last executing test programs: 35.092625396s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 32.49818734s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 26.993602721s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 18.867207565s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 13.654735114s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 11.016430999s ago: executing program 3 (id=1257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)='\v', 0x1}], 0x1, &(0x7f0000001ac0)=ANY=[@ANYBLOB="14000000000000000100020001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2], 0x38}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010d007", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 9.791653566s ago: executing program 3 (id=1266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x1000}) 8.775619331s ago: executing program 3 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f00000013c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.968808586s ago: executing program 2 (id=770): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000900000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 6.268762466s ago: executing program 3 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) 6.248066665s ago: executing program 0 (id=1293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000040ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 6.191275156s ago: executing program 3 (id=1294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=r4, @ANYBLOB="06000000000000000000000000000000000000001504b3385e463952bcdfe120d8a6cf60457ac70a52ab869ff9eef573fc487d3f1803a157136a9f11ffb7cb0cce8bb7245948e4074bbb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x20c82, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) 6.173784346s ago: executing program 0 (id=1296): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2880, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) write$cgroup_type(r6, &(0x7f0000000580), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r4, &(0x7f0000000500)="17e6b507da60c2ded9cb7b7291020dc4f82d307024a6820182c667056685f5559ca6b1c18ba06449a7bcb956c70b59250d84124bbd6efe308f87ef24b4d5acc22c438c406075b48b9a0df7d25e239459968c8b7b63038cb0e6fda155851bef6f5eeb38bad7249ebedd3211475be362749d9e4c4c12f717fb6ef461beebe938", &(0x7f0000000580)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000005c0)="b9ff4b0e4932feb80086f51081000c5c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.155833486s ago: executing program 4 (id=1297): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) 6.115700266s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="8a476c584f5244fd58c3222500000000e43f6f8c2434f40435c1285c43e97da15f57e94c53ac48786db11c1b43e7f12227760992601a802c8b8ebc4c1e7b24855053d426cb07ec533867c8a0d5665856b93d6efebd45b2460a6b03512f43a5483bbda05f54103befd76351046aacb6d1957cedbc172b54de39e5e31ac6899b79aecb896794220c20504593d2324557cd0c4de641c755188421da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r5}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff00"/28], 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 2.029003839s ago: executing program 4 (id=1301): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r1}, 0x10) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) close(0xffffffffffffffff) 1.938424159s ago: executing program 0 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f00000013c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.190460144s ago: executing program 1 (id=1303): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bd872786f0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000004b000000040000000004000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000000008000000000000"], 0x50) (async) getpid() (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005e70000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffff7fffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000deff00008ad333b9000000000000000103000000000000001556958b70640609a43404031f90a0e7124347d1f0c3eb3bf08207c0bdb86b16d58e70eccf5cf387ce63c4bc96fbb7a1d5cd35446f758a5a1e5b944fc11ba34571e9e2e7b96095fb2559a81ba375178db730d63f9ce750fa39fabd18129c8aab8c2e7ab4e3a0c36092e8dd382321eb8f914b893d2e463ec0ad85d55633839ad87c9a16d78f3d4535c3c73509c9a4d24fdd9a62be64fd7bbc954dc7d0ac275897c1bd98b6fde0f8dd5b73b57292cc409e65a256a8cac2684ca81c5e33861f4a1cc19ca4fa19bc22"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r3, @ANYBLOB="1800000000044700000000000000000018110000de296bcb3f43815d3b086bd06f0ee34ac4c41bfa38b114670da368a1bfc100be852bc57e720e1b46daf6e20e6de58e7b06d48bfc478090123f0e5be4c2057919f8e8dcb5da78044c92a64766251bd1c61d96f40fe7b7827c8902e6403cf18fdd3b27ee1b50065e5fca49daf184e581ceae5c35de5404a544532fdf169f581c41bc0a803615625b2d2c0680871ddabbd42ba3617135e117f1da4357315c424b1d5dc56451901dcd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0xa) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00080000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) 1.100512744s ago: executing program 1 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) 1.069238044s ago: executing program 4 (id=1305): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000a000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000001800000000000088f86b789c0900000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) 1.055739194s ago: executing program 1 (id=1306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x80409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fef2000e40000200875a65969ff57b00ff0200000000000000000a0000000001"], 0xfdef) 1.050466194s ago: executing program 0 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 975.210035ms ago: executing program 1 (id=1309): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) 973.202974ms ago: executing program 0 (id=1310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000040000000000800905000000003000"], &(0x7f0000000180)=""/92, 0x27, 0x5c, 0x1, 0x3, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x2a, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 954.994215ms ago: executing program 1 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff850000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bff56d052600000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 915.751585ms ago: executing program 4 (id=1312): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e7c2d0ce3d715aabffffffff00000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1100, 0xffffffffffffffff, 0x0) 23.28047ms ago: executing program 3 (id=1313): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="8a476c584f5244fd58c3222500000000e43f6f8c2434f40435c1285c43e97da15f57e94c53ac48786db11c1b43e7f12227760992601a802c8b8ebc4c1e7b24855053d426cb07ec533867c8a0d5665856b93d6efebd45b2460a6b03512f43a5483bbda05f54103befd76351046aacb6d1957cedbc172b54de39e5e31ac6899b79aecb896794220c20504593d2324557cd0c4de641c755188421da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r5}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff00"/28], 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 22.79007ms ago: executing program 4 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f00000013c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 22.26398ms ago: executing program 1 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="000000feffffffffffffff00fcffff51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="f9ff000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feff"], 0x48) 0s ago: executing program 0 (id=1315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(r6, &(0x7f0000000000), 0x15) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x20, &(0x7f0000000580)={&(0x7f0000000940)=""/4096, 0x1000, 0x0, &(0x7f0000001940)=""/252, 0xfc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1b, 0x1c, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x6d}, @ldst={0x1, 0x3, 0x0, 0x6, 0x9, 0x50, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff9db}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x4, '\x00', r8, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x2, 0x1ff, 0x4}, 0x10, r9, r0, 0x0, &(0x7f0000001a40)=[r1], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): loc_percpu_gfp+0x27/0x30 [ 107.498794][ T2341] bpf_map_alloc_percpu+0xe6/0x160 [ 107.503742][ T2341] htab_map_alloc+0xcb8/0x1650 [ 107.508355][ T2341] map_create+0x411/0x2050 [ 107.512599][ T2341] __sys_bpf+0x296/0x760 [ 107.516679][ T2341] ? bpf_ringbuf_discard+0x12a/0x180 [ 107.521800][ T2341] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 107.527011][ T2341] __x64_sys_bpf+0x7c/0x90 [ 107.531268][ T2341] x64_sys_call+0x87f/0x9a0 [ 107.535597][ T2341] do_syscall_64+0x3b/0xb0 [ 107.539855][ T2341] ? clear_bhb_loop+0x35/0x90 [ 107.544368][ T2341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.550088][ T2341] RIP: 0033:0x7fd641ba0719 [ 107.554340][ T2341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.573789][ T2341] RSP: 002b:00007fd640819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.582124][ T2341] RAX: ffffffffffffffda RBX: 00007fd641d57f80 RCX: 00007fd641ba0719 [ 107.589929][ T2341] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 107.597738][ T2341] RBP: 00007fd640819090 R08: 0000000000000000 R09: 0000000000000000 [ 107.605548][ T2341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.613456][ T2341] R13: 0000000000000000 R14: 00007fd641d57f80 R15: 00007ffdf2693c98 [ 107.621267][ T2341] [ 107.894081][ T2367] bond_slave_1: mtu less than device minimum [ 108.461750][ T30] audit: type=1400 audit(1731808402.086:134): avc: denied { create } for pid=2380 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.573450][ T2397] bond_slave_1: mtu less than device minimum [ 108.735441][ T291] syz-executor (291) used greatest stack depth: 20688 bytes left [ 109.090291][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.097293][ T2413] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.104855][ T2413] device bridge_slave_0 entered promiscuous mode [ 109.111859][ T2413] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.118937][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.126797][ T2413] device bridge_slave_1 entered promiscuous mode [ 109.208630][ T2413] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.215523][ T2413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.222670][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.229540][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.258743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.267122][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.274417][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.283709][ T310] device bridge_slave_1 left promiscuous mode [ 109.289694][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.297576][ T310] device bridge_slave_0 left promiscuous mode [ 109.303582][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.311477][ T310] device veth1_macvtap left promiscuous mode [ 109.413387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.421851][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.428759][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.439684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.448477][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.455369][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.487559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.504208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.529390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.542579][ T2413] device veth0_vlan entered promiscuous mode [ 110.228556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.238405][ T2433] FAULT_INJECTION: forcing a failure. [ 110.238405][ T2433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.242523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.251435][ T2433] CPU: 0 PID: 2433 Comm: syz.3.775 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 110.268073][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.277969][ T2433] Call Trace: [ 110.281100][ T2433] [ 110.283866][ T2433] dump_stack_lvl+0x151/0x1c0 [ 110.288379][ T2433] ? io_uring_drop_tctx_refs+0x190/0x190 [ 110.293853][ T2433] ? __kasan_check_read+0x11/0x20 [ 110.298705][ T2433] dump_stack+0x15/0x20 [ 110.302699][ T2433] should_fail+0x3c6/0x510 [ 110.306954][ T2433] should_fail_usercopy+0x1a/0x20 [ 110.311815][ T2433] copy_page_from_iter_atomic+0x423/0x10e0 [ 110.317454][ T2433] ? pipe_zero+0x4e0/0x4e0 [ 110.321708][ T2433] generic_perform_write+0x360/0x750 [ 110.326826][ T2433] ? __mark_inode_dirty+0x54e/0xa50 [ 110.331870][ T2433] ? grab_cache_page_write_begin+0xa0/0xa0 [ 110.337501][ T2433] ? file_remove_privs+0x610/0x610 [ 110.342449][ T2433] ? rwsem_write_trylock+0x153/0x340 [ 110.347569][ T2433] ? rwsem_mark_wake+0x770/0x770 [ 110.352349][ T2433] __generic_file_write_iter+0x25b/0x4b0 [ 110.357824][ T2433] generic_file_write_iter+0xaf/0x1c0 [ 110.363020][ T2433] vfs_write+0xd5d/0x1110 [ 110.367188][ T2433] ? putname+0xfa/0x150 [ 110.371182][ T2433] ? file_end_write+0x1c0/0x1c0 [ 110.375962][ T2433] ? mutex_lock+0xb6/0x1e0 [ 110.380218][ T2433] ? wait_for_completion_killable_timeout+0x10/0x10 [ 110.386637][ T2433] ? __fdget_pos+0x2e7/0x3a0 [ 110.391065][ T2433] ? ksys_write+0x77/0x2c0 [ 110.395314][ T2433] ksys_write+0x199/0x2c0 [ 110.399484][ T2433] ? __ia32_sys_read+0x90/0x90 [ 110.404237][ T2433] ? debug_smp_processor_id+0x17/0x20 [ 110.409439][ T2433] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 110.415344][ T2433] __x64_sys_write+0x7b/0x90 [ 110.419766][ T2433] x64_sys_call+0x2f/0x9a0 [ 110.424017][ T2433] do_syscall_64+0x3b/0xb0 [ 110.428269][ T2433] ? clear_bhb_loop+0x35/0x90 [ 110.432781][ T2433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.438512][ T2433] RIP: 0033:0x7fa33b983719 [ 110.442763][ T2433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.462208][ T2433] RSP: 002b:00007fa33a5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.470448][ T2433] RAX: ffffffffffffffda RBX: 00007fa33bb3af80 RCX: 00007fa33b983719 [ 110.478262][ T2433] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000005 [ 110.486071][ T2433] RBP: 00007fa33a5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 110.493882][ T2433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.501695][ T2433] R13: 0000000000000000 R14: 00007fa33bb3af80 R15: 00007ffee06d76c8 [ 110.509510][ T2433] [ 110.514540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.522160][ T2435] bond_slave_1: mtu less than device minimum [ 110.538975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.568987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.621532][ T2413] device veth1_macvtap entered promiscuous mode [ 110.672218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.687196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.695570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.319995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.331605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.345612][ T30] audit: type=1400 audit(1731808404.976:135): avc: denied { mounton } for pid=2413 comm="syz-executor" path="/root/syzkaller.0pyVQ4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.372859][ T30] audit: type=1400 audit(1731808404.976:136): avc: denied { mount } for pid=2413 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.395526][ T30] audit: type=1400 audit(1731808405.006:137): avc: denied { mounton } for pid=2413 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 111.507117][ T30] audit: type=1400 audit(1731808405.136:138): avc: denied { create } for pid=2454 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.639634][ T30] audit: type=1400 audit(1731808405.156:139): avc: denied { write } for pid=2454 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.714239][ T2468] bond_slave_1: mtu less than device minimum [ 111.806254][ T2477] FAULT_INJECTION: forcing a failure. [ 111.806254][ T2477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.819199][ T2477] CPU: 1 PID: 2477 Comm: syz.4.792 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 111.828796][ T2477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.838643][ T2477] Call Trace: [ 111.841768][ T2477] [ 111.844543][ T2477] dump_stack_lvl+0x151/0x1c0 [ 111.849090][ T2477] ? io_uring_drop_tctx_refs+0x190/0x190 [ 111.854526][ T2477] ? __kasan_check_read+0x11/0x20 [ 111.859387][ T2477] dump_stack+0x15/0x20 [ 111.863376][ T2477] should_fail+0x3c6/0x510 [ 111.867639][ T2477] should_fail_usercopy+0x1a/0x20 [ 111.872577][ T2477] copy_page_from_iter_atomic+0x423/0x10e0 [ 111.878223][ T2477] ? pipe_zero+0x4e0/0x4e0 [ 111.882474][ T2477] generic_perform_write+0x360/0x750 [ 111.887599][ T2477] ? grab_cache_page_write_begin+0xa0/0xa0 [ 111.893233][ T2477] ? file_remove_privs+0x610/0x610 [ 111.898266][ T2477] ? rwsem_write_trylock+0x153/0x340 [ 111.903392][ T2477] ? rwsem_mark_wake+0x770/0x770 [ 111.908161][ T2477] __generic_file_write_iter+0x25b/0x4b0 [ 111.913634][ T2477] generic_file_write_iter+0xaf/0x1c0 [ 111.918838][ T2477] vfs_write+0xd5d/0x1110 [ 111.923002][ T2477] ? putname+0xfa/0x150 [ 111.927087][ T2477] ? file_end_write+0x1c0/0x1c0 [ 111.931772][ T2477] ? mutex_lock+0xb6/0x1e0 [ 111.936033][ T2477] ? wait_for_completion_killable_timeout+0x10/0x10 [ 111.942446][ T2477] ? __fdget_pos+0x2e7/0x3a0 [ 111.946869][ T2477] ? ksys_write+0x77/0x2c0 [ 111.951127][ T2477] ksys_write+0x199/0x2c0 [ 111.955295][ T2477] ? __ia32_sys_read+0x90/0x90 [ 111.959892][ T2477] ? debug_smp_processor_id+0x17/0x20 [ 111.965100][ T2477] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 111.971003][ T2477] __x64_sys_write+0x7b/0x90 [ 111.975433][ T2477] x64_sys_call+0x2f/0x9a0 [ 111.979682][ T2477] do_syscall_64+0x3b/0xb0 [ 111.983932][ T2477] ? clear_bhb_loop+0x35/0x90 [ 111.988447][ T2477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.994175][ T2477] RIP: 0033:0x7f77f9759719 [ 111.998429][ T2477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.017870][ T2477] RSP: 002b:00007f77f83d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.026118][ T2477] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f9759719 [ 112.033927][ T2477] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000007 [ 112.041738][ T2477] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 112.049548][ T2477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.057357][ T2477] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 112.065177][ T2477] [ 112.101454][ T2465] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.114870][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.122216][ T2465] device bridge_slave_0 entered promiscuous mode [ 112.169126][ T2465] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.182647][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.189992][ T2465] device bridge_slave_1 entered promiscuous mode [ 115.181331][ T2483] device syzkaller0 entered promiscuous mode [ 115.214318][ T2499] bond_slave_1: mtu less than device minimum [ 115.335509][ T30] audit: type=1400 audit(1731808408.966:140): avc: denied { append } for pid=2507 comm="syz.3.804" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.359284][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.368324][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.397183][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.414045][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.462877][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.469753][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.483140][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.491434][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.500764][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.507652][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.516951][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.538692][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.547234][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.562363][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.584380][ T310] device bridge_slave_1 left promiscuous mode [ 115.633106][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.705118][ T310] device bridge_slave_0 left promiscuous mode [ 115.711123][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.802539][ T310] device veth1_macvtap left promiscuous mode [ 115.828725][ T310] device veth0_vlan left promiscuous mode [ 116.210493][ T2465] device veth0_vlan entered promiscuous mode [ 116.245667][ T2527] bond_slave_1: mtu less than device minimum [ 116.253193][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.282443][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.323763][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.351351][ T2465] device veth1_macvtap entered promiscuous mode [ 116.366446][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.378966][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.393850][ T30] audit: type=1400 audit(1731808410.026:141): avc: denied { setopt } for pid=2536 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.399451][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.426845][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.437599][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.496096][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.511667][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.525179][ T30] audit: type=1400 audit(1731808410.156:142): avc: denied { read } for pid=2549 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.578478][ T2556] bond_slave_1: mtu less than device minimum [ 116.646035][ T2561] FAULT_INJECTION: forcing a failure. [ 116.646035][ T2561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.732882][ T2561] CPU: 1 PID: 2561 Comm: syz.4.825 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 116.742541][ T2561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.752428][ T2561] Call Trace: [ 116.755551][ T2561] [ 116.758329][ T2561] dump_stack_lvl+0x151/0x1c0 [ 116.762842][ T2561] ? io_uring_drop_tctx_refs+0x190/0x190 [ 116.768313][ T2561] ? bpf_ringbuf_reserve+0x5c/0x70 [ 116.773262][ T2561] dump_stack+0x15/0x20 [ 116.777250][ T2561] should_fail+0x3c6/0x510 [ 116.781505][ T2561] should_fail_usercopy+0x1a/0x20 [ 116.786366][ T2561] _copy_from_user+0x20/0xd0 [ 116.790796][ T2561] ___sys_recvmsg+0x150/0x690 [ 116.795310][ T2561] ? __sys_recvmsg+0x260/0x260 [ 116.799915][ T2561] ? __fdget+0x1bc/0x240 [ 116.803988][ T2561] __x64_sys_recvmsg+0x1dc/0x2b0 [ 116.808758][ T2561] ? ___sys_recvmsg+0x690/0x690 [ 116.813447][ T2561] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 116.819346][ T2561] ? exit_to_user_mode_prepare+0x39/0xa0 [ 116.824817][ T2561] x64_sys_call+0x171/0x9a0 [ 116.829155][ T2561] do_syscall_64+0x3b/0xb0 [ 116.833407][ T2561] ? clear_bhb_loop+0x35/0x90 [ 116.837921][ T2561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.843655][ T2561] RIP: 0033:0x7f77f9759719 [ 116.847901][ T2561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.867344][ T2561] RSP: 002b:00007f77f83d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 116.875588][ T2561] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f9759719 [ 116.883403][ T2561] RDX: 0000000000000020 RSI: 00000000200014c0 RDI: 0000000000000005 [ 116.891214][ T2561] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 116.899116][ T2561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.906922][ T2561] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 116.914742][ T2561] [ 117.127745][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.134727][ T2564] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.144456][ T2564] device bridge_slave_0 entered promiscuous mode [ 117.151480][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.159829][ T2564] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.167220][ T2564] device bridge_slave_1 entered promiscuous mode [ 117.831717][ T2603] FAULT_INJECTION: forcing a failure. [ 117.831717][ T2603] name failslab, interval 1, probability 0, space 0, times 0 [ 117.844383][ T2603] CPU: 0 PID: 2603 Comm: syz.1.838 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 117.854022][ T2603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 117.863914][ T2603] Call Trace: [ 117.867035][ T2603] [ 117.869820][ T2603] dump_stack_lvl+0x151/0x1c0 [ 117.874331][ T2603] ? io_uring_drop_tctx_refs+0x190/0x190 [ 117.879796][ T2603] ? dev_queue_xmit+0x20/0x20 [ 117.884320][ T2603] dump_stack+0x15/0x20 [ 117.888299][ T2603] should_fail+0x3c6/0x510 [ 117.892552][ T2603] __should_failslab+0xa4/0xe0 [ 117.897244][ T2603] ? skb_clone+0x1d1/0x360 [ 117.901495][ T2603] should_failslab+0x9/0x20 [ 117.905837][ T2603] slab_pre_alloc_hook+0x37/0xd0 [ 117.910604][ T2603] ? skb_clone+0x1d1/0x360 [ 117.914857][ T2603] kmem_cache_alloc+0x44/0x200 [ 117.919458][ T2603] skb_clone+0x1d1/0x360 [ 117.923541][ T2603] bpf_clone_redirect+0xa6/0x390 [ 117.928532][ T2603] bpf_prog_b36a1f39e2fdd4f4+0x56/0xf1c [ 117.933908][ T2603] ? swiotlb_late_init_with_tbl+0x1e0/0x340 [ 117.939635][ T2603] ? __stack_depot_save+0x34/0x470 [ 117.944584][ T2603] ? __kasan_slab_alloc+0xc3/0xe0 [ 117.949451][ T2603] ? __kasan_slab_alloc+0xb1/0xe0 [ 117.954310][ T2603] ? slab_post_alloc_hook+0x53/0x2c0 [ 117.959511][ T2603] ? kmem_cache_alloc+0xf5/0x200 [ 117.964283][ T2603] ? __build_skb+0x2a/0x300 [ 117.968622][ T2603] ? build_skb+0x25/0x1f0 [ 117.972788][ T2603] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 117.978171][ T2603] ? bpf_prog_test_run+0x3b0/0x630 [ 117.983117][ T2603] ? __sys_bpf+0x525/0x760 [ 117.987369][ T2603] ? __x64_sys_bpf+0x7c/0x90 [ 117.991793][ T2603] ? x64_sys_call+0x87f/0x9a0 [ 117.996316][ T2603] ? do_syscall_64+0x3b/0xb0 [ 118.000736][ T2603] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.006639][ T2603] ? __kasan_check_read+0x11/0x20 [ 118.011500][ T2603] ? bpf_test_timer_continue+0x140/0x460 [ 118.016979][ T2603] bpf_test_run+0x478/0xa10 [ 118.021317][ T2603] ? convert___skb_to_skb+0x570/0x570 [ 118.026515][ T2603] ? eth_type_trans+0x2e4/0x620 [ 118.031201][ T2603] ? eth_get_headlen+0x240/0x240 [ 118.035976][ T2603] ? convert___skb_to_skb+0x44/0x570 [ 118.041098][ T2603] bpf_prog_test_run_skb+0xb41/0x1420 [ 118.046320][ T2603] ? __kasan_check_write+0x14/0x20 [ 118.051345][ T2603] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 118.057066][ T2603] ? __kasan_check_write+0x14/0x20 [ 118.062019][ T2603] ? fput_many+0x160/0x1b0 [ 118.066264][ T2603] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 118.072168][ T2603] bpf_prog_test_run+0x3b0/0x630 [ 118.076938][ T2603] ? bpf_prog_query+0x220/0x220 [ 118.081630][ T2603] ? selinux_bpf+0xd2/0x100 [ 118.085970][ T2603] ? security_bpf+0x82/0xb0 [ 118.090311][ T2603] __sys_bpf+0x525/0x760 [ 118.094385][ T2603] ? fput_many+0x160/0x1b0 [ 118.098636][ T2603] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 118.103853][ T2603] ? debug_smp_processor_id+0x17/0x20 [ 118.109052][ T2603] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 118.114969][ T2603] __x64_sys_bpf+0x7c/0x90 [ 118.119213][ T2603] x64_sys_call+0x87f/0x9a0 [ 118.123548][ T2603] do_syscall_64+0x3b/0xb0 [ 118.127799][ T2603] ? clear_bhb_loop+0x35/0x90 [ 118.132313][ T2603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.138041][ T2603] RIP: 0033:0x7fd641ba0719 [ 118.142298][ T2603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.161802][ T2603] RSP: 002b:00007fd640819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.170072][ T2603] RAX: ffffffffffffffda RBX: 00007fd641d57f80 RCX: 00007fd641ba0719 [ 118.177883][ T2603] RDX: 0000000000000050 RSI: 0000000020002300 RDI: 000000000000000a [ 118.185690][ T2603] RBP: 00007fd640819090 R08: 0000000000000000 R09: 0000000000000000 [ 118.193502][ T2603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.201314][ T2603] R13: 0000000000000000 R14: 00007fd641d57f80 R15: 00007ffdf2693c98 [ 118.209435][ T2603] [ 118.299260][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.308097][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.334040][ T310] device bridge_slave_1 left promiscuous mode [ 118.340310][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.397146][ T310] device bridge_slave_0 left promiscuous mode [ 118.408242][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.473842][ T310] device veth1_macvtap left promiscuous mode [ 118.479745][ T310] device veth0_vlan left promiscuous mode [ 118.652372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.660695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.669045][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.675961][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.684968][ T2615] device pim6reg1 entered promiscuous mode [ 118.739450][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.750479][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.761193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.769965][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.776853][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.785534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.793741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.815522][ T2613] device pim6reg1 entered promiscuous mode [ 118.834475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.844312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.852373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.861083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.878859][ T2564] device veth0_vlan entered promiscuous mode [ 118.894869][ T2564] device veth1_macvtap entered promiscuous mode [ 118.907076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.915352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.923587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.931796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.940886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.964855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.985891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.996877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.006614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.015195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.034100][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.109197][ T2637] syz.4.850[2637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.109276][ T2637] syz.4.850[2637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.354901][ T2657] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.435818][ T2657] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.448009][ T2657] device bridge_slave_0 entered promiscuous mode [ 120.455131][ T2657] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.462066][ T2657] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.469674][ T2657] device bridge_slave_1 entered promiscuous mode [ 120.479173][ T310] device bridge_slave_1 left promiscuous mode [ 120.489288][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.511252][ T310] device bridge_slave_0 left promiscuous mode [ 120.517537][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.526048][ T310] device veth1_macvtap left promiscuous mode [ 120.533111][ T310] device veth0_vlan left promiscuous mode [ 121.020189][ T2697] FAULT_INJECTION: forcing a failure. [ 121.020189][ T2697] name failslab, interval 1, probability 0, space 0, times 0 [ 121.138913][ T2699] device wg2 left promiscuous mode [ 121.169509][ T2697] CPU: 1 PID: 2697 Comm: syz.3.868 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 121.179157][ T2697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.189068][ T2697] Call Trace: [ 121.192177][ T2697] [ 121.194964][ T2697] dump_stack_lvl+0x151/0x1c0 [ 121.199465][ T2697] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.204933][ T2697] ? tipc_sk_filter_rcv+0x3152/0x3380 [ 121.210141][ T2697] ? tipc_setsockopt+0x7a1/0xb80 [ 121.214915][ T2697] ? __x64_sys_setsockopt+0xbf/0xd0 [ 121.220143][ T2697] ? x64_sys_call+0x1a2/0x9a0 [ 121.224654][ T2697] ? do_syscall_64+0x3b/0xb0 [ 121.229082][ T2697] dump_stack+0x15/0x20 [ 121.233073][ T2697] should_fail+0x3c6/0x510 [ 121.237329][ T2697] __should_failslab+0xa4/0xe0 [ 121.241939][ T2697] ? __alloc_skb+0xbe/0x550 [ 121.246269][ T2697] should_failslab+0x9/0x20 [ 121.251165][ T2697] slab_pre_alloc_hook+0x37/0xd0 [ 121.256165][ T2697] ? __alloc_skb+0xbe/0x550 [ 121.260502][ T2697] kmem_cache_alloc+0x44/0x200 [ 121.265150][ T2697] ? bpf_trace_run2+0x210/0x210 [ 121.269920][ T2697] __alloc_skb+0xbe/0x550 [ 121.274065][ T2697] tipc_msg_create+0x4c/0x530 [ 121.278581][ T2697] tipc_group_proto_xmit+0x14a/0x890 [ 121.283704][ T2697] tipc_group_proto_rcv+0x16cb/0x1d40 [ 121.288908][ T2697] tipc_sk_proto_rcv+0x7db/0x1750 [ 121.293787][ T2697] ? tipc_sk_filter_rcv+0x3380/0x3380 [ 121.298976][ T2697] ? __skb_queue_purge+0x180/0x180 [ 121.304006][ T2697] ? finish_task_switch+0x167/0x7b0 [ 121.309041][ T2697] tipc_sk_filter_rcv+0x3152/0x3380 [ 121.314161][ T2697] ? tipc_node_xmit+0x34e/0xe40 [ 121.318849][ T2697] ? tipc_node_get_linkname+0x190/0x190 [ 121.324228][ T2697] ? __kasan_check_read+0x11/0x20 [ 121.329087][ T2697] ? preempt_schedule_common+0xbe/0xf0 [ 121.334383][ T2697] ? preempt_schedule+0xd9/0xe0 [ 121.339070][ T2697] ? tipc_node_distr_xmit+0x46b/0x4d0 [ 121.344280][ T2697] ? tipc_node_distr_xmit+0x472/0x4d0 [ 121.349483][ T2697] ? preempt_schedule_thunk+0x16/0x18 [ 121.354709][ T2697] ? tipc_sk_publish+0x4b0/0x4b0 [ 121.359468][ T2697] ? tipc_node_xmit_skb+0x1b0/0x1b0 [ 121.364502][ T2697] ? tipc_group_join+0x5a4/0x6d0 [ 121.369278][ T2697] tipc_sk_backlog_rcv+0x122/0x210 [ 121.374223][ T2697] ? tipc_sk_timeout+0xab0/0xab0 [ 121.378994][ T2697] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 121.383861][ T2697] __release_sock+0x145/0x410 [ 121.388370][ T2697] release_sock+0x65/0x1b0 [ 121.392621][ T2697] tipc_setsockopt+0x7a1/0xb80 [ 121.397223][ T2697] ? tipc_shutdown+0x400/0x400 [ 121.401821][ T2697] ? security_socket_setsockopt+0x82/0xb0 [ 121.407374][ T2697] ? tipc_shutdown+0x400/0x400 [ 121.411988][ T2697] __sys_setsockopt+0x4dc/0x840 [ 121.416670][ T2697] ? __ia32_sys_recv+0xb0/0xb0 [ 121.421266][ T2697] ? debug_smp_processor_id+0x17/0x20 [ 121.426470][ T2697] __x64_sys_setsockopt+0xbf/0xd0 [ 121.431333][ T2697] x64_sys_call+0x1a2/0x9a0 [ 121.435669][ T2697] do_syscall_64+0x3b/0xb0 [ 121.440020][ T2697] ? clear_bhb_loop+0x35/0x90 [ 121.444534][ T2697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.450259][ T2697] RIP: 0033:0x7fa33b983719 [ 121.454514][ T2697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.474015][ T2697] RSP: 002b:00007fa33a5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.482199][ T2697] RAX: ffffffffffffffda RBX: 00007fa33bb3af80 RCX: 00007fa33b983719 [ 121.490014][ T2697] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 121.497919][ T2697] RBP: 00007fa33a5fc090 R08: 00000000000004bd R09: 0000000000000000 [ 121.505733][ T2697] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000002 [ 121.513634][ T2697] R13: 0000000000000000 R14: 00007fa33bb3af80 R15: 00007ffee06d76c8 [ 121.521446][ T2697] [ 121.584828][ T2699] device wg2 entered promiscuous mode [ 121.615831][ T2703] device pim6reg1 entered promiscuous mode [ 121.697178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.704929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.741026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.757216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.771980][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.778881][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.790172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.799044][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.883224][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.890112][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.104778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.137627][ T2732] FAULT_INJECTION: forcing a failure. [ 123.137627][ T2732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.382285][ T2732] CPU: 1 PID: 2732 Comm: syz.0.881 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 124.391934][ T2732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 124.401829][ T2732] Call Trace: [ 124.404951][ T2732] [ 124.407728][ T2732] dump_stack_lvl+0x151/0x1c0 [ 124.412238][ T2732] ? io_uring_drop_tctx_refs+0x190/0x190 [ 124.417807][ T2732] dump_stack+0x15/0x20 [ 124.421803][ T2732] should_fail+0x3c6/0x510 [ 124.426056][ T2732] should_fail_alloc_page+0x5a/0x80 [ 124.431091][ T2732] prepare_alloc_pages+0x15c/0x700 [ 124.436042][ T2732] ? __alloc_pages+0x8f0/0x8f0 [ 124.441084][ T2732] ? __alloc_pages_bulk+0xe40/0xe40 [ 124.446107][ T2732] __alloc_pages+0x18c/0x8f0 [ 124.450534][ T2732] ? prep_new_page+0x110/0x110 [ 124.455166][ T2732] ? __mod_node_page_state+0xac/0xf0 [ 124.460254][ T2732] pte_alloc_one+0x73/0x1b0 [ 124.464590][ T2732] ? pfn_modify_allowed+0x2f0/0x2f0 [ 124.469631][ T2732] ? arch_stack_walk+0xf3/0x140 [ 124.474573][ T2732] __pte_alloc+0x86/0x350 [ 124.478740][ T2732] ? free_pgtables+0x280/0x280 [ 124.483338][ T2732] ? _raw_spin_lock+0xa4/0x1b0 [ 124.487940][ T2732] ? __kasan_check_write+0x14/0x20 [ 124.492889][ T2732] copy_page_range+0x28a8/0x2f90 [ 124.497659][ T2732] ? __kasan_slab_alloc+0xb1/0xe0 [ 124.502551][ T2732] ? pfn_valid+0x1e0/0x1e0 [ 124.506779][ T2732] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 124.512328][ T2732] ? __rb_insert_augmented+0x5de/0x610 [ 124.517625][ T2732] copy_mm+0xc7e/0x13e0 [ 124.521621][ T2732] ? copy_signal+0x610/0x610 [ 124.526040][ T2732] ? __init_rwsem+0xfe/0x1d0 [ 124.530468][ T2732] ? copy_signal+0x4e3/0x610 [ 124.534981][ T2732] copy_process+0x1149/0x3290 [ 124.539496][ T2732] ? __kasan_check_write+0x14/0x20 [ 124.544448][ T2732] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 124.549387][ T2732] ? vfs_write+0x94d/0x1110 [ 124.553728][ T2732] kernel_clone+0x21e/0x9e0 [ 124.558067][ T2732] ? __kasan_check_write+0x14/0x20 [ 124.563017][ T2732] ? create_io_thread+0x1e0/0x1e0 [ 124.567876][ T2732] __x64_sys_clone+0x23f/0x290 [ 124.572477][ T2732] ? __do_sys_vfork+0x130/0x130 [ 124.577264][ T2732] ? debug_smp_processor_id+0x17/0x20 [ 124.582462][ T2732] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 124.588377][ T2732] ? exit_to_user_mode_prepare+0x39/0xa0 [ 124.593852][ T2732] x64_sys_call+0x1b0/0x9a0 [ 124.598183][ T2732] do_syscall_64+0x3b/0xb0 [ 124.602452][ T2732] ? clear_bhb_loop+0x35/0x90 [ 124.606943][ T2732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.612781][ T2732] RIP: 0033:0x7fbf53e5b719 [ 124.617012][ T2732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.636451][ T2732] RSP: 002b:00007fbf52ab2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 124.644697][ T2732] RAX: ffffffffffffffda RBX: 00007fbf54013058 RCX: 00007fbf53e5b719 [ 124.652594][ T2732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 124.660414][ T2732] RBP: 00007fbf52ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 124.668218][ T2732] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 124.676029][ T2732] R13: 0000000000000001 R14: 00007fbf54013058 R15: 00007fff94702688 [ 124.683849][ T2732] [ 124.692273][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.715544][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.723650][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.735063][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.744559][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.767650][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.778338][ T2657] device veth0_vlan entered promiscuous mode [ 124.796748][ T2740] FAULT_INJECTION: forcing a failure. [ 124.796748][ T2740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.809772][ T2740] CPU: 1 PID: 2740 Comm: syz.3.885 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 124.819401][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 124.823578][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.829288][ T2740] Call Trace: [ 124.829296][ T2740] [ 124.838146][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.839965][ T2740] dump_stack_lvl+0x151/0x1c0 [ 124.850048][ T2657] device veth1_macvtap entered promiscuous mode [ 124.850210][ T2740] ? io_uring_drop_tctx_refs+0x190/0x190 [ 124.855325][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.860796][ T2740] ? __kasan_check_read+0x11/0x20 [ 124.878160][ T2740] dump_stack+0x15/0x20 [ 124.882158][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.882158][ T2740] should_fail+0x3c6/0x510 [ 124.889629][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.893430][ T2740] should_fail_usercopy+0x1a/0x20 [ 124.893458][ T2740] copy_page_from_iter_atomic+0x423/0x10e0 [ 124.901593][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.906016][ T2740] ? pipe_zero+0x4e0/0x4e0 [ 124.906046][ T2740] generic_perform_write+0x360/0x750 [ 124.912044][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.919384][ T2740] ? __mark_inode_dirty+0x54e/0xa50 [ 124.919417][ T2740] ? grab_cache_page_write_begin+0xa0/0xa0 [ 124.919440][ T2740] ? file_remove_privs+0x610/0x610 [ 124.919467][ T2740] ? rwsem_write_trylock+0x153/0x340 [ 124.919490][ T2740] ? rwsem_mark_wake+0x770/0x770 [ 124.919511][ T2740] __generic_file_write_iter+0x25b/0x4b0 [ 124.967058][ T2740] generic_file_write_iter+0xaf/0x1c0 [ 124.972264][ T2740] vfs_write+0xd5d/0x1110 [ 124.976419][ T2740] ? putname+0xfa/0x150 [ 124.980418][ T2740] ? file_end_write+0x1c0/0x1c0 [ 124.985097][ T2740] ? mutex_lock+0xb6/0x1e0 [ 124.989354][ T2740] ? wait_for_completion_killable_timeout+0x10/0x10 [ 124.995773][ T2740] ? __fdget_pos+0x2e7/0x3a0 [ 125.000207][ T2740] ? ksys_write+0x77/0x2c0 [ 125.004453][ T2740] ksys_write+0x199/0x2c0 [ 125.008625][ T2740] ? __ia32_sys_read+0x90/0x90 [ 125.013226][ T2740] ? debug_smp_processor_id+0x17/0x20 [ 125.018431][ T2740] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 125.024330][ T2740] __x64_sys_write+0x7b/0x90 [ 125.028758][ T2740] x64_sys_call+0x2f/0x9a0 [ 125.033006][ T2740] do_syscall_64+0x3b/0xb0 [ 125.037260][ T2740] ? clear_bhb_loop+0x35/0x90 [ 125.041774][ T2740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.047508][ T2740] RIP: 0033:0x7fa33b983719 [ 125.051757][ T2740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.071203][ T2740] RSP: 002b:00007fa33a5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.079442][ T2740] RAX: ffffffffffffffda RBX: 00007fa33bb3af80 RCX: 00007fa33b983719 [ 125.087255][ T2740] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000005 [ 125.095062][ T2740] RBP: 00007fa33a5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 125.102874][ T2740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.110689][ T2740] R13: 0000000000000000 R14: 00007fa33bb3af80 R15: 00007ffee06d76c8 [ 125.118501][ T2740] [ 125.150738][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.159590][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.168383][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.176830][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.934853][ T387] device bridge_slave_1 left promiscuous mode [ 125.940854][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.976796][ T387] device bridge_slave_0 left promiscuous mode [ 125.985101][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.003069][ T387] device veth1_macvtap left promiscuous mode [ 126.038755][ T387] device veth0_vlan left promiscuous mode [ 126.560808][ T2769] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.567797][ T2769] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.575659][ T2769] device bridge_slave_0 entered promiscuous mode [ 126.582663][ T2769] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.589518][ T2769] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.596964][ T2769] device bridge_slave_1 entered promiscuous mode [ 126.920620][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.928128][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.966513][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.024404][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.082202][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.089235][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.181906][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.193936][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.202105][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.208985][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.174700][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.143046][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.151247][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.159515][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.167714][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.183516][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.191913][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.209209][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.226685][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.235300][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.242908][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.251928][ T2769] device veth0_vlan entered promiscuous mode [ 129.263207][ T2831] bond_slave_1: mtu less than device minimum [ 129.292465][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.306528][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.316970][ T2769] device veth1_macvtap entered promiscuous mode [ 129.341903][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.360576][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.371155][ T2842] FAULT_INJECTION: forcing a failure. [ 129.371155][ T2842] name failslab, interval 1, probability 0, space 0, times 0 [ 129.381904][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.395824][ T2842] CPU: 1 PID: 2842 Comm: syz.4.922 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 129.405477][ T2842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 129.415496][ T2842] Call Trace: [ 129.418607][ T2842] [ 129.421395][ T2842] dump_stack_lvl+0x151/0x1c0 [ 129.425899][ T2842] ? io_uring_drop_tctx_refs+0x190/0x190 [ 129.431544][ T2842] ? release_firmware_map_entry+0x190/0x190 [ 129.437356][ T2842] dump_stack+0x15/0x20 [ 129.441345][ T2842] should_fail+0x3c6/0x510 [ 129.445602][ T2842] __should_failslab+0xa4/0xe0 [ 129.450216][ T2842] should_failslab+0x9/0x20 [ 129.454538][ T2842] slab_pre_alloc_hook+0x37/0xd0 [ 129.459315][ T2842] ? skb_ensure_writable+0x2d0/0x440 [ 129.464532][ T2842] __kmalloc_track_caller+0x6c/0x260 [ 129.469645][ T2842] ? skb_ensure_writable+0x2d0/0x440 [ 129.474762][ T2842] ? skb_ensure_writable+0x2d0/0x440 [ 129.479982][ T2842] pskb_expand_head+0x113/0x1240 [ 129.484754][ T2842] ? __kasan_check_write+0x14/0x20 [ 129.489704][ T2842] skb_ensure_writable+0x2d0/0x440 [ 129.494659][ T2842] bpf_clone_redirect+0x117/0x390 [ 129.499630][ T2842] bpf_prog_b36a1f39e2fdd4f4+0x56/0xdcc [ 129.505185][ T2842] ? swiotlb_late_init_with_tbl+0x1e0/0x340 [ 129.510911][ T2842] ? __stack_depot_save+0x34/0x470 [ 129.515856][ T2842] ? __kasan_slab_alloc+0xc3/0xe0 [ 129.520717][ T2842] ? __kasan_slab_alloc+0xb1/0xe0 [ 129.525579][ T2842] ? slab_post_alloc_hook+0x53/0x2c0 [ 129.530704][ T2842] ? kmem_cache_alloc+0xf5/0x200 [ 129.535559][ T2842] ? __build_skb+0x2a/0x300 [ 129.539909][ T2842] ? build_skb+0x25/0x1f0 [ 129.544063][ T2842] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 129.549444][ T2842] ? bpf_prog_test_run+0x3b0/0x630 [ 129.554391][ T2842] ? __sys_bpf+0x525/0x760 [ 129.558643][ T2842] ? __x64_sys_bpf+0x7c/0x90 [ 129.563073][ T2842] ? x64_sys_call+0x87f/0x9a0 [ 129.567586][ T2842] ? do_syscall_64+0x3b/0xb0 [ 129.572014][ T2842] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.577917][ T2842] ? __kasan_check_read+0x11/0x20 [ 129.582773][ T2842] ? bpf_test_timer_continue+0x140/0x460 [ 129.588244][ T2842] bpf_test_run+0x478/0xa10 [ 129.592591][ T2842] ? convert___skb_to_skb+0x570/0x570 [ 129.597792][ T2842] ? eth_type_trans+0x2e4/0x620 [ 129.602478][ T2842] ? eth_get_headlen+0x240/0x240 [ 129.607251][ T2842] ? convert___skb_to_skb+0x44/0x570 [ 129.612369][ T2842] bpf_prog_test_run_skb+0xb41/0x1420 [ 129.617576][ T2842] ? __kasan_check_write+0x14/0x20 [ 129.622532][ T2842] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 129.628264][ T2842] ? __kasan_check_write+0x14/0x20 [ 129.633205][ T2842] ? fput_many+0x160/0x1b0 [ 129.637454][ T2842] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 129.643184][ T2842] bpf_prog_test_run+0x3b0/0x630 [ 129.648176][ T2842] ? bpf_prog_query+0x220/0x220 [ 129.652875][ T2842] ? selinux_bpf+0xd2/0x100 [ 129.657204][ T2842] ? security_bpf+0x82/0xb0 [ 129.661629][ T2842] __sys_bpf+0x525/0x760 [ 129.665707][ T2842] ? fput_many+0x160/0x1b0 [ 129.669961][ T2842] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 129.675172][ T2842] ? debug_smp_processor_id+0x17/0x20 [ 129.680379][ T2842] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 129.686278][ T2842] __x64_sys_bpf+0x7c/0x90 [ 129.690538][ T2842] x64_sys_call+0x87f/0x9a0 [ 129.694867][ T2842] do_syscall_64+0x3b/0xb0 [ 129.699123][ T2842] ? clear_bhb_loop+0x35/0x90 [ 129.703633][ T2842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.709363][ T2842] RIP: 0033:0x7f77f9759719 [ 129.713624][ T2842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.733146][ T2842] RSP: 002b:00007f77f83d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.741398][ T2842] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f9759719 [ 129.749200][ T2842] RDX: 0000000000000050 RSI: 0000000020002300 RDI: 000000000000000a [ 129.757102][ T2842] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 129.764996][ T2842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.772808][ T2842] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 129.780623][ T2842] [ 129.879736][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.889408][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.938570][ T2848] device pim6reg1 entered promiscuous mode [ 130.664347][ T387] device bridge_slave_1 left promiscuous mode [ 130.672809][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.713517][ T387] device bridge_slave_0 left promiscuous mode [ 130.726081][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.740303][ T387] device veth1_macvtap left promiscuous mode [ 130.759112][ T2865] syz.0.929[2865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.759187][ T2865] syz.0.929[2865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.786367][ T387] device veth0_vlan left promiscuous mode [ 132.107263][ T2871] FAULT_INJECTION: forcing a failure. [ 132.107263][ T2871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.141602][ T2871] CPU: 1 PID: 2871 Comm: syz.4.933 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 132.151260][ T2871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 132.161152][ T2871] Call Trace: [ 132.164275][ T2871] [ 132.167057][ T2871] dump_stack_lvl+0x151/0x1c0 [ 132.171569][ T2871] ? io_uring_drop_tctx_refs+0x190/0x190 [ 132.177034][ T2871] ? __switch_to+0x62a/0x1190 [ 132.181549][ T2871] dump_stack+0x15/0x20 [ 132.185539][ T2871] should_fail+0x3c6/0x510 [ 132.189814][ T2871] should_fail_alloc_page+0x5a/0x80 [ 132.194826][ T2871] prepare_alloc_pages+0x15c/0x700 [ 132.199778][ T2871] ? __alloc_pages+0x8f0/0x8f0 [ 132.204374][ T2871] ? __alloc_pages_bulk+0xe40/0xe40 [ 132.209408][ T2871] ? __schedule+0xcd4/0x1590 [ 132.213837][ T2871] __alloc_pages+0x18c/0x8f0 [ 132.218265][ T2871] ? prep_new_page+0x110/0x110 [ 132.222863][ T2871] ? preempt_schedule+0xd9/0xe0 [ 132.227556][ T2871] ? preempt_schedule+0xd9/0xe0 [ 132.232234][ T2871] ? schedule_preempt_disabled+0x20/0x20 [ 132.237703][ T2871] pcpu_populate_chunk+0x18c/0xe30 [ 132.242652][ T2871] ? preempt_schedule_thunk+0x16/0x18 [ 132.247860][ T2871] pcpu_alloc+0x984/0x13e0 [ 132.252130][ T2871] __alloc_percpu_gfp+0x27/0x30 [ 132.256801][ T2871] bpf_map_alloc_percpu+0xe6/0x160 [ 132.261746][ T2871] array_map_alloc+0x3a5/0x6d0 [ 132.266343][ T2871] map_create+0x411/0x2050 [ 132.270603][ T2871] __sys_bpf+0x296/0x760 [ 132.274671][ T2871] ? fput_many+0x160/0x1b0 [ 132.278925][ T2871] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 132.284135][ T2871] ? debug_smp_processor_id+0x17/0x20 [ 132.289353][ T2871] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 132.295278][ T2871] __x64_sys_bpf+0x7c/0x90 [ 132.299497][ T2871] x64_sys_call+0x87f/0x9a0 [ 132.303837][ T2871] do_syscall_64+0x3b/0xb0 [ 132.308087][ T2871] ? clear_bhb_loop+0x35/0x90 [ 132.312606][ T2871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.318329][ T2871] RIP: 0033:0x7f77f9759719 [ 132.322585][ T2871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.342022][ T2871] RSP: 002b:00007f77f83d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.350270][ T2871] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f9759719 [ 132.358433][ T2871] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 132.366252][ T2871] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 132.374176][ T2871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.382077][ T2871] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 132.389894][ T2871] [ 133.180897][ T2861] bond_slave_1: mtu less than device minimum [ 133.439942][ T2869] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.448039][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.456719][ T2869] device bridge_slave_0 entered promiscuous mode [ 133.463891][ T2869] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.470778][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.478379][ T2869] device bridge_slave_1 entered promiscuous mode [ 133.622900][ T30] audit: type=1400 audit(1731808427.256:143): avc: denied { create } for pid=2909 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 133.660816][ T2910] : renamed from ipvlan1 [ 133.960975][ T2869] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.967883][ T2869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.975002][ T2869] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.981839][ T2869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.130464][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.138415][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.146648][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.158288][ T2923] bond_slave_1: mtu less than device minimum [ 134.304860][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.400133][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.407053][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.472801][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.491638][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.498539][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.529648][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.556073][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.602173][ T2869] device veth0_vlan entered promiscuous mode [ 136.616725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.636188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.654557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.665146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.677556][ T2960] bond_slave_1: mtu less than device minimum [ 136.690727][ T2869] device veth1_macvtap entered promiscuous mode [ 136.697582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.706761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.714388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.722475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.731093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.753392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.771800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.807311][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.815937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.954874][ T2869] syz-executor (2869) used greatest stack depth: 20104 bytes left [ 139.138775][ T2993] bond_slave_1: mtu less than device minimum [ 139.344723][ T3010] FAULT_INJECTION: forcing a failure. [ 139.344723][ T3010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.358180][ T3010] CPU: 0 PID: 3010 Comm: syz.0.983 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 139.367831][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.377803][ T3010] Call Trace: [ 139.380923][ T3010] [ 139.383706][ T3010] dump_stack_lvl+0x151/0x1c0 [ 139.388217][ T3010] ? io_uring_drop_tctx_refs+0x190/0x190 [ 139.393775][ T3010] dump_stack+0x15/0x20 [ 139.397775][ T3010] should_fail+0x3c6/0x510 [ 139.402016][ T3010] should_fail_alloc_page+0x5a/0x80 [ 139.407143][ T3010] prepare_alloc_pages+0x15c/0x700 [ 139.412085][ T3010] ? __alloc_pages+0x8f0/0x8f0 [ 139.416691][ T3010] ? __alloc_pages_bulk+0xe40/0xe40 [ 139.421717][ T3010] ? pcpu_chunk_refresh_hint+0x802/0x930 [ 139.427207][ T3010] __alloc_pages+0x18c/0x8f0 [ 139.431613][ T3010] ? prep_new_page+0x110/0x110 [ 139.436214][ T3010] ? pcpu_chunk_relocate+0x20a/0x430 [ 139.441336][ T3010] pcpu_populate_chunk+0x18c/0xe30 [ 139.446290][ T3010] pcpu_alloc+0x984/0x13e0 [ 139.450536][ T3010] __alloc_percpu_gfp+0x27/0x30 [ 139.455221][ T3010] bpf_map_alloc_percpu+0xe6/0x160 [ 139.460174][ T3010] htab_map_alloc+0xcb8/0x1650 [ 139.464776][ T3010] map_create+0x411/0x2050 [ 139.469116][ T3010] __sys_bpf+0x296/0x760 [ 139.473190][ T3010] ? fput_many+0x160/0x1b0 [ 139.477439][ T3010] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 139.482787][ T3010] ? debug_smp_processor_id+0x17/0x20 [ 139.487987][ T3010] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 139.493888][ T3010] __x64_sys_bpf+0x7c/0x90 [ 139.498141][ T3010] x64_sys_call+0x87f/0x9a0 [ 139.502483][ T3010] do_syscall_64+0x3b/0xb0 [ 139.506734][ T3010] ? clear_bhb_loop+0x35/0x90 [ 139.511250][ T3010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.516987][ T3010] RIP: 0033:0x7fbf53e5b719 [ 139.521235][ T3010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.540672][ T3010] RSP: 002b:00007fbf52ad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.548918][ T3010] RAX: ffffffffffffffda RBX: 00007fbf54012f80 RCX: 00007fbf53e5b719 [ 139.556726][ T3010] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 139.564544][ T3010] RBP: 00007fbf52ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 139.572352][ T3010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.580253][ T3010] R13: 0000000000000000 R14: 00007fbf54012f80 R15: 00007fff94702688 [ 139.588067][ T3010] [ 139.601763][ T3020] FAULT_INJECTION: forcing a failure. [ 139.601763][ T3020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.614863][ T3020] CPU: 1 PID: 3020 Comm: syz.1.985 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 139.624493][ T3020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.634384][ T3020] Call Trace: [ 139.637508][ T3020] [ 139.640287][ T3020] dump_stack_lvl+0x151/0x1c0 [ 139.644798][ T3020] ? io_uring_drop_tctx_refs+0x190/0x190 [ 139.650273][ T3020] ? __kasan_check_read+0x11/0x20 [ 139.655127][ T3020] dump_stack+0x15/0x20 [ 139.659237][ T3020] should_fail+0x3c6/0x510 [ 139.663469][ T3020] should_fail_usercopy+0x1a/0x20 [ 139.668325][ T3020] copy_page_from_iter_atomic+0x423/0x10e0 [ 139.673972][ T3020] ? pipe_zero+0x4e0/0x4e0 [ 139.678308][ T3020] generic_perform_write+0x360/0x750 [ 139.683431][ T3020] ? grab_cache_page_write_begin+0xa0/0xa0 [ 139.689063][ T3020] ? file_remove_privs+0x610/0x610 [ 139.694022][ T3020] ? rwsem_write_trylock+0x153/0x340 [ 139.699135][ T3020] ? rwsem_mark_wake+0x770/0x770 [ 139.703905][ T3020] __generic_file_write_iter+0x25b/0x4b0 [ 139.709467][ T3020] generic_file_write_iter+0xaf/0x1c0 [ 139.714674][ T3020] vfs_write+0xd5d/0x1110 [ 139.718837][ T3020] ? putname+0xfa/0x150 [ 139.722828][ T3020] ? file_end_write+0x1c0/0x1c0 [ 139.727599][ T3020] ? mutex_lock+0xb6/0x1e0 [ 139.731858][ T3020] ? wait_for_completion_killable_timeout+0x10/0x10 [ 139.738385][ T3020] ? __fdget_pos+0x2e7/0x3a0 [ 139.742788][ T3020] ? ksys_write+0x77/0x2c0 [ 139.747046][ T3020] ksys_write+0x199/0x2c0 [ 139.751302][ T3020] ? __ia32_sys_read+0x90/0x90 [ 139.755894][ T3020] ? debug_smp_processor_id+0x17/0x20 [ 139.761103][ T3020] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 139.767005][ T3020] __x64_sys_write+0x7b/0x90 [ 139.771430][ T3020] x64_sys_call+0x2f/0x9a0 [ 139.775685][ T3020] do_syscall_64+0x3b/0xb0 [ 139.779934][ T3020] ? clear_bhb_loop+0x35/0x90 [ 139.784456][ T3020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.790178][ T3020] RIP: 0033:0x7fd641ba0719 [ 139.794435][ T3020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.814135][ T3020] RSP: 002b:00007fd640819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.822377][ T3020] RAX: ffffffffffffffda RBX: 00007fd641d57f80 RCX: 00007fd641ba0719 [ 139.830188][ T3020] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000007 [ 139.837999][ T3020] RBP: 00007fd640819090 R08: 0000000000000000 R09: 0000000000000000 [ 139.845812][ T3020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.853625][ T3020] R13: 0000000000000000 R14: 00007fd641d57f80 R15: 00007ffdf2693c98 [ 139.861567][ T3020] [ 139.928620][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.935568][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.942980][ T3004] device bridge_slave_0 entered promiscuous mode [ 139.951796][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.958976][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.968015][ T3004] device bridge_slave_1 entered promiscuous mode [ 139.978687][ T3034] bond_slave_1: mtu less than device minimum [ 140.043269][ T3041] bond_slave_1: mtu less than device minimum [ 143.065310][ T3068] bond_slave_1: mtu less than device minimum [ 143.166144][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.174015][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.225815][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.286299][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.303064][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.310006][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.331813][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.348821][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.365826][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.372752][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.410941][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.428209][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.475624][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.572401][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.595557][ T3004] device veth0_vlan entered promiscuous mode [ 143.608378][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.619736][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.635746][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.681895][ T3004] device veth1_macvtap entered promiscuous mode [ 143.709108][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.765210][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.782305][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.800499][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.817477][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.884031][ T387] device bridge_slave_1 left promiscuous mode [ 143.891484][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.908097][ T387] device bridge_slave_0 left promiscuous mode [ 143.919570][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.969278][ T387] device veth1_macvtap left promiscuous mode [ 143.995717][ T387] device veth0_vlan left promiscuous mode [ 145.042712][ T3118] bond_slave_1: mtu less than device minimum [ 145.121697][ T387] device bridge_slave_1 left promiscuous mode [ 145.140772][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.150185][ T387] device bridge_slave_0 left promiscuous mode [ 145.156250][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.172907][ T387] device veth1_macvtap left promiscuous mode [ 145.219696][ T387] device veth0_vlan left promiscuous mode [ 147.909920][ T3133] €Â0: renamed from pim6reg1 [ 148.043560][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.050431][ T3126] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.070607][ T3126] device bridge_slave_0 entered promiscuous mode [ 148.083485][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.094188][ T3126] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.101612][ T3126] device bridge_slave_1 entered promiscuous mode [ 148.388629][ T3173] bond_slave_1: mtu less than device minimum [ 148.472387][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.479311][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.486418][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.493326][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.525747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.544729][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.552075][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.588720][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.597189][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.604079][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.629293][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.655318][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.662207][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.440879][ T3203] syz.1.1045[3203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.440959][ T3203] syz.1.1045[3203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.477343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.532711][ T3188] €Â0: renamed from pim6reg1 [ 151.542813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.561247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.586961][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.595558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.626472][ T3126] device veth0_vlan entered promiscuous mode [ 151.644297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.675061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.683255][ T3212] bond_slave_1: mtu less than device minimum [ 151.702816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.710325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.750078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.823084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.845670][ T3126] device veth1_macvtap entered promiscuous mode [ 151.858262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.867053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.877602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.924135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.954173][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.783283][ T387] device bridge_slave_1 left promiscuous mode [ 152.789220][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.796660][ T387] device bridge_slave_0 left promiscuous mode [ 152.802779][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.810483][ T387] device veth1_macvtap left promiscuous mode [ 152.816394][ T387] device veth0_vlan left promiscuous mode [ 153.345814][ T3246] bond_slave_1: mtu less than device minimum [ 153.423616][ T3238] €Â0: renamed from pim6reg1 [ 153.585528][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.618815][ T3250] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.647717][ T3250] device bridge_slave_0 entered promiscuous mode [ 153.783575][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.878690][ T3250] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.919867][ T3250] device bridge_slave_1 entered promiscuous mode [ 154.024232][ T3282] bond_slave_1: mtu less than device minimum [ 154.071270][ T3286] bond_slave_1: mtu less than device minimum [ 154.159946][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.166868][ T3250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.343897][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.357670][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.378373][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.465744][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.484767][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.501462][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.508380][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.517987][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.526182][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.533074][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.540756][ T30] audit: type=1400 audit(1731808448.166:144): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.568521][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.615173][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.646954][ T3303] device wg2 left promiscuous mode [ 154.702884][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.717450][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.738840][ T3250] device veth0_vlan entered promiscuous mode [ 154.749444][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.763340][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.844039][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.855815][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.890179][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.900522][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.934892][ T3297] €Â0: renamed from pim6reg1 [ 154.975984][ T3250] device veth1_macvtap entered promiscuous mode [ 154.985103][ T3323] bond_slave_1: mtu less than device minimum [ 154.998863][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.009871][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.029353][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.032421][ T3326] FAULT_INJECTION: forcing a failure. [ 155.032421][ T3326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.050198][ T3326] CPU: 1 PID: 3326 Comm: syz.1.1089 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 155.059825][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 155.069722][ T3326] Call Trace: [ 155.072841][ T3326] [ 155.075619][ T3326] dump_stack_lvl+0x151/0x1c0 [ 155.080140][ T3326] ? io_uring_drop_tctx_refs+0x190/0x190 [ 155.085599][ T3326] ? __kasan_check_read+0x11/0x20 [ 155.090459][ T3326] dump_stack+0x15/0x20 [ 155.094453][ T3326] should_fail+0x3c6/0x510 [ 155.098703][ T3326] should_fail_usercopy+0x1a/0x20 [ 155.103562][ T3326] copy_page_from_iter_atomic+0x423/0x10e0 [ 155.109209][ T3326] ? pipe_zero+0x4e0/0x4e0 [ 155.113471][ T3326] generic_perform_write+0x360/0x750 [ 155.118589][ T3326] ? grab_cache_page_write_begin+0xa0/0xa0 [ 155.124224][ T3326] ? file_remove_privs+0x610/0x610 [ 155.129170][ T3326] ? rwsem_write_trylock+0x153/0x340 [ 155.134291][ T3326] ? __send_signal+0x96f/0xcb0 [ 155.138887][ T3326] ? rwsem_mark_wake+0x770/0x770 [ 155.143661][ T3326] __generic_file_write_iter+0x25b/0x4b0 [ 155.149134][ T3326] generic_file_write_iter+0xaf/0x1c0 [ 155.154340][ T3326] vfs_write+0xd5d/0x1110 [ 155.158506][ T3326] ? file_end_write+0x1c0/0x1c0 [ 155.163190][ T3326] ? mutex_lock+0xb6/0x1e0 [ 155.167470][ T3326] ? wait_for_completion_killable_timeout+0x10/0x10 [ 155.173869][ T3326] ? __fdget_pos+0x2e7/0x3a0 [ 155.178291][ T3326] ? ksys_write+0x77/0x2c0 [ 155.182549][ T3326] ksys_write+0x199/0x2c0 [ 155.186709][ T3326] ? __ia32_sys_read+0x90/0x90 [ 155.191311][ T3326] ? debug_smp_processor_id+0x17/0x20 [ 155.196518][ T3326] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 155.202434][ T3326] __x64_sys_write+0x7b/0x90 [ 155.206855][ T3326] x64_sys_call+0x2f/0x9a0 [ 155.211103][ T3326] do_syscall_64+0x3b/0xb0 [ 155.215352][ T3326] ? clear_bhb_loop+0x35/0x90 [ 155.219870][ T3326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.225592][ T3326] RIP: 0033:0x7fd641ba0719 [ 155.229851][ T3326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.249290][ T3326] RSP: 002b:00007fd640819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.257534][ T3326] RAX: ffffffffffffffda RBX: 00007fd641d57f80 RCX: 00007fd641ba0719 [ 155.265352][ T3326] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000007 [ 155.273165][ T3326] RBP: 00007fd640819090 R08: 0000000000000000 R09: 0000000000000000 [ 155.280990][ T3326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.288780][ T3326] R13: 0000000000000000 R14: 00007fd641d57f80 R15: 00007ffdf2693c98 [ 155.296605][ T3326] [ 155.301123][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.314427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.113286][ T10] device bridge_slave_1 left promiscuous mode [ 156.119261][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.126560][ T10] device bridge_slave_0 left promiscuous mode [ 156.132553][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.140301][ T10] device veth1_macvtap left promiscuous mode [ 156.146174][ T10] device veth0_vlan left promiscuous mode [ 156.581738][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.588759][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.596726][ T3352] device bridge_slave_0 entered promiscuous mode [ 156.603747][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.610598][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.618077][ T3352] device bridge_slave_1 entered promiscuous mode [ 156.687078][ T3360] bond_slave_1: mtu less than device minimum [ 156.710968][ T3363] FAULT_INJECTION: forcing a failure. [ 156.710968][ T3363] name failslab, interval 1, probability 0, space 0, times 0 [ 156.743256][ T3363] CPU: 1 PID: 3363 Comm: syz.0.1098 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 156.753082][ T3363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 156.762979][ T3363] Call Trace: [ 156.766099][ T3363] [ 156.768897][ T3363] dump_stack_lvl+0x151/0x1c0 [ 156.773392][ T3363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 156.778861][ T3363] dump_stack+0x15/0x20 [ 156.782855][ T3363] should_fail+0x3c6/0x510 [ 156.787104][ T3363] __should_failslab+0xa4/0xe0 [ 156.791702][ T3363] ? anon_vma_clone+0x9a/0x500 [ 156.796302][ T3363] should_failslab+0x9/0x20 [ 156.800641][ T3363] slab_pre_alloc_hook+0x37/0xd0 [ 156.805414][ T3363] ? anon_vma_clone+0x9a/0x500 [ 156.810016][ T3363] kmem_cache_alloc+0x44/0x200 [ 156.814618][ T3363] anon_vma_clone+0x9a/0x500 [ 156.819047][ T3363] anon_vma_fork+0x91/0x4e0 [ 156.823489][ T3363] ? anon_vma_name+0x43/0x70 [ 156.827915][ T3363] ? vm_area_dup+0x17a/0x230 [ 156.832351][ T3363] copy_mm+0xa3a/0x13e0 [ 156.836341][ T3363] ? copy_signal+0x610/0x610 [ 156.841109][ T3363] ? __init_rwsem+0xfe/0x1d0 [ 156.845541][ T3363] ? copy_signal+0x4e3/0x610 [ 156.849963][ T3363] copy_process+0x1149/0x3290 [ 156.854737][ T3363] ? __kasan_check_write+0x14/0x20 [ 156.859715][ T3363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 156.864629][ T3363] ? vfs_write+0x94d/0x1110 [ 156.868985][ T3363] kernel_clone+0x21e/0x9e0 [ 156.873306][ T3363] ? __kasan_check_write+0x14/0x20 [ 156.878254][ T3363] ? create_io_thread+0x1e0/0x1e0 [ 156.883118][ T3363] __x64_sys_clone+0x23f/0x290 [ 156.887721][ T3363] ? __do_sys_vfork+0x130/0x130 [ 156.892406][ T3363] ? debug_smp_processor_id+0x17/0x20 [ 156.897611][ T3363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 156.903511][ T3363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 156.908987][ T3363] x64_sys_call+0x1b0/0x9a0 [ 156.913321][ T3363] do_syscall_64+0x3b/0xb0 [ 156.917572][ T3363] ? clear_bhb_loop+0x35/0x90 [ 156.922084][ T3363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.927816][ T3363] RIP: 0033:0x7fbf53e5b719 [ 156.932242][ T3363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.951682][ T3363] RSP: 002b:00007fbf52ad3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 156.959929][ T3363] RAX: ffffffffffffffda RBX: 00007fbf54012f80 RCX: 00007fbf53e5b719 [ 156.967740][ T3363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 156.975551][ T3363] RBP: 00007fbf52ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 156.983361][ T3363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 156.991172][ T3363] R13: 0000000000000000 R14: 00007fbf54012f80 R15: 00007fff94702688 [ 156.999004][ T3363] [ 157.085569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.093547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.102364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.110828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.118965][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.125878][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.133659][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.141986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.150263][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.157131][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.169978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.201137][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.210277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.218378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.226547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.234573][ T3373] bond_slave_1: mtu less than device minimum [ 157.254500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.272254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.330523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.343122][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.388383][ T3352] device veth0_vlan entered promiscuous mode [ 157.403271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.475817][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.586457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.640444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.700760][ T3352] device veth1_macvtap entered promiscuous mode [ 157.749847][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.809635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.851129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.893099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.901386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.081670][ T30] audit: type=1400 audit(1731808451.706:145): avc: denied { create } for pid=3400 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.673506][ T10] device bridge_slave_1 left promiscuous mode [ 158.679439][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.686832][ T10] device bridge_slave_0 left promiscuous mode [ 158.692886][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.700638][ T10] device veth1_macvtap left promiscuous mode [ 158.706526][ T10] device veth0_vlan left promiscuous mode [ 159.261095][ T3411] bond_slave_1: mtu less than device minimum [ 159.443241][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.453435][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.465407][ T3419] device bridge_slave_0 entered promiscuous mode [ 159.473435][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.497781][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.532137][ T3419] device bridge_slave_1 entered promiscuous mode [ 159.736902][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.743823][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.750896][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.757699][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.844749][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.873439][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.906630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.914311][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.933366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.941808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.950346][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.957255][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.965187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.973585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.981806][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.988785][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.996638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.005073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.013442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.021507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.039353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.047818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.061247][ T3419] device veth0_vlan entered promiscuous mode [ 160.069213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.088528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.111326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.124671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.157440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.208317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.249645][ T3419] device veth1_macvtap entered promiscuous mode [ 160.278543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.352254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.433342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.511525][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.533141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.559257][ T3455] bond_slave_1: mtu less than device minimum [ 160.636872][ T3460] device pim6reg1 entered promiscuous mode [ 161.343322][ T10] device bridge_slave_1 left promiscuous mode [ 161.349280][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.356682][ T10] device bridge_slave_0 left promiscuous mode [ 161.362761][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.370407][ T10] device veth1_macvtap left promiscuous mode [ 161.376346][ T10] device veth0_vlan left promiscuous mode [ 161.944795][ T3469] FAULT_INJECTION: forcing a failure. [ 161.944795][ T3469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.978731][ T3469] CPU: 0 PID: 3469 Comm: syz.4.1139 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 161.988471][ T3469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 161.998366][ T3469] Call Trace: [ 162.001487][ T3469] [ 162.004263][ T3469] dump_stack_lvl+0x151/0x1c0 [ 162.008783][ T3469] ? io_uring_drop_tctx_refs+0x190/0x190 [ 162.014502][ T3469] ? security_socket_recvmsg+0x87/0xb0 [ 162.019793][ T3469] dump_stack+0x15/0x20 [ 162.023782][ T3469] should_fail+0x3c6/0x510 [ 162.028036][ T3469] should_fail_usercopy+0x1a/0x20 [ 162.032892][ T3469] _copy_to_user+0x20/0x90 [ 162.037155][ T3469] simple_read_from_buffer+0xc7/0x150 [ 162.042359][ T3469] proc_fail_nth_read+0x1a3/0x210 [ 162.047330][ T3469] ? proc_fault_inject_write+0x390/0x390 [ 162.052794][ T3469] ? fsnotify_perm+0x269/0x5b0 [ 162.057398][ T3469] ? security_file_permission+0x86/0xb0 [ 162.062778][ T3469] ? proc_fault_inject_write+0x390/0x390 [ 162.068246][ T3469] vfs_read+0x27d/0xd40 [ 162.072240][ T3469] ? kernel_read+0x1f0/0x1f0 [ 162.076662][ T3469] ? __kasan_check_write+0x14/0x20 [ 162.081616][ T3469] ? mutex_lock+0xb6/0x1e0 [ 162.085865][ T3469] ? wait_for_completion_killable_timeout+0x10/0x10 [ 162.092289][ T3469] ? __fdget_pos+0x2e7/0x3a0 [ 162.096712][ T3469] ? ksys_read+0x77/0x2c0 [ 162.100877][ T3469] ksys_read+0x199/0x2c0 [ 162.104959][ T3469] ? vfs_write+0x1110/0x1110 [ 162.109385][ T3469] ? debug_smp_processor_id+0x17/0x20 [ 162.114938][ T3469] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 162.120843][ T3469] __x64_sys_read+0x7b/0x90 [ 162.125183][ T3469] x64_sys_call+0x28/0x9a0 [ 162.129435][ T3469] do_syscall_64+0x3b/0xb0 [ 162.133686][ T3469] ? clear_bhb_loop+0x35/0x90 [ 162.138198][ T3469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.143927][ T3469] RIP: 0033:0x7f77f975815c [ 162.148273][ T3469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 162.167802][ T3469] RSP: 002b:00007f77f83d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.176061][ T3469] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f975815c [ 162.183853][ T3469] RDX: 000000000000000f RSI: 00007f77f83d20a0 RDI: 0000000000000008 [ 162.191666][ T3469] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 162.199474][ T3469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.207288][ T3469] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 162.215107][ T3469] [ 162.370948][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.388033][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.396965][ T3474] device bridge_slave_0 entered promiscuous mode [ 162.403890][ T3487] bond_slave_1: mtu less than device minimum [ 162.414082][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.420935][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.428891][ T3474] device bridge_slave_1 entered promiscuous mode [ 164.860812][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.882941][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.922760][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.990882][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.013032][ T3522] syz.1.1156[3522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.017565][ T3522] syz.1.1156[3522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.023046][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.046754][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.267116][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.303621][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.343434][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.350406][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.357807][ T30] audit: type=1400 audit(1731808458.976:146): avc: denied { create } for pid=3533 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.377394][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.472986][ T3541] FAULT_INJECTION: forcing a failure. [ 165.472986][ T3541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.489921][ T3541] CPU: 1 PID: 3541 Comm: syz.3.1162 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 165.499657][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 165.509547][ T3541] Call Trace: [ 165.512759][ T3541] [ 165.515536][ T3541] dump_stack_lvl+0x151/0x1c0 [ 165.520051][ T3541] ? io_uring_drop_tctx_refs+0x190/0x190 [ 165.525517][ T3541] ? __switch_to+0x62a/0x1190 [ 165.530033][ T3541] dump_stack+0x15/0x20 [ 165.534020][ T3541] should_fail+0x3c6/0x510 [ 165.538274][ T3541] should_fail_alloc_page+0x5a/0x80 [ 165.543309][ T3541] prepare_alloc_pages+0x15c/0x700 [ 165.548259][ T3541] ? __alloc_pages+0x8f0/0x8f0 [ 165.552856][ T3541] ? __alloc_pages_bulk+0xe40/0xe40 [ 165.557892][ T3541] ? __schedule+0xcd4/0x1590 [ 165.562317][ T3541] __alloc_pages+0x18c/0x8f0 [ 165.566744][ T3541] ? prep_new_page+0x110/0x110 [ 165.571343][ T3541] ? preempt_schedule+0xd9/0xe0 [ 165.576035][ T3541] ? preempt_schedule+0xd9/0xe0 [ 165.580713][ T3541] ? schedule_preempt_disabled+0x20/0x20 [ 165.586206][ T3541] pcpu_populate_chunk+0x18c/0xe30 [ 165.591128][ T3541] ? preempt_schedule_thunk+0x16/0x18 [ 165.596346][ T3541] pcpu_alloc+0x984/0x13e0 [ 165.600594][ T3541] __alloc_percpu_gfp+0x27/0x30 [ 165.605280][ T3541] bpf_map_alloc_percpu+0xe6/0x160 [ 165.610225][ T3541] array_map_alloc+0x3a5/0x6d0 [ 165.614824][ T3541] map_create+0x411/0x2050 [ 165.619094][ T3541] __sys_bpf+0x296/0x760 [ 165.623166][ T3541] ? fput_many+0x160/0x1b0 [ 165.627416][ T3541] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 165.632624][ T3541] ? debug_smp_processor_id+0x17/0x20 [ 165.637836][ T3541] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 165.643728][ T3541] __x64_sys_bpf+0x7c/0x90 [ 165.643989][ T3536] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.647980][ T3541] x64_sys_call+0x87f/0x9a0 [ 165.648002][ T3541] do_syscall_64+0x3b/0xb0 [ 165.664822][ T3541] ? clear_bhb_loop+0x35/0x90 [ 165.669333][ T3541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.675150][ T3541] RIP: 0033:0x7fa33b983719 [ 165.679412][ T3541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.697815][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.699023][ T3541] RSP: 002b:00007fa33a5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.714809][ T3541] RAX: ffffffffffffffda RBX: 00007fa33bb3af80 RCX: 00007fa33b983719 [ 165.722623][ T3541] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 165.730432][ T3541] RBP: 00007fa33a5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 165.738254][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.746054][ T3541] R13: 0000000000000000 R14: 00007fa33bb3af80 R15: 00007ffee06d76c8 [ 165.753880][ T3541] [ 165.766435][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.781406][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.790521][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.810259][ T3554] syz.3.1165[3554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.810333][ T3554] syz.3.1165[3554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.828622][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.857754][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.868442][ T3559] syz.3.1166[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.868519][ T3559] syz.3.1166[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.881533][ T3474] device veth0_vlan entered promiscuous mode [ 165.933629][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.943124][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.985501][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.009534][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.039105][ T3474] device veth1_macvtap entered promiscuous mode [ 166.053035][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.060828][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.069011][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.077307][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.086401][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.683222][ T387] device bridge_slave_1 left promiscuous mode [ 166.689152][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.696554][ T387] device bridge_slave_0 left promiscuous mode [ 166.702471][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.710319][ T387] device veth1_macvtap left promiscuous mode [ 166.716385][ T387] device veth0_vlan left promiscuous mode [ 167.573093][ T3579] syz.4.1171[3579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.573181][ T3579] syz.4.1171[3579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.827161][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.863235][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.870597][ T3577] device bridge_slave_0 entered promiscuous mode [ 169.877616][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.884553][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.893394][ T3577] device bridge_slave_1 entered promiscuous mode [ 170.505865][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.512769][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.519853][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.526654][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.702029][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.709595][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.765032][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.772400][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.811057][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.840033][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.848132][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.854988][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.862486][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.871062][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.879393][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.886261][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.963019][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.022947][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.047858][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.061634][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.077155][ T3650] device wg2 entered promiscuous mode [ 173.119562][ T3577] device veth0_vlan entered promiscuous mode [ 173.187904][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.225937][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.294172][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.353408][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.368800][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.406346][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.443082][ T3659] device veth0_vlan left promiscuous mode [ 173.451191][ T3659] device veth0_vlan entered promiscuous mode [ 173.499579][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.518585][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.578202][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.645033][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.693603][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.767821][ T3577] device veth1_macvtap entered promiscuous mode [ 173.953814][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.037857][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.119714][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.133310][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.229874][ T3686] bond_slave_1: mtu less than device minimum [ 175.043459][ T387] device bridge_slave_1 left promiscuous mode [ 175.049419][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.056842][ T387] device bridge_slave_0 left promiscuous mode [ 175.062946][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.071055][ T387] device veth1_macvtap left promiscuous mode [ 175.077059][ T387] device veth0_vlan left promiscuous mode [ 175.751482][ T3699] FAULT_INJECTION: forcing a failure. [ 175.751482][ T3699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.764425][ T3699] CPU: 0 PID: 3699 Comm: syz.0.1211 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 175.774068][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.783961][ T3699] Call Trace: [ 175.787082][ T3699] [ 175.789865][ T3699] dump_stack_lvl+0x151/0x1c0 [ 175.794375][ T3699] ? io_uring_drop_tctx_refs+0x190/0x190 [ 175.799844][ T3699] ? __kasan_check_read+0x11/0x20 [ 175.804705][ T3699] dump_stack+0x15/0x20 [ 175.808693][ T3699] should_fail+0x3c6/0x510 [ 175.812946][ T3699] should_fail_usercopy+0x1a/0x20 [ 175.817811][ T3699] copy_page_from_iter_atomic+0x423/0x10e0 [ 175.823448][ T3699] ? pipe_zero+0x4e0/0x4e0 [ 175.827701][ T3699] generic_perform_write+0x360/0x750 [ 175.832826][ T3699] ? grab_cache_page_write_begin+0xa0/0xa0 [ 175.838476][ T3699] ? file_remove_privs+0x610/0x610 [ 175.843430][ T3699] ? rwsem_write_trylock+0x153/0x340 [ 175.848534][ T3699] ? rwsem_mark_wake+0x770/0x770 [ 175.853398][ T3699] __generic_file_write_iter+0x25b/0x4b0 [ 175.858860][ T3699] generic_file_write_iter+0xaf/0x1c0 [ 175.864072][ T3699] vfs_write+0xd5d/0x1110 [ 175.868262][ T3699] ? putname+0xfa/0x150 [ 175.872325][ T3699] ? file_end_write+0x1c0/0x1c0 [ 175.877002][ T3699] ? mutex_lock+0xb6/0x1e0 [ 175.881268][ T3699] ? wait_for_completion_killable_timeout+0x10/0x10 [ 175.887675][ T3699] ? __fdget_pos+0x2e7/0x3a0 [ 175.892098][ T3699] ? ksys_write+0x77/0x2c0 [ 175.896376][ T3699] ksys_write+0x199/0x2c0 [ 175.900518][ T3699] ? __ia32_sys_read+0x90/0x90 [ 175.905119][ T3699] ? debug_smp_processor_id+0x17/0x20 [ 175.910326][ T3699] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 175.916229][ T3699] __x64_sys_write+0x7b/0x90 [ 175.920654][ T3699] x64_sys_call+0x2f/0x9a0 [ 175.924904][ T3699] do_syscall_64+0x3b/0xb0 [ 175.929248][ T3699] ? clear_bhb_loop+0x35/0x90 [ 175.933760][ T3699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.939501][ T3699] RIP: 0033:0x7fbf53e5b719 [ 175.943751][ T3699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.963182][ T3699] RSP: 002b:00007fbf52ad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.971439][ T3699] RAX: ffffffffffffffda RBX: 00007fbf54012f80 RCX: 00007fbf53e5b719 [ 175.979239][ T3699] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000005 [ 175.987133][ T3699] RBP: 00007fbf52ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 175.994947][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.002758][ T3699] R13: 0000000000000000 R14: 00007fbf54012f80 R15: 00007fff94702688 [ 176.010576][ T3699] [ 176.115939][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.146396][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.185759][ T30] audit: type=1400 audit(1731808469.816:147): avc: denied { create } for pid=3704 comm="syz.0.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.215733][ T3700] device bridge_slave_0 entered promiscuous mode [ 176.247742][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.289890][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.328111][ T3700] device bridge_slave_1 entered promiscuous mode [ 176.722490][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.729412][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.736526][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.743390][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.834664][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.845219][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.862662][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.879293][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.903690][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.917563][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.924555][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.935495][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.945612][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.952763][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.998555][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.028738][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.074832][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.115179][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.245430][ T3763] syz.4.1234[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.245502][ T3763] syz.4.1234[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.279590][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.318263][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.327522][ T3700] device veth0_vlan entered promiscuous mode [ 177.441172][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.460843][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.495672][ T3764] device veth0_vlan left promiscuous mode [ 177.527543][ T3764] device veth0_vlan entered promiscuous mode [ 177.671185][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.724289][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.773844][ T3700] device veth1_macvtap entered promiscuous mode [ 179.139550][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.181749][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.190226][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.243277][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.263586][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.095283][ T387] device bridge_slave_1 left promiscuous mode [ 180.101258][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.109054][ T387] device bridge_slave_0 left promiscuous mode [ 180.115121][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.123458][ T387] device veth1_macvtap left promiscuous mode [ 180.129297][ T387] device veth0_vlan left promiscuous mode [ 180.994007][ T3818] FAULT_INJECTION: forcing a failure. [ 180.994007][ T3818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.007550][ T3818] CPU: 1 PID: 3818 Comm: syz.1.1251 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 181.017282][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.027169][ T3818] Call Trace: [ 181.030306][ T3818] [ 181.033070][ T3818] dump_stack_lvl+0x151/0x1c0 [ 181.037578][ T3818] ? io_uring_drop_tctx_refs+0x190/0x190 [ 181.043061][ T3818] ? trie_delete_elem+0x598/0x760 [ 181.047910][ T3818] dump_stack+0x15/0x20 [ 181.051995][ T3818] should_fail+0x3c6/0x510 [ 181.056250][ T3818] should_fail_alloc_page+0x5a/0x80 [ 181.061289][ T3818] prepare_alloc_pages+0x15c/0x700 [ 181.066318][ T3818] ? __alloc_pages_bulk+0xe40/0xe40 [ 181.071351][ T3818] __alloc_pages+0x18c/0x8f0 [ 181.075778][ T3818] ? prep_new_page+0x110/0x110 [ 181.080378][ T3818] ? pcpu_chunk_relocate+0x20a/0x430 [ 181.085497][ T3818] pcpu_populate_chunk+0x18c/0xe30 [ 181.090449][ T3818] pcpu_alloc+0x984/0x13e0 [ 181.094701][ T3818] __alloc_percpu_gfp+0x27/0x30 [ 181.099416][ T3818] bpf_map_alloc_percpu+0xe6/0x160 [ 181.104332][ T3818] array_map_alloc+0x3a5/0x6d0 [ 181.108936][ T3818] map_create+0x411/0x2050 [ 181.113192][ T3818] __sys_bpf+0x296/0x760 [ 181.117267][ T3818] ? fput_many+0x160/0x1b0 [ 181.121516][ T3818] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 181.126738][ T3818] ? debug_smp_processor_id+0x17/0x20 [ 181.131933][ T3818] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 181.137839][ T3818] __x64_sys_bpf+0x7c/0x90 [ 181.142090][ T3818] x64_sys_call+0x87f/0x9a0 [ 181.146517][ T3818] do_syscall_64+0x3b/0xb0 [ 181.150774][ T3818] ? clear_bhb_loop+0x35/0x90 [ 181.155282][ T3818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.161009][ T3818] RIP: 0033:0x7fd641ba0719 [ 181.165527][ T3818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.184969][ T3818] RSP: 002b:00007fd640819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.193213][ T3818] RAX: ffffffffffffffda RBX: 00007fd641d57f80 RCX: 00007fd641ba0719 [ 181.201026][ T3818] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 181.208946][ T3818] RBP: 00007fd640819090 R08: 0000000000000000 R09: 0000000000000000 [ 181.216756][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.224566][ T3818] R13: 0000000000000000 R14: 00007fd641d57f80 R15: 00007ffdf2693c98 [ 181.232411][ T3818] [ 181.244808][ T3826] FAULT_INJECTION: forcing a failure. [ 181.244808][ T3826] name failslab, interval 1, probability 0, space 0, times 0 [ 181.322628][ T3826] CPU: 1 PID: 3826 Comm: syz.3.1259 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 181.332375][ T3826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.342269][ T3826] Call Trace: [ 181.345391][ T3826] [ 181.348173][ T3826] dump_stack_lvl+0x151/0x1c0 [ 181.352766][ T3826] ? io_uring_drop_tctx_refs+0x190/0x190 [ 181.358237][ T3826] ? dev_queue_xmit+0x20/0x20 [ 181.362753][ T3826] dump_stack+0x15/0x20 [ 181.366741][ T3826] should_fail+0x3c6/0x510 [ 181.370992][ T3826] __should_failslab+0xa4/0xe0 [ 181.375602][ T3826] ? skb_clone+0x1d1/0x360 [ 181.379845][ T3826] should_failslab+0x9/0x20 [ 181.384190][ T3826] slab_pre_alloc_hook+0x37/0xd0 [ 181.388960][ T3826] ? skb_clone+0x1d1/0x360 [ 181.393208][ T3826] kmem_cache_alloc+0x44/0x200 [ 181.397930][ T3826] skb_clone+0x1d1/0x360 [ 181.401997][ T3826] bpf_clone_redirect+0xa6/0x390 [ 181.406781][ T3826] bpf_prog_b36a1f39e2fdd4f4+0x56/0x514 [ 181.412153][ T3826] ? swiotlb_late_init_with_tbl+0x1e0/0x340 [ 181.417884][ T3826] ? __stack_depot_save+0x34/0x470 [ 181.422828][ T3826] ? __kasan_slab_alloc+0xc3/0xe0 [ 181.427687][ T3826] ? __kasan_slab_alloc+0xb1/0xe0 [ 181.432547][ T3826] ? slab_post_alloc_hook+0x53/0x2c0 [ 181.437673][ T3826] ? kmem_cache_alloc+0xf5/0x200 [ 181.442450][ T3826] ? __build_skb+0x2a/0x300 [ 181.446781][ T3826] ? build_skb+0x25/0x1f0 [ 181.450946][ T3826] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 181.456326][ T3826] ? bpf_prog_test_run+0x3b0/0x630 [ 181.461282][ T3826] ? __sys_bpf+0x525/0x760 [ 181.465528][ T3826] ? __x64_sys_bpf+0x7c/0x90 [ 181.469955][ T3826] ? x64_sys_call+0x87f/0x9a0 [ 181.474467][ T3826] ? do_syscall_64+0x3b/0xb0 [ 181.478895][ T3826] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.484805][ T3826] ? __kasan_check_read+0x11/0x20 [ 181.489656][ T3826] ? bpf_test_timer_continue+0x140/0x460 [ 181.495128][ T3826] bpf_test_run+0x478/0xa10 [ 181.499472][ T3826] ? convert___skb_to_skb+0x570/0x570 [ 181.504673][ T3826] ? eth_type_trans+0x2e4/0x620 [ 181.509362][ T3826] ? eth_get_headlen+0x240/0x240 [ 181.514137][ T3826] ? convert___skb_to_skb+0x44/0x570 [ 181.519255][ T3826] bpf_prog_test_run_skb+0xb41/0x1420 [ 181.524463][ T3826] ? __kasan_check_write+0x14/0x20 [ 181.529412][ T3826] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 181.535396][ T3826] ? __kasan_check_write+0x14/0x20 [ 181.540343][ T3826] ? fput_many+0x160/0x1b0 [ 181.544598][ T3826] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 181.550324][ T3826] bpf_prog_test_run+0x3b0/0x630 [ 181.555101][ T3826] ? bpf_prog_query+0x220/0x220 [ 181.559875][ T3826] ? selinux_bpf+0xd2/0x100 [ 181.564213][ T3826] ? security_bpf+0x82/0xb0 [ 181.568555][ T3826] __sys_bpf+0x525/0x760 [ 181.572633][ T3826] ? fput_many+0x160/0x1b0 [ 181.576886][ T3826] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 181.582095][ T3826] ? debug_smp_processor_id+0x17/0x20 [ 181.587297][ T3826] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 181.593200][ T3826] __x64_sys_bpf+0x7c/0x90 [ 181.597457][ T3826] x64_sys_call+0x87f/0x9a0 [ 181.601794][ T3826] do_syscall_64+0x3b/0xb0 [ 181.606047][ T3826] ? clear_bhb_loop+0x35/0x90 [ 181.610560][ T3826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.616285][ T3826] RIP: 0033:0x7fa33b983719 [ 181.620541][ T3826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.639982][ T3826] RSP: 002b:00007fa33a5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.648229][ T3826] RAX: ffffffffffffffda RBX: 00007fa33bb3af80 RCX: 00007fa33b983719 [ 181.656131][ T3826] RDX: 0000000000000050 RSI: 0000000020002300 RDI: 000000000000000a [ 181.663936][ T3826] RBP: 00007fa33a5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 181.671834][ T3826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.679645][ T3826] R13: 0000000000000000 R14: 00007fa33bb3af80 R15: 00007ffee06d76c8 [ 181.687466][ T3826] [ 182.028589][ T3834] device pim6reg1 entered promiscuous mode [ 182.135010][ T3845] syz.3.1257[3845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.135089][ T3845] syz.3.1257[3845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.147801][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.169444][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.177279][ T3825] device bridge_slave_0 entered promiscuous mode [ 182.203056][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.210285][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.217963][ T3825] device bridge_slave_1 entered promiscuous mode [ 183.272105][ T3859] : port 1(ip6gretap0) entered blocking state [ 183.283250][ T3859] : port 1(ip6gretap0) entered disabled state [ 183.289743][ T3859] device ip6gretap0 entered promiscuous mode [ 183.743451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.803086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.878508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.937362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.987824][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.994948][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.020621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.028919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.038435][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.045317][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.063891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.080650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.090453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.107879][ T3891] FAULT_INJECTION: forcing a failure. [ 184.107879][ T3891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.121129][ T3891] CPU: 1 PID: 3891 Comm: syz.0.1277 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 184.130860][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.140748][ T3891] Call Trace: [ 184.143883][ T3891] [ 184.146650][ T3891] dump_stack_lvl+0x151/0x1c0 [ 184.151164][ T3891] ? io_uring_drop_tctx_refs+0x190/0x190 [ 184.156631][ T3891] ? __switch_to+0x62a/0x1190 [ 184.161149][ T3891] dump_stack+0x15/0x20 [ 184.165138][ T3891] should_fail+0x3c6/0x510 [ 184.169390][ T3891] should_fail_alloc_page+0x5a/0x80 [ 184.174423][ T3891] prepare_alloc_pages+0x15c/0x700 [ 184.179370][ T3891] ? __alloc_pages+0x8f0/0x8f0 [ 184.183970][ T3891] ? __alloc_pages_bulk+0xe40/0xe40 [ 184.189005][ T3891] ? pcpu_chunk_refresh_hint+0x802/0x930 [ 184.194474][ T3891] __alloc_pages+0x18c/0x8f0 [ 184.198903][ T3891] ? prep_new_page+0x110/0x110 [ 184.203514][ T3891] ? pcpu_chunk_relocate+0x20a/0x430 [ 184.208806][ T3891] pcpu_populate_chunk+0x18c/0xe30 [ 184.213765][ T3891] pcpu_alloc+0x984/0x13e0 [ 184.218019][ T3891] __alloc_percpu_gfp+0x27/0x30 [ 184.222710][ T3891] bpf_map_alloc_percpu+0xe6/0x160 [ 184.227651][ T3891] htab_map_alloc+0xcb8/0x1650 [ 184.232257][ T3891] map_create+0x411/0x2050 [ 184.236510][ T3891] __sys_bpf+0x296/0x760 [ 184.240695][ T3891] ? fput_many+0x160/0x1b0 [ 184.244928][ T3891] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 184.250134][ T3891] ? debug_smp_processor_id+0x17/0x20 [ 184.255342][ T3891] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 184.261240][ T3891] __x64_sys_bpf+0x7c/0x90 [ 184.265495][ T3891] x64_sys_call+0x87f/0x9a0 [ 184.269830][ T3891] do_syscall_64+0x3b/0xb0 [ 184.274084][ T3891] ? clear_bhb_loop+0x35/0x90 [ 184.278599][ T3891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.284325][ T3891] RIP: 0033:0x7fbf53e5b719 [ 184.288581][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.308026][ T3891] RSP: 002b:00007fbf52ad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.316264][ T3891] RAX: ffffffffffffffda RBX: 00007fbf54012f80 RCX: 00007fbf53e5b719 [ 184.324084][ T3891] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 184.331897][ T3891] RBP: 00007fbf52ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 184.339700][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.347509][ T3891] R13: 0000000000000000 R14: 00007fbf54012f80 R15: 00007fff94702688 [ 184.355414][ T3891] [ 184.383065][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.398198][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.409123][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.418183][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.431661][ T3825] device veth0_vlan entered promiscuous mode [ 184.443219][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.459868][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.508446][ T3825] device veth1_macvtap entered promiscuous mode [ 184.530255][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.539054][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.548600][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.678918][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.722945][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.766176][ T3917] FAULT_INJECTION: forcing a failure. [ 184.766176][ T3917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.780973][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.817093][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.842047][ T3917] CPU: 1 PID: 3917 Comm: syz.4.1287 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 184.851789][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.861685][ T3917] Call Trace: [ 184.864801][ T3917] [ 184.867582][ T3917] dump_stack_lvl+0x151/0x1c0 [ 184.872093][ T3917] ? io_uring_drop_tctx_refs+0x190/0x190 [ 184.877564][ T3917] dump_stack+0x15/0x20 [ 184.881552][ T3917] should_fail+0x3c6/0x510 [ 184.885814][ T3917] should_fail_usercopy+0x1a/0x20 [ 184.890668][ T3917] _copy_to_user+0x20/0x90 [ 184.894920][ T3917] simple_read_from_buffer+0xc7/0x150 [ 184.900128][ T3917] proc_fail_nth_read+0x1a3/0x210 [ 184.904995][ T3917] ? proc_fault_inject_write+0x390/0x390 [ 184.910452][ T3917] ? fsnotify_perm+0x269/0x5b0 [ 184.915061][ T3917] ? security_file_permission+0x86/0xb0 [ 184.920435][ T3917] ? proc_fault_inject_write+0x390/0x390 [ 184.925909][ T3917] vfs_read+0x27d/0xd40 [ 184.929908][ T3917] ? kernel_read+0x1f0/0x1f0 [ 184.934321][ T3917] ? __kasan_check_write+0x14/0x20 [ 184.939268][ T3917] ? mutex_lock+0xb6/0x1e0 [ 184.943524][ T3917] ? wait_for_completion_killable_timeout+0x10/0x10 [ 184.949950][ T3917] ? __fdget_pos+0x2e7/0x3a0 [ 184.954372][ T3917] ? ksys_read+0x77/0x2c0 [ 184.958542][ T3917] ksys_read+0x199/0x2c0 [ 184.962631][ T3917] ? __ia32_sys_recv+0xb0/0xb0 [ 184.967217][ T3917] ? vfs_write+0x1110/0x1110 [ 184.971653][ T3917] ? __kasan_check_write+0x14/0x20 [ 184.976589][ T3917] ? switch_fpu_return+0x15f/0x2e0 [ 184.981548][ T3917] __x64_sys_read+0x7b/0x90 [ 184.985883][ T3917] x64_sys_call+0x28/0x9a0 [ 184.990131][ T3917] do_syscall_64+0x3b/0xb0 [ 184.994382][ T3917] ? clear_bhb_loop+0x35/0x90 [ 184.998899][ T3917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.004639][ T3917] RIP: 0033:0x7f77f975815c [ 185.008879][ T3917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 185.028427][ T3917] RSP: 002b:00007f77f83d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.036670][ T3917] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f975815c [ 185.044481][ T3917] RDX: 000000000000000f RSI: 00007f77f83d20a0 RDI: 0000000000000006 [ 185.052293][ T3917] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 185.060105][ T3917] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000002 [ 185.067913][ T3917] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 185.075732][ T3917] [ 185.783322][ T387] device bridge_slave_1 left promiscuous mode [ 185.789274][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.796692][ T387] device bridge_slave_0 left promiscuous mode [ 185.802749][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.810394][ T387] device veth1_macvtap left promiscuous mode [ 185.816253][ T387] device veth0_vlan left promiscuous mode [ 186.887599][ T3932] device wg2 left promiscuous mode [ 186.927165][ T3932] device wg2 entered promiscuous mode [ 191.156060][ T3959] FAULT_INJECTION: forcing a failure. [ 191.156060][ T3959] name failslab, interval 1, probability 0, space 0, times 0 [ 191.252952][ T3959] CPU: 0 PID: 3959 Comm: syz.4.1301 Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 191.262980][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 191.272854][ T3959] Call Trace: [ 191.275977][ T3959] [ 191.278758][ T3959] dump_stack_lvl+0x151/0x1c0 [ 191.283279][ T3959] ? io_uring_drop_tctx_refs+0x190/0x190 [ 191.288738][ T3959] dump_stack+0x15/0x20 [ 191.292729][ T3959] should_fail+0x3c6/0x510 [ 191.296985][ T3959] __should_failslab+0xa4/0xe0 [ 191.301579][ T3959] ? anon_vma_fork+0x1df/0x4e0 [ 191.306181][ T3959] should_failslab+0x9/0x20 [ 191.310526][ T3959] slab_pre_alloc_hook+0x37/0xd0 [ 191.315295][ T3959] ? anon_vma_fork+0x1df/0x4e0 [ 191.319892][ T3959] kmem_cache_alloc+0x44/0x200 [ 191.324497][ T3959] anon_vma_fork+0x1df/0x4e0 [ 191.329008][ T3959] copy_mm+0xa3a/0x13e0 [ 191.333011][ T3959] ? copy_signal+0x610/0x610 [ 191.337423][ T3959] ? __init_rwsem+0xfe/0x1d0 [ 191.341850][ T3959] ? copy_signal+0x4e3/0x610 [ 191.346277][ T3959] copy_process+0x1149/0x3290 [ 191.350794][ T3959] ? __kasan_check_write+0x14/0x20 [ 191.355749][ T3959] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 191.360688][ T3959] ? vfs_write+0x94d/0x1110 [ 191.365034][ T3959] kernel_clone+0x21e/0x9e0 [ 191.369368][ T3959] ? __kasan_check_write+0x14/0x20 [ 191.374314][ T3959] ? create_io_thread+0x1e0/0x1e0 [ 191.379175][ T3959] __x64_sys_clone+0x23f/0x290 [ 191.383775][ T3959] ? __do_sys_vfork+0x130/0x130 [ 191.388465][ T3959] ? debug_smp_processor_id+0x17/0x20 [ 191.393667][ T3959] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 191.399568][ T3959] ? exit_to_user_mode_prepare+0x39/0xa0 [ 191.405066][ T3959] x64_sys_call+0x1b0/0x9a0 [ 191.409375][ T3959] do_syscall_64+0x3b/0xb0 [ 191.413629][ T3959] ? clear_bhb_loop+0x35/0x90 [ 191.418142][ T3959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.423874][ T3959] RIP: 0033:0x7f77f9759719 [ 191.428129][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.447790][ T3959] RSP: 002b:00007f77f83d1fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 191.456029][ T3959] RAX: ffffffffffffffda RBX: 00007f77f9910f80 RCX: 00007f77f9759719 [ 191.463841][ T3959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 191.471654][ T3959] RBP: 00007f77f83d2090 R08: 0000000000000000 R09: 0000000000000000 [ 191.479463][ T3959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 191.487275][ T3959] R13: 0000000000000000 R14: 00007f77f9910f80 R15: 00007fff389c90a8 [ 191.495093][ T3959] [ 191.514717][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.521580][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.529398][ T3938] device bridge_slave_0 entered promiscuous mode [ 191.593023][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.599901][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.737703][ T3938] device bridge_slave_1 entered promiscuous mode [ 192.117638][ T3978] bond_slave_1: mtu less than device minimum [ 192.486253][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.493964][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.603883][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.623504][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.631574][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.638462][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.645728][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.654183][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.662196][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.669062][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.676563][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.685394][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.693490][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.701422][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.709609][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.753534][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.805035][ T3938] device veth0_vlan entered promiscuous mode [ 192.834859][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.883418][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.943178][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.010526][ T3938] device veth1_macvtap entered promiscuous mode [ 193.053512][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.085840][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.095072][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.105261][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.124382][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.137922][ T3995] ------------[ cut here ]------------ [ 193.157240][ T3938] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 193.157253][ T3995] trace type BPF program uses run-time allocation [ 193.157266][ T3938] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 193.168996][ T3995] WARNING: CPU: 0 PID: 3995 at kernel/bpf/verifier.c:11698 check_map_prog_compatibility+0x6f1/0x890 [ 193.175035][ T3938] CPU: 1 PID: 3938 Comm: syz-executor Not tainted 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 193.175061][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 193.183408][ T3995] Modules linked in: [ 193.193974][ T3938] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 193.194004][ T3938] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 29 bb 2a ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 06 bb 2a ff 41 f6 07 01 48 89 5d [ 193.194023][ T3938] RSP: 0018:ffffc90000c1f9e0 EFLAGS: 00010246 [ 193.248299][ T3938] RAX: dffffc0000000000 RBX: ffff88810fe20ad0 RCX: ffff888118e00000 [ 193.256107][ T3938] RDX: ffffffff81a56fa0 RSI: ffff88810c8be0c8 RDI: ffff88810fe20ac0 [ 193.263919][ T3938] RBP: ffffc90000c1fa40 R08: ffffffff81a55060 R09: ffffed1021917c1d [ 193.271730][ T3938] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 193.279544][ T3938] R13: ffff88810fe20ac0 R14: 1ffff11021fc415a R15: 0000000000000000 [ 193.287367][ T3938] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 193.296209][ T3938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.302638][ T3938] CR2: 00007fcb3d13c710 CR3: 000000011156c000 CR4: 00000000003506a0 [ 193.310446][ T3938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.318252][ T3938] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 193.326063][ T3938] Call Trace: [ 193.329188][ T3938] [ 193.331966][ T3938] ? __die_body+0x62/0xb0 [ 193.336132][ T3938] ? die_addr+0x9f/0xd0 [ 193.340126][ T3938] ? exc_general_protection+0x311/0x4b0 [ 193.345512][ T3938] ? asm_exc_general_protection+0x27/0x30 [ 193.351062][ T3938] ? vma_interval_tree_remove+0xae0/0xba0 [ 193.356617][ T3938] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 193.362865][ T3938] ? __rb_erase_color+0x20b/0xa60 [ 193.367722][ T3938] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 193.373975][ T3938] ? rwsem_mark_wake+0x770/0x770 [ 193.378745][ T3938] vma_interval_tree_remove+0xb82/0xba0 [ 193.384130][ T3938] unlink_file_vma+0xd9/0xf0 [ 193.388553][ T3938] free_pgtables+0x13f/0x280 [ 193.392980][ T3938] exit_mmap+0x405/0x940 [ 193.397062][ T3938] ? exit_aio+0x25e/0x3c0 [ 193.401313][ T3938] ? vm_brk+0x30/0x30 [ 193.405134][ T3938] ? mutex_unlock+0xb2/0x260 [ 193.409563][ T3938] ? uprobe_clear_state+0x2cd/0x320 [ 193.414593][ T3938] __mmput+0x95/0x310 [ 193.418416][ T3938] mmput+0x5b/0x170 [ 193.422059][ T3938] do_exit+0xb9c/0x2ca0 [ 193.426050][ T3938] ? __kasan_check_read+0x11/0x20 [ 193.430997][ T3938] ? put_task_struct+0x80/0x80 [ 193.435598][ T3938] ? ksys_write+0x24f/0x2c0 [ 193.439934][ T3938] ? exc_page_fault+0x47a/0x7f0 [ 193.444729][ T3938] ? __ia32_sys_read+0x90/0x90 [ 193.449329][ T3938] do_group_exit+0x141/0x310 [ 193.453750][ T3938] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 193.459668][ T3938] __x64_sys_exit_group+0x3f/0x40 [ 193.464514][ T3938] x64_sys_call+0x610/0x9a0 [ 193.468853][ T3938] do_syscall_64+0x3b/0xb0 [ 193.473106][ T3938] ? clear_bhb_loop+0x35/0x90 [ 193.477618][ T3938] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.483344][ T3938] RIP: 0033:0x7fcb3c452719 [ 193.487598][ T3938] Code: Unable to access opcode bytes at RIP 0x7fcb3c4526ef. [ 193.494799][ T3938] RSP: 002b:00007fff7f29cab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 193.503044][ T3938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb3c452719 [ 193.510857][ T3938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 193.518669][ T3938] RBP: 00007fcb3c4b25b0 R08: 00007fff7f29a857 R09: 0000000000000003 [ 193.526480][ T3938] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 193.534289][ T3938] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff7f29cc60 [ 193.542109][ T3938] [ 193.544965][ T3938] Modules linked in: [ 193.569140][ T3938] ---[ end trace c797cf6db2c30dc2 ]--- [ 193.569211][ T3995] [ 193.577172][ T3938] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 193.583522][ T3938] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 29 bb 2a ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 06 bb 2a ff 41 f6 07 01 48 89 5d [ 193.603380][ T3995] CPU: 1 PID: 3995 Comm: syz.1.1323 Tainted: G D 5.15.167-syzkaller-00202-g42bb395d8907 #0 [ 193.605606][ T3938] RSP: 0018:ffffc90000c1f9e0 EFLAGS: 00010246 [ 193.624133][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 193.634071][ T3938] RAX: dffffc0000000000 RBX: ffff88810fe20ad0 RCX: ffff888118e00000 [ 193.634096][ T3938] RDX: ffffffff81a56fa0 RSI: ffff88810c8be0c8 RDI: ffff88810fe20ac0 [ 193.651907][ T3995] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 193.659509][ T3938] RBP: ffffc90000c1fa40 R08: ffffffff81a55060 R09: ffffed1021917c1d [ 193.662790][ T3995] Code: db e9 f9 fc ff ff e8 3e 31 ed ff 31 db e9 ed fc ff ff e8 32 31 ed ff c6 05 be 5b a3 05 01 48 c7 c7 a0 ec 87 85 e8 8f 7b be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 193.708257][ T3938] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 193.710886][ T3995] RSP: 0018:ffffc90000ea7328 EFLAGS: 00010246 [ 193.723929][ T3995] RAX: 8396718613701d00 RBX: 0000000000000001 RCX: 0000000000040000 [ 193.731771][ T3995] RDX: ffffc90000f7b000 RSI: 00000000000009c6 RDI: 00000000000009c7 [ 193.740125][ T3995] RBP: ffffc90000ea7370 R08: ffffffff815791b5 R09: 0000000000000003 [ 193.748768][ T3995] R10: fffff520001d4dc0 R11: dffffc0000000001 R12: 0000000000000011 [ 193.756923][ T3995] R13: ffff8881367d1800 R14: ffffc9000012c000 R15: dffffc0000000000 [ 193.762673][ T3938] R13: ffff88810fe20ac0 R14: 1ffff11021fc415a R15: 0000000000000000 [ 193.780845][ T3995] FS: 00007fd6408196c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 193.790033][ T3995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.792607][ T3938] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 193.796744][ T3995] CR2: 0000000100000000 CR3: 00000001203e6000 CR4: 00000000003506a0 [ 193.813384][ T3995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.821249][ T3995] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 193.824160][ T3938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.830089][ T3995] Call Trace: [ 193.838799][ T3995] [ 193.841697][ T3995] ? show_regs+0x58/0x60 [ 193.846090][ T3995] ? __warn+0x160/0x2f0 [ 193.850135][ T3995] ? check_map_prog_compatibility+0x6f1/0x890 [ 193.856343][ T3995] ? report_bug+0x3d9/0x5b0 [ 193.860763][ T3995] ? check_map_prog_compatibility+0x6f1/0x890 [ 193.866981][ T3995] ? handle_bug+0x41/0x70 [ 193.871226][ T3995] ? exc_invalid_op+0x1b/0x50 [ 193.875953][ T3995] ? asm_exc_invalid_op+0x1b/0x20 [ 193.881048][ T3995] ? __wake_up_klogd+0xd5/0x110 [ 193.886173][ T3995] ? check_map_prog_compatibility+0x6f1/0x890 [ 193.892219][ T3995] ? check_map_prog_compatibility+0x6f1/0x890 [ 193.898403][ T3995] resolve_pseudo_ldimm64+0x682/0x1240 [ 193.904739][ T3995] ? check_attach_btf_id+0xef0/0xef0 [ 193.909937][ T3995] ? __mark_reg_known+0x1b0/0x1b0 [ 193.915100][ T3995] ? security_capable+0x87/0xb0 [ 193.919850][ T3995] bpf_check+0x3174/0x12bf0 [ 193.924509][ T3995] ? 0xffffffffa002a000 [ 193.928630][ T3995] ? is_bpf_text_address+0x172/0x190 [ 193.934205][ T3995] ? stack_trace_save+0x1c0/0x1c0 [ 193.939216][ T3995] ? __kernel_text_address+0x9b/0x110 [ 193.944700][ T3995] ? unwind_get_return_address+0x4d/0x90 [ 193.950319][ T3995] ? bpf_get_btf_vmlinux+0x60/0x60 [ 193.955530][ T3995] ? arch_stack_walk+0xf3/0x140 [ 193.965188][ T3995] ? stack_trace_save+0x113/0x1c0 [ 193.987881][ T3938] CR2: 0000001b2e010ff8 CR3: 0000000128e0e000 CR4: 00000000003506b0 [ 193.996210][ T3938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.002648][ T3995] ? stack_trace_snprint+0xf0/0xf0 [ 194.004161][ T3938] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 194.017003][ T3938] Kernel panic - not syncing: Fatal exception [ 194.017499][ T3995] ? stack_trace_snprint+0xf0/0xf0 [ 194.023117][ T3938] Kernel Offset: disabled [ 194.032207][ T3938] Rebooting in 86400 seconds..