371.908624][ T5219] Call Trace: [ 1371.911951][ T5219] [ 1371.914892][ T5219] __dump_stack+0x21/0x24 [ 1371.919252][ T5219] dump_stack_lvl+0x110/0x170 [ 1371.923949][ T5219] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1371.928998][ T5219] dump_stack+0x15/0x24 [ 1371.933179][ T5219] should_fail_ex+0x3bf/0x510 [ 1371.937881][ T5219] ? __alloc_file+0x28/0x2a0 [ 1371.942492][ T5219] __should_failslab+0xac/0xf0 [ 1371.947277][ T5219] should_failslab+0x9/0x20 [ 1371.951796][ T5219] kmem_cache_alloc+0x3b/0x320 [ 1371.956580][ T5219] ? __cfi__raw_spin_lock+0x10/0x10 [ 1371.961802][ T5219] __alloc_file+0x28/0x2a0 [ 1371.963874][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.966246][ T5219] alloc_empty_file+0x97/0x180 [ 1371.973281][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.978013][ T5219] alloc_file+0x59/0x600 [ 1371.985289][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.989422][ T5219] ? _raw_spin_unlock+0x4c/0x70 [ 1371.996444][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.001264][ T5219] alloc_file_pseudo+0x180/0x200 [ 1372.013383][ T5219] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1372.018871][ T5219] anon_inode_getfd+0xd6/0x1d0 [ 1372.023659][ T5219] bpf_map_new_fd+0x5f/0x70 [ 1372.028184][ T5219] map_create+0x994/0xcf0 [ 1372.032536][ T5219] __sys_bpf+0x34e/0x850 [ 1372.036796][ T5219] ? bpf_link_show_fdinfo+0x330/0x330 [ 1372.042183][ T5219] ? __cfi_ksys_write+0x10/0x10 [ 1372.047056][ T5219] ? debug_smp_processor_id+0x17/0x20 [ 1372.052455][ T5219] __x64_sys_bpf+0x7c/0x90 [ 1372.056889][ T5219] x64_sys_call+0x488/0x9a0 [ 1372.061417][ T5219] do_syscall_64+0x4c/0xa0 [ 1372.065858][ T5219] ? clear_bhb_loop+0x30/0x80 [ 1372.070561][ T5219] ? clear_bhb_loop+0x30/0x80 [ 1372.075268][ T5219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.081188][ T5219] RIP: 0033:0x7f7db219e159 [ 1372.085633][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.105259][ T5219] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1372.113698][ T5219] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1372.121691][ T5219] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 1372.129686][ T5219] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.137680][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.145669][ T5219] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1372.153661][ T5219] [ 1372.228093][ T4584] device ip6gretap0 left promiscuous mode [ 1372.234061][ T4584] : port 1(ip6gretap0) entered disabled state [ 1372.255823][ T5197] device veth0_vlan entered promiscuous mode [ 1372.262564][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1372.280435][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1372.290709][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1372.301013][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1372.311891][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1372.320130][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1372.328628][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1372.337056][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1372.344721][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1372.373992][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1372.393351][ T5197] device veth1_macvtap entered promiscuous mode [ 1372.431187][ T5234] IPv6: …: Disabled Multicast RS [ 1372.443338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1372.455315][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1372.484945][ T5238] FAULT_INJECTION: forcing a failure. [ 1372.484945][ T5238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.486994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1372.499647][ T5238] CPU: 1 PID: 5238 Comm: syz.2.12038 Tainted: G W syzkaller #0 [ 1372.506912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1372.514957][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1372.514971][ T5238] Call Trace: [ 1372.514977][ T5238] [ 1372.514984][ T5238] __dump_stack+0x21/0x24 [ 1372.543639][ T5238] dump_stack_lvl+0x110/0x170 [ 1372.548353][ T5238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1372.553435][ T5238] dump_stack+0x15/0x24 [ 1372.557590][ T5238] should_fail_ex+0x3bf/0x510 [ 1372.562277][ T5238] should_fail+0xb/0x10 [ 1372.566420][ T5238] should_fail_usercopy+0x1a/0x20 [ 1372.571448][ T5238] _copy_to_user+0x1e/0x90 [ 1372.575859][ T5238] simple_read_from_buffer+0xe9/0x160 [ 1372.581225][ T5238] proc_fail_nth_read+0x1a6/0x220 [ 1372.586240][ T5238] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1372.591804][ T5238] ? security_file_permission+0x94/0xb0 [ 1372.597362][ T5238] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1372.602898][ T5238] vfs_read+0x286/0x930 [ 1372.607070][ T5238] ? __cfi_vfs_read+0x10/0x10 [ 1372.611743][ T5238] ? __kasan_check_write+0x14/0x20 [ 1372.616852][ T5238] ? mutex_lock+0x93/0x1b0 [ 1372.621260][ T5238] ? __cfi_mutex_lock+0x10/0x10 [ 1372.626128][ T5238] ? __fdget_pos+0x2cd/0x380 [ 1372.630715][ T5238] ? ksys_read+0x70/0x260 [ 1372.635037][ T5238] ksys_read+0x14a/0x260 [ 1372.639267][ T5238] ? __cfi_ksys_read+0x10/0x10 [ 1372.644018][ T5238] ? debug_smp_processor_id+0x17/0x20 [ 1372.649380][ T5238] __x64_sys_read+0x7b/0x90 [ 1372.653870][ T5238] x64_sys_call+0x2f/0x9a0 [ 1372.658281][ T5238] do_syscall_64+0x4c/0xa0 [ 1372.662688][ T5238] ? clear_bhb_loop+0x30/0x80 [ 1372.667361][ T5238] ? clear_bhb_loop+0x30/0x80 [ 1372.672031][ T5238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.677924][ T5238] RIP: 0033:0x7f2867b5e98e [ 1372.682341][ T5238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1372.701955][ T5238] RSP: 002b:00007f28689e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1372.710359][ T5238] RAX: ffffffffffffffda RBX: 00007f28689e56c0 RCX: 00007f2867b5e98e [ 1372.718346][ T5238] RDX: 000000000000000f RSI: 00007f28689e50a0 RDI: 0000000000000005 [ 1372.726313][ T5238] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.734277][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.742257][ T5238] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1372.750226][ T5238] [ 1372.844102][ T5241] device veth0_vlan left promiscuous mode [ 1372.850880][ T5241] device veth0_vlan entered promiscuous mode [ 1373.351206][ T4584] device bridge_slave_1 left promiscuous mode [ 1373.357392][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.440096][ T4584] device bridge_slave_0 left promiscuous mode [ 1373.457897][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.501645][ T4584] device veth1_macvtap left promiscuous mode [ 1373.513182][ T4584] device veth0_vlan left promiscuous mode [ 1373.699404][ T5283] device syzkaller0 entered promiscuous mode [ 1373.984678][ T5300] device veth0_vlan left promiscuous mode [ 1374.023455][ T5300] device veth0_vlan entered promiscuous mode [ 1374.865663][ T5325] device syzkaller0 entered promiscuous mode [ 1375.593829][ T5360] device syzkaller0 entered promiscuous mode [ 1375.685915][ T5369] device wg2 entered promiscuous mode [ 1376.515246][ T5403] ªªªªªª: renamed from vlan0 [ 1376.768008][ T5430] : port 1(ip6gretap0) entered blocking state [ 1376.774673][ T5430] : port 1(ip6gretap0) entered disabled state [ 1376.785480][ T5430] device ip6gretap0 entered promiscuous mode [ 1376.804941][ T5430] device ip6gretap0 left promiscuous mode [ 1376.812126][ T5430] : port 1(ip6gretap0) entered disabled state [ 1376.916403][ T5437] FAULT_INJECTION: forcing a failure. [ 1376.916403][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.055861][ T5437] CPU: 0 PID: 5437 Comm: syz.3.12092 Tainted: G W syzkaller #0 [ 1377.064863][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.074939][ T5437] Call Trace: [ 1377.078232][ T5437] [ 1377.081175][ T5437] __dump_stack+0x21/0x24 [ 1377.085531][ T5437] dump_stack_lvl+0x110/0x170 [ 1377.090234][ T5437] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1377.095280][ T5437] dump_stack+0x15/0x24 [ 1377.099446][ T5437] should_fail_ex+0x3bf/0x510 [ 1377.104128][ T5437] ? security_file_alloc+0x33/0x130 [ 1377.109331][ T5437] __should_failslab+0xac/0xf0 [ 1377.114098][ T5437] should_failslab+0x9/0x20 [ 1377.118604][ T5437] kmem_cache_alloc+0x3b/0x320 [ 1377.123371][ T5437] ? __alloc_file+0x28/0x2a0 [ 1377.127976][ T5437] security_file_alloc+0x33/0x130 [ 1377.133028][ T5437] __alloc_file+0xb5/0x2a0 [ 1377.137464][ T5437] alloc_empty_file+0x97/0x180 [ 1377.142242][ T5437] alloc_file+0x59/0x600 [ 1377.146488][ T5437] ? _raw_spin_unlock+0x4c/0x70 [ 1377.151348][ T5437] alloc_file_pseudo+0x180/0x200 [ 1377.156287][ T5437] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1377.161748][ T5437] anon_inode_getfd+0xd6/0x1d0 [ 1377.166517][ T5437] bpf_map_new_fd+0x5f/0x70 [ 1377.171021][ T5437] map_create+0x994/0xcf0 [ 1377.175350][ T5437] __sys_bpf+0x34e/0x850 [ 1377.179588][ T5437] ? bpf_link_show_fdinfo+0x330/0x330 [ 1377.184965][ T5437] ? __cfi_ksys_write+0x10/0x10 [ 1377.189822][ T5437] ? do_user_addr_fault+0x9a5/0x1030 [ 1377.195134][ T5437] ? debug_smp_processor_id+0x17/0x20 [ 1377.200523][ T5437] __x64_sys_bpf+0x7c/0x90 [ 1377.204950][ T5437] x64_sys_call+0x488/0x9a0 [ 1377.209462][ T5437] do_syscall_64+0x4c/0xa0 [ 1377.213886][ T5437] ? clear_bhb_loop+0x30/0x80 [ 1377.218569][ T5437] ? clear_bhb_loop+0x30/0x80 [ 1377.223249][ T5437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.229146][ T5437] RIP: 0033:0x7fbfda19e159 [ 1377.233558][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.253165][ T5437] RSP: 002b:00007fbfdafe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1377.261585][ T5437] RAX: ffffffffffffffda RBX: 00007fbfda425fa0 RCX: 00007fbfda19e159 [ 1377.269557][ T5437] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 1377.277524][ T5437] RBP: 00007fbfdafe2090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.285492][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.293461][ T5437] R13: 00007fbfda426038 R14: 00007fbfda425fa0 R15: 00007ffd2b4a7fa8 [ 1377.301439][ T5437] [ 1377.623572][ T5449] device wg2 entered promiscuous mode [ 1380.244034][ T5540] ªªªªªª: renamed from vlan0 [ 1382.181183][ T5619] FAULT_INJECTION: forcing a failure. [ 1382.181183][ T5619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.185954][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.204027][ T5619] CPU: 1 PID: 5619 Comm: syz.2.12151 Tainted: G W syzkaller #0 [ 1382.213003][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1382.223076][ T5619] Call Trace: [ 1382.226377][ T5619] [ 1382.229326][ T5619] __dump_stack+0x21/0x24 [ 1382.233680][ T5619] dump_stack_lvl+0x110/0x170 [ 1382.238382][ T5619] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1382.243434][ T5619] dump_stack+0x15/0x24 [ 1382.247615][ T5619] should_fail_ex+0x3bf/0x510 [ 1382.252331][ T5619] should_fail+0xb/0x10 [ 1382.256508][ T5619] should_fail_usercopy+0x1a/0x20 [ 1382.261553][ T5619] _copy_to_user+0x1e/0x90 [ 1382.265997][ T5619] simple_read_from_buffer+0xe9/0x160 [ 1382.271400][ T5619] proc_fail_nth_read+0x1a6/0x220 [ 1382.276449][ T5619] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1382.279923][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.282013][ T5619] ? security_file_permission+0x94/0xb0 [ 1382.282044][ T5619] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1382.300137][ T5619] vfs_read+0x286/0x930 [ 1382.304313][ T5619] ? __cfi_vfs_read+0x10/0x10 [ 1382.309089][ T5619] ? __kasan_check_write+0x14/0x20 [ 1382.314218][ T5619] ? mutex_lock+0x93/0x1b0 [ 1382.318647][ T5619] ? __cfi_mutex_lock+0x10/0x10 [ 1382.323515][ T5619] ? __fdget_pos+0x2cd/0x380 [ 1382.328118][ T5619] ? ksys_read+0x70/0x260 [ 1382.332460][ T5619] ksys_read+0x14a/0x260 [ 1382.336718][ T5619] ? __cfi_ksys_read+0x10/0x10 [ 1382.339961][ T5607] device bridge_slave_0 entered promiscuous mode [ 1382.341489][ T5619] ? do_user_addr_fault+0x9a5/0x1030 [ 1382.341520][ T5619] ? debug_smp_processor_id+0x17/0x20 [ 1382.358484][ T5619] __x64_sys_read+0x7b/0x90 [ 1382.363002][ T5619] x64_sys_call+0x2f/0x9a0 [ 1382.367442][ T5619] do_syscall_64+0x4c/0xa0 [ 1382.370752][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.371876][ T5619] ? clear_bhb_loop+0x30/0x80 [ 1382.383560][ T5619] ? clear_bhb_loop+0x30/0x80 [ 1382.388251][ T5619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.394156][ T5619] RIP: 0033:0x7f2867b5e98e [ 1382.398588][ T5619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1382.418206][ T5619] RSP: 002b:00007f28689e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1382.422040][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.426631][ T5619] RAX: ffffffffffffffda RBX: 00007f28689e56c0 RCX: 00007f2867b5e98e [ 1382.441619][ T5619] RDX: 000000000000000f RSI: 00007f28689e50a0 RDI: 0000000000000003 [ 1382.449601][ T5619] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.457586][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.465571][ T5619] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1382.473560][ T5619] [ 1382.485590][ T5607] device bridge_slave_1 entered promiscuous mode [ 1383.021064][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1383.040154][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1383.058203][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1383.067680][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1383.076065][ T5633] FAULT_INJECTION: forcing a failure. [ 1383.076065][ T5633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.090647][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.097724][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.107497][ T5633] CPU: 0 PID: 5633 Comm: syz.4.12157 Tainted: G W syzkaller #0 [ 1383.116461][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1383.125208][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1383.126526][ T5633] Call Trace: [ 1383.126534][ T5633] [ 1383.135930][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1383.137880][ T5633] __dump_stack+0x21/0x24 [ 1383.141029][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.148770][ T5633] dump_stack_lvl+0x110/0x170 [ 1383.148798][ T5633] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1383.153131][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.160122][ T5633] ? irqentry_exit+0x37/0x40 [ 1383.160147][ T5633] dump_stack+0x15/0x24 [ 1383.174746][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1383.177016][ T5633] should_fail_ex+0x3bf/0x510 [ 1383.177045][ T5633] should_fail+0xb/0x10 [ 1383.201922][ T5633] should_fail_usercopy+0x1a/0x20 [ 1383.206957][ T5633] copyin+0x20/0xa0 [ 1383.210773][ T5633] _copy_from_iter+0x3cd/0xfe0 [ 1383.215544][ T5633] ? __cfi__copy_from_iter+0x10/0x10 [ 1383.220840][ T5633] ? __cfi__copy_from_iter+0x10/0x10 [ 1383.226132][ T5633] copy_page_from_iter+0x1de/0x2c0 [ 1383.231249][ T5633] skb_copy_datagram_from_iter+0x2cb/0x6b0 [ 1383.237061][ T5633] unix_dgram_sendmsg+0x683/0x1710 [ 1383.242176][ T5633] ? selinux_socket_sendmsg+0x22f/0x340 [ 1383.247721][ T5633] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1383.253878][ T5633] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1383.259770][ T5633] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1383.265310][ T5633] ? stack_trace_save+0xa6/0xf0 [ 1383.270161][ T5633] ? __stack_depot_save+0x36/0x490 [ 1383.275274][ T5633] ? security_socket_sendmsg+0x93/0xb0 [ 1383.280736][ T5633] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1383.286282][ T5633] ____sys_sendmsg+0x5fb/0x9c0 [ 1383.291056][ T5633] ? __sys_sendmsg_sock+0x40/0x40 [ 1383.296087][ T5633] ? import_iovec+0x7c/0xb0 [ 1383.300594][ T5633] ___sys_sendmsg+0x2a2/0x360 [ 1383.305276][ T5633] ? __sys_sendmsg+0x290/0x290 [ 1383.310043][ T5633] ? __kasan_check_write+0x14/0x20 [ 1383.315156][ T5633] ? proc_fail_nth_write+0x180/0x200 [ 1383.320441][ T5633] ? vfs_write+0xa51/0xd00 [ 1383.324859][ T5633] ? __fdget+0x19c/0x220 [ 1383.329105][ T5633] __x64_sys_sendmsg+0x20d/0x2e0 [ 1383.334050][ T5633] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1383.339531][ T5633] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1383.345600][ T5633] x64_sys_call+0x171/0x9a0 [ 1383.350105][ T5633] do_syscall_64+0x4c/0xa0 [ 1383.354522][ T5633] ? clear_bhb_loop+0x30/0x80 [ 1383.359196][ T5633] ? clear_bhb_loop+0x30/0x80 [ 1383.363873][ T5633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.369767][ T5633] RIP: 0033:0x7f7db219e159 [ 1383.374177][ T5633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.393782][ T5633] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.402198][ T5633] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1383.410181][ T5633] RDX: 0000000000040840 RSI: 0000200000000440 RDI: 0000000000000005 [ 1383.418148][ T5633] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.426117][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.434102][ T5633] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1383.442071][ T5633] [ 1383.464965][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1383.473270][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1383.532315][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1383.589542][ T5607] device veth0_vlan entered promiscuous mode [ 1383.610940][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1383.619173][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1383.627456][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1383.650255][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1383.658806][ T5607] device veth1_macvtap entered promiscuous mode [ 1383.670680][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1383.702956][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1383.926434][ T5653] device ip6gretap0 left promiscuous mode [ 1383.962411][ T5653] : port 1(ip6gretap0) entered disabled state [ 1384.050891][ T28] audit: type=1400 audit(1789718376.623:155): avc: denied { create } for pid=5664 comm="syz.1.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1384.081987][ T4584] device bridge_slave_1 left promiscuous mode [ 1384.088161][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.131029][ T4584] device bridge_slave_0 left promiscuous mode [ 1384.152407][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.183958][ T4584] device veth1_macvtap left promiscuous mode [ 1386.159712][ T5762] FAULT_INJECTION: forcing a failure. [ 1386.159712][ T5762] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.202897][ T5762] CPU: 1 PID: 5762 Comm: syz.4.12199 Tainted: G W syzkaller #0 [ 1386.211914][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.221991][ T5762] Call Trace: [ 1386.225300][ T5762] [ 1386.228248][ T5762] __dump_stack+0x21/0x24 [ 1386.232608][ T5762] dump_stack_lvl+0x110/0x170 [ 1386.237312][ T5762] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1386.242363][ T5762] dump_stack+0x15/0x24 [ 1386.246539][ T5762] should_fail_ex+0x3bf/0x510 [ 1386.251230][ T5762] __should_failslab+0xac/0xf0 [ 1386.256024][ T5762] should_failslab+0x9/0x20 [ 1386.260542][ T5762] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1386.265934][ T5762] ? bpf_prog_test_run_flow_dissector+0x269/0x640 [ 1386.272364][ T5762] ? bpf_prog_test_run_flow_dissector+0x269/0x640 [ 1386.278791][ T5762] __kmalloc+0xa4/0x1e0 [ 1386.282962][ T5762] bpf_prog_test_run_flow_dissector+0x269/0x640 [ 1386.289224][ T5762] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1386.296009][ T5762] ? __kasan_check_write+0x14/0x20 [ 1386.301138][ T5762] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1386.307916][ T5762] bpf_prog_test_run+0x3b4/0x5c0 [ 1386.312870][ T5762] ? bpf_prog_query+0x270/0x270 [ 1386.317738][ T5762] ? selinux_bpf+0xce/0xf0 [ 1386.322169][ T5762] ? security_bpf+0x93/0xb0 [ 1386.326689][ T5762] __sys_bpf+0x5ee/0x850 [ 1386.330947][ T5762] ? bpf_link_show_fdinfo+0x330/0x330 [ 1386.336336][ T5762] ? __cfi_ksys_write+0x10/0x10 [ 1386.341198][ T5762] ? debug_smp_processor_id+0x17/0x20 [ 1386.346585][ T5762] __x64_sys_bpf+0x7c/0x90 [ 1386.351009][ T5762] x64_sys_call+0x488/0x9a0 [ 1386.355534][ T5762] do_syscall_64+0x4c/0xa0 [ 1386.359964][ T5762] ? clear_bhb_loop+0x30/0x80 [ 1386.364663][ T5762] ? clear_bhb_loop+0x30/0x80 [ 1386.369358][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.375261][ T5762] RIP: 0033:0x7f7db219e159 [ 1386.379685][ T5762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.399303][ T5762] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.407731][ T5762] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1386.415717][ T5762] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1386.423705][ T5762] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.431680][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.439649][ T5762] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1386.447622][ T5762] [ 1387.081095][ T5796] tun0: tun_chr_ioctl cmd 1074812118 [ 1387.402291][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.409467][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.417257][ T5794] device bridge_slave_0 entered promiscuous mode [ 1387.584553][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.597513][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.617327][ T5794] device bridge_slave_1 entered promiscuous mode [ 1387.789610][ T5809] bridge0: port 3(team_slave_1) entered blocking state [ 1387.797515][ T5809] bridge0: port 3(team_slave_1) entered disabled state [ 1387.816634][ T5809] device team_slave_1 entered promiscuous mode [ 1388.375132][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1388.393069][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1388.468571][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1388.481578][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1388.509063][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.516159][ T5329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.653836][ T5836] FAULT_INJECTION: forcing a failure. [ 1388.653836][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1388.667214][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1388.667264][ T5836] CPU: 1 PID: 5836 Comm: syz.4.12226 Tainted: G W syzkaller #0 [ 1388.680308][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1388.683533][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1388.692077][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1388.701636][ T5836] Call Trace: [ 1388.701644][ T5836] [ 1388.701652][ T5836] __dump_stack+0x21/0x24 [ 1388.720114][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.720165][ T5836] dump_stack_lvl+0x110/0x170 [ 1388.727178][ T5329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.731835][ T5836] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1388.731862][ T5836] ? irqentry_exit+0x37/0x40 [ 1388.748656][ T5836] dump_stack+0x15/0x24 [ 1388.752841][ T5836] should_fail_ex+0x3bf/0x510 [ 1388.757537][ T5836] should_fail+0xb/0x10 [ 1388.761711][ T5836] should_fail_usercopy+0x1a/0x20 [ 1388.766756][ T5836] copyin+0x20/0xa0 [ 1388.770590][ T5836] _copy_from_iter+0x3cd/0xfe0 [ 1388.775385][ T5836] ? __cfi__copy_from_iter+0x10/0x10 [ 1388.780698][ T5836] ? __cfi__copy_from_iter+0x10/0x10 [ 1388.786016][ T5836] copy_page_from_iter+0x1de/0x2c0 [ 1388.791160][ T5836] skb_copy_datagram_from_iter+0x2cb/0x6b0 [ 1388.796997][ T5836] unix_dgram_sendmsg+0x683/0x1710 [ 1388.802133][ T5836] ? selinux_socket_sendmsg+0x22f/0x340 [ 1388.807701][ T5836] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1388.813881][ T5836] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1388.819799][ T5836] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1388.825367][ T5836] ? stack_trace_save+0xa6/0xf0 [ 1388.830244][ T5836] ? __stack_depot_save+0x36/0x490 [ 1388.835384][ T5836] ? security_socket_sendmsg+0x93/0xb0 [ 1388.840868][ T5836] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1388.846435][ T5836] ____sys_sendmsg+0x5fb/0x9c0 [ 1388.851225][ T5836] ? __sys_sendmsg_sock+0x40/0x40 [ 1388.856283][ T5836] ? import_iovec+0x7c/0xb0 [ 1388.860810][ T5836] ___sys_sendmsg+0x2a2/0x360 [ 1388.865519][ T5836] ? __sys_sendmsg+0x290/0x290 [ 1388.870305][ T5836] ? __kasan_check_write+0x14/0x20 [ 1388.875435][ T5836] ? proc_fail_nth_write+0x180/0x200 [ 1388.880743][ T5836] ? vfs_write+0xa51/0xd00 [ 1388.885185][ T5836] ? __fdget+0x19c/0x220 [ 1388.889448][ T5836] __x64_sys_sendmsg+0x20d/0x2e0 [ 1388.894415][ T5836] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1388.899900][ T5836] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1388.905991][ T5836] x64_sys_call+0x171/0x9a0 [ 1388.910519][ T5836] do_syscall_64+0x4c/0xa0 [ 1388.914963][ T5836] ? clear_bhb_loop+0x30/0x80 [ 1388.919659][ T5836] ? clear_bhb_loop+0x30/0x80 [ 1388.924358][ T5836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1388.930270][ T5836] RIP: 0033:0x7f7db219e159 [ 1388.934696][ T5836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.954314][ T5836] RSP: 002b:00007f7db3015028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.962763][ T5836] RAX: ffffffffffffffda RBX: 00007f7db2425fa0 RCX: 00007f7db219e159 [ 1388.970748][ T5836] RDX: 0000000000040840 RSI: 0000200000000440 RDI: 0000000000000005 [ 1388.978730][ T5836] RBP: 00007f7db3015090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.986713][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1388.994696][ T5836] R13: 00007f7db2426038 R14: 00007f7db2425fa0 R15: 00007ffffebc6248 [ 1389.002692][ T5836] [ 1389.022569][ T4584] device bridge_slave_1 left promiscuous mode [ 1389.028774][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.047828][ T4584] device bridge_slave_0 left promiscuous mode [ 1389.081138][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.124494][ T4584] device veth1_macvtap left promiscuous mode [ 1389.237290][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1389.245559][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1389.266938][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1389.278841][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1389.414764][ T5794] device veth0_vlan entered promiscuous mode [ 1389.432988][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1389.441494][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1389.449914][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1389.458259][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1389.466501][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1389.474273][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1389.711202][ T5794] device veth1_macvtap entered promiscuous mode [ 1389.717838][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1389.726126][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1389.734383][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1389.965830][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1389.974913][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1389.983369][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1389.991765][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1392.478655][ T5927] syz.3.12252[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1392.481754][ T5927] syz.3.12252[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1393.186307][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.212869][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.221257][ T5943] device bridge_slave_0 entered promiscuous mode [ 1393.252580][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.284491][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.320609][ T5943] device bridge_slave_1 entered promiscuous mode [ 1393.478205][ T5973] IPv6: …: Disabled Multicast RS [ 1393.536758][ T5973] device veth0_vlan left promiscuous mode [ 1393.549935][ T5973] device veth0_vlan entered promiscuous mode [ 1393.630420][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1393.638510][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1393.646186][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1393.833683][ T4584] device veth0_vlan left promiscuous mode [ 1394.230713][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1394.244163][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1394.261120][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1394.277305][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1394.295685][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.302780][ T5329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.320120][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1394.332429][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1394.341238][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.348310][ T5329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.356826][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1394.394089][ T5943] device veth0_vlan entered promiscuous mode [ 1394.413960][ T5943] device veth1_macvtap entered promiscuous mode [ 1394.465446][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1394.477941][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1394.492513][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1394.506142][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1394.520374][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1394.533015][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1394.541651][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1394.549592][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1394.564968][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1394.583169][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1394.599762][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1394.613050][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1394.627942][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1394.642957][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1394.658996][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1394.688164][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1394.718867][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1394.758146][ T6020] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1394.786980][ T6020] syzkaller0: linktype set to 0 [ 1394.903044][ T6021] : port 1(ip6gretap0) entered blocking state [ 1394.909262][ T6021] : port 1(ip6gretap0) entered disabled state [ 1394.920490][ T6021] device ip6gretap0 entered promiscuous mode [ 1395.000784][ T6033] FAULT_INJECTION: forcing a failure. [ 1395.000784][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.015651][ T6033] CPU: 1 PID: 6033 Comm: syz.1.12289 Tainted: G W syzkaller #0 [ 1395.024629][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1395.034706][ T6033] Call Trace: [ 1395.038005][ T6033] [ 1395.040950][ T6033] __dump_stack+0x21/0x24 [ 1395.045317][ T6033] dump_stack_lvl+0x110/0x170 [ 1395.050021][ T6033] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1395.055077][ T6033] dump_stack+0x15/0x24 [ 1395.059259][ T6033] should_fail_ex+0x3bf/0x510 [ 1395.063958][ T6033] should_fail+0xb/0x10 [ 1395.068132][ T6033] should_fail_usercopy+0x1a/0x20 [ 1395.073198][ T6033] _copy_to_user+0x1e/0x90 [ 1395.077642][ T6033] simple_read_from_buffer+0xe9/0x160 [ 1395.083041][ T6033] proc_fail_nth_read+0x1a6/0x220 [ 1395.088091][ T6033] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1395.093658][ T6033] ? security_file_permission+0x94/0xb0 [ 1395.099228][ T6033] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1395.104790][ T6033] vfs_read+0x286/0x930 [ 1395.108958][ T6033] ? __cfi_vfs_read+0x10/0x10 [ 1395.113648][ T6033] ? __kasan_check_write+0x14/0x20 [ 1395.118779][ T6033] ? mutex_lock+0x93/0x1b0 [ 1395.123207][ T6033] ? __cfi_mutex_lock+0x10/0x10 [ 1395.128077][ T6033] ? __fdget_pos+0x2cd/0x380 [ 1395.132685][ T6033] ? ksys_read+0x70/0x260 [ 1395.137026][ T6033] ksys_read+0x14a/0x260 [ 1395.141288][ T6033] ? __cfi_ksys_read+0x10/0x10 [ 1395.146071][ T6033] ? fpregs_restore_userregs+0x128/0x260 [ 1395.151726][ T6033] __x64_sys_read+0x7b/0x90 [ 1395.156245][ T6033] x64_sys_call+0x2f/0x9a0 [ 1395.160679][ T6033] do_syscall_64+0x4c/0xa0 [ 1395.165120][ T6033] ? clear_bhb_loop+0x30/0x80 [ 1395.169811][ T6033] ? clear_bhb_loop+0x30/0x80 [ 1395.174505][ T6033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1395.180415][ T6033] RIP: 0033:0x7f74ca15e98e [ 1395.184848][ T6033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1395.204472][ T6033] RSP: 002b:00007f74cafc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.212906][ T6033] RAX: ffffffffffffffda RBX: 00007f74cafc66c0 RCX: 00007f74ca15e98e [ 1395.220887][ T6033] RDX: 000000000000000f RSI: 00007f74cafc60a0 RDI: 0000000000000006 [ 1395.228846][ T6033] RBP: 00007f74cafc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.236802][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.244760][ T6033] R13: 00007f74ca426038 R14: 00007f74ca425fa0 R15: 00007fffa8237808 [ 1395.252726][ T6033] [ 1395.271359][ T6023] device ip6gretap0 left promiscuous mode [ 1395.277228][ T6023] : port 1(ip6gretap0) entered disabled state [ 1395.513869][ T28] audit: type=1400 audit(1789718388.083:156): avc: denied { create } for pid=6034 comm="syz.1.12290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1395.746198][ T6035] device syzkaller0 entered promiscuous mode [ 1396.578450][ T6087] ªªªªªª: renamed from vlan0 [ 1397.364494][ T6122] FAULT_INJECTION: forcing a failure. [ 1397.364494][ T6122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.413523][ T6122] CPU: 1 PID: 6122 Comm: syz.4.12324 Tainted: G W syzkaller #0 [ 1397.422509][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1397.432580][ T6122] Call Trace: [ 1397.435874][ T6122] [ 1397.438815][ T6122] __dump_stack+0x21/0x24 [ 1397.443164][ T6122] dump_stack_lvl+0x110/0x170 [ 1397.447862][ T6122] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1397.452906][ T6122] dump_stack+0x15/0x24 [ 1397.457079][ T6122] should_fail_ex+0x3bf/0x510 [ 1397.461772][ T6122] should_fail+0xb/0x10 [ 1397.465948][ T6122] should_fail_usercopy+0x1a/0x20 [ 1397.470988][ T6122] _copy_to_user+0x1e/0x90 [ 1397.475433][ T6122] bpf_test_finish+0x20a/0x6c0 [ 1397.480310][ T6122] ? convert_skb_to___skb+0x430/0x430 [ 1397.485702][ T6122] ? bpf_test_timer_continue+0x156/0x4a0 [ 1397.491364][ T6122] bpf_prog_test_run_flow_dissector+0x4c0/0x640 [ 1397.497626][ T6122] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1397.504390][ T6122] ? __kasan_check_write+0x14/0x20 [ 1397.509505][ T6122] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1397.516266][ T6122] bpf_prog_test_run+0x3b4/0x5c0 [ 1397.521202][ T6122] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1397.527359][ T6122] ? bpf_prog_query+0x270/0x270 [ 1397.532205][ T6122] ? selinux_bpf+0xce/0xf0 [ 1397.536620][ T6122] ? security_bpf+0x93/0xb0 [ 1397.541128][ T6122] __sys_bpf+0x5ee/0x850 [ 1397.545366][ T6122] ? bpf_link_show_fdinfo+0x330/0x330 [ 1397.550739][ T6122] ? __cfi_ksys_write+0x10/0x10 [ 1397.555594][ T6122] ? debug_smp_processor_id+0x17/0x20 [ 1397.560984][ T6122] __x64_sys_bpf+0x7c/0x90 [ 1397.565400][ T6122] x64_sys_call+0x488/0x9a0 [ 1397.569914][ T6122] do_syscall_64+0x4c/0xa0 [ 1397.574339][ T6122] ? clear_bhb_loop+0x30/0x80 [ 1397.579019][ T6122] ? clear_bhb_loop+0x30/0x80 [ 1397.583697][ T6122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.589588][ T6122] RIP: 0033:0x7fb2efb9e159 [ 1397.594002][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.613609][ T6122] RSP: 002b:00007fb2f0a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1397.622028][ T6122] RAX: ffffffffffffffda RBX: 00007fb2efe25fa0 RCX: 00007fb2efb9e159 [ 1397.630001][ T6122] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1397.637969][ T6122] RBP: 00007fb2f0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.645934][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.653903][ T6122] R13: 00007fb2efe26038 R14: 00007fb2efe25fa0 R15: 00007ffe882111f8 [ 1397.661875][ T6122] [ 1397.699602][ T6140] : port 1(ip6gretap0) entered blocking state [ 1397.710869][ T6140] : port 1(ip6gretap0) entered disabled state [ 1397.737125][ T6140] device ip6gretap0 entered promiscuous mode [ 1397.785498][ T28] audit: type=1400 audit(1789718390.353:157): avc: denied { create } for pid=6150 comm="syz.1.12335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1397.791868][ T6149] device ip6gretap0 left promiscuous mode [ 1397.821316][ T6149] : port 1(ip6gretap0) entered disabled state [ 1398.147946][ T6161] device syzkaller0 entered promiscuous mode [ 1398.640042][ T6225] device ip6gre0 entered promiscuous mode [ 1398.815238][ T6241] FAULT_INJECTION: forcing a failure. [ 1398.815238][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.840240][ T6241] CPU: 0 PID: 6241 Comm: syz.4.12370 Tainted: G W syzkaller #0 [ 1398.849289][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1398.859354][ T6241] Call Trace: [ 1398.862659][ T6241] [ 1398.865605][ T6241] __dump_stack+0x21/0x24 [ 1398.869956][ T6241] dump_stack_lvl+0x110/0x170 [ 1398.874652][ T6241] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1398.879693][ T6241] ? selinux_kernfs_init_security+0x143/0x450 [ 1398.885785][ T6241] dump_stack+0x15/0x24 [ 1398.889956][ T6241] should_fail_ex+0x3bf/0x510 [ 1398.894650][ T6241] ? __kernfs_new_node+0xe1/0x670 [ 1398.899695][ T6241] __should_failslab+0xac/0xf0 [ 1398.904474][ T6241] should_failslab+0x9/0x20 [ 1398.908987][ T6241] kmem_cache_alloc+0x3b/0x320 [ 1398.913768][ T6241] __kernfs_new_node+0xe1/0x670 [ 1398.918632][ T6241] ? clear_nonspinnable+0x60/0x60 [ 1398.923679][ T6241] ? rwsem_write_trylock+0x136/0x300 [ 1398.928975][ T6241] ? kernfs_new_node+0x260/0x260 [ 1398.933925][ T6241] ? up_write+0x7b/0x290 [ 1398.938187][ T6241] kernfs_new_node+0x150/0x260 [ 1398.942967][ T6241] __kernfs_create_file+0x4e/0x270 [ 1398.948093][ T6241] sysfs_add_file_mode_ns+0x1ce/0x270 [ 1398.953484][ T6241] internal_create_group+0x6b7/0xeb0 [ 1398.958788][ T6241] ? sysfs_create_group+0x30/0x30 [ 1398.963831][ T6241] ? up_write+0x7b/0x290 [ 1398.968095][ T6241] ? kernfs_activate+0x1ea/0x200 [ 1398.973047][ T6241] sysfs_create_groups+0x58/0x120 [ 1398.978088][ T6241] device_add_attrs+0xdb/0x830 [ 1398.982877][ T6241] ? get_device_parent+0x410/0x410 [ 1398.988009][ T6241] device_add+0x5b0/0xec0 [ 1398.992352][ T6241] netdev_register_kobject+0x18e/0x330 [ 1398.997824][ T6241] ? raw_notifier_call_chain+0xfa/0x110 [ 1399.003390][ T6241] register_netdevice+0xec9/0x1550 [ 1399.008523][ T6241] ? __cfi_register_netdevice+0x10/0x10 [ 1399.014091][ T6241] tun_set_iff+0x831/0xee0 [ 1399.018532][ T6241] __tun_chr_ioctl+0x88c/0x1ef0 [ 1399.023408][ T6241] ? tun_flow_create+0x320/0x320 [ 1399.028374][ T6241] tun_chr_ioctl+0x2a/0x40 [ 1399.032824][ T6241] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 1399.037957][ T6241] __se_sys_ioctl+0x12f/0x1b0 [ 1399.042662][ T6241] __x64_sys_ioctl+0x7b/0x90 [ 1399.047271][ T6241] x64_sys_call+0x58b/0x9a0 [ 1399.051799][ T6241] do_syscall_64+0x4c/0xa0 [ 1399.056247][ T6241] ? clear_bhb_loop+0x30/0x80 [ 1399.060946][ T6241] ? clear_bhb_loop+0x30/0x80 [ 1399.065645][ T6241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.071556][ T6241] RIP: 0033:0x7fb2efb9e159 [ 1399.076000][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.095622][ T6241] RSP: 002b:00007fb2f0a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.104062][ T6241] RAX: ffffffffffffffda RBX: 00007fb2efe25fa0 RCX: 00007fb2efb9e159 [ 1399.112049][ T6241] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 1399.120031][ T6241] RBP: 00007fb2f0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.128012][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.135994][ T6241] R13: 00007fb2efe26038 R14: 00007fb2efe25fa0 R15: 00007ffe882111f8 [ 1399.143981][ T6241] [ 1400.239839][ T6310] device syzkaller0 entered promiscuous mode [ 1401.316889][ T6354] IPv6: …: Disabled Multicast RS [ 1401.516742][ T6373] device veth0_vlan left promiscuous mode [ 1401.540118][ T6373] device veth0_vlan entered promiscuous mode [ 1401.691590][ T6372] FAULT_INJECTION: forcing a failure. [ 1401.691590][ T6372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.740136][ T6372] CPU: 1 PID: 6372 Comm: syz.2.12409 Tainted: G W syzkaller #0 [ 1401.749117][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1401.759179][ T6372] Call Trace: [ 1401.762462][ T6372] [ 1401.765401][ T6372] __dump_stack+0x21/0x24 [ 1401.769754][ T6372] dump_stack_lvl+0x110/0x170 [ 1401.774448][ T6372] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1401.779490][ T6372] dump_stack+0x15/0x24 [ 1401.783663][ T6372] should_fail_ex+0x3bf/0x510 [ 1401.788349][ T6372] should_fail+0xb/0x10 [ 1401.792523][ T6372] should_fail_usercopy+0x1a/0x20 [ 1401.797557][ T6372] _copy_to_user+0x1e/0x90 [ 1401.801990][ T6372] bpf_test_finish+0x1b2/0x6c0 [ 1401.806770][ T6372] ? convert_skb_to___skb+0x430/0x430 [ 1401.812159][ T6372] ? bpf_test_timer_continue+0x156/0x4a0 [ 1401.817804][ T6372] bpf_prog_test_run_flow_dissector+0x4c0/0x640 [ 1401.824059][ T6372] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1401.830836][ T6372] ? __kasan_check_write+0x14/0x20 [ 1401.835957][ T6372] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1401.842732][ T6372] bpf_prog_test_run+0x3b4/0x5c0 [ 1401.847681][ T6372] ? bpf_prog_query+0x270/0x270 [ 1401.852542][ T6372] ? __sys_bpf+0x324/0x850 [ 1401.856968][ T6372] ? __sanitizer_cov_trace_switch+0x57/0xe0 [ 1401.862884][ T6372] __sys_bpf+0x5ee/0x850 [ 1401.867138][ T6372] ? bpf_link_show_fdinfo+0x330/0x330 [ 1401.872525][ T6372] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1401.877824][ T6372] __x64_sys_bpf+0x7c/0x90 [ 1401.882247][ T6372] x64_sys_call+0x488/0x9a0 [ 1401.886763][ T6372] do_syscall_64+0x4c/0xa0 [ 1401.891196][ T6372] ? clear_bhb_loop+0x30/0x80 [ 1401.895891][ T6372] ? clear_bhb_loop+0x30/0x80 [ 1401.900594][ T6372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.906501][ T6372] RIP: 0033:0x7f2867b9e159 [ 1401.910937][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.930559][ T6372] RSP: 002b:00007f28689e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1401.938991][ T6372] RAX: ffffffffffffffda RBX: 00007f2867e25fa0 RCX: 00007f2867b9e159 [ 1401.946975][ T6372] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1401.954958][ T6372] RBP: 00007f28689e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.962940][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.970920][ T6372] R13: 00007f2867e26038 R14: 00007f2867e25fa0 R15: 00007ffc7245a298 [ 1401.978992][ T6372] [ 1402.079248][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.090005][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.097669][ T6350] device bridge_slave_0 entered promiscuous mode [ 1402.122618][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.135172][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.147161][ T6350] device bridge_slave_1 entered promiscuous mode [ 1402.338274][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.345378][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.352701][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.359753][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.418354][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.426022][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.594598][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1402.608950][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.640199][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1402.648878][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.660583][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.667637][ T5329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.767508][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1402.783642][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.807971][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.815088][ T5329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.845171][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1402.859277][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1402.867531][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1402.877636][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1402.887491][ T4584] device bridge_slave_1 left promiscuous mode [ 1402.896555][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.908750][ T4584] device bridge_slave_0 left promiscuous mode [ 1402.919396][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.928048][ T4584] device veth1_macvtap left promiscuous mode [ 1402.934188][ T4584] device veth0_vlan left promiscuous mode [ 1403.151951][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1403.160317][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1403.213850][ T6350] device veth0_vlan entered promiscuous mode [ 1403.236385][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1403.244907][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1403.254019][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1403.261654][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1403.278489][ T6350] device veth1_macvtap entered promiscuous mode [ 1403.302049][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1403.310409][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1403.318526][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1403.332443][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1403.340816][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1403.407169][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1403.419182][ T6430] FAULT_INJECTION: forcing a failure. [ 1403.419182][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.423155][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1403.446072][ T6430] CPU: 1 PID: 6430 Comm: syz.0.12400 Tainted: G W syzkaller #0 [ 1403.455050][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1403.465117][ T6430] Call Trace: [ 1403.468408][ T6430] [ 1403.471359][ T6430] __dump_stack+0x21/0x24 [ 1403.475721][ T6430] dump_stack_lvl+0x110/0x170 [ 1403.480427][ T6430] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1403.485475][ T6430] dump_stack+0x15/0x24 [ 1403.489658][ T6430] should_fail_ex+0x3bf/0x510 [ 1403.494353][ T6430] should_fail+0xb/0x10 [ 1403.498499][ T6430] should_fail_usercopy+0x1a/0x20 [ 1403.503517][ T6430] _copy_from_user+0x1e/0xc0 [ 1403.508112][ T6430] __sys_bpf+0x2a0/0x850 [ 1403.512345][ T6430] ? bpf_link_show_fdinfo+0x330/0x330 [ 1403.517706][ T6430] ? __cfi_ksys_write+0x10/0x10 [ 1403.522545][ T6430] ? debug_smp_processor_id+0x17/0x20 [ 1403.527924][ T6430] __x64_sys_bpf+0x7c/0x90 [ 1403.532326][ T6430] x64_sys_call+0x488/0x9a0 [ 1403.536825][ T6430] do_syscall_64+0x4c/0xa0 [ 1403.541241][ T6430] ? clear_bhb_loop+0x30/0x80 [ 1403.545933][ T6430] ? clear_bhb_loop+0x30/0x80 [ 1403.550605][ T6430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.556494][ T6430] RIP: 0033:0x7f90dab9e159 [ 1403.560906][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.580507][ T6430] RSP: 002b:00007f90dba73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1403.588918][ T6430] RAX: ffffffffffffffda RBX: 00007f90dae25fa0 RCX: 00007f90dab9e159 [ 1403.596890][ T6430] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1403.604858][ T6430] RBP: 00007f90dba73090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.612826][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.620798][ T6430] R13: 00007f90dae26038 R14: 00007f90dae25fa0 R15: 00007ffe29a3fa58 [ 1403.628859][ T6430] [ 1403.706004][ T6440] : port 1(ip6gretap0) entered blocking state [ 1403.712447][ T6440] : port 1(ip6gretap0) entered disabled state [ 1403.719833][ T6440] device ip6gretap0 entered promiscuous mode [ 1403.953666][ T6435] device syzkaller0 entered promiscuous mode [ 1403.990534][ T6440] device ip6gretap0 left promiscuous mode [ 1403.997507][ T6440] : port 1(ip6gretap0) entered disabled state [ 1404.827773][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.835009][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.848739][ T6574] device bridge_slave_0 entered promiscuous mode [ 1404.857153][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.864547][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.872125][ T6574] device bridge_slave_1 entered promiscuous mode [ 1405.053854][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.061002][ T6574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.068294][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.075384][ T6574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.262690][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1405.280502][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.303222][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.364737][ T6603] device sit0 entered promiscuous mode [ 1405.502700][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.514782][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.522056][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.540658][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1405.568945][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.576041][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.612717][ T6603] device sit0 left promiscuous mode [ 1405.770680][ T6606] device sit0 entered promiscuous mode [ 1405.827228][ T6607] Â: renamed from pim6reg1 [ 1405.845359][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.907308][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.920260][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1406.039343][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.050288][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.097922][ T6622] : port 1(ip6gretap0) entered blocking state [ 1406.107558][ T6622] : port 1(ip6gretap0) entered disabled state [ 1406.118089][ T6622] device ip6gretap0 entered promiscuous mode [ 1406.141529][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.149879][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.171244][ T6574] device veth0_vlan entered promiscuous mode [ 1406.181374][ T6624] IPv6: …: Disabled Multicast RS [ 1406.223586][ T6616] device ip6gretap0 left promiscuous mode [ 1406.243304][ T6616] : port 1(ip6gretap0) entered disabled state [ 1406.320251][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.343706][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.371813][ T6627] device veth0_vlan left promiscuous mode [ 1406.377957][ T6627] device veth0_vlan entered promiscuous mode [ 1406.425126][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.437926][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1406.447906][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.579189][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.592032][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.686566][ T6574] device veth1_macvtap entered promiscuous mode [ 1406.786533][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1406.796599][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1406.838986][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1406.888328][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1406.938487][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1407.500258][ T6661] ªªªªªª: renamed from vlan0 [ 1407.510432][ T4584] device bridge_slave_1 left promiscuous mode [ 1407.527849][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.549706][ T4584] device bridge_slave_0 left promiscuous mode [ 1407.569013][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.592233][ T4584] device veth1_macvtap left promiscuous mode [ 1408.504593][ T6710] FAULT_INJECTION: forcing a failure. [ 1408.504593][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1408.518185][ T6710] CPU: 0 PID: 6710 Comm: syz.4.12480 Tainted: G W syzkaller #0 [ 1408.527150][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.537228][ T6710] Call Trace: [ 1408.540531][ T6710] [ 1408.543484][ T6710] __dump_stack+0x21/0x24 [ 1408.547845][ T6710] dump_stack_lvl+0x110/0x170 [ 1408.552550][ T6710] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1408.557604][ T6710] dump_stack+0x15/0x24 [ 1408.561787][ T6710] should_fail_ex+0x3bf/0x510 [ 1408.566665][ T6710] should_fail+0xb/0x10 [ 1408.570842][ T6710] should_fail_usercopy+0x1a/0x20 [ 1408.575890][ T6710] _copy_to_user+0x1e/0x90 [ 1408.580344][ T6710] bpf_test_finish+0x251/0x6c0 [ 1408.585137][ T6710] ? convert_skb_to___skb+0x430/0x430 [ 1408.590534][ T6710] ? bpf_test_timer_continue+0x156/0x4a0 [ 1408.596190][ T6710] bpf_prog_test_run_flow_dissector+0x4c0/0x640 [ 1408.602456][ T6710] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1408.609246][ T6710] ? __kasan_check_write+0x14/0x20 [ 1408.614388][ T6710] ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1408.621179][ T6710] bpf_prog_test_run+0x3b4/0x5c0 [ 1408.626146][ T6710] ? bpf_prog_query+0x270/0x270 [ 1408.631025][ T6710] ? selinux_bpf+0xce/0xf0 [ 1408.635473][ T6710] ? security_bpf+0x93/0xb0 [ 1408.640005][ T6710] __sys_bpf+0x5ee/0x850 [ 1408.644274][ T6710] ? bpf_link_show_fdinfo+0x330/0x330 [ 1408.649677][ T6710] ? irqentry_exit+0x37/0x40 [ 1408.654301][ T6710] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 1408.660128][ T6710] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1408.666311][ T6710] __x64_sys_bpf+0x7c/0x90 [ 1408.670747][ T6710] x64_sys_call+0x488/0x9a0 [ 1408.675272][ T6710] do_syscall_64+0x4c/0xa0 [ 1408.679724][ T6710] ? clear_bhb_loop+0x30/0x80 [ 1408.684420][ T6710] ? clear_bhb_loop+0x30/0x80 [ 1408.689117][ T6710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1408.695034][ T6710] RIP: 0033:0x7fb2efb9e159 [ 1408.699468][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.719096][ T6710] RSP: 002b:00007fb2f0a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1408.727542][ T6710] RAX: ffffffffffffffda RBX: 00007fb2efe25fa0 RCX: 00007fb2efb9e159 [ 1408.735540][ T6710] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1408.743534][ T6710] RBP: 00007fb2f0a44090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.751530][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.759518][ T6710] R13: 00007fb2efe26038 R14: 00007fb2efe25fa0 R15: 00007ffe882111f8 [ 1408.767507][ T6710] [ 1408.945244][ T6735] : port 1(ip6gretap0) entered blocking state [ 1408.952032][ T6735] : port 1(ip6gretap0) entered disabled state [ 1408.973307][ T6735] device ip6gretap0 entered promiscuous mode [ 1409.028755][ T6735] device ip6gretap0 left promiscuous mode [ 1409.036768][ T6735] : port 1(ip6gretap0) entered disabled state [ 1409.258225][ T28] audit: type=1400 audit(1789718401.823:158): avc: denied { create } for pid=6752 comm="syz.1.12496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1411.159534][ T6797] : port 1(ip6gretap0) entered blocking state [ 1411.174871][ T6797] : port 1(ip6gretap0) entered disabled state [ 1411.193913][ T6797] device ip6gretap0 entered promiscuous mode [ 1411.229217][ T6794] device ip6gretap0 left promiscuous mode [ 1411.242949][ T6794] : port 1(ip6gretap0) entered disabled state [ 1412.326829][ T6828] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1412.466408][ T6828] device syzkaller0 entered promiscuous mode [ 1412.775148][ T6879] FAULT_INJECTION: forcing a failure. [ 1412.775148][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.776552][ T6875] device syzkaller0 entered promiscuous mode [ 1412.798670][ T6879] CPU: 0 PID: 6879 Comm: syz.0.12546 Tainted: G W syzkaller #0 [ 1412.807662][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.817738][ T6879] Call Trace: [ 1412.821039][ T6879] [ 1412.823989][ T6879] __dump_stack+0x21/0x24 [ 1412.828354][ T6879] dump_stack_lvl+0x110/0x170 [ 1412.833061][ T6879] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1412.838112][ T6879] ? memcpy+0x56/0x70 [ 1412.842106][ T6879] dump_stack+0x15/0x24 [ 1412.846267][ T6879] should_fail_ex+0x3bf/0x510 [ 1412.850952][ T6879] should_fail+0xb/0x10 [ 1412.855106][ T6879] should_fail_usercopy+0x1a/0x20 [ 1412.860129][ T6879] strncpy_from_user+0x24/0x2c0 [ 1412.864979][ T6879] bpf_prog_load+0x1f1/0x1670 [ 1412.869660][ T6879] ? map_freeze+0x3a0/0x3a0 [ 1412.874172][ T6879] ? selinux_bpf+0xc7/0xf0 [ 1412.878589][ T6879] ? security_bpf+0x93/0xb0 [ 1412.883095][ T6879] __sys_bpf+0x57b/0x850 [ 1412.887338][ T6879] ? bpf_link_show_fdinfo+0x330/0x330 [ 1412.892711][ T6879] ? __cfi_ksys_write+0x10/0x10 [ 1412.897560][ T6879] ? debug_smp_processor_id+0x17/0x20 [ 1412.902943][ T6879] __x64_sys_bpf+0x7c/0x90 [ 1412.907381][ T6879] x64_sys_call+0x488/0x9a0 [ 1412.911909][ T6879] do_syscall_64+0x4c/0xa0 [ 1412.916341][ T6879] ? clear_bhb_loop+0x30/0x80 [ 1412.921025][ T6879] ? clear_bhb_loop+0x30/0x80 [ 1412.925705][ T6879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.931596][ T6879] RIP: 0033:0x7f90dab9e159 [ 1412.936006][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.955610][ T6879] RSP: 002b:00007f90dba73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.964023][ T6879] RAX: ffffffffffffffda RBX: 00007f90dae25fa0 RCX: 00007f90dab9e159 [ 1412.971991][ T6879] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1412.979961][ T6879] RBP: 00007f90dba73090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.987937][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.995905][ T6879] R13: 00007f90dae26038 R14: 00007f90dae25fa0 R15: 00007ffe29a3fa58 [ 1413.003881][ T6879] [ 1413.126305][ T28] audit: type=1400 audit(1789718405.693:159): avc: denied { create } for pid=6905 comm="syz.3.12550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1413.540869][ T6935] : port 1(ip6gretap0) entered blocking state [ 1413.556357][ T6935] : port 1(ip6gretap0) entered disabled state [ 1413.563699][ T6935] device ip6gretap0 entered promiscuous mode [ 1413.584219][ T6929] device ip6gretap0 left promiscuous mode [ 1413.591286][ T6929] : port 1(ip6gretap0) entered disabled state [ 1413.903315][ T6959] IPv6: …: Disabled Multicast RS [ 1414.042854][ T6965] device veth0_vlan left promiscuous mode [ 1414.066221][ T6965] device veth0_vlan entered promiscuous mode [ 1415.265922][ C0] ================================================================== [ 1415.274092][ C0] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x833/0x9b0 [ 1415.283020][ C0] Write of size 4 at addr ffff888121e2cd10 by task syz.2.12605/7038 [ 1415.291068][ C0] [ 1415.293412][ C0] CPU: 0 PID: 7038 Comm: syz.2.12605 Tainted: G W syzkaller #0 [ 1415.302357][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.312412][ C0] Call Trace: [ 1415.315680][ C0] [ 1415.318511][ C0] __dump_stack+0x21/0x24 [ 1415.322839][ C0] dump_stack_lvl+0x110/0x170 [ 1415.327513][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1415.332527][ C0] ? bad_area_nosemaphore+0x2d/0x40 [ 1415.337740][ C0] ? stack_map_get_build_id_offset+0x833/0x9b0 [ 1415.343879][ C0] print_address_description+0x71/0x200 [ 1415.349477][ C0] print_report+0x4a/0x60 [ 1415.353826][ C0] kasan_report+0x122/0x150 [ 1415.358343][ C0] ? stack_map_get_build_id_offset+0x833/0x9b0 [ 1415.364501][ C0] __asan_report_store4_noabort+0x17/0x20 [ 1415.370225][ C0] stack_map_get_build_id_offset+0x833/0x9b0 [ 1415.376204][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 1415.381055][ C0] ? __bpf_get_stackid+0x960/0x960 [ 1415.386159][ C0] ? pcpu_freelist_pop+0xac/0xf0 [ 1415.391091][ C0] ? __cfi_pcpu_freelist_pop+0x10/0x10 [ 1415.396545][ C0] __bpf_get_stackid+0x5ac/0x960 [ 1415.401478][ C0] bpf_get_stackid_pe+0x2ee/0x400 [ 1415.406503][ C0] bpf_prog_43b50326510579ba+0x21/0x36 [ 1415.411960][ C0] bpf_overflow_handler+0x521/0x5e0 [ 1415.417153][ C0] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 1415.422867][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1415.428074][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 1415.433615][ C0] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 1415.439854][ C0] __perf_event_overflow+0x458/0x640 [ 1415.445142][ C0] perf_swevent_hrtimer+0x4b4/0x540 [ 1415.450342][ C0] ? __cfi_perf_swevent_hrtimer+0x10/0x10 [ 1415.456064][ C0] ? timerqueue_add+0x20e/0x230 [ 1415.460926][ C0] ? timerqueue_del+0xd3/0x120 [ 1415.465690][ C0] ? __cfi_perf_swevent_hrtimer+0x10/0x10 [ 1415.471407][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 1415.476662][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 1415.481775][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 1415.487863][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 1415.492804][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 1415.498787][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1415.504420][ C0] [ 1415.507348][ C0] [ 1415.510271][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1415.516244][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 1415.522658][ C0] Code: c0 db 0d 87 e8 dc 22 b5 fc 4c 89 f7 48 83 3d 31 09 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 96 c2 4a fc 65 8b 05 17 9b 00 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1415.542256][ C0] RSP: 0018:ffffc900074f7aa0 EFLAGS: 00000206 [ 1415.548319][ C0] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 1415.556284][ C0] RDX: ffffc9000ea33000 RSI: 0000000000000a02 RDI: 0000000000000001 [ 1415.564248][ C0] RBP: ffffc900074f7ab0 R08: ffffffff8792f92f R09: 1ffffffff0f25f25 [ 1415.572215][ C0] R10: dffffc0000000000 R11: fffffbfff0f25f26 R12: ffff88810d648904 [ 1415.580180][ C0] R13: 0000000000000000 R14: ffff8881f6e37f00 R15: 1ffff11021ac9006 [ 1415.588148][ C0] try_to_wake_up+0x5e4/0x1250 [ 1415.592917][ C0] wake_up_q+0xd8/0x1a0 [ 1415.597071][ C0] futex_wake+0x5e9/0x8e0 [ 1415.601430][ C0] ? __cfi_futex_wake+0x10/0x10 [ 1415.606274][ C0] ? timerqueue_add+0x20e/0x230 [ 1415.611121][ C0] ? enqueue_hrtimer+0xcd/0x250 [ 1415.615965][ C0] do_futex+0x2bf/0x430 [ 1415.620114][ C0] ? __cfi_do_futex+0x10/0x10 [ 1415.624791][ C0] __se_sys_futex+0x136/0x310 [ 1415.629460][ C0] ? __x64_sys_futex+0x100/0x100 [ 1415.634388][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1415.639671][ C0] __x64_sys_futex+0xe5/0x100 [ 1415.644340][ C0] x64_sys_call+0x7ec/0x9a0 [ 1415.648840][ C0] do_syscall_64+0x4c/0xa0 [ 1415.653255][ C0] ? clear_bhb_loop+0x30/0x80 [ 1415.657925][ C0] ? clear_bhb_loop+0x30/0x80 [ 1415.662597][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1415.668484][ C0] RIP: 0033:0x7f060279e159 [ 1415.672896][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.692501][ C0] RSP: 002b:00007f06035b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1415.700911][ C0] RAX: ffffffffffffffda RBX: 00007f0602a25fa8 RCX: 00007f060279e159 [ 1415.708875][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0602a25fac [ 1415.716844][ C0] RBP: 00007f0602a25fa0 R08: 000e7b0253b0a134 R09: 0000000000000000 [ 1415.724809][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.732775][ C0] R13: 00007f0602a26038 R14: 00007ffcff3ae240 R15: 00007ffcff3ae328 [ 1415.740744][ C0] [ 1415.743759][ C0] [ 1415.746165][ C0] Allocated by task 7038: [ 1415.750480][ C0] kasan_set_track+0x4b/0x70 [ 1415.755085][ C0] kasan_save_alloc_info+0x1f/0x30 [ 1415.760186][ C0] __kasan_kmalloc+0x95/0xb0 [ 1415.764772][ C0] __kmalloc_node+0xb2/0x1e0 [ 1415.769355][ C0] bpf_map_area_alloc+0x4b/0xe0 [ 1415.774200][ C0] prealloc_elems_and_freelist+0x8a/0x1e0 [ 1415.779919][ C0] stack_map_alloc+0x398/0x520 [ 1415.784683][ C0] map_create+0x467/0xcf0 [ 1415.789026][ C0] __sys_bpf+0x34e/0x850 [ 1415.793277][ C0] __x64_sys_bpf+0x7c/0x90 [ 1415.797701][ C0] x64_sys_call+0x488/0x9a0 [ 1415.802204][ C0] do_syscall_64+0x4c/0xa0 [ 1415.806623][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1415.812511][ C0] [ 1415.814833][ C0] Last potentially related work creation: [ 1415.820535][ C0] kasan_save_stack+0x3a/0x60 [ 1415.825209][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 1415.830571][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1415.836367][ C0] call_rcu+0xcf/0xf50 [ 1415.840499][ C0] addrconf_permanent_addr+0x302/0x940 [ 1415.845987][ C0] addrconf_notify+0x7ca/0xe30 [ 1415.850772][ C0] raw_notifier_call_chain+0xa1/0x110 [ 1415.856154][ C0] __dev_notify_flags+0x2f4/0x5b0 [ 1415.861183][ C0] dev_change_flags+0xe3/0x1a0 [ 1415.865948][ C0] do_setlink+0xc02/0x2a10 [ 1415.870358][ C0] rtnl_newlink+0x17d7/0x20d0 [ 1415.875040][ C0] rtnetlink_rcv_msg+0xb28/0xde0 [ 1415.879972][ C0] netlink_rcv_skb+0x200/0x450 [ 1415.884735][ C0] rtnetlink_rcv+0x1c/0x20 [ 1415.889141][ C0] netlink_unicast+0x8c1/0xa60 [ 1415.893901][ C0] netlink_sendmsg+0x8b9/0xbd0 [ 1415.898682][ C0] __sys_sendto+0x4ac/0x660 [ 1415.903185][ C0] __x64_sys_sendto+0xe5/0x100 [ 1415.907946][ C0] x64_sys_call+0x83/0x9a0 [ 1415.912356][ C0] do_syscall_64+0x4c/0xa0 [ 1415.916774][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1415.922661][ C0] [ 1415.924979][ C0] Second to last potentially related work creation: [ 1415.931551][ C0] kasan_save_stack+0x3a/0x60 [ 1415.936221][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 1415.941588][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1415.947384][ C0] call_rcu+0xcf/0xf50 [ 1415.951446][ C0] fib6_del+0xbda/0xef0 [ 1415.955650][ C0] fib6_clean_node+0x2af/0x550 [ 1415.960404][ C0] fib6_walk_continue+0x55d/0x760 [ 1415.965418][ C0] fib6_walk+0x153/0x290 [ 1415.969649][ C0] fib6_clean_all+0x1a1/0x270 [ 1415.974315][ C0] rt6_disable_ip+0x123/0x8e0 [ 1415.978985][ C0] addrconf_ifdown+0x15d/0x1950 [ 1415.983828][ C0] addrconf_notify+0x39f/0xe30 [ 1415.988609][ C0] raw_notifier_call_chain+0xa1/0x110 [ 1415.993973][ C0] dev_close_many+0x325/0x4d0 [ 1415.998666][ C0] unregister_netdevice_many+0x43f/0x1910 [ 1416.004379][ C0] default_device_exit_batch+0x951/0x9f0 [ 1416.010008][ C0] cleanup_net+0x630/0xb10 [ 1416.014416][ C0] process_one_work+0x717/0xc30 [ 1416.019262][ C0] worker_thread+0xa4d/0x11d0 [ 1416.023930][ C0] kthread+0x281/0x320 [ 1416.027994][ C0] ret_from_fork+0x1f/0x30 [ 1416.032403][ C0] [ 1416.034724][ C0] The buggy address belongs to the object at ffff888121e2cc00 [ 1416.034724][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1416.048772][ C0] The buggy address is located 272 bytes inside of [ 1416.048772][ C0] 512-byte region [ffff888121e2cc00, ffff888121e2ce00) [ 1416.062052][ C0] [ 1416.064372][ C0] The buggy address belongs to the physical page: [ 1416.070807][ C0] page:ffffea0004878b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121e2c [ 1416.081038][ C0] head:ffffea0004878b00 order:2 compound_mapcount:0 compound_pincount:0 [ 1416.089350][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 1416.095414][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 1416.103989][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1416.112562][ C0] page dumped because: kasan: bad access detected [ 1416.118971][ C0] page_owner tracks the page as allocated [ 1416.124677][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 288, tgid 288 (syz-executor), ts 21736712593, free_ts 0 [ 1416.144984][ C0] post_alloc_hook+0x1f5/0x210 [ 1416.149745][ C0] prep_new_page+0x1c/0x110 [ 1416.154246][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 1416.159791][ C0] __alloc_pages+0x1fa/0x610 [ 1416.164378][ C0] alloc_slab_page+0x6e/0xf0 [ 1416.168961][ C0] new_slab+0x98/0x3e0 [ 1416.173022][ C0] ___slab_alloc+0x70f/0xb70 [ 1416.177610][ C0] __slab_alloc+0x5e/0xa0 [ 1416.181938][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 1416.187392][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 1416.193124][ C0] __alloc_skb+0x226/0x4a0 [ 1416.197540][ C0] inet_netconf_notify_devconf+0x169/0x220 [ 1416.203401][ C0] __devinet_sysctl_register+0x2af/0x320 [ 1416.209030][ C0] devinet_sysctl_register+0x169/0x1e0 [ 1416.214483][ C0] inetdev_init+0x2ca/0x510 [ 1416.218985][ C0] inetdev_event+0x1f4/0x10a0 [ 1416.223656][ C0] page_owner free stack trace missing [ 1416.229010][ C0] [ 1416.231339][ C0] Memory state around the buggy address: [ 1416.236984][ C0] ffff888121e2cc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1416.245053][ C0] ffff888121e2cc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1416.253111][ C0] >ffff888121e2cd00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1416.261163][ C0] ^ [ 1416.265739][ C0] ffff888121e2cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1416.273795][ C0] ffff888121e2ce00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1416.281846][ C0] ================================================================== [ 1416.289894][ C0] Disabling lock debugging due to kernel taint [ 1416.325257][ T28] audit: type=1400 audit(1789718408.873:160): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1416.350229][ T28] audit: type=1400 audit(1789718408.873:161): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.371557][ T28] audit: type=1400 audit(1789718408.873:162): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.392770][ T28] audit: type=1400 audit(1789718408.873:163): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.414218][ T28] audit: type=1400 audit(1789718408.873:164): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1416.434753][ T28] audit: type=1400 audit(1789718408.873:165): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1416.457689][ T28] audit: type=1400 audit(1789718408.873:166): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1