last executing test programs: 19.133940952s ago: executing program 2 (id=12214): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x4000, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x302a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x80000000000, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) 19.060745654s ago: executing program 4 (id=12215): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd63, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1622}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 17.685574522s ago: executing program 4 (id=12216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17.588049195s ago: executing program 2 (id=12218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 17.540151716s ago: executing program 4 (id=12219): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000560000000400f7ffffff000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.414339151s ago: executing program 4 (id=12220): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x40000009, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.413995891s ago: executing program 2 (id=12221): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000040)=""/60, 0x7d, 0x3c, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.181198169s ago: executing program 4 (id=12222): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}}, 0x10) 13.987974829s ago: executing program 4 (id=12223): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000031789704f39ddb80ba5639", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8992, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) close(r7) 12.905704686s ago: executing program 2 (id=12225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="e23d2c659cd8c08772929599e496", 0x0, 0x10000, 0x0, 0x2d, 0x0, &(0x7f0000000380)="b7ee54520a9d2dbd728b6f42e2783214a5d92d0bc521e2185ab208fc5dcaffc4078a843b9362dad5054dff44fa", 0x0}, 0x50) 12.670261264s ago: executing program 2 (id=12229): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) 12.000473597s ago: executing program 2 (id=12231): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 11.734290026s ago: executing program 1 (id=12234): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 10.720014841s ago: executing program 1 (id=12240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 10.532797038s ago: executing program 1 (id=12242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x20, 0x50, 0x8, 0xfffff010}, {0x6, 0x2, 0x1, 0x7}]}) 10.532330688s ago: executing program 3 (id=12243): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x4046fa, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x8000004000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xe, &(0x7f0000000500)=@raw=[@ldst={0x2, 0x3, 0x0, 0x8, 0x6, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0x63278fac49239251, 0x9, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000280)='syzkaller\x00', 0x81, 0x81, &(0x7f0000000580)=""/129, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000880)=[{0x1, 0x2, 0x9, 0xb}, {0x3, 0x4, 0x6, 0x6}, {0x4, 0x3, 0x10, 0xa}, {0x5, 0x4, 0x3, 0x9}, {0x4, 0x1, 0x9, 0x1}, {0x2, 0x5, 0x9, 0x4}, {0x4, 0x5, 0x0, 0x5}, {0x5, 0x3, 0xf, 0xa}, {0x5, 0x5, 0x7, 0x9}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f00000000c0), 0x8, 0xc8, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3, 0x5}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x2}, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe03, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 10.076083043s ago: executing program 1 (id=12245): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x28) 9.717075415s ago: executing program 1 (id=12246): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000a79077f08acb80c03b9ffa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3f1b987d}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x10020) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r2}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 9.082272467s ago: executing program 3 (id=12247): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x1, 0x6, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000000000000711188000000000085100000020000008500000002000000950000000000006e9500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x70) 7.367460326s ago: executing program 3 (id=12248): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) 7.27203201s ago: executing program 1 (id=12249): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4.391761429s ago: executing program 3 (id=12251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0xecd511409f1d3850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffff, 0x7fffffffffffffff}, 0xc280, 0x0, 0xffffffff, 0x0, 0x0, 0xffff4b07}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, r0, 0xe, r1, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 3.298324736s ago: executing program 0 (id=12252): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.817964933s ago: executing program 0 (id=12253): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000c9850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4686, 0x0, @perf_bp={0x0}, 0x4000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x10008, 0x3, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r9, r6, 0x4, r6}, 0x10) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002042) 2.190282415s ago: executing program 0 (id=12254): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4008810) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.17034224s ago: executing program 0 (id=12255): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x541b, 0x0) 1.137487501s ago: executing program 3 (id=12256): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xbda200012760ce78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, 0x0, 0x200400c0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000640)={&(0x7f0000000180), 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000003c0)}], 0x3}, 0x101) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x44, 0x0, 0x0) 0s ago: executing program 3 (id=12259): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 1 (id=12265): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): rface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.625142][ T6060] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1843.638513][ T6053] device veth1_macvtap left promiscuous mode [ 1843.645185][ T6053] device macsec0 entered promiscuous mode [ 1843.689730][ T6062] netlink: 'syz.1.11946': attribute type 21 has an invalid length. [ 1843.705868][ T6065] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11948'. [ 1843.723983][ T6070] netlink: 'syz.0.11947': attribute type 4 has an invalid length. [ 1843.897126][ T6074] FAULT_INJECTION: forcing a failure. [ 1843.897126][ T6074] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.939168][ T6067] netlink: 'syz.0.11947': attribute type 21 has an invalid length. [ 1843.939742][ T6074] CPU: 0 PID: 6074 Comm: syz.1.11950 Not tainted syzkaller #0 [ 1843.939764][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1843.939775][ T6074] Call Trace: [ 1843.939783][ T6074] [ 1843.939791][ T6074] dump_stack_lvl+0x188/0x24e [ 1843.939824][ T6074] ? show_regs_print_info+0x12/0x12 [ 1843.939850][ T6074] ? load_image+0x400/0x400 [ 1843.939875][ T6074] ? __might_sleep+0xd0/0xd0 [ 1843.939894][ T6074] ? __lock_acquire+0x7d10/0x7d10 [ 1843.939923][ T6074] should_fail_ex+0x399/0x4d0 [ 1843.939947][ T6074] should_failslab+0x5/0x20 [ 1843.939964][ T6074] slab_pre_alloc_hook+0x59/0x310 [ 1843.939987][ T6074] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1843.940015][ T6074] __kmem_cache_alloc_node+0x4f/0x260 [ 1843.940040][ T6074] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1843.940064][ T6074] __kmalloc+0xa0/0x240 [ 1843.940099][ T6074] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1843.940134][ T6074] ? tomoyo_path_number_perm+0x205/0x650 [ 1843.940159][ T6074] tomoyo_path_number_perm+0x22f/0x650 [ 1843.940185][ T6074] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1843.940208][ T6074] ? ksys_write+0x1c0/0x250 [ 1843.940234][ T6074] ? common_file_perm+0x171/0x1c0 [ 1843.940283][ T6074] ? __fget_files+0x28/0x4b0 [ 1843.940306][ T6074] ? __fget_files+0x28/0x4b0 [ 1843.940341][ T6074] security_file_ioctl+0x6c/0xa0 [ 1843.940367][ T6074] __se_sys_ioctl+0x48/0x170 [ 1843.940394][ T6074] do_syscall_64+0x4c/0xa0 [ 1843.940417][ T6074] ? clear_bhb_loop+0x60/0xb0 [ 1843.940438][ T6074] ? clear_bhb_loop+0x60/0xb0 [ 1843.940462][ T6074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.940483][ T6074] RIP: 0033:0x7f88bd79c819 [ 1843.940500][ T6074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.940515][ T6074] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.940537][ T6074] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1843.940552][ T6074] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 1843.940565][ T6074] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.940578][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.940590][ T6074] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1843.940618][ T6074] [ 1843.940628][ T6074] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1844.239559][ T6067] netlink: 'syz.0.11947': attribute type 6 has an invalid length. [ 1844.252198][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11947'. [ 1844.396906][ T6088] netlink: 'syz.1.11953': attribute type 39 has an invalid length. [ 1844.490650][ T6090] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.11954'. [ 1844.737558][ T6095] netlink: 'syz.0.11955': attribute type 39 has an invalid length. [ 1844.972515][ T6104] FAULT_INJECTION: forcing a failure. [ 1844.972515][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.016148][ T6104] CPU: 0 PID: 6104 Comm: syz.3.11960 Not tainted syzkaller #0 [ 1845.023654][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1845.033721][ T6104] Call Trace: [ 1845.037013][ T6104] [ 1845.039958][ T6104] dump_stack_lvl+0x188/0x24e [ 1845.044660][ T6104] ? show_regs_print_info+0x12/0x12 [ 1845.049877][ T6104] ? load_image+0x400/0x400 [ 1845.054394][ T6104] ? __might_sleep+0xd0/0xd0 [ 1845.058998][ T6104] ? __lock_acquire+0x7d10/0x7d10 [ 1845.064047][ T6104] should_fail_ex+0x399/0x4d0 [ 1845.068742][ T6104] should_failslab+0x5/0x20 [ 1845.073257][ T6104] slab_pre_alloc_hook+0x59/0x310 [ 1845.078299][ T6104] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1845.084041][ T6104] __kmem_cache_alloc_node+0x4f/0x260 [ 1845.089433][ T6104] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1845.095172][ T6104] __kmalloc+0xa0/0x240 [ 1845.099355][ T6104] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1845.104937][ T6104] ? tomoyo_path_number_perm+0x205/0x650 [ 1845.110586][ T6104] tomoyo_path_number_perm+0x22f/0x650 [ 1845.116064][ T6104] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1845.121533][ T6104] ? ksys_write+0x1c0/0x250 [ 1845.126052][ T6104] ? common_file_perm+0x171/0x1c0 [ 1845.131121][ T6104] ? __fget_files+0x28/0x4b0 [ 1845.135728][ T6104] ? __fget_files+0x28/0x4b0 [ 1845.140329][ T6104] security_file_ioctl+0x6c/0xa0 [ 1845.145269][ T6104] __se_sys_ioctl+0x48/0x170 [ 1845.149857][ T6104] do_syscall_64+0x4c/0xa0 [ 1845.154271][ T6104] ? clear_bhb_loop+0x60/0xb0 [ 1845.158943][ T6104] ? clear_bhb_loop+0x60/0xb0 [ 1845.163619][ T6104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1845.169509][ T6104] RIP: 0033:0x7f5148f9c819 [ 1845.173918][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.193514][ T6104] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1845.201920][ T6104] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1845.209880][ T6104] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 1845.217844][ T6104] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.225806][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.233764][ T6104] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1845.241742][ T6104] [ 1845.271330][ T6104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1845.458250][ T6120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11967'. [ 1845.482406][ T6120] device ipvlan1 entered promiscuous mode [ 1845.522344][ T6120] bridge0: port 3(ipvlan1) entered blocking state [ 1845.544777][ T6120] bridge0: port 3(ipvlan1) entered disabled state [ 1845.554182][ T6130] FAULT_INJECTION: forcing a failure. [ 1845.554182][ T6130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1845.578573][ T6120] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1845.597374][ T6125] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11965'. [ 1845.602178][ T6130] CPU: 0 PID: 6130 Comm: syz.0.11969 Not tainted syzkaller #0 [ 1845.614262][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1845.624311][ T6130] Call Trace: [ 1845.627584][ T6130] [ 1845.630504][ T6130] dump_stack_lvl+0x188/0x24e [ 1845.635181][ T6130] ? show_regs_print_info+0x12/0x12 [ 1845.640376][ T6130] ? load_image+0x400/0x400 [ 1845.644873][ T6130] ? __lock_acquire+0x7d10/0x7d10 [ 1845.649896][ T6130] should_fail_ex+0x399/0x4d0 [ 1845.654570][ T6130] _copy_from_user+0x2c/0x170 [ 1845.659242][ T6130] ___sys_sendmsg+0x1c3/0x360 [ 1845.663919][ T6130] ? __sys_sendmsg+0x290/0x290 [ 1845.668688][ T6130] ? __lock_acquire+0x7d10/0x7d10 [ 1845.673719][ T6130] __se_sys_sendmsg+0x1bb/0x2a0 [ 1845.678581][ T6130] ? ct_nmi_exit+0x145/0x1c0 [ 1845.683175][ T6130] ? __x64_sys_sendmsg+0x80/0x80 [ 1845.688125][ T6130] ? lockdep_hardirqs_on+0x94/0x140 [ 1845.693334][ T6130] do_syscall_64+0x4c/0xa0 [ 1845.697752][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 1845.702426][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 1845.707097][ T6130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1845.712985][ T6130] RIP: 0033:0x7f92ba99c819 [ 1845.717399][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.737002][ T6130] RSP: 002b:00007f92bb7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1845.745410][ T6130] RAX: ffffffffffffffda RBX: 00007f92bac15fa0 RCX: 00007f92ba99c819 [ 1845.753375][ T6130] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 1845.761337][ T6130] RBP: 00007f92bb7de090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.769305][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.777265][ T6130] R13: 00007f92bac16038 R14: 00007f92bac15fa0 R15: 00007ffc29eef328 [ 1845.785240][ T6130] [ 1846.051052][ T6129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11966'. [ 1846.416372][ T6151] FAULT_INJECTION: forcing a failure. [ 1846.416372][ T6151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.450225][ T6151] CPU: 0 PID: 6151 Comm: syz.3.11977 Not tainted syzkaller #0 [ 1846.457720][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1846.467779][ T6151] Call Trace: [ 1846.471064][ T6151] [ 1846.474000][ T6151] dump_stack_lvl+0x188/0x24e [ 1846.478695][ T6151] ? show_regs_print_info+0x12/0x12 [ 1846.483906][ T6151] ? load_image+0x400/0x400 [ 1846.488419][ T6151] ? __lock_acquire+0x7d10/0x7d10 [ 1846.493457][ T6151] ? snprintf+0xe5/0x140 [ 1846.497709][ T6151] should_fail_ex+0x399/0x4d0 [ 1846.502401][ T6151] _copy_to_user+0x2c/0x130 [ 1846.506919][ T6151] simple_read_from_buffer+0xe3/0x150 [ 1846.512304][ T6151] proc_fail_nth_read+0x1a6/0x220 [ 1846.517344][ T6151] ? proc_fault_inject_write+0x310/0x310 [ 1846.522993][ T6151] ? fsnotify_perm+0x248/0x550 [ 1846.527771][ T6151] ? proc_fault_inject_write+0x310/0x310 [ 1846.533414][ T6151] vfs_read+0x2de/0xa00 [ 1846.537589][ T6151] ? kernel_read+0x1e0/0x1e0 [ 1846.542193][ T6151] ? __fget_files+0x28/0x4b0 [ 1846.546792][ T6151] ? __fget_files+0x28/0x4b0 [ 1846.551403][ T6151] ? __fget_files+0x43d/0x4b0 [ 1846.556099][ T6151] ? __fdget_pos+0x2ae/0x360 [ 1846.560699][ T6151] ? ksys_read+0x71/0x250 [ 1846.565043][ T6151] ksys_read+0x14c/0x250 [ 1846.569302][ T6151] ? vfs_write+0xa30/0xa30 [ 1846.573736][ T6151] ? lockdep_hardirqs_on+0x94/0x140 [ 1846.578946][ T6151] do_syscall_64+0x4c/0xa0 [ 1846.583373][ T6151] ? clear_bhb_loop+0x60/0xb0 [ 1846.588062][ T6151] ? clear_bhb_loop+0x60/0xb0 [ 1846.592748][ T6151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1846.598650][ T6151] RIP: 0033:0x7f5148f5d04e [ 1846.603072][ T6151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1846.622695][ T6151] RSP: 002b:00007f5149df0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1846.631118][ T6151] RAX: ffffffffffffffda RBX: 00007f5149df16c0 RCX: 00007f5148f5d04e [ 1846.639092][ T6151] RDX: 000000000000000f RSI: 00007f5149df10a0 RDI: 0000000000000005 [ 1846.647064][ T6151] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.655045][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.663023][ T6151] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1846.671013][ T6151] [ 1846.822009][ T6163] FAULT_INJECTION: forcing a failure. [ 1846.822009][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.861235][ T6163] CPU: 1 PID: 6163 Comm: syz.0.11983 Not tainted syzkaller #0 [ 1846.868737][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1846.878805][ T6163] Call Trace: [ 1846.882095][ T6163] [ 1846.885041][ T6163] dump_stack_lvl+0x188/0x24e [ 1846.889741][ T6163] ? show_regs_print_info+0x12/0x12 [ 1846.894962][ T6163] ? load_image+0x400/0x400 [ 1846.899488][ T6163] ? __might_sleep+0xd0/0xd0 [ 1846.904088][ T6163] ? __lock_acquire+0x7d10/0x7d10 [ 1846.909112][ T6163] ? mark_lock+0x94/0x320 [ 1846.913451][ T6163] should_fail_ex+0x399/0x4d0 [ 1846.918133][ T6163] should_failslab+0x5/0x20 [ 1846.922631][ T6163] slab_pre_alloc_hook+0x59/0x310 [ 1846.927668][ T6163] kmem_cache_alloc_node+0x5a/0x320 [ 1846.932860][ T6163] ? __alloc_skb+0xfc/0x7e0 [ 1846.937367][ T6163] __alloc_skb+0xfc/0x7e0 [ 1846.941700][ T6163] kcm_sendmsg+0x1eb4/0x2310 [ 1846.946351][ T6163] ? __might_sleep+0xd0/0xd0 [ 1846.950943][ T6163] ? aa_file_perm+0x112/0xf00 [ 1846.955616][ T6163] ? aa_sk_perm+0x81f/0x950 [ 1846.960123][ T6163] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1846.966536][ T6163] ? kcm_getsockopt+0x280/0x280 [ 1846.971385][ T6163] ? aa_file_perm+0x3ea/0xf00 [ 1846.976062][ T6163] ? aa_file_perm+0x112/0xf00 [ 1846.980732][ T6163] ? aa_sock_msg_perm+0x94/0x150 [ 1846.985671][ T6163] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1846.990951][ T6163] ? security_socket_sendmsg+0x7c/0xa0 [ 1846.996412][ T6163] sock_write_iter+0x2d9/0x3e0 [ 1847.001173][ T6163] ? sock_read_iter+0x3a0/0x3a0 [ 1847.006028][ T6163] ? common_file_perm+0x171/0x1c0 [ 1847.011059][ T6163] vfs_write+0x4b1/0xa30 [ 1847.015313][ T6163] ? file_end_write+0x250/0x250 [ 1847.020164][ T6163] ? __fget_files+0x43d/0x4b0 [ 1847.024840][ T6163] ? __fdget_pos+0x1d4/0x360 [ 1847.029424][ T6163] ? ksys_write+0x71/0x250 [ 1847.033841][ T6163] ksys_write+0x14c/0x250 [ 1847.038177][ T6163] ? __ia32_sys_read+0x80/0x80 [ 1847.042939][ T6163] ? lockdep_hardirqs_on+0x94/0x140 [ 1847.048133][ T6163] do_syscall_64+0x4c/0xa0 [ 1847.052545][ T6163] ? clear_bhb_loop+0x60/0xb0 [ 1847.057237][ T6163] ? clear_bhb_loop+0x60/0xb0 [ 1847.061922][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1847.067814][ T6163] RIP: 0033:0x7f92ba99c819 [ 1847.072225][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.091830][ T6163] RSP: 002b:00007f92bb7de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1847.100241][ T6163] RAX: ffffffffffffffda RBX: 00007f92bac15fa0 RCX: 00007f92ba99c819 [ 1847.108202][ T6163] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 1847.116169][ T6163] RBP: 00007f92bb7de090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.124141][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.132108][ T6163] R13: 00007f92bac16038 R14: 00007f92bac15fa0 R15: 00007ffc29eef328 [ 1847.140096][ T6163] [ 1847.271503][ T6168] validate_nla: 5 callbacks suppressed [ 1847.271541][ T6168] netlink: 'syz.4.11985': attribute type 3 has an invalid length. [ 1847.311671][ T6168] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11985'. [ 1847.509075][ T6181] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.11988'. [ 1847.804372][ T6194] netlink: 'syz.1.11993': attribute type 10 has an invalid length. [ 1847.829679][ T6197] FAULT_INJECTION: forcing a failure. [ 1847.829679][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.844653][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1847.864687][ T6194] device ipvlan1 entered promiscuous mode [ 1847.870784][ T6197] CPU: 1 PID: 6197 Comm: syz.4.11994 Not tainted syzkaller #0 [ 1847.878257][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1847.888324][ T6197] Call Trace: [ 1847.891611][ T6197] [ 1847.894553][ T6197] dump_stack_lvl+0x188/0x24e [ 1847.899257][ T6197] ? show_regs_print_info+0x12/0x12 [ 1847.904476][ T6197] ? load_image+0x400/0x400 [ 1847.909002][ T6197] ? __might_sleep+0xd0/0xd0 [ 1847.913620][ T6197] ? __lock_acquire+0x7d10/0x7d10 [ 1847.918656][ T6197] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1847.924756][ T6197] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1847.930843][ T6197] should_fail_ex+0x399/0x4d0 [ 1847.935535][ T6197] should_failslab+0x5/0x20 [ 1847.940037][ T6197] slab_pre_alloc_hook+0x59/0x310 [ 1847.945056][ T6197] ? __get_vm_area_node+0x122/0x330 [ 1847.949266][ T6194] bridge0: port 3(ipvlan1) entered blocking state [ 1847.950257][ T6197] __kmem_cache_alloc_node+0x4f/0x260 [ 1847.950287][ T6197] ? __get_vm_area_node+0x122/0x330 [ 1847.950310][ T6197] kmalloc_node_trace+0x22/0xe0 [ 1847.958763][ T6194] bridge0: port 3(ipvlan1) entered disabled state [ 1847.962066][ T6197] __get_vm_area_node+0x122/0x330 [ 1847.962098][ T6197] __vmalloc_node_range+0x357/0x13b0 [ 1847.962120][ T6197] ? netlink_sendmsg+0x5ec/0xbd0 [ 1847.962168][ T6197] ? free_vm_area+0x50/0x50 [ 1847.962195][ T6197] ? aa_file_perm+0x112/0xf00 [ 1847.962215][ T6197] ? netlink_sendmsg+0x5ec/0xbd0 [ 1847.962238][ T6197] vmalloc+0x75/0x80 [ 1847.962260][ T6197] ? netlink_sendmsg+0x5ec/0xbd0 [ 1847.962284][ T6197] netlink_sendmsg+0x5ec/0xbd0 [ 1847.962316][ T6197] ? netlink_getsockopt+0x550/0x550 [ 1847.962340][ T6197] ? aa_file_perm+0x3ea/0xf00 [ 1847.962360][ T6197] ? aa_file_perm+0x112/0xf00 [ 1847.962377][ T6197] ? aa_sock_msg_perm+0x94/0x150 [ 1847.962397][ T6197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1847.962416][ T6197] ? security_socket_sendmsg+0x7c/0xa0 [ 1847.962444][ T6197] sock_write_iter+0x2d9/0x3e0 [ 1848.056422][ T6197] ? sock_read_iter+0x3a0/0x3a0 [ 1848.061290][ T6197] ? common_file_perm+0x171/0x1c0 [ 1848.066321][ T6197] vfs_write+0x4b1/0xa30 [ 1848.070565][ T6197] ? file_end_write+0x250/0x250 [ 1848.075415][ T6197] ? __fget_files+0x43d/0x4b0 [ 1848.080093][ T6197] ? __fdget_pos+0x1d4/0x360 [ 1848.084721][ T6197] ? ksys_write+0x71/0x250 [ 1848.089155][ T6197] ksys_write+0x14c/0x250 [ 1848.093494][ T6197] ? __ia32_sys_read+0x80/0x80 [ 1848.098258][ T6197] ? lockdep_hardirqs_on+0x94/0x140 [ 1848.103451][ T6197] do_syscall_64+0x4c/0xa0 [ 1848.107871][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 1848.112554][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 1848.117224][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1848.123113][ T6197] RIP: 0033:0x7fee53f9c819 [ 1848.127520][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.147211][ T6197] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1848.155619][ T6197] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1848.163586][ T6197] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 1848.171548][ T6197] RBP: 00007fee54e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1848.179509][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1848.187472][ T6197] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1848.195444][ T6197] [ 1848.202365][ T6197] warn_alloc: 1 callbacks suppressed [ 1848.202380][ T6197] syz.4.11994: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1848.214142][ T6194] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1848.227132][ T6197] ,cpuset= [ 1848.286071][ T6202] netlink: 'syz.3.11992': attribute type 4 has an invalid length. [ 1848.299421][ T6197] syz4,mems_allowed=0-1 [ 1848.312549][ T6197] CPU: 1 PID: 6197 Comm: syz.4.11994 Not tainted syzkaller #0 [ 1848.320037][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1848.330115][ T6197] Call Trace: [ 1848.333401][ T6197] [ 1848.336339][ T6197] dump_stack_lvl+0x188/0x24e [ 1848.341034][ T6197] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1848.347462][ T6197] ? show_regs_print_info+0x12/0x12 [ 1848.352667][ T6197] ? load_image+0x400/0x400 [ 1848.357176][ T6197] ? __rcu_read_unlock+0x78/0xd0 [ 1848.362110][ T6197] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1848.368518][ T6197] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1848.375019][ T6197] warn_alloc+0x242/0x330 [ 1848.379349][ T6197] ? __get_vm_area_node+0x122/0x330 [ 1848.384546][ T6197] ? zone_watermark_ok_safe+0x270/0x270 [ 1848.390094][ T6197] ? rcu_is_watching+0x11/0xa0 [ 1848.394865][ T6197] ? __get_vm_area_node+0x318/0x330 [ 1848.400070][ T6197] __vmalloc_node_range+0x37c/0x13b0 [ 1848.405371][ T6197] ? free_vm_area+0x50/0x50 [ 1848.409879][ T6197] ? aa_file_perm+0x112/0xf00 [ 1848.414553][ T6197] ? netlink_sendmsg+0x5ec/0xbd0 [ 1848.419490][ T6197] vmalloc+0x75/0x80 [ 1848.423381][ T6197] ? netlink_sendmsg+0x5ec/0xbd0 [ 1848.428314][ T6197] netlink_sendmsg+0x5ec/0xbd0 [ 1848.433083][ T6197] ? netlink_getsockopt+0x550/0x550 [ 1848.438279][ T6197] ? aa_file_perm+0x3ea/0xf00 [ 1848.442947][ T6197] ? aa_file_perm+0x112/0xf00 [ 1848.447614][ T6197] ? aa_sock_msg_perm+0x94/0x150 [ 1848.452547][ T6197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1848.457826][ T6197] ? security_socket_sendmsg+0x7c/0xa0 [ 1848.463295][ T6197] sock_write_iter+0x2d9/0x3e0 [ 1848.468053][ T6197] ? sock_read_iter+0x3a0/0x3a0 [ 1848.472901][ T6197] ? common_file_perm+0x171/0x1c0 [ 1848.477922][ T6197] vfs_write+0x4b1/0xa30 [ 1848.482170][ T6197] ? file_end_write+0x250/0x250 [ 1848.487030][ T6197] ? __fget_files+0x43d/0x4b0 [ 1848.491712][ T6197] ? __fdget_pos+0x1d4/0x360 [ 1848.496296][ T6197] ? ksys_write+0x71/0x250 [ 1848.500712][ T6197] ksys_write+0x14c/0x250 [ 1848.505039][ T6197] ? __ia32_sys_read+0x80/0x80 [ 1848.509799][ T6197] ? lockdep_hardirqs_on+0x94/0x140 [ 1848.514995][ T6197] do_syscall_64+0x4c/0xa0 [ 1848.519404][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 1848.524075][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 1848.528749][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1848.534633][ T6197] RIP: 0033:0x7fee53f9c819 [ 1848.539038][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.558646][ T6197] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1848.567063][ T6197] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1848.575039][ T6197] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 1848.583011][ T6197] RBP: 00007fee54e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1848.590975][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1848.598939][ T6197] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1848.606922][ T6197] [ 1848.672640][ T6197] Mem-Info: [ 1848.675788][ T6197] active_anon:9825 inactive_anon:0 isolated_anon:0 [ 1848.675788][ T6197] active_file:21663 inactive_file:40672 isolated_file:0 [ 1848.675788][ T6197] unevictable:768 dirty:545 writeback:0 [ 1848.675788][ T6197] slab_reclaimable:21813 slab_unreclaimable:96981 [ 1848.675788][ T6197] mapped:26997 shmem:1362 pagetables:530 [ 1848.675788][ T6197] sec_pagetables:0 bounce:0 [ 1848.675788][ T6197] kernel_misc_reclaimable:0 [ 1848.675788][ T6197] free:1307958 free_pcp:9954 free_cma:0 [ 1848.701978][ T6203] netlink: 'syz.3.11992': attribute type 21 has an invalid length. [ 1848.948549][ T6203] netlink: 'syz.3.11992': attribute type 6 has an invalid length. [ 1848.996504][ T6203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11992'. [ 1849.021283][ T6197] Node 0 active_anon:39600kB inactive_anon:0kB active_file:86652kB inactive_file:162480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119488kB dirty:1476kB writeback:0kB shmem:3912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10160kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 1849.081175][ T6197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1849.149420][ T6197] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.190082][ T6197] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1849.196159][ T6197] Node 0 DMA32 free:1298308kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:39900kB inactive_anon:0kB active_file:86652kB inactive_file:162480kB unevictable:1536kB writepending:1476kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:26156kB local_pcp:9784kB free_cma:0kB [ 1849.196367][T20407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1849.234387][ T6197] lowmem_reserve[]: 0 0 1 1 1 [ 1849.241873][ T6197] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1849.269422][T20407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1849.281393][T20407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1849.289203][T20407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1849.299316][T20407] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1849.306627][T20407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1849.347711][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 1849.361722][ T6197] Node 1 Normal free:3901020kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19204kB local_pcp:9664kB free_cma:0kB [ 1849.425406][ T6216] netlink: 'syz.1.11999': attribute type 2 has an invalid length. [ 1849.431385][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 1849.438092][ T6197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1849.440859][ T6216] netlink: 'syz.1.11999': attribute type 9 has an invalid length. [ 1849.465100][ T6197] Node 0 DMA32: 1147*4kB (UME) 1821*8kB (UME) 1583*16kB (ME) 887*32kB (ME) 1093*64kB (UME) 841*128kB (UME) 391*256kB (UM) 175*512kB (UME) 82*1024kB (UME) 24*2048kB (UME) 177*4096kB (UM) = 1298276kB [ 1849.509896][ T6218] netlink: 'syz.2.12000': attribute type 3 has an invalid length. [ 1849.516017][ T6216] netlink: 'syz.1.11999': attribute type 10 has an invalid length. [ 1849.526543][ T6216] netlink: 'syz.1.11999': attribute type 11 has an invalid length. [ 1849.534668][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11999'. [ 1849.545122][ T6197] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1849.558716][ T6218] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12000'. [ 1849.577705][ T6197] Node 1 Normal: 215*4kB (UME) 52*8kB (UM) 36*16kB (UE) 33*32kB (UME) 20*64kB (UME) 14*128kB (UME) 3*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3901020kB [ 1849.581684][ T6220] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1849.597872][ T6197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1849.619334][ T6197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1849.629358][ T6197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1849.640117][ T6197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1849.662061][ T6197] 63698 total pagecache pages [ 1849.666871][ T6197] 0 pages in swap cache [ 1849.671554][ T6197] Free swap = 124996kB [ 1849.675820][ T6197] Total swap = 124996kB [ 1849.680098][ T6197] 2097051 pages RAM [ 1849.684348][ T6197] 0 pages HighMem/MovableOnly [ 1849.689108][ T6197] 415207 pages reserved [ 1849.693440][ T6197] 0 pages cma reserved [ 1849.696778][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.745056][ T6216] device macvlan1 entered promiscuous mode [ 1849.784291][T20407] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 1849.844053][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.986721][ T6236] FAULT_INJECTION: forcing a failure. [ 1849.986721][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.003854][ T6236] CPU: 0 PID: 6236 Comm: syz.2.12006 Not tainted syzkaller #0 [ 1850.011343][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1850.021396][ T6236] Call Trace: [ 1850.024672][ T6236] [ 1850.027594][ T6236] dump_stack_lvl+0x188/0x24e [ 1850.032274][ T6236] ? show_regs_print_info+0x12/0x12 [ 1850.037472][ T6236] ? load_image+0x400/0x400 [ 1850.041973][ T6236] ? __lock_acquire+0x7d10/0x7d10 [ 1850.047000][ T6236] should_fail_ex+0x399/0x4d0 [ 1850.051687][ T6236] _copy_from_user+0x2c/0x170 [ 1850.056384][ T6236] ___sys_sendmsg+0x1c3/0x360 [ 1850.061072][ T6236] ? __sys_sendmsg+0x290/0x290 [ 1850.065865][ T6236] ? __lock_acquire+0x7d10/0x7d10 [ 1850.070918][ T6236] __se_sys_sendmsg+0x1bb/0x2a0 [ 1850.075774][ T6236] ? __x64_sys_sendmsg+0x80/0x80 [ 1850.080721][ T6236] ? lockdep_hardirqs_on+0x94/0x140 [ 1850.085914][ T6236] do_syscall_64+0x4c/0xa0 [ 1850.090325][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 1850.094996][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 1850.099670][ T6236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1850.105563][ T6236] RIP: 0033:0x7f3d2959c819 [ 1850.109971][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.129572][ T6236] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1850.137987][ T6236] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1850.145950][ T6236] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1850.153911][ T6236] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.161872][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.169836][ T6236] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1850.177809][ T6236] [ 1850.184404][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.232795][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 1850.354894][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.496659][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.503903][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.512079][ T6213] device bridge_slave_0 entered promiscuous mode [ 1850.520382][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.527823][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.535857][ T6213] device bridge_slave_1 entered promiscuous mode [ 1850.698260][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.738191][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.825852][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12009'. [ 1850.855290][ T6249] device ipvlan1 entered promiscuous mode [ 1850.993746][ T6249] bridge0: port 3(ipvlan1) entered blocking state [ 1851.024218][ T6249] bridge0: port 3(ipvlan1) entered disabled state [ 1851.102380][ T6249] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1851.127004][ T6213] team0: Port device team_slave_0 added [ 1851.232438][ T6213] team0: Port device team_slave_1 added [ 1851.351269][T20407] Bluetooth: hci3: command 0x0409 tx timeout [ 1851.392115][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.399763][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.427494][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.441444][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.448520][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.525973][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.555256][ T6262] device bridge_slave_1 left promiscuous mode [ 1851.561794][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.587798][ T6262] device bridge_slave_0 left promiscuous mode [ 1851.651864][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.847730][ T6213] device hsr_slave_0 entered promiscuous mode [ 1851.854775][ T6213] device hsr_slave_1 entered promiscuous mode [ 1851.874515][ T6268] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12014'. [ 1851.921039][ T6213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1851.935251][ T6213] Cannot create hsr debugfs directory [ 1852.279337][ T6281] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12016'. [ 1852.416208][ T6289] FAULT_INJECTION: forcing a failure. [ 1852.416208][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.480426][ T6289] CPU: 1 PID: 6289 Comm: syz.3.12020 Not tainted syzkaller #0 [ 1852.487929][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1852.497996][ T6289] Call Trace: [ 1852.501289][ T6289] [ 1852.504235][ T6289] dump_stack_lvl+0x188/0x24e [ 1852.508943][ T6289] ? show_regs_print_info+0x12/0x12 [ 1852.514166][ T6289] ? load_image+0x400/0x400 [ 1852.518688][ T6289] ? __lock_acquire+0x7d10/0x7d10 [ 1852.523738][ T6289] should_fail_ex+0x399/0x4d0 [ 1852.528439][ T6289] _copy_from_user+0x2c/0x170 [ 1852.533139][ T6289] ___sys_sendmsg+0x1c3/0x360 [ 1852.537840][ T6289] ? __sys_sendmsg+0x290/0x290 [ 1852.542644][ T6289] ? __lock_acquire+0x7d10/0x7d10 [ 1852.547709][ T6289] __se_sys_sendmsg+0x1bb/0x2a0 [ 1852.552587][ T6289] ? __x64_sys_sendmsg+0x80/0x80 [ 1852.557557][ T6289] ? lockdep_hardirqs_on+0x94/0x140 [ 1852.560878][ T6291] bridge0: port 1(hsr0) entered disabled state [ 1852.562756][ T6289] do_syscall_64+0x4c/0xa0 [ 1852.562784][ T6289] ? clear_bhb_loop+0x60/0xb0 [ 1852.562806][ T6289] ? clear_bhb_loop+0x60/0xb0 [ 1852.582700][ T6289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1852.588611][ T6289] RIP: 0033:0x7f5148f9c819 [ 1852.593039][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.612655][ T6289] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1852.621084][ T6289] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1852.629069][ T6289] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1852.637055][ T6289] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.645038][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.653020][ T6289] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1852.661020][ T6289] [ 1852.669701][ T6291] device bridge_slave_1 left promiscuous mode [ 1852.696387][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.768274][ T6291] bond0: (slave bridge0): Releasing backup interface [ 1852.778211][ T6291] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1852.863207][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.869553][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.150134][ T6309] validate_nla: 5 callbacks suppressed [ 1853.150169][ T6309] netlink: 'syz.3.12027': attribute type 6 has an invalid length. [ 1853.170076][ T6309] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.12027'. [ 1853.421428][T20407] Bluetooth: hci3: command 0x041b tx timeout [ 1853.641850][ T6302] netlink: 'syz.4.12025': attribute type 10 has an invalid length. [ 1853.649983][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1853.734091][ T6302] device ipvlan1 entered promiscuous mode [ 1853.860982][ T6302] bridge0: port 1(ipvlan1) entered blocking state [ 1853.870931][ T6302] bridge0: port 1(ipvlan1) entered disabled state [ 1853.910251][ T6302] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1854.081477][ T6319] netlink: 'syz.2.12028': attribute type 10 has an invalid length. [ 1854.112334][ T6319] bridge0: port 1(hsr0) entered disabled state [ 1854.118707][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.274897][ T6328] FAULT_INJECTION: forcing a failure. [ 1854.274897][ T6328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.288525][ T6328] CPU: 0 PID: 6328 Comm: syz.2.12031 Not tainted syzkaller #0 [ 1854.296002][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1854.306067][ T6328] Call Trace: [ 1854.309339][ T6328] [ 1854.312261][ T6328] dump_stack_lvl+0x188/0x24e [ 1854.316939][ T6328] ? show_regs_print_info+0x12/0x12 [ 1854.322131][ T6328] ? load_image+0x400/0x400 [ 1854.326629][ T6328] ? __lock_acquire+0x7d10/0x7d10 [ 1854.331653][ T6328] should_fail_ex+0x399/0x4d0 [ 1854.336324][ T6328] _copy_from_user+0x2c/0x170 [ 1854.340997][ T6328] ___sys_sendmsg+0x1c3/0x360 [ 1854.345680][ T6328] ? __sys_sendmsg+0x290/0x290 [ 1854.350451][ T6328] ? __lock_acquire+0x7d10/0x7d10 [ 1854.355486][ T6328] __se_sys_sendmsg+0x1bb/0x2a0 [ 1854.360335][ T6328] ? __x64_sys_sendmsg+0x80/0x80 [ 1854.365276][ T6328] ? lockdep_hardirqs_on+0x94/0x140 [ 1854.370471][ T6328] do_syscall_64+0x4c/0xa0 [ 1854.374884][ T6328] ? clear_bhb_loop+0x60/0xb0 [ 1854.379551][ T6328] ? clear_bhb_loop+0x60/0xb0 [ 1854.384222][ T6328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1854.390110][ T6328] RIP: 0033:0x7f3d2959c819 [ 1854.394515][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.414112][ T6328] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1854.422513][ T6328] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1854.430470][ T6328] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1854.438440][ T6328] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.446408][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.454374][ T6328] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1854.462346][ T6328] [ 1854.516234][ T6322] netlink: 'syz.4.12029': attribute type 10 has an invalid length. [ 1854.526997][ T6322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12029'. [ 1854.537153][ T6322] bridge0: port 1(ipvlan1) entered blocking state [ 1854.544427][ T6322] bridge0: port 1(ipvlan1) entered disabled state [ 1854.557439][ T6322] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1854.573389][ T6331] netlink: 'syz.1.12034': attribute type 10 has an invalid length. [ 1854.591590][ T6331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1854.622500][ T6331] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1854.673516][ T37] device vlan0 left promiscuous mode [ 1854.698676][ T37] @: port 1(vlan0) entered disabled state [ 1854.738502][ T37] device hsr_slave_0 left promiscuous mode [ 1854.768811][ T37] device hsr_slave_1 left promiscuous mode [ 1854.806684][ T37] bridge0: port 1(hsr0) entered disabled state [ 1854.822379][ T37] device bridge_slave_1 left promiscuous mode [ 1854.838792][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.899813][ T37] device veth0_macvtap left promiscuous mode [ 1854.908668][ T37] device veth1_vlan left promiscuous mode [ 1854.914712][ T37] device veth0_vlan left promiscuous mode [ 1855.511388][T20407] Bluetooth: hci3: command 0x040f tx timeout [ 1855.539495][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1855.576394][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1855.987831][ T6213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1856.018836][ T6213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1856.041045][ T6361] netlink: 'syz.4.12041': attribute type 10 has an invalid length. [ 1856.068894][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12041'. [ 1856.086216][ T6361] bridge0: port 1(ipvlan1) entered blocking state [ 1856.101813][ T6361] bridge0: port 1(ipvlan1) entered disabled state [ 1856.120704][ T6361] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1856.137944][ T6366] device lo entered promiscuous mode [ 1856.145874][ T6213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1856.159129][ T6213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1856.606319][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.643974][ T6383] FAULT_INJECTION: forcing a failure. [ 1856.643974][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.646538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1856.680802][ T6383] CPU: 0 PID: 6383 Comm: syz.4.12048 Not tainted syzkaller #0 [ 1856.688296][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1856.698357][ T6383] Call Trace: [ 1856.701644][ T6383] [ 1856.704591][ T6383] dump_stack_lvl+0x188/0x24e [ 1856.709286][ T6383] ? show_regs_print_info+0x12/0x12 [ 1856.714496][ T6383] ? load_image+0x400/0x400 [ 1856.719103][ T6383] ? __lock_acquire+0x7d10/0x7d10 [ 1856.724148][ T6383] should_fail_ex+0x399/0x4d0 [ 1856.728837][ T6383] _copy_from_user+0x2c/0x170 [ 1856.733536][ T6383] ___sys_sendmsg+0x1c3/0x360 [ 1856.738248][ T6383] ? __sys_sendmsg+0x290/0x290 [ 1856.743059][ T6383] ? __lock_acquire+0x7d10/0x7d10 [ 1856.748124][ T6383] __se_sys_sendmsg+0x1bb/0x2a0 [ 1856.752991][ T6383] ? __x64_sys_sendmsg+0x80/0x80 [ 1856.757956][ T6383] ? lockdep_hardirqs_on+0x94/0x140 [ 1856.763166][ T6383] do_syscall_64+0x4c/0xa0 [ 1856.767593][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 1856.772275][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 1856.776960][ T6383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.782863][ T6383] RIP: 0033:0x7fee53f9c819 [ 1856.787283][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.806895][ T6383] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1856.815315][ T6383] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1856.823288][ T6383] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 1856.831264][ T6383] RBP: 00007fee54e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.839239][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.847210][ T6383] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1856.855200][ T6383] [ 1856.887178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1856.921942][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.014085][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.027823][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.062906][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.070081][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.585087][T20407] Bluetooth: hci3: command 0x0419 tx timeout [ 1858.833315][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1858.843081][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1858.851868][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1858.860125][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.867220][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.875819][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1858.887944][ T6405] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12051'. [ 1858.942475][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1859.025074][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1859.035882][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1859.074658][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1859.096134][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1859.115260][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1859.140690][ T6213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1859.191180][ T6213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1859.210891][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1859.239795][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1859.264489][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1859.285643][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1859.310472][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1859.340660][ T6434] netlink: 'syz.4.12056': attribute type 10 has an invalid length. [ 1859.359956][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.512852][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12068'. [ 1859.551237][ T6451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12068'. [ 1859.729056][ T6460] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.12060'. [ 1859.780269][ T6460] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1859.976338][ T6468] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12061'. [ 1860.018063][ T6472] netlink: 'syz.1.12062': attribute type 10 has an invalid length. [ 1860.053787][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12062'. [ 1860.077160][ T6472] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1860.118120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1860.172119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1860.205454][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.245632][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1860.264804][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1860.340084][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1860.355902][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1860.372752][ T6486] FAULT_INJECTION: forcing a failure. [ 1860.372752][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.376444][ T6213] device veth0_vlan entered promiscuous mode [ 1860.393746][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1860.395880][ T6486] CPU: 0 PID: 6486 Comm: syz.2.12067 Not tainted syzkaller #0 [ 1860.408393][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1860.412061][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1860.418444][ T6486] Call Trace: [ 1860.418453][ T6486] [ 1860.431831][ T6486] dump_stack_lvl+0x188/0x24e [ 1860.435944][ T6213] device veth1_vlan entered promiscuous mode [ 1860.436515][ T6486] ? show_regs_print_info+0x12/0x12 [ 1860.447664][ T6486] ? load_image+0x400/0x400 [ 1860.452164][ T6486] ? __lock_acquire+0x7d10/0x7d10 [ 1860.457186][ T6486] should_fail_ex+0x399/0x4d0 [ 1860.461857][ T6486] _copy_from_user+0x2c/0x170 [ 1860.466527][ T6486] __sys_bpf+0x2ea/0x780 [ 1860.470773][ T6486] ? bpf_link_show_fdinfo+0x380/0x380 [ 1860.476147][ T6486] ? lock_chain_count+0x20/0x20 [ 1860.481000][ T6486] __x64_sys_bpf+0x78/0x90 [ 1860.485411][ T6486] do_syscall_64+0x4c/0xa0 [ 1860.489830][ T6486] ? clear_bhb_loop+0x60/0xb0 [ 1860.494503][ T6486] ? clear_bhb_loop+0x60/0xb0 [ 1860.499174][ T6486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1860.505058][ T6486] RIP: 0033:0x7f3d2959c819 [ 1860.509462][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.529061][ T6486] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1860.537474][ T6486] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1860.545446][ T6486] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1860.553409][ T6486] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.561373][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.569340][ T6486] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1860.577314][ T6486] [ 1860.614785][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1860.623699][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1860.651956][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1860.678343][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1860.690009][ T6213] device veth0_macvtap entered promiscuous mode [ 1860.703819][ T6213] device veth1_macvtap entered promiscuous mode [ 1860.720953][ T6213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1860.734650][ T6213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.746534][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1860.755829][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1860.792714][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1860.822844][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1860.831384][ T6493] netlink: 'syz.2.12070': attribute type 3 has an invalid length. [ 1860.840523][ T6493] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12070'. [ 1860.852039][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1860.861774][ T6495] netlink: 'syz.1.12071': attribute type 4 has an invalid length. [ 1860.869864][ T6495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12071'. [ 1860.881884][ T6496] netlink: 'syz.2.12070': attribute type 3 has an invalid length. [ 1860.891641][ T6496] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12070'. [ 1860.918576][ T6495] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1860.938767][ T6213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.949960][ T6213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.962635][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1860.970057][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1860.981679][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1861.007863][ T6500] netlink: 'syz.3.12072': attribute type 10 has an invalid length. [ 1861.035177][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1861.047470][ T6500] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1861.066597][ T6499] netlink: 'syz.4.12073': attribute type 10 has an invalid length. [ 1861.093628][ T6213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.109869][ T6213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.146523][ T6213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.175103][ T6213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.340887][ T5077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.354128][ T6511] netlink: 'syz.4.12076': attribute type 33 has an invalid length. [ 1861.370948][ T5077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1861.419632][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1861.540645][ T6508] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1861.591006][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.615255][ T6514] FAULT_INJECTION: forcing a failure. [ 1861.615255][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.625201][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1861.636602][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1861.681326][ T6514] CPU: 1 PID: 6514 Comm: syz.2.12077 Not tainted syzkaller #0 [ 1861.688820][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1861.698888][ T6514] Call Trace: [ 1861.702175][ T6514] [ 1861.705119][ T6514] dump_stack_lvl+0x188/0x24e [ 1861.709829][ T6514] ? show_regs_print_info+0x12/0x12 [ 1861.715049][ T6514] ? load_image+0x400/0x400 [ 1861.719573][ T6514] ? __might_sleep+0xd0/0xd0 [ 1861.724190][ T6514] ? __lock_acquire+0x7d10/0x7d10 [ 1861.729236][ T6514] should_fail_ex+0x399/0x4d0 [ 1861.733934][ T6514] should_failslab+0x5/0x20 [ 1861.736375][ T6520] FAULT_INJECTION: forcing a failure. [ 1861.736375][ T6520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.738429][ T6514] slab_pre_alloc_hook+0x59/0x310 [ 1861.738457][ T6514] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1861.762200][ T6514] __kmem_cache_alloc_node+0x4f/0x260 [ 1861.767593][ T6514] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1861.773326][ T6514] __kmalloc+0xa0/0x240 [ 1861.777495][ T6514] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1861.783054][ T6514] ? tomoyo_path_number_perm+0x205/0x650 [ 1861.788688][ T6514] tomoyo_path_number_perm+0x22f/0x650 [ 1861.794165][ T6514] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1861.799650][ T6514] ? ksys_write+0x1c0/0x250 [ 1861.804172][ T6514] ? common_file_perm+0x171/0x1c0 [ 1861.809236][ T6514] ? __fget_files+0x28/0x4b0 [ 1861.813837][ T6514] ? __fget_files+0x28/0x4b0 [ 1861.818449][ T6514] security_file_ioctl+0x6c/0xa0 [ 1861.823387][ T6514] __se_sys_ioctl+0x48/0x170 [ 1861.827977][ T6514] do_syscall_64+0x4c/0xa0 [ 1861.832399][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 1861.837072][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 1861.841743][ T6514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.847627][ T6514] RIP: 0033:0x7f3d2959c819 [ 1861.852033][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.871629][ T6514] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.880037][ T6514] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1861.888000][ T6514] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 1861.895959][ T6514] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.903935][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.911906][ T6514] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1861.919886][ T6514] [ 1861.934486][ T6520] CPU: 1 PID: 6520 Comm: syz.3.12080 Not tainted syzkaller #0 [ 1861.941985][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1861.952039][ T6520] Call Trace: [ 1861.955322][ T6520] [ 1861.958241][ T6520] dump_stack_lvl+0x188/0x24e [ 1861.962930][ T6520] ? show_regs_print_info+0x12/0x12 [ 1861.968123][ T6520] ? load_image+0x400/0x400 [ 1861.972631][ T6520] ? __lock_acquire+0x7d10/0x7d10 [ 1861.977662][ T6520] should_fail_ex+0x399/0x4d0 [ 1861.982338][ T6520] _copy_from_user+0x2c/0x170 [ 1861.987014][ T6520] ___sys_sendmsg+0x1c3/0x360 [ 1861.991694][ T6520] ? __sys_sendmsg+0x290/0x290 [ 1861.996488][ T6520] ? __lock_acquire+0x7d10/0x7d10 [ 1862.001551][ T6520] __se_sys_sendmsg+0x1bb/0x2a0 [ 1862.006409][ T6520] ? __x64_sys_sendmsg+0x80/0x80 [ 1862.011360][ T6520] ? lockdep_hardirqs_on+0x94/0x140 [ 1862.016555][ T6520] do_syscall_64+0x4c/0xa0 [ 1862.020968][ T6520] ? clear_bhb_loop+0x60/0xb0 [ 1862.025655][ T6520] ? clear_bhb_loop+0x60/0xb0 [ 1862.030339][ T6520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.036238][ T6520] RIP: 0033:0x7f5148f9c819 [ 1862.040647][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.060257][ T6520] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1862.068672][ T6520] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1862.076639][ T6520] RDX: ff0f000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1862.084603][ T6520] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.092565][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.100529][ T6520] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1862.108506][ T6520] [ 1862.131262][ T6514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1862.240678][ T6526] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1862.490343][ T6539] netlink: 'syz.2.12086': attribute type 10 has an invalid length. [ 1862.507359][ T6539] bridge0: port 3(ipvlan1) entered blocking state [ 1862.514539][ T6540] FAULT_INJECTION: forcing a failure. [ 1862.514539][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.533533][ T6539] bridge0: port 3(ipvlan1) entered disabled state [ 1862.546767][ T6539] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1862.570689][ T6540] CPU: 0 PID: 6540 Comm: syz.1.12085 Not tainted syzkaller #0 [ 1862.578175][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1862.588237][ T6540] Call Trace: [ 1862.591525][ T6540] [ 1862.594472][ T6540] dump_stack_lvl+0x188/0x24e [ 1862.599171][ T6540] ? show_regs_print_info+0x12/0x12 [ 1862.604389][ T6540] ? load_image+0x400/0x400 [ 1862.608909][ T6540] ? __might_sleep+0xd0/0xd0 [ 1862.613513][ T6540] ? __lock_acquire+0x7d10/0x7d10 [ 1862.618560][ T6540] should_fail_ex+0x399/0x4d0 [ 1862.623254][ T6540] should_failslab+0x5/0x20 [ 1862.627769][ T6540] slab_pre_alloc_hook+0x59/0x310 [ 1862.632808][ T6540] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1862.638547][ T6540] __kmem_cache_alloc_node+0x4f/0x260 [ 1862.643940][ T6540] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1862.649679][ T6540] __kmalloc+0xa0/0x240 [ 1862.653859][ T6540] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1862.659430][ T6540] ? tomoyo_path_number_perm+0x205/0x650 [ 1862.665084][ T6540] tomoyo_path_number_perm+0x22f/0x650 [ 1862.670562][ T6540] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1862.676034][ T6540] ? ksys_write+0x1c0/0x250 [ 1862.680558][ T6540] ? common_file_perm+0x171/0x1c0 [ 1862.685625][ T6540] ? __fget_files+0x28/0x4b0 [ 1862.690231][ T6540] ? __fget_files+0x28/0x4b0 [ 1862.694850][ T6540] security_file_ioctl+0x6c/0xa0 [ 1862.699809][ T6540] __se_sys_ioctl+0x48/0x170 [ 1862.704419][ T6540] do_syscall_64+0x4c/0xa0 [ 1862.708861][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 1862.713552][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 1862.718250][ T6540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.724154][ T6540] RIP: 0033:0x7f88bd79c819 [ 1862.728580][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.748194][ T6540] RSP: 002b:00007f88be663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.756623][ T6540] RAX: ffffffffffffffda RBX: 00007f88bda16090 RCX: 00007f88bd79c819 [ 1862.764608][ T6540] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 1862.772588][ T6540] RBP: 00007f88be663090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.780567][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.788548][ T6540] R13: 00007f88bda16128 R14: 00007f88bda16090 R15: 00007ffde1867aa8 [ 1862.796544][ T6540] [ 1862.811288][ T6540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1863.014678][ T6554] FAULT_INJECTION: forcing a failure. [ 1863.014678][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.065059][ T6554] CPU: 1 PID: 6554 Comm: syz.1.12091 Not tainted syzkaller #0 [ 1863.072560][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.082630][ T6554] Call Trace: [ 1863.085921][ T6554] [ 1863.088859][ T6554] dump_stack_lvl+0x188/0x24e [ 1863.093570][ T6554] ? show_regs_print_info+0x12/0x12 [ 1863.098789][ T6554] ? load_image+0x400/0x400 [ 1863.103313][ T6554] ? __might_sleep+0xd0/0xd0 [ 1863.107915][ T6554] ? __lock_acquire+0x7d10/0x7d10 [ 1863.112967][ T6554] should_fail_ex+0x399/0x4d0 [ 1863.117663][ T6554] should_failslab+0x5/0x20 [ 1863.122186][ T6554] slab_pre_alloc_hook+0x59/0x310 [ 1863.127235][ T6554] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1863.132978][ T6554] __kmem_cache_alloc_node+0x4f/0x260 [ 1863.138371][ T6554] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1863.144111][ T6554] __kmalloc+0xa0/0x240 [ 1863.148297][ T6554] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1863.153872][ T6554] ? tomoyo_path_number_perm+0x205/0x650 [ 1863.159523][ T6554] tomoyo_path_number_perm+0x22f/0x650 [ 1863.165003][ T6554] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1863.170475][ T6554] ? ksys_write+0x1c0/0x250 [ 1863.174995][ T6554] ? common_file_perm+0x171/0x1c0 [ 1863.180063][ T6554] ? __fget_files+0x28/0x4b0 [ 1863.184669][ T6554] ? __fget_files+0x28/0x4b0 [ 1863.189288][ T6554] security_file_ioctl+0x6c/0xa0 [ 1863.194244][ T6554] __se_sys_ioctl+0x48/0x170 [ 1863.198857][ T6554] do_syscall_64+0x4c/0xa0 [ 1863.203288][ T6554] ? clear_bhb_loop+0x60/0xb0 [ 1863.207974][ T6554] ? clear_bhb_loop+0x60/0xb0 [ 1863.212669][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.218570][ T6554] RIP: 0033:0x7f88bd79c819 [ 1863.222996][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.242608][ T6554] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.251037][ T6554] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1863.259017][ T6554] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 1863.266999][ T6554] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.274982][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.282960][ T6554] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1863.290957][ T6554] [ 1863.406688][ T6569] FAULT_INJECTION: forcing a failure. [ 1863.406688][ T6569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1863.434212][ T6571] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1863.443392][ T6571] CPU: 1 PID: 6571 Comm: syz.4.12096 Not tainted syzkaller #0 [ 1863.450879][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.460946][ T6571] Call Trace: [ 1863.464243][ T6571] [ 1863.467187][ T6571] dump_stack_lvl+0x188/0x24e [ 1863.471895][ T6571] ? show_regs_print_info+0x12/0x12 [ 1863.477125][ T6571] ? load_image+0x400/0x400 [ 1863.481663][ T6571] sysfs_warn_dup+0x8a/0xa0 [ 1863.486190][ T6571] sysfs_do_create_link_sd+0xc0/0x110 [ 1863.491591][ T6571] device_add+0x7ed/0xfb0 [ 1863.496025][ T6571] wiphy_register+0x1d9f/0x2ac0 [ 1863.500977][ T6571] ? cfg80211_event_work+0x40/0x40 [ 1863.506127][ T6571] ? minstrel_ht_alloc+0x894/0xa20 [ 1863.511320][ T6571] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1863.517436][ T6571] ieee80211_register_hw+0x2d00/0x39f0 [ 1863.522968][ T6571] ? ieee80211_register_hw+0xf11/0x39f0 [ 1863.528523][ T6571] ? ieee80211_register_hw+0xf11/0x39f0 [ 1863.534089][ T6571] ? ieee80211_tasklet_handler+0x20/0x20 [ 1863.539734][ T6571] ? memset+0x1e/0x40 [ 1863.543710][ T6571] ? __hrtimer_init+0x186/0x270 [ 1863.548558][ T6571] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1863.554359][ T6571] hwsim_new_radio_nl+0xafa/0xce0 [ 1863.559398][ T6571] genl_family_rcv_msg_doit+0x22a/0x330 [ 1863.564940][ T6571] ? end_current_label_crit_section+0x170/0x170 [ 1863.571179][ T6571] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1863.577073][ T6571] ? bpf_lsm_capable+0x5/0x10 [ 1863.581794][ T6571] ? security_capable+0x85/0xb0 [ 1863.586648][ T6571] genl_rcv_msg+0x604/0x790 [ 1863.591156][ T6571] ? genl_bind+0x360/0x360 [ 1863.595564][ T6571] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1863.601904][ T6571] netlink_rcv_skb+0x1fb/0x450 [ 1863.606671][ T6571] ? genl_bind+0x360/0x360 [ 1863.611083][ T6571] ? netlink_ack+0x1170/0x1170 [ 1863.615861][ T6571] ? down_read+0x1a8/0x2d0 [ 1863.620331][ T6571] genl_rcv+0x24/0x40 [ 1863.624307][ T6571] netlink_unicast+0x74d/0x8d0 [ 1863.629078][ T6571] netlink_sendmsg+0x8ad/0xbd0 [ 1863.633851][ T6571] ? netlink_getsockopt+0x550/0x550 [ 1863.639049][ T6571] ? aa_sock_msg_perm+0x94/0x150 [ 1863.643982][ T6571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1863.649260][ T6571] ? security_socket_sendmsg+0x7c/0xa0 [ 1863.654725][ T6571] ? netlink_getsockopt+0x550/0x550 [ 1863.659926][ T6571] ____sys_sendmsg+0x5be/0x970 [ 1863.664696][ T6571] ? __sys_sendmsg_sock+0x30/0x30 [ 1863.669719][ T6571] ? __import_iovec+0x315/0x500 [ 1863.674578][ T6571] ? import_iovec+0x6f/0xa0 [ 1863.679083][ T6571] ___sys_sendmsg+0x2a2/0x360 [ 1863.683765][ T6571] ? try_to_wake_up+0x6ae/0x1080 [ 1863.688758][ T6571] ? __sys_sendmsg+0x290/0x290 [ 1863.693560][ T6571] __se_sys_sendmsg+0x1bb/0x2a0 [ 1863.698419][ T6571] ? __x64_sys_sendmsg+0x80/0x80 [ 1863.703373][ T6571] ? lockdep_hardirqs_on+0x94/0x140 [ 1863.708566][ T6571] do_syscall_64+0x4c/0xa0 [ 1863.712982][ T6571] ? clear_bhb_loop+0x60/0xb0 [ 1863.717655][ T6571] ? clear_bhb_loop+0x60/0xb0 [ 1863.722327][ T6571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.728220][ T6571] RIP: 0033:0x7fee53f9c819 [ 1863.732633][ T6571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.752233][ T6571] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.760637][ T6571] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1863.768601][ T6571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1863.776565][ T6571] RBP: 00007fee54032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1863.784528][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1863.792494][ T6571] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1863.800474][ T6571] [ 1863.808183][ T6569] CPU: 1 PID: 6569 Comm: syz.2.12095 Not tainted syzkaller #0 [ 1863.814596][ T6554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1863.815648][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.815661][ T6569] Call Trace: [ 1863.815669][ T6569] [ 1863.815677][ T6569] dump_stack_lvl+0x188/0x24e [ 1863.843274][ T6569] ? show_regs_print_info+0x12/0x12 [ 1863.848496][ T6569] ? load_image+0x400/0x400 [ 1863.853018][ T6569] ? __lock_acquire+0x7d10/0x7d10 [ 1863.858070][ T6569] should_fail_ex+0x399/0x4d0 [ 1863.862770][ T6569] _copy_from_user+0x2c/0x170 [ 1863.867465][ T6569] ___sys_sendmsg+0x1c3/0x360 [ 1863.872158][ T6569] ? __sys_sendmsg+0x290/0x290 [ 1863.876954][ T6569] ? __lock_acquire+0x7d10/0x7d10 [ 1863.882017][ T6569] __se_sys_sendmsg+0x1bb/0x2a0 [ 1863.886887][ T6569] ? __x64_sys_sendmsg+0x80/0x80 [ 1863.891853][ T6569] ? lockdep_hardirqs_on+0x94/0x140 [ 1863.897064][ T6569] do_syscall_64+0x4c/0xa0 [ 1863.901589][ T6569] ? clear_bhb_loop+0x60/0xb0 [ 1863.906279][ T6569] ? clear_bhb_loop+0x60/0xb0 [ 1863.910970][ T6569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.916875][ T6569] RIP: 0033:0x7f3d2959c819 [ 1863.921299][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.940912][ T6569] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.949358][ T6569] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1863.957347][ T6569] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1863.965333][ T6569] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.973322][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.981304][ T6569] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1863.989327][ T6569] [ 1864.009371][ T6575] netlink: 'syz.4.12098': attribute type 10 has an invalid length. [ 1864.140441][ T6578] FAULT_INJECTION: forcing a failure. [ 1864.140441][ T6578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.177280][ T6578] CPU: 0 PID: 6578 Comm: syz.1.12099 Not tainted syzkaller #0 [ 1864.184783][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1864.194851][ T6578] Call Trace: [ 1864.198140][ T6578] [ 1864.201088][ T6578] dump_stack_lvl+0x188/0x24e [ 1864.205789][ T6578] ? show_regs_print_info+0x12/0x12 [ 1864.211004][ T6578] ? load_image+0x400/0x400 [ 1864.215525][ T6578] ? __lock_acquire+0x7d10/0x7d10 [ 1864.220576][ T6578] should_fail_ex+0x399/0x4d0 [ 1864.225275][ T6578] _copy_from_user+0x2c/0x170 [ 1864.229973][ T6578] ___sys_sendmsg+0x1c3/0x360 [ 1864.234668][ T6578] ? __sys_sendmsg+0x290/0x290 [ 1864.239449][ T6578] ? __lock_acquire+0x7d10/0x7d10 [ 1864.244485][ T6578] __se_sys_sendmsg+0x1bb/0x2a0 [ 1864.249334][ T6578] ? __x64_sys_sendmsg+0x80/0x80 [ 1864.254281][ T6578] ? lockdep_hardirqs_on+0x94/0x140 [ 1864.259469][ T6578] do_syscall_64+0x4c/0xa0 [ 1864.263881][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 1864.268550][ T6578] ? clear_bhb_loop+0x60/0xb0 [ 1864.273217][ T6578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.279101][ T6578] RIP: 0033:0x7f88bd79c819 [ 1864.283511][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.303113][ T6578] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1864.311514][ T6578] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1864.319474][ T6578] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1864.327432][ T6578] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.335389][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.343348][ T6578] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1864.351321][ T6578] [ 1864.565336][ T6586] netlink: 'syz.0.12112': attribute type 33 has an invalid length. [ 1864.621276][ T6586] __nla_validate_parse: 4 callbacks suppressed [ 1864.621291][ T6586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12112'. [ 1864.920125][ T6601] netlink: 'syz.0.12107': attribute type 10 has an invalid length. [ 1865.026108][ T6601] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1865.148437][ T6604] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12108'. [ 1865.188453][ T6604] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1865.211359][ T6604] CPU: 0 PID: 6604 Comm: syz.2.12108 Not tainted syzkaller #0 [ 1865.218851][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1865.228918][ T6604] Call Trace: [ 1865.232219][ T6604] [ 1865.235159][ T6604] dump_stack_lvl+0x188/0x24e [ 1865.239868][ T6604] ? show_regs_print_info+0x12/0x12 [ 1865.245094][ T6604] ? load_image+0x400/0x400 [ 1865.249630][ T6604] sysfs_warn_dup+0x8a/0xa0 [ 1865.254154][ T6604] sysfs_do_create_link_sd+0xc0/0x110 [ 1865.259550][ T6604] device_add+0x7ed/0xfb0 [ 1865.263904][ T6604] wiphy_register+0x1d9f/0x2ac0 [ 1865.268801][ T6604] ? cfg80211_event_work+0x40/0x40 [ 1865.273934][ T6604] ? minstrel_ht_alloc+0x894/0xa20 [ 1865.279083][ T6604] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1865.285168][ T6604] ieee80211_register_hw+0x2d00/0x39f0 [ 1865.290663][ T6604] ? ieee80211_register_hw+0xf11/0x39f0 [ 1865.296231][ T6604] ? ieee80211_register_hw+0xf11/0x39f0 [ 1865.301816][ T6604] ? ieee80211_tasklet_handler+0x20/0x20 [ 1865.307480][ T6604] ? memset+0x1e/0x40 [ 1865.311477][ T6604] ? __hrtimer_init+0x186/0x270 [ 1865.316349][ T6604] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1865.322112][ T6604] hwsim_new_radio_nl+0xafa/0xce0 [ 1865.327184][ T6604] genl_family_rcv_msg_doit+0x22a/0x330 [ 1865.332755][ T6604] ? end_current_label_crit_section+0x170/0x170 [ 1865.339020][ T6604] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1865.344952][ T6604] ? bpf_lsm_capable+0x5/0x10 [ 1865.349650][ T6604] ? security_capable+0x85/0xb0 [ 1865.354533][ T6604] genl_rcv_msg+0x604/0x790 [ 1865.359065][ T6604] ? genl_bind+0x360/0x360 [ 1865.363498][ T6604] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1865.369869][ T6604] netlink_rcv_skb+0x1fb/0x450 [ 1865.374661][ T6604] ? genl_bind+0x360/0x360 [ 1865.379096][ T6604] ? netlink_ack+0x1170/0x1170 [ 1865.383893][ T6604] ? down_read+0x1a8/0x2d0 [ 1865.388338][ T6604] genl_rcv+0x24/0x40 [ 1865.392336][ T6604] netlink_unicast+0x74d/0x8d0 [ 1865.397135][ T6604] netlink_sendmsg+0x8ad/0xbd0 [ 1865.401941][ T6604] ? netlink_getsockopt+0x550/0x550 [ 1865.407167][ T6604] ? aa_sock_msg_perm+0x94/0x150 [ 1865.412124][ T6604] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1865.417423][ T6604] ? security_socket_sendmsg+0x7c/0xa0 [ 1865.422910][ T6604] ? netlink_getsockopt+0x550/0x550 [ 1865.428136][ T6604] ____sys_sendmsg+0x5be/0x970 [ 1865.432938][ T6604] ? __sys_sendmsg_sock+0x30/0x30 [ 1865.437983][ T6604] ? __import_iovec+0x315/0x500 [ 1865.442858][ T6604] ? import_iovec+0x6f/0xa0 [ 1865.447376][ T6604] ___sys_sendmsg+0x2a2/0x360 [ 1865.452083][ T6604] ? try_to_wake_up+0x6ae/0x1080 [ 1865.457042][ T6604] ? __sys_sendmsg+0x290/0x290 [ 1865.461881][ T6604] __se_sys_sendmsg+0x1bb/0x2a0 [ 1865.466769][ T6604] ? __x64_sys_sendmsg+0x80/0x80 [ 1865.471749][ T6604] ? lockdep_hardirqs_on+0x94/0x140 [ 1865.476966][ T6604] do_syscall_64+0x4c/0xa0 [ 1865.481406][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 1865.486104][ T6604] ? clear_bhb_loop+0x60/0xb0 [ 1865.490803][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.496714][ T6604] RIP: 0033:0x7f3d2959c819 [ 1865.501146][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.520763][ T6604] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1865.529209][ T6604] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1865.537201][ T6604] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1865.545187][ T6604] RBP: 00007f3d29632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1865.553172][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1865.561157][ T6604] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1865.569158][ T6604] [ 1865.798119][ T6608] netlink: 'syz.0.12109': attribute type 10 has an invalid length. [ 1865.809869][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12109'. [ 1865.821708][ T6608] device ipvlan1 entered promiscuous mode [ 1865.843092][ T6608] bridge0: port 3(ipvlan1) entered blocking state [ 1865.850304][ T6608] bridge0: port 3(ipvlan1) entered disabled state [ 1865.877946][ T6608] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1865.974035][ T6619] FAULT_INJECTION: forcing a failure. [ 1865.974035][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1866.046321][ T6619] CPU: 0 PID: 6619 Comm: syz.3.12114 Not tainted syzkaller #0 [ 1866.053827][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1866.063899][ T6619] Call Trace: [ 1866.067209][ T6619] [ 1866.070148][ T6619] dump_stack_lvl+0x188/0x24e [ 1866.074853][ T6619] ? show_regs_print_info+0x12/0x12 [ 1866.080074][ T6619] ? load_image+0x400/0x400 [ 1866.084595][ T6619] ? __lock_acquire+0x7d10/0x7d10 [ 1866.089642][ T6619] should_fail_ex+0x399/0x4d0 [ 1866.094337][ T6619] _copy_from_user+0x2c/0x170 [ 1866.099034][ T6619] ___sys_sendmsg+0x1c3/0x360 [ 1866.103734][ T6619] ? __sys_sendmsg+0x290/0x290 [ 1866.108528][ T6619] ? __lock_acquire+0x7d10/0x7d10 [ 1866.113590][ T6619] __se_sys_sendmsg+0x1bb/0x2a0 [ 1866.118459][ T6619] ? ct_nmi_exit+0x145/0x1c0 [ 1866.123072][ T6619] ? __x64_sys_sendmsg+0x80/0x80 [ 1866.128043][ T6619] ? lockdep_hardirqs_on+0x94/0x140 [ 1866.133254][ T6619] do_syscall_64+0x4c/0xa0 [ 1866.137683][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 1866.142373][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 1866.147063][ T6619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.152966][ T6619] RIP: 0033:0x7f5148f9c819 [ 1866.157377][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.176977][ T6619] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1866.185381][ T6619] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1866.193342][ T6619] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1866.201302][ T6619] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.209263][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.217222][ T6619] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1866.225193][ T6619] [ 1866.303576][ T6625] netlink: 'syz.2.12117': attribute type 16 has an invalid length. [ 1866.351408][ T6625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12117'. [ 1866.444280][ T6627] netlink: 'syz.0.12119': attribute type 3 has an invalid length. [ 1866.489076][ T6631] netlink: 'syz.0.12119': attribute type 3 has an invalid length. [ 1866.521260][ T6627] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12119'. [ 1866.553378][ T6631] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12119'. [ 1866.957797][ T6647] FAULT_INJECTION: forcing a failure. [ 1866.957797][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.013617][ T6647] CPU: 0 PID: 6647 Comm: syz.4.12125 Not tainted syzkaller #0 [ 1867.021121][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1867.031186][ T6647] Call Trace: [ 1867.034467][ T6647] [ 1867.037401][ T6647] dump_stack_lvl+0x188/0x24e [ 1867.042096][ T6647] ? show_regs_print_info+0x12/0x12 [ 1867.047304][ T6647] ? load_image+0x400/0x400 [ 1867.051822][ T6647] ? __lock_acquire+0x7d10/0x7d10 [ 1867.056862][ T6647] should_fail_ex+0x399/0x4d0 [ 1867.061544][ T6647] _copy_from_user+0x2c/0x170 [ 1867.066227][ T6647] ___sys_sendmsg+0x1c3/0x360 [ 1867.070919][ T6647] ? __sys_sendmsg+0x290/0x290 [ 1867.075700][ T6647] ? __lock_acquire+0x7d10/0x7d10 [ 1867.080753][ T6647] __se_sys_sendmsg+0x1bb/0x2a0 [ 1867.085615][ T6647] ? __x64_sys_sendmsg+0x80/0x80 [ 1867.090567][ T6647] ? lockdep_hardirqs_on+0x94/0x140 [ 1867.095767][ T6647] do_syscall_64+0x4c/0xa0 [ 1867.100191][ T6647] ? clear_bhb_loop+0x60/0xb0 [ 1867.104869][ T6647] ? clear_bhb_loop+0x60/0xb0 [ 1867.109550][ T6647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.115444][ T6647] RIP: 0033:0x7fee53f9c819 [ 1867.119856][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.139457][ T6647] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1867.147870][ T6647] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1867.155839][ T6647] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1867.163811][ T6647] RBP: 00007fee54e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.171790][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.179764][ T6647] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1867.187750][ T6647] [ 1867.635427][ T6665] netlink: 'syz.4.12130': attribute type 10 has an invalid length. [ 1867.648803][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12130'. [ 1867.681377][ T6665] bridge0: port 1(ipvlan1) entered blocking state [ 1867.704234][ T6665] bridge0: port 1(ipvlan1) entered disabled state [ 1867.757811][ T6665] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1867.820373][ T6675] FAULT_INJECTION: forcing a failure. [ 1867.820373][ T6675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.852871][ T6668] netlink: 'syz.0.12131': attribute type 12 has an invalid length. [ 1867.870061][ T6668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12131'. [ 1867.880214][ T6675] CPU: 0 PID: 6675 Comm: syz.3.12133 Not tainted syzkaller #0 [ 1867.887691][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1867.897757][ T6675] Call Trace: [ 1867.901042][ T6675] [ 1867.903973][ T6675] dump_stack_lvl+0x188/0x24e [ 1867.908671][ T6675] ? show_regs_print_info+0x12/0x12 [ 1867.913889][ T6675] ? load_image+0x400/0x400 [ 1867.918407][ T6675] ? __lock_acquire+0x7d10/0x7d10 [ 1867.923447][ T6675] should_fail_ex+0x399/0x4d0 [ 1867.928118][ T6675] _copy_from_user+0x2c/0x170 [ 1867.932795][ T6675] ___sys_sendmsg+0x1c3/0x360 [ 1867.937469][ T6675] ? __sys_sendmsg+0x290/0x290 [ 1867.942241][ T6675] ? __lock_acquire+0x7d10/0x7d10 [ 1867.947273][ T6675] __se_sys_sendmsg+0x1bb/0x2a0 [ 1867.952117][ T6675] ? ct_nmi_exit+0x145/0x1c0 [ 1867.956702][ T6675] ? __x64_sys_sendmsg+0x80/0x80 [ 1867.961654][ T6675] ? lockdep_hardirqs_on+0x94/0x140 [ 1867.966842][ T6675] do_syscall_64+0x4c/0xa0 [ 1867.971249][ T6675] ? clear_bhb_loop+0x60/0xb0 [ 1867.975915][ T6675] ? clear_bhb_loop+0x60/0xb0 [ 1867.980585][ T6675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.986468][ T6675] RIP: 0033:0x7f5148f9c819 [ 1867.990871][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.010464][ T6675] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1868.018865][ T6675] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1868.026823][ T6675] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 1868.034786][ T6675] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.042746][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.050703][ T6675] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1868.058677][ T6675] [ 1868.071998][ T6679] netlink: 'syz.2.12134': attribute type 12 has an invalid length. [ 1868.121386][ T6679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1868.156016][ T6683] FAULT_INJECTION: forcing a failure. [ 1868.156016][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.201181][ T6683] CPU: 0 PID: 6683 Comm: syz.1.12136 Not tainted syzkaller #0 [ 1868.208727][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1868.218794][ T6683] Call Trace: [ 1868.222081][ T6683] [ 1868.225021][ T6683] dump_stack_lvl+0x188/0x24e [ 1868.229722][ T6683] ? show_regs_print_info+0x12/0x12 [ 1868.234941][ T6683] ? load_image+0x400/0x400 [ 1868.239472][ T6683] ? __lock_acquire+0x7d10/0x7d10 [ 1868.244528][ T6683] should_fail_ex+0x399/0x4d0 [ 1868.249227][ T6683] _copy_from_user+0x2c/0x170 [ 1868.253925][ T6683] __sys_bpf+0x2ea/0x780 [ 1868.258189][ T6683] ? bpf_link_show_fdinfo+0x380/0x380 [ 1868.263590][ T6683] ? lock_chain_count+0x20/0x20 [ 1868.268469][ T6683] __x64_sys_bpf+0x78/0x90 [ 1868.272905][ T6683] do_syscall_64+0x4c/0xa0 [ 1868.277333][ T6683] ? clear_bhb_loop+0x60/0xb0 [ 1868.282007][ T6683] ? clear_bhb_loop+0x60/0xb0 [ 1868.286682][ T6683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1868.292563][ T6683] RIP: 0033:0x7f88bd79c819 [ 1868.296969][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.316568][ T6683] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1868.324975][ T6683] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1868.332937][ T6683] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 000000000000001d [ 1868.340896][ T6683] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.348856][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.356813][ T6683] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1868.364792][ T6683] [ 1868.655253][ T6690] netlink: 'syz.1.12139': attribute type 39 has an invalid length. [ 1869.294715][ T6702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12144'. [ 1869.401997][ T6706] FAULT_INJECTION: forcing a failure. [ 1869.401997][ T6706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.402510][ T6708] device lo left promiscuous mode [ 1869.451313][ T6708] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1869.467584][ T6708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1869.485653][ T6706] CPU: 1 PID: 6706 Comm: syz.3.12145 Not tainted syzkaller #0 [ 1869.493141][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.503208][ T6706] Call Trace: [ 1869.506495][ T6706] [ 1869.509440][ T6706] dump_stack_lvl+0x188/0x24e [ 1869.514146][ T6706] ? show_regs_print_info+0x12/0x12 [ 1869.519367][ T6706] ? load_image+0x400/0x400 [ 1869.523889][ T6706] ? __lock_acquire+0x7d10/0x7d10 [ 1869.528938][ T6706] should_fail_ex+0x399/0x4d0 [ 1869.533637][ T6706] _copy_from_user+0x2c/0x170 [ 1869.538335][ T6706] ___sys_sendmsg+0x1c3/0x360 [ 1869.543037][ T6706] ? __sys_sendmsg+0x290/0x290 [ 1869.547840][ T6706] ? __lock_acquire+0x7d10/0x7d10 [ 1869.552907][ T6706] __se_sys_sendmsg+0x1bb/0x2a0 [ 1869.557781][ T6706] ? __x64_sys_sendmsg+0x80/0x80 [ 1869.562749][ T6706] ? lockdep_hardirqs_on+0x94/0x140 [ 1869.567962][ T6706] do_syscall_64+0x4c/0xa0 [ 1869.572396][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 1869.572483][ T6711] validate_nla: 2 callbacks suppressed [ 1869.572496][ T6711] netlink: 'syz.1.12149': attribute type 10 has an invalid length. [ 1869.577072][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 1869.577101][ T6706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.600972][ T6706] RIP: 0033:0x7f5148f9c819 [ 1869.605384][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.624980][ T6706] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1869.633384][ T6706] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1869.641346][ T6706] RDX: 0000000020008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1869.649310][ T6706] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.657270][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.665229][ T6706] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1869.673206][ T6706] [ 1869.680732][ T6711] __nla_validate_parse: 1 callbacks suppressed [ 1869.680746][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12149'. [ 1869.709130][ T6711] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1869.723075][ T6711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1869.741297][ T6720] netlink: 'syz.0.12146': attribute type 10 has an invalid length. [ 1869.771000][ T6720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12146'. [ 1869.801181][ T6720] device batadv0 entered promiscuous mode [ 1869.807731][ T6720] bridge0: port 3(batadv0) entered blocking state [ 1869.823603][ T6713] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.12148'. [ 1869.861781][ T6720] bridge0: port 3(batadv0) entered disabled state [ 1869.869811][ T6720] bridge0: port 3(batadv0) entered blocking state [ 1869.876398][ T6720] bridge0: port 3(batadv0) entered forwarding state [ 1869.908418][ T6713] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1869.923735][ T6713] CPU: 1 PID: 6713 Comm: syz.4.12148 Not tainted syzkaller #0 [ 1869.931237][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.941308][ T6713] Call Trace: [ 1869.944604][ T6713] [ 1869.947546][ T6713] dump_stack_lvl+0x188/0x24e [ 1869.952255][ T6713] ? show_regs_print_info+0x12/0x12 [ 1869.957483][ T6713] ? load_image+0x400/0x400 [ 1869.962030][ T6713] sysfs_warn_dup+0x8a/0xa0 [ 1869.966564][ T6713] sysfs_do_create_link_sd+0xc0/0x110 [ 1869.971962][ T6713] device_add+0x7ed/0xfb0 [ 1869.976321][ T6713] wiphy_register+0x1d9f/0x2ac0 [ 1869.981226][ T6713] ? cfg80211_event_work+0x40/0x40 [ 1869.986368][ T6713] ? minstrel_ht_alloc+0x894/0xa20 [ 1869.991515][ T6713] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1869.997612][ T6713] ieee80211_register_hw+0x2d00/0x39f0 [ 1870.003114][ T6713] ? ieee80211_register_hw+0xf11/0x39f0 [ 1870.008689][ T6713] ? ieee80211_register_hw+0xf11/0x39f0 [ 1870.014281][ T6713] ? ieee80211_tasklet_handler+0x20/0x20 [ 1870.019956][ T6713] ? memset+0x1e/0x40 [ 1870.023961][ T6713] ? __hrtimer_init+0x186/0x270 [ 1870.028835][ T6713] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1870.034611][ T6713] hwsim_new_radio_nl+0xafa/0xce0 [ 1870.039686][ T6713] genl_family_rcv_msg_doit+0x22a/0x330 [ 1870.045255][ T6713] ? end_current_label_crit_section+0x170/0x170 [ 1870.051523][ T6713] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1870.057458][ T6713] ? bpf_lsm_capable+0x5/0x10 [ 1870.062166][ T6713] ? security_capable+0x85/0xb0 [ 1870.067055][ T6713] genl_rcv_msg+0x604/0x790 [ 1870.071595][ T6713] ? genl_bind+0x360/0x360 [ 1870.076031][ T6713] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1870.082411][ T6713] netlink_rcv_skb+0x1fb/0x450 [ 1870.087275][ T6713] ? genl_bind+0x360/0x360 [ 1870.091721][ T6713] ? netlink_ack+0x1170/0x1170 [ 1870.096539][ T6713] ? down_read+0x1a8/0x2d0 [ 1870.100987][ T6713] genl_rcv+0x24/0x40 [ 1870.104987][ T6713] netlink_unicast+0x74d/0x8d0 [ 1870.109799][ T6713] netlink_sendmsg+0x8ad/0xbd0 [ 1870.114606][ T6713] ? netlink_getsockopt+0x550/0x550 [ 1870.119843][ T6713] ? aa_sock_msg_perm+0x94/0x150 [ 1870.124807][ T6713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1870.130111][ T6713] ? security_socket_sendmsg+0x7c/0xa0 [ 1870.135608][ T6713] ? netlink_getsockopt+0x550/0x550 [ 1870.140840][ T6713] ____sys_sendmsg+0x5be/0x970 [ 1870.145647][ T6713] ? __sys_sendmsg_sock+0x30/0x30 [ 1870.150720][ T6713] ? __import_iovec+0x315/0x500 [ 1870.155604][ T6713] ? import_iovec+0x6f/0xa0 [ 1870.160134][ T6713] ___sys_sendmsg+0x2a2/0x360 [ 1870.164841][ T6713] ? try_to_wake_up+0x6ae/0x1080 [ 1870.169809][ T6713] ? __sys_sendmsg+0x290/0x290 [ 1870.174665][ T6713] __se_sys_sendmsg+0x1bb/0x2a0 [ 1870.179557][ T6713] ? __x64_sys_sendmsg+0x80/0x80 [ 1870.184547][ T6713] ? lockdep_hardirqs_on+0x94/0x140 [ 1870.189773][ T6713] do_syscall_64+0x4c/0xa0 [ 1870.194216][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 1870.198919][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 1870.203627][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.209548][ T6713] RIP: 0033:0x7fee53f9c819 [ 1870.213986][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.233618][ T6713] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1870.242059][ T6713] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1870.250045][ T6713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1870.258032][ T6713] RBP: 00007fee54032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1870.266021][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.274008][ T6713] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1870.282017][ T6713] [ 1870.309365][ T6730] FAULT_INJECTION: forcing a failure. [ 1870.309365][ T6730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.364125][ T4339] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1870.373409][ T4339] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1870.381350][ T6730] CPU: 0 PID: 6730 Comm: syz.2.12154 Not tainted syzkaller #0 [ 1870.389986][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1870.400059][ T6730] Call Trace: [ 1870.403359][ T6730] [ 1870.406304][ T6730] dump_stack_lvl+0x188/0x24e [ 1870.411020][ T6730] ? show_regs_print_info+0x12/0x12 [ 1870.416259][ T6730] ? load_image+0x400/0x400 [ 1870.420798][ T6730] ? __lock_acquire+0x7d10/0x7d10 [ 1870.425858][ T6730] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1870.431609][ T6730] should_fail_ex+0x399/0x4d0 [ 1870.436295][ T6730] _copy_from_user+0x2c/0x170 [ 1870.440982][ T6730] ___sys_sendmsg+0x1c3/0x360 [ 1870.445674][ T6730] ? __sys_sendmsg+0x290/0x290 [ 1870.450476][ T6730] ? __lock_acquire+0x7d10/0x7d10 [ 1870.455543][ T6730] __se_sys_sendmsg+0x1bb/0x2a0 [ 1870.460406][ T6730] ? __x64_sys_sendmsg+0x80/0x80 [ 1870.465374][ T6730] ? lockdep_hardirqs_on+0x94/0x140 [ 1870.470583][ T6730] do_syscall_64+0x4c/0xa0 [ 1870.475003][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 1870.479679][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 1870.484362][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.490255][ T6730] RIP: 0033:0x7f3d2959c819 [ 1870.494672][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.514275][ T6730] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1870.522694][ T6730] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1870.530740][ T6730] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1870.538727][ T6730] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.546696][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.554669][ T6730] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1870.562666][ T6730] [ 1870.882866][ T6732] netlink: 'syz.0.12155': attribute type 39 has an invalid length. [ 1871.344913][ T6741] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12168'. [ 1871.546866][ T6741] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1871.558776][ T6741] CPU: 1 PID: 6741 Comm: syz.2.12168 Not tainted syzkaller #0 [ 1871.566297][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1871.576412][ T6741] Call Trace: [ 1871.579726][ T6741] [ 1871.582701][ T6741] dump_stack_lvl+0x188/0x24e [ 1871.587415][ T6741] ? show_regs_print_info+0x12/0x12 [ 1871.592629][ T6741] ? load_image+0x400/0x400 [ 1871.597163][ T6741] sysfs_warn_dup+0x8a/0xa0 [ 1871.601690][ T6741] sysfs_do_create_link_sd+0xc0/0x110 [ 1871.607079][ T6741] device_add+0x7ed/0xfb0 [ 1871.611430][ T6741] wiphy_register+0x1d9f/0x2ac0 [ 1871.616381][ T6741] ? cfg80211_event_work+0x40/0x40 [ 1871.621526][ T6741] ? minstrel_ht_alloc+0x894/0xa20 [ 1871.626653][ T6741] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1871.632753][ T6741] ieee80211_register_hw+0x2d00/0x39f0 [ 1871.638290][ T6741] ? ieee80211_register_hw+0xf11/0x39f0 [ 1871.643860][ T6741] ? ieee80211_register_hw+0xf11/0x39f0 [ 1871.649414][ T6741] ? ieee80211_tasklet_handler+0x20/0x20 [ 1871.655062][ T6741] ? memset+0x1e/0x40 [ 1871.659077][ T6741] ? __hrtimer_init+0x186/0x270 [ 1871.663954][ T6741] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1871.669756][ T6741] hwsim_new_radio_nl+0xafa/0xce0 [ 1871.674805][ T6741] genl_family_rcv_msg_doit+0x22a/0x330 [ 1871.680350][ T6741] ? end_current_label_crit_section+0x170/0x170 [ 1871.686611][ T6741] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1871.692536][ T6741] ? bpf_lsm_capable+0x5/0x10 [ 1871.697209][ T6741] ? security_capable+0x85/0xb0 [ 1871.702065][ T6741] genl_rcv_msg+0x604/0x790 [ 1871.706579][ T6741] ? genl_bind+0x360/0x360 [ 1871.710987][ T6741] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1871.717346][ T6741] netlink_rcv_skb+0x1fb/0x450 [ 1871.722112][ T6741] ? genl_bind+0x360/0x360 [ 1871.726525][ T6741] ? netlink_ack+0x1170/0x1170 [ 1871.731317][ T6741] ? down_read+0x1a8/0x2d0 [ 1871.735741][ T6741] genl_rcv+0x24/0x40 [ 1871.739737][ T6741] netlink_unicast+0x74d/0x8d0 [ 1871.744582][ T6741] netlink_sendmsg+0x8ad/0xbd0 [ 1871.749383][ T6741] ? netlink_getsockopt+0x550/0x550 [ 1871.754596][ T6741] ? aa_sock_msg_perm+0x94/0x150 [ 1871.759535][ T6741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1871.764832][ T6741] ? security_socket_sendmsg+0x7c/0xa0 [ 1871.770320][ T6741] ? netlink_getsockopt+0x550/0x550 [ 1871.775518][ T6741] ____sys_sendmsg+0x5be/0x970 [ 1871.780294][ T6741] ? __sys_sendmsg_sock+0x30/0x30 [ 1871.785320][ T6741] ? __import_iovec+0x315/0x500 [ 1871.790175][ T6741] ? import_iovec+0x6f/0xa0 [ 1871.794681][ T6741] ___sys_sendmsg+0x2a2/0x360 [ 1871.799360][ T6741] ? try_to_wake_up+0x6ae/0x1080 [ 1871.804303][ T6741] ? __sys_sendmsg+0x290/0x290 [ 1871.809198][ T6741] __se_sys_sendmsg+0x1bb/0x2a0 [ 1871.814052][ T6741] ? __x64_sys_sendmsg+0x80/0x80 [ 1871.819008][ T6741] ? lockdep_hardirqs_on+0x94/0x140 [ 1871.824224][ T6741] do_syscall_64+0x4c/0xa0 [ 1871.828634][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 1871.833305][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 1871.837990][ T6741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.843875][ T6741] RIP: 0033:0x7f3d2959c819 [ 1871.848283][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.867899][ T6741] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.876314][ T6741] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1871.884277][ T6741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1871.892241][ T6741] RBP: 00007f3d29632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1871.900198][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.908170][ T6741] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1871.916158][ T6741] [ 1872.209965][ T6753] FAULT_INJECTION: forcing a failure. [ 1872.209965][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.259243][ T6753] CPU: 0 PID: 6753 Comm: syz.4.12161 Not tainted syzkaller #0 [ 1872.266748][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1872.276818][ T6753] Call Trace: [ 1872.280122][ T6753] [ 1872.283060][ T6753] dump_stack_lvl+0x188/0x24e [ 1872.287764][ T6753] ? show_regs_print_info+0x12/0x12 [ 1872.292987][ T6753] ? load_image+0x400/0x400 [ 1872.297521][ T6753] ? __lock_acquire+0x7d10/0x7d10 [ 1872.302568][ T6753] should_fail_ex+0x399/0x4d0 [ 1872.307244][ T6753] _copy_from_user+0x2c/0x170 [ 1872.311921][ T6753] __sys_bpf+0x2ea/0x780 [ 1872.316163][ T6753] ? bpf_link_show_fdinfo+0x380/0x380 [ 1872.321541][ T6753] ? lock_chain_count+0x20/0x20 [ 1872.326396][ T6753] __x64_sys_bpf+0x78/0x90 [ 1872.330803][ T6753] do_syscall_64+0x4c/0xa0 [ 1872.335220][ T6753] ? clear_bhb_loop+0x60/0xb0 [ 1872.339892][ T6753] ? clear_bhb_loop+0x60/0xb0 [ 1872.344563][ T6753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.350445][ T6753] RIP: 0033:0x7fee53f9c819 [ 1872.354858][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.374453][ T6753] RSP: 002b:00007fee54e41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1872.382860][ T6753] RAX: ffffffffffffffda RBX: 00007fee54215fa0 RCX: 00007fee53f9c819 [ 1872.390819][ T6753] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1872.398783][ T6753] RBP: 00007fee54e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.406744][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.414705][ T6753] R13: 00007fee54216038 R14: 00007fee54215fa0 R15: 00007ffeb4687e78 [ 1872.422678][ T6753] [ 1872.476278][ T6764] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12165'. [ 1872.495633][ T6761] FAULT_INJECTION: forcing a failure. [ 1872.495633][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.529321][ T6761] CPU: 1 PID: 6761 Comm: syz.0.12164 Not tainted syzkaller #0 [ 1872.536817][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1872.546883][ T6761] Call Trace: [ 1872.550161][ T6761] [ 1872.553079][ T6761] dump_stack_lvl+0x188/0x24e [ 1872.557763][ T6761] ? show_regs_print_info+0x12/0x12 [ 1872.562961][ T6761] ? load_image+0x400/0x400 [ 1872.567458][ T6761] ? __lock_acquire+0x7d10/0x7d10 [ 1872.572486][ T6761] should_fail_ex+0x399/0x4d0 [ 1872.577157][ T6761] _copy_from_user+0x2c/0x170 [ 1872.581829][ T6761] ___sys_recvmsg+0x172/0x590 [ 1872.586509][ T6761] ? __sys_recvmsg+0x290/0x290 [ 1872.591270][ T6761] ? common_file_perm+0x171/0x1c0 [ 1872.596297][ T6761] ? __fget_files+0x43d/0x4b0 [ 1872.600979][ T6761] __x64_sys_recvmsg+0x205/0x2e0 [ 1872.605916][ T6761] ? ___sys_recvmsg+0x590/0x590 [ 1872.610771][ T6761] ? lockdep_hardirqs_on+0x94/0x140 [ 1872.615964][ T6761] do_syscall_64+0x4c/0xa0 [ 1872.620374][ T6761] ? clear_bhb_loop+0x60/0xb0 [ 1872.625046][ T6761] ? clear_bhb_loop+0x60/0xb0 [ 1872.629718][ T6761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.635604][ T6761] RIP: 0033:0x7f5060d9c819 [ 1872.640010][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.659604][ T6761] RSP: 002b:00007f5061cc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1872.668009][ T6761] RAX: ffffffffffffffda RBX: 00007f5061016090 RCX: 00007f5060d9c819 [ 1872.675967][ T6761] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 1872.683928][ T6761] RBP: 00007f5061cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.691886][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.699843][ T6761] R13: 00007f5061016128 R14: 00007f5061016090 R15: 00007ffcfffdfea8 [ 1872.707815][ T6761] [ 1872.807442][ T6772] netlink: 'syz.4.12170': attribute type 39 has an invalid length. [ 1873.084032][ T6781] netlink: 'syz.4.12172': attribute type 10 has an invalid length. [ 1873.101426][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12172'. [ 1873.117851][ T6781] bridge0: port 1(ipvlan1) entered blocking state [ 1873.130671][ T6781] bridge0: port 1(ipvlan1) entered disabled state [ 1873.143300][ T6781] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1873.515669][ T6788] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.12175'. [ 1873.704580][ T6788] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1873.775740][ T6791] netlink: 'syz.4.12176': attribute type 10 has an invalid length. [ 1873.811515][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12176'. [ 1873.849820][ T6791] bridge0: port 1(ipvlan1) entered blocking state [ 1873.886604][ T6791] bridge0: port 1(ipvlan1) entered disabled state [ 1873.964267][ T6791] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1873.987077][ T6795] FAULT_INJECTION: forcing a failure. [ 1873.987077][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.017634][ T6795] CPU: 0 PID: 6795 Comm: syz.1.12178 Not tainted syzkaller #0 [ 1874.025125][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.035177][ T6795] Call Trace: [ 1874.038445][ T6795] [ 1874.041386][ T6795] dump_stack_lvl+0x188/0x24e [ 1874.046080][ T6795] ? show_regs_print_info+0x12/0x12 [ 1874.051274][ T6795] ? load_image+0x400/0x400 [ 1874.055789][ T6795] ? __lock_acquire+0x7d10/0x7d10 [ 1874.060834][ T6795] should_fail_ex+0x399/0x4d0 [ 1874.065532][ T6795] _copy_from_user+0x2c/0x170 [ 1874.070235][ T6795] ___sys_recvmsg+0x172/0x590 [ 1874.074941][ T6795] ? __sys_recvmsg+0x290/0x290 [ 1874.079731][ T6795] ? common_file_perm+0x171/0x1c0 [ 1874.084787][ T6795] ? __fget_files+0x43d/0x4b0 [ 1874.089495][ T6795] __x64_sys_recvmsg+0x205/0x2e0 [ 1874.094452][ T6795] ? ct_nmi_exit+0x145/0x1c0 [ 1874.099058][ T6795] ? ___sys_recvmsg+0x590/0x590 [ 1874.103950][ T6795] ? lockdep_hardirqs_on+0x94/0x140 [ 1874.109168][ T6795] do_syscall_64+0x4c/0xa0 [ 1874.113604][ T6795] ? clear_bhb_loop+0x60/0xb0 [ 1874.118298][ T6795] ? clear_bhb_loop+0x60/0xb0 [ 1874.122990][ T6795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.128895][ T6795] RIP: 0033:0x7f88bd79c819 [ 1874.133314][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.152905][ T6795] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1874.161326][ T6795] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1874.169295][ T6795] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: 0000000000000008 [ 1874.177259][ T6795] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.185222][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.193170][ T6795] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1874.201128][ T6795] [ 1874.462780][ T6817] FAULT_INJECTION: forcing a failure. [ 1874.462780][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.496164][ T6813] netlink: 'syz.1.12183': attribute type 39 has an invalid length. [ 1874.551415][ T6817] CPU: 0 PID: 6817 Comm: syz.2.12185 Not tainted syzkaller #0 [ 1874.559015][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.569097][ T6817] Call Trace: [ 1874.572403][ T6817] [ 1874.575366][ T6817] dump_stack_lvl+0x188/0x24e [ 1874.580086][ T6817] ? show_regs_print_info+0x12/0x12 [ 1874.585306][ T6817] ? load_image+0x400/0x400 [ 1874.589825][ T6817] ? __lock_acquire+0x7d10/0x7d10 [ 1874.594877][ T6817] should_fail_ex+0x399/0x4d0 [ 1874.599573][ T6817] _copy_from_user+0x2c/0x170 [ 1874.604278][ T6817] __sys_bpf+0x2ea/0x780 [ 1874.608542][ T6817] ? bpf_link_show_fdinfo+0x380/0x380 [ 1874.613963][ T6817] ? lock_chain_count+0x20/0x20 [ 1874.618851][ T6817] __x64_sys_bpf+0x78/0x90 [ 1874.623287][ T6817] do_syscall_64+0x4c/0xa0 [ 1874.627712][ T6817] ? clear_bhb_loop+0x60/0xb0 [ 1874.632396][ T6817] ? clear_bhb_loop+0x60/0xb0 [ 1874.637085][ T6817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.642983][ T6817] RIP: 0033:0x7f3d2959c819 [ 1874.647407][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.667059][ T6817] RSP: 002b:00007f3d2a45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1874.675485][ T6817] RAX: ffffffffffffffda RBX: 00007f3d29815fa0 RCX: 00007f3d2959c819 [ 1874.683458][ T6817] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 1874.691435][ T6817] RBP: 00007f3d2a45f090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.699406][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.707381][ T6817] R13: 00007f3d29816038 R14: 00007f3d29815fa0 R15: 00007ffd82607f28 [ 1874.715393][ T6817] [ 1874.744324][ T6819] netlink: 'syz.0.12186': attribute type 10 has an invalid length. [ 1874.761281][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12186'. [ 1874.772652][ T6819] bridge0: port 4(ipvlan1) entered blocking state [ 1874.779290][ T6819] bridge0: port 4(ipvlan1) entered disabled state [ 1874.799742][ T6819] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1874.824350][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12188'. [ 1874.915629][ T6828] FAULT_INJECTION: forcing a failure. [ 1874.915629][ T6828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.943099][ T6827] netlink: 'syz.3.12190': attribute type 2 has an invalid length. [ 1874.951279][ T6827] netlink: 'syz.3.12190': attribute type 1 has an invalid length. [ 1874.959206][ T6827] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1874.970060][ T6828] CPU: 0 PID: 6828 Comm: syz.1.12189 Not tainted syzkaller #0 [ 1874.977550][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.987609][ T6828] Call Trace: [ 1874.990887][ T6828] [ 1874.993815][ T6828] dump_stack_lvl+0x188/0x24e [ 1874.998515][ T6828] ? show_regs_print_info+0x12/0x12 [ 1875.003720][ T6828] ? load_image+0x400/0x400 [ 1875.008237][ T6828] ? __lock_acquire+0x7d10/0x7d10 [ 1875.013272][ T6828] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1875.019020][ T6828] should_fail_ex+0x399/0x4d0 [ 1875.023723][ T6828] _copy_from_user+0x2c/0x170 [ 1875.028427][ T6828] ___sys_sendmsg+0x1c3/0x360 [ 1875.033123][ T6828] ? __sys_sendmsg+0x290/0x290 [ 1875.037924][ T6828] ? __lock_acquire+0x7d10/0x7d10 [ 1875.043002][ T6828] __se_sys_sendmsg+0x1bb/0x2a0 [ 1875.047863][ T6828] ? __x64_sys_sendmsg+0x80/0x80 [ 1875.052833][ T6828] ? lockdep_hardirqs_on+0x94/0x140 [ 1875.058047][ T6828] do_syscall_64+0x4c/0xa0 [ 1875.062467][ T6828] ? clear_bhb_loop+0x60/0xb0 [ 1875.067147][ T6828] ? clear_bhb_loop+0x60/0xb0 [ 1875.071832][ T6828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1875.077731][ T6828] RIP: 0033:0x7f88bd79c819 [ 1875.082146][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.101760][ T6828] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.110176][ T6828] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1875.118157][ T6828] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1875.126127][ T6828] RBP: 00007f88be684090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.134096][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.142066][ T6828] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1875.150081][ T6828] [ 1875.163661][ T6831] netlink: 'syz.2.12191': attribute type 40 has an invalid length. [ 1875.183317][ T6827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1875.362475][ T6835] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.12192'. [ 1875.402355][ T6839] FAULT_INJECTION: forcing a failure. [ 1875.402355][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.420676][ T6839] CPU: 1 PID: 6839 Comm: syz.3.12195 Not tainted syzkaller #0 [ 1875.428164][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1875.438227][ T6839] Call Trace: [ 1875.441510][ T6839] [ 1875.444444][ T6839] dump_stack_lvl+0x188/0x24e [ 1875.449150][ T6839] ? show_regs_print_info+0x12/0x12 [ 1875.454377][ T6839] ? load_image+0x400/0x400 [ 1875.458896][ T6839] ? __lock_acquire+0x7d10/0x7d10 [ 1875.463942][ T6839] should_fail_ex+0x399/0x4d0 [ 1875.468636][ T6839] _copy_from_user+0x2c/0x170 [ 1875.473332][ T6839] __sys_bpf+0x2ea/0x780 [ 1875.477616][ T6839] ? bpf_link_show_fdinfo+0x380/0x380 [ 1875.483032][ T6839] ? lock_chain_count+0x20/0x20 [ 1875.487912][ T6839] __x64_sys_bpf+0x78/0x90 [ 1875.492340][ T6839] do_syscall_64+0x4c/0xa0 [ 1875.496768][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 1875.501479][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 1875.506177][ T6839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1875.512084][ T6839] RIP: 0033:0x7f5148f9c819 [ 1875.516507][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.536126][ T6839] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1875.544561][ T6839] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1875.552549][ T6839] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1875.560532][ T6839] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.562413][ T6835] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1875.568500][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.568516][ T6839] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1875.568548][ T6839] [ 1875.596367][ T6835] CPU: 0 PID: 6835 Comm: syz.0.12192 Not tainted syzkaller #0 [ 1875.603851][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1875.613908][ T6835] Call Trace: [ 1875.617178][ T6835] [ 1875.620102][ T6835] dump_stack_lvl+0x188/0x24e [ 1875.624789][ T6835] ? show_regs_print_info+0x12/0x12 [ 1875.629994][ T6835] ? load_image+0x400/0x400 [ 1875.634516][ T6835] sysfs_warn_dup+0x8a/0xa0 [ 1875.639020][ T6835] sysfs_do_create_link_sd+0xc0/0x110 [ 1875.644395][ T6835] device_add+0x7ed/0xfb0 [ 1875.648732][ T6835] wiphy_register+0x1d9f/0x2ac0 [ 1875.653604][ T6835] ? cfg80211_event_work+0x40/0x40 [ 1875.658721][ T6835] ? minstrel_ht_alloc+0x894/0xa20 [ 1875.663865][ T6835] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1875.669957][ T6835] ieee80211_register_hw+0x2d00/0x39f0 [ 1875.675441][ T6835] ? ieee80211_register_hw+0xf11/0x39f0 [ 1875.680993][ T6835] ? ieee80211_register_hw+0xf11/0x39f0 [ 1875.686554][ T6835] ? ieee80211_tasklet_handler+0x20/0x20 [ 1875.692208][ T6835] ? memset+0x1e/0x40 [ 1875.696193][ T6835] ? __hrtimer_init+0x186/0x270 [ 1875.701049][ T6835] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1875.706801][ T6835] hwsim_new_radio_nl+0xafa/0xce0 [ 1875.711843][ T6835] genl_family_rcv_msg_doit+0x22a/0x330 [ 1875.717390][ T6835] ? end_current_label_crit_section+0x170/0x170 [ 1875.723635][ T6835] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1875.729533][ T6835] ? bpf_lsm_capable+0x5/0x10 [ 1875.734211][ T6835] ? security_capable+0x85/0xb0 [ 1875.739067][ T6835] genl_rcv_msg+0x604/0x790 [ 1875.743583][ T6835] ? genl_bind+0x360/0x360 [ 1875.747991][ T6835] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1875.754339][ T6835] netlink_rcv_skb+0x1fb/0x450 [ 1875.759105][ T6835] ? genl_bind+0x360/0x360 [ 1875.763525][ T6835] ? netlink_ack+0x1170/0x1170 [ 1875.768298][ T6835] ? down_read+0x1a8/0x2d0 [ 1875.772721][ T6835] genl_rcv+0x24/0x40 [ 1875.776695][ T6835] netlink_unicast+0x74d/0x8d0 [ 1875.781471][ T6835] netlink_sendmsg+0x8ad/0xbd0 [ 1875.786248][ T6835] ? netlink_getsockopt+0x550/0x550 [ 1875.791451][ T6835] ? aa_sock_msg_perm+0x94/0x150 [ 1875.796386][ T6835] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1875.801667][ T6835] ? security_socket_sendmsg+0x7c/0xa0 [ 1875.807131][ T6835] ? netlink_getsockopt+0x550/0x550 [ 1875.812329][ T6835] ____sys_sendmsg+0x5be/0x970 [ 1875.817106][ T6835] ? __sys_sendmsg_sock+0x30/0x30 [ 1875.822133][ T6835] ? __import_iovec+0x315/0x500 [ 1875.826991][ T6835] ? import_iovec+0x6f/0xa0 [ 1875.831492][ T6835] ___sys_sendmsg+0x2a2/0x360 [ 1875.836173][ T6835] ? try_to_wake_up+0x6ae/0x1080 [ 1875.841117][ T6835] ? __sys_sendmsg+0x290/0x290 [ 1875.845955][ T6835] __se_sys_sendmsg+0x1bb/0x2a0 [ 1875.850810][ T6835] ? __x64_sys_sendmsg+0x80/0x80 [ 1875.855765][ T6835] ? lockdep_hardirqs_on+0x94/0x140 [ 1875.860969][ T6835] do_syscall_64+0x4c/0xa0 [ 1875.865390][ T6835] ? clear_bhb_loop+0x60/0xb0 [ 1875.870085][ T6835] ? clear_bhb_loop+0x60/0xb0 [ 1875.874772][ T6835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1875.880667][ T6835] RIP: 0033:0x7f5060d9c819 [ 1875.885079][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.904681][ T6835] RSP: 002b:00007f5061cc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.913089][ T6835] RAX: ffffffffffffffda RBX: 00007f5061016090 RCX: 00007f5060d9c819 [ 1875.921074][ T6835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1875.929052][ T6835] RBP: 00007f5060e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1875.937015][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1875.944981][ T6835] R13: 00007f5061016128 R14: 00007f5061016090 R15: 00007ffcfffdfea8 [ 1875.952980][ T6835] [ 1876.018502][ T6841] netlink: 'syz.1.12193': attribute type 10 has an invalid length. [ 1876.053689][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12193'. [ 1876.077495][ T6841] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1876.107472][ T6845] FAULT_INJECTION: forcing a failure. [ 1876.107472][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1876.162581][ T6845] CPU: 1 PID: 6845 Comm: syz.3.12197 Not tainted syzkaller #0 [ 1876.170088][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1876.180167][ T6845] Call Trace: [ 1876.183458][ T6845] [ 1876.186405][ T6845] dump_stack_lvl+0x188/0x24e [ 1876.191115][ T6845] ? show_regs_print_info+0x12/0x12 [ 1876.196331][ T6845] ? load_image+0x400/0x400 [ 1876.200846][ T6845] ? __lock_acquire+0x7d10/0x7d10 [ 1876.205898][ T6845] should_fail_ex+0x399/0x4d0 [ 1876.210595][ T6845] _copy_from_user+0x2c/0x170 [ 1876.215297][ T6845] ___sys_sendmsg+0x1c3/0x360 [ 1876.219997][ T6845] ? __sys_sendmsg+0x290/0x290 [ 1876.224803][ T6845] ? __lock_acquire+0x7d10/0x7d10 [ 1876.229870][ T6845] __se_sys_sendmsg+0x1bb/0x2a0 [ 1876.234737][ T6845] ? ct_nmi_exit+0x145/0x1c0 [ 1876.239339][ T6845] ? __x64_sys_sendmsg+0x80/0x80 [ 1876.244301][ T6845] ? lockdep_hardirqs_on+0x94/0x140 [ 1876.249507][ T6845] do_syscall_64+0x4c/0xa0 [ 1876.253927][ T6845] ? clear_bhb_loop+0x60/0xb0 [ 1876.258606][ T6845] ? clear_bhb_loop+0x60/0xb0 [ 1876.263281][ T6845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1876.269170][ T6845] RIP: 0033:0x7f5148f9c819 [ 1876.273582][ T6845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.293184][ T6845] RSP: 002b:00007f5149df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1876.301600][ T6845] RAX: ffffffffffffffda RBX: 00007f5149215fa0 RCX: 00007f5148f9c819 [ 1876.309566][ T6845] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000006 [ 1876.317536][ T6845] RBP: 00007f5149df1090 R08: 0000000000000000 R09: 0000000000000000 [ 1876.325502][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1876.333466][ T6845] R13: 00007f5149216038 R14: 00007f5149215fa0 R15: 00007ffd59df2e08 [ 1876.341446][ T6845] [ 1876.400434][T20407] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1876.498655][ T6849] netlink: 'syz.4.12199': attribute type 39 has an invalid length. [ 1876.990255][ T6861] netlink: 'syz.2.12202': attribute type 10 has an invalid length. [ 1877.514736][ T6881] device syzkaller0 entered promiscuous mode [ 1877.598425][ T6883] device syzkaller0 entered promiscuous mode [ 1886.127319][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.196521][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1886.232490][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1886.240292][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1886.250165][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1886.258990][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1886.269940][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1886.335928][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.546063][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.779696][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.072986][ T6979] device syzkaller0 entered promiscuous mode [ 1888.315581][T20407] Bluetooth: hci0: command 0x0409 tx timeout [ 1889.961210][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 1890.381217][T20407] Bluetooth: hci0: command 0x041b tx timeout [ 1891.069151][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.091737][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.131882][ T6966] device bridge_slave_0 entered promiscuous mode [ 1891.430110][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.442189][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.467680][ T6966] device bridge_slave_1 entered promiscuous mode [ 1891.712708][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.736359][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.034672][ T6966] team0: Port device team_slave_0 added [ 1892.183245][ T6966] team0: Port device team_slave_1 added [ 1892.420357][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.449144][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1892.481320][T20407] Bluetooth: hci0: command 0x040f tx timeout [ 1892.482234][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active Stopping sshd: [ 1893.542899][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.549964][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.654807][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active stopped /usr/sbin/sshd (pid 4030) OK Stopping crond: stopped /usr/sbin/crond (pid 4011) OK [ 1894.449880][ T6966] device hsr_slave_0 entered promiscuous mode [ 1894.504799][ T6966] device hsr_slave_1 entered promiscuous mode [ 1894.527457][ T46] device hsr_slave_0 left promiscuous mode [ 1894.541174][ T5538] Bluetooth: hci0: command 0x0419 tx timeout [ 1894.551296][ T46] device hsr_slave_1 left promiscuous mode [ 1894.574847][ T46] bridge0: port 1(hsr0) entered disabled state Stopping dhcpcd... [ 1894.608801][ T46] device bridge_slave_1 left promiscuous mode [ 1894.642085][ T46] bridge0: port 2(bridge_slave_1) entered disabled state stopped /sbin/dhcpcd (pid 3931) [ 1894.732113][ T46] device veth0_macvtap left promiscuous mode [ 1894.738832][ T46] device veth1_vlan left promiscuous mode [ 1894.748565][ T46] device veth0_vlan left promiscuous mode Stopping network: [ 1896.224355][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1896.271362][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1897.068521][ T7088] device syzkaller0 entered promiscuous mode OK [ 1898.192965][ T7103] [ 1898.195676][ T7103] ============================= [ 1898.200589][ T7103] WARNING: suspicious RCU usage [ 1898.205656][ T7103] syzkaller #0 Not tainted [ 1898.210086][ T7103] ----------------------------- [ 1898.215081][ T7103] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1898.223765][ T7103] [ 1898.223765][ T7103] other info that might help us debug this: [ 1898.223765][ T7103] [ 1898.234047][ T7103] [ 1898.234047][ T7103] rcu_scheduler_active = 2, debug_locks = 1 [ 1898.242218][ T7103] 1 lock held by syz.1.12265/7103: [ 1898.247625][ T7103] #0: ffffffff8cb2d720 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1898.258178][ T7103] [ 1898.258178][ T7103] stack backtrace: [ 1898.264135][ T7103] CPU: 1 PID: 7103 Comm: syz.1.12265 Not tainted syzkaller #0 [ 1898.271703][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1898.281775][ T7103] Call Trace: [ 1898.285088][ T7103] [ 1898.288023][ T7103] dump_stack_lvl+0x188/0x24e [ 1898.292718][ T7103] ? show_regs_print_info+0x12/0x12 [ 1898.297932][ T7103] ? load_image+0x400/0x400 [ 1898.302451][ T7103] lockdep_rcu_suspicious+0x1dd/0x300 [ 1898.307850][ T7103] get_callchain_entry+0x2a5/0x3b0 [ 1898.312987][ T7103] get_perf_callchain+0xc4/0x490 [ 1898.317940][ T7103] ? put_callchain_entry+0xb0/0xb0 [ 1898.323063][ T7103] ? plist_add+0x3d4/0x480 [ 1898.327488][ T7103] ? verify_lock_unused+0x140/0x140 [ 1898.332713][ T7103] __bpf_get_stack+0x2de/0x520 [ 1898.337492][ T7103] ? stack_map_get_build_id_offset+0x970/0x970 [ 1898.343673][ T7103] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1898.349308][ T7103] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1898.354533][ T7103] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1898.359994][ T7103] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 1898.365370][ T7103] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1898.371008][ T7103] ? sock_gen_cookie+0x60/0x60 [ 1898.375780][ T7103] ? sock_gen_cookie+0x60/0x60 [ 1898.380543][ T7103] bpf_prog_test_run+0x31e/0x390 [ 1898.385491][ T7103] __sys_bpf+0x62b/0x780 [ 1898.389739][ T7103] ? bpf_link_show_fdinfo+0x380/0x380 [ 1898.395115][ T7103] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1898.401021][ T7103] ? lock_chain_count+0x20/0x20 [ 1898.405890][ T7103] __x64_sys_bpf+0x78/0x90 [ 1898.410314][ T7103] do_syscall_64+0x4c/0xa0 [ 1898.414734][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 1898.419413][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 1898.424090][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.429983][ T7103] RIP: 0033:0x7f88bd79c819 [ 1898.434393][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.454016][ T7103] RSP: 002b:00007f88be684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1898.462438][ T7103] RAX: ffffffffffffffda RBX: 00007f88bda15fa0 RCX: 00007f88bd79c819 [ 1898.470429][ T7103] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1898.478406][ T7103] RBP: 00007f88bd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1898.486380][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.494365][ T7103] R13: 00007f88bda16038 R14: 00007f88bda15fa0 R15: 00007ffde1867aa8 [ 1898.502378][ T7103] Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 1901.745674][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK [ 1901.895091][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.056175][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping syslogd: [ 1902.154181][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 stopped /sbin/syslogd (pid 3619) OK [ 1902.384273][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.496585][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.639077][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.749475][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 umount: can't remount tmpfs read-only [ 1902.956957][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.076093][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.216126][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.315768][ T46] bond0: (slave netdevsim0): Releasing backup interface [ 1903.348171][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 umount: devtmpfs busy - remounted read-only [ 1904.218310][ T7140] EXT4-fs (sda1): re-mounted. Quota mode: none. The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 1905.359964][ T46] device vlan0 left promiscuous mode [ 1905.365987][ T46] @: port 1(vlan0) entered disabled state [ 1905.375737][ T46] device bridge_slave_1 left promiscuous mode [ 1905.381946][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.393053][ T46] device hsr_slave_0 left promiscuous mode [ 1905.399145][ T46] device hsr_slave_1 left promiscuous mode [ 1905.409330][ T46] device hsr_slave_0 left promiscuous mode [ 1905.415493][ T46] device hsr_slave_1 left promiscuous mode [ 1905.422154][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1905.429544][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1905.437159][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1905.444631][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1905.452129][ T46] bridge0: port 3(batadv0) entered disabled state [ 1905.459234][ T46] device bridge_slave_1 left promiscuous mode [ 1905.465464][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.474430][ T46] device bridge_slave_0 left promiscuous mode [ 1905.480543][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.516271][ T46] device veth1_macvtap left promiscuous mode [ 1905.522329][ T46] device veth0_macvtap left promiscuous mode [ 1905.528365][ T46] device veth1_vlan left promiscuous mode [ 1905.534237][ T46] device veth0_vlan left promiscuous mode [ 1905.541618][ T46] device veth1_macvtap left promiscuous mode [ 1905.547637][ T46] device veth0_macvtap left promiscuous mode [ 1905.553743][ T46] device veth1_vlan left promiscuous mode [ 1905.559465][ T46] device veth0_vlan left promiscuous mode [ 1905.566128][ T46] device veth1_macvtap left promiscuous mode [ 1905.575358][ T46] device veth0_macvtap left promiscuous mode [ 1905.581494][ T46] device veth1_vlan left promiscuous mode [ 1905.587211][ T46] device veth0_vlan left promiscuous mode [ 1906.138660][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1906.172458][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1906.317054][ T7157] kvm: exiting hardware virtualization [ 1906.349857][ T7157] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1906.367811][ T7157] ACPI: PM: Preparing to enter system sleep state S5 [ 1906.382446][ T7157] reboot: Power down serialport: VM disconnected.