last executing test programs: 5.317728049s ago: executing program 2 (id=2552): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4a) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x90) 5.234932616s ago: executing program 2 (id=2555): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000064600000000000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001801000020399a2420752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0x10, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000008c0)=[{0x4, 0x2, 0x2, 0xc}, {0x2, 0x3, 0xb, 0x4}, {0x5, 0x2, 0x9, 0x1}], 0x10, 0x6}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x7a74, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x12, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000080000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000007720010004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f6ffffff850000000600000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000364863cc94a8ec03a1590bf90ab9dd7d5a136b9d896a9127a0d62932a95abc088dda22457c86041a853f3a5696f619f489d8d818e58e4b18d7f84b23a48d02f9900259750cc667dfaebc215cd7d14b37e4ceb2f873debb9b2c34a13b454339bdb34e711ad623540cc6116ac7cb8950a771a08b4b9a28c27635b3a412ce6d260d3c7c2c121972605677a3c9b370bd23a6b6"], &(0x7f0000000040)='syzkaller\x00', 0xfffffff9, 0x4a, &(0x7f0000000580)=""/74, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x7, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0xffffffffffffffff, r0, r1, r2, r0, 0xffffffffffffffff, r3, r0, r0, r0], &(0x7f0000000d80)=[{0x2, 0x2, 0x4, 0x1}, {0x5, 0x5, 0xc, 0xa}, {0x0, 0x2, 0xc}], 0x10, 0x2}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x40047452, 0x327abfb181a5388f) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9e403c6631e394d5aa05dd7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f00000002c0)="39b1", &(0x7f0000000300)=""/248, 0x4}, 0x20) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2, 0x9, 0x6, 0x2009, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x8}, 0x48) 4.869390575s ago: executing program 2 (id=2558): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27961738", 0x3c}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000ac0)="c1f0e6178afdab77", &(0x7f0000000540), 0x6c, r2}, 0x38) 4.862656596s ago: executing program 4 (id=2559): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001000)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd5d}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@typedef={0xf, 0x0, 0x0, 0x8, 0x5}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x6f, 0x10, 0x21, 0x0, 0x0, 0x5f, 0x61, 0x5f, 0x0]}}, &(0x7f0000000740)=""/158, 0x4b, 0x9e, 0x1, 0x7}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xee582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc2a4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000b00), &(0x7f0000000a40), 0x802}, 0x38) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000095000000000000001d27fa9197179ce4772e8c1a87bcb9e0c5a6e027bdee6dfb08583c4c44f99f854a7ea258a19650e0a808890d720404d2169a6bff9b26460b5550dc39efc1bf251eb89f34bee3ce2f1209e9a2d892e5d4f3022a0a5a2b059cb838"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x12, 0x2441, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3d1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0xfff, 0x8}, 0x48) close(0xffffffffffffffff) 4.530969082s ago: executing program 2 (id=2563): syz_clone(0x40b04000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8de, 0x81, 0x6, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x20004, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32=r6], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r7) 4.287064372s ago: executing program 4 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (fail_nth: 2) 4.150718293s ago: executing program 4 (id=2567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180118190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000000000000f8ffffffb703000008000000b704000000000000850000002400000095b54bde523746ba21f08133c0ffffc53c46d8c7b13aa0090301366c2319350c811da886b37dc238000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0xfff, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x4, 0x4, 0x4, 0x1940}, 0x48) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x5, 0x2, 0x0, 0xd, 0x8204, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000001c0)}, 0xf016, 0x12f, 0xff, 0x2, 0x2, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x110, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa, 0x45}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64, @ANYRES16=r3, @ANYRES16=r7, @ANYRESOCT], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r10}, 0x8) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 3.646011174s ago: executing program 2 (id=2570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 3.239253707s ago: executing program 4 (id=2574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdef, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde4}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)='>', 0x1}], 0x1}, 0x0) 3.19927676s ago: executing program 0 (id=2576): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x8}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047452, 0x327abfb181a5388f) 3.175795792s ago: executing program 4 (id=2577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xa7c, r4, 0x0, 0x5c0900a0}, 0xba9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000018210000", @ANYRES32=r0, @ANYBLOB="000000000600000018540000060000008018010000786cd1c4a1b80000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000018580000000000009500"/105], &(0x7f0000000180)='GPL\x00', 0x0, 0xf, &(0x7f00000001c0)=""/15, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0, r3, r3], &(0x7f00000003c0)=[{0x5, 0x4, 0x9, 0x3}, {0x5, 0x1, 0x7, 0x1}]}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000018210000", @ANYRES32=r0, @ANYBLOB="000000000600000018540000060000008018010000786cd1c4a1b80000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000018580000000000009500"/105], &(0x7f0000000180)='GPL\x00', 0x0, 0xf, &(0x7f00000001c0)=""/15, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0, r3, r3], &(0x7f00000003c0)=[{0x5, 0x4, 0x9, 0x3}, {0x5, 0x1, 0x7, 0x1}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='mctp_key_release\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.786066823s ago: executing program 4 (id=2578): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9f, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @struct]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001280)=""/4096, 0x38, 0x1000}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r3, 0x20, &(0x7f00000005c0)={&(0x7f00000003c0)=""/114, 0x72, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r0, 0xfffffffffffffe77, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0)=0x7fffffd, 0xfffffffffffffdd4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.784785994s ago: executing program 2 (id=2579): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9f, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @struct]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001280)=""/4096, 0x38, 0x1000}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r3, 0x20, &(0x7f00000005c0)={&(0x7f00000003c0)=""/114, 0x72, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r0, 0xfffffffffffffe77, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0)=0x7fffffd, 0xfffffffffffffdd4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.739448348s ago: executing program 0 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) sendmsg$sock(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1002}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r14}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.738747098s ago: executing program 3 (id=2581): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'syz_tun\x00', @random='\x00\x00\x00 \x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000600007a48f5dd0c00000004000000000000002461377110ab00003f50baf23def8cedea472bb97b6400000024"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x9, 0xf, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xa}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r7}, 0x0, &(0x7f00000009c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='timer_start\x00', r2}, 0x10) openat$cgroup_devices(r6, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002280)=@generic={0x0, r9}, 0x18) 2.046419714s ago: executing program 3 (id=2583): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 1.936217252s ago: executing program 0 (id=2584): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (fail_nth: 2) 1.822769812s ago: executing program 3 (id=2585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180118190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000000000000f8ffffffb703000008000000b704000000000000850000002400000095b54bde523746ba21f08133c0ffffc53c46d8c7b13aa0090301366c2319350c811da886b37dc238000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0xfff, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x4, 0x4, 0x4, 0x1940}, 0x48) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x5, 0x2, 0x0, 0xd, 0x8204, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000001c0)}, 0xf016, 0x12f, 0xff, 0x2, 0x2, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x110, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa, 0x45}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64, @ANYRES16=r3, @ANYRES16=r7, @ANYRESOCT], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r10}, 0x8) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 1.730706659s ago: executing program 1 (id=2586): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000073011400000000009500000000000000f1be3631f6cdf4d7dfcd4dcc35dfd6d736146d9e6126c50a8876"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000073011400000000009500000000000000f1be3631f6cdf4d7dfcd4dcc35dfd6d736146d9e6126c50a8876"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0xca) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0xd7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x1, 0xbf22}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"/16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.458085091s ago: executing program 0 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000c00), 0xb3e6}, 0x38) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.324977852s ago: executing program 1 (id=2588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.121908279s ago: executing program 0 (id=2589): syz_clone(0x40b04000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8de, 0x81, 0x6, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x20004, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32=r6], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r7) 807.708864ms ago: executing program 1 (id=2590): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6279f6f3, 0x3, 0x4, 0x3810, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x203, 0x2, 0x180d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000040), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000001c00)=ANY=[@ANYRESHEX=r2], &(0x7f0000000480)='syzkaller\x00', 0x101}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001b40)={r3, &(0x7f0000001d40)="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", &(0x7f0000001b00)=""/9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x21000a80, &(0x7f0000001c40)="17790777666c927e0347b8499bc46e08cbeec85801739dea2c7cf7c2c8728242169ee1c55bff5f185864df3fe31d9a2ec7d1b11b4374addc822bc3cb0dd369cf175b444b44b0ff2c8d76b7db4723aa903867f3084a6367f4ff5473a8c6564cda3ccef68d3b935c0577d4668775c734fec9902138d6628831939fc3aa886b5f79320840955144eb9fab3763d350ed0f4e4fd0bca16691cabc2f607defbf8a53e4c374ab1cfc16b26e59a9a53f9b931a06c806e8c92e469b7b620dde8d384f2007564b4373d34fbeeb07510b490073467cf77c30a4c41e02f3431878bd28ce949823308e135291ba934b5273fd845d22ca9715", 0xf2, &(0x7f0000001ac0), &(0x7f0000001a80), &(0x7f00000019c0)="d153fa33ed9c3005e1b31f205bfd0f4a24d3a23e4aa94a228bc0ec53660c6b13288b90951dc28946fdebbb6bca4e42354664aa514e7c956466aaaaa46fd5af11789c276e539911c73e8492841766a97d0d6896b7327278bfef08a56a85889eac5a094cc6344ebe8b8d64e007ccb27f8f4230f95fbbc45da9a8e9f0c21563afbead6a40ac17094ab6d892ecde1cea8981f4343414e13f6119c35437d36f7ac78bad000dac00") openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000001980)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/102, 0x66}, {&(0x7f0000001640)=""/179, 0xb3}, {&(0x7f0000001700)=""/39, 0x27}, {&(0x7f0000001740)=""/169, 0xa9}, {&(0x7f0000001800)=""/21, 0x15}], 0x7, &(0x7f00000018c0)=""/170, 0xaa}, 0x10021) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r6 = syz_clone(0x1000, &(0x7f0000000200)="69467a811ab545b4567ad286e6f05c91f7751e16469ed31da9a898d8febe3d45835cbe6128eaf5672369ff8cc4a61cdc23da3df3bf9dd48af5abe016bde99a5d459aee668c307e308fe7cef22b1373fbf8e10614856b1d5448ac8dbc401021a5f1cf8e1aa56ce3ee3fef76df0512a01e081fdc1f8523523533178f7439b885595dbfaaaedc73d81651648d4014bc7418d7e39ecb4b1118d80dd8070dc108a70679554c302e6d77af322077bf3739963021be9ce492ad9929090c78d11a9acf76e189987eca0b1167a8852c28767fcdd4da5f9404a7960d8c4d6478ee828ee2f07d01f540c1a8797dd556b9cdf1e46793058d0f54121883", 0xf7, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000340)="73592eaaa355cab2654b") syz_open_procfs$namespace(r6, &(0x7f0000000380)='ns/cgroup\x00') 805.402394ms ago: executing program 3 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x9}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 448.826893ms ago: executing program 1 (id=2592): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, 0x0) 328.717833ms ago: executing program 3 (id=2593): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, 0x0) (fail_nth: 2) 317.590974ms ago: executing program 1 (id=2594): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000001d80)=0x81) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020662a, &(0x7f00000005c0)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.freeze\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000600)=[{0x74, 0x0, 0x0, 0x1f00}, {0x0, 0x0, 0x0, 0x6}]}) 57.973185ms ago: executing program 3 (id=2595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) sendmsg$sock(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1002}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r14}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 56.711385ms ago: executing program 0 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) sendmsg$sock(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1002}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r14}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 0s ago: executing program 1 (id=2597): syz_clone(0x40b04000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8de, 0x81, 0x6, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x1, 0x0, 0x20004, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32=r6], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r7) kernel console output (not intermixed with test programs): it, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 412.298212][ T6006] FAULT_INJECTION: forcing a failure. [ 412.298212][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.311180][ T6006] CPU: 1 PID: 6006 Comm: syz.1.1600 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 412.320880][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 412.330776][ T6006] Call Trace: [ 412.333904][ T6006] [ 412.336675][ T6006] dump_stack_lvl+0x151/0x1b7 [ 412.341186][ T6006] ? io_uring_drop_tctx_refs+0x190/0x190 [ 412.346653][ T6006] ? __kmalloc+0x13a/0x270 [ 412.350906][ T6006] ? kvmalloc_node+0x1f0/0x4d0 [ 412.355508][ T6006] dump_stack+0x15/0x17 [ 412.359502][ T6006] should_fail+0x3c6/0x510 [ 412.363751][ T6006] should_fail_usercopy+0x1a/0x20 [ 412.368612][ T6006] _copy_from_user+0x20/0xd0 [ 412.373039][ T6006] btf_new_fd+0x360/0x910 [ 412.377210][ T6006] bpf_btf_load+0x6f/0x90 [ 412.381370][ T6006] __sys_bpf+0x50e/0x760 [ 412.385454][ T6006] ? fput_many+0x160/0x1b0 [ 412.389703][ T6006] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 412.394914][ T6006] ? debug_smp_processor_id+0x17/0x20 [ 412.400119][ T6006] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 412.406022][ T6006] __x64_sys_bpf+0x7c/0x90 [ 412.410272][ T6006] do_syscall_64+0x3d/0xb0 [ 412.414526][ T6006] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.420256][ T6006] RIP: 0033:0x7fea239343b9 [ 412.424510][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.443950][ T6006] RSP: 002b:00007fea225b4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.452194][ T6006] RAX: ffffffffffffffda RBX: 00007fea23ac2f80 RCX: 00007fea239343b9 [ 412.460005][ T6006] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 412.467828][ T6006] RBP: 00007fea225b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 412.475627][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.483442][ T6006] R13: 000000000000000b R14: 00007fea23ac2f80 R15: 00007ffe2af54248 [ 412.491257][ T6006] [ 413.015994][ T6028] ÿÿÿÿÿÿ: renamed from vlan0 [ 413.041112][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.048671][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.423527][ T6053] device wg2 entered promiscuous mode [ 419.165419][ T6290] FAULT_INJECTION: forcing a failure. [ 419.165419][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.194530][ T6290] CPU: 1 PID: 6290 Comm: syz.0.1687 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 419.204262][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 419.214156][ T6290] Call Trace: [ 419.217279][ T6290] [ 419.220057][ T6290] dump_stack_lvl+0x151/0x1b7 [ 419.224575][ T6290] ? io_uring_drop_tctx_refs+0x190/0x190 [ 419.230039][ T6290] ? kasan_set_track+0x5d/0x70 [ 419.234641][ T6290] ? __kasan_slab_free+0x11/0x20 [ 419.239413][ T6290] ? kmem_cache_free+0x116/0x2e0 [ 419.244196][ T6290] ? putname+0xfa/0x150 [ 419.248177][ T6290] ? do_sys_openat2+0x71c/0x830 [ 419.252865][ T6290] ? do_syscall_64+0x3d/0xb0 [ 419.257299][ T6290] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 419.263193][ T6290] dump_stack+0x15/0x17 [ 419.267185][ T6290] should_fail+0x3c6/0x510 [ 419.271440][ T6290] should_fail_usercopy+0x1a/0x20 [ 419.276300][ T6290] _copy_from_user+0x20/0xd0 [ 419.280726][ T6290] iovec_from_user+0xc7/0x330 [ 419.285241][ T6290] __import_iovec+0x6d/0x420 [ 419.289668][ T6290] import_iovec+0xe5/0x120 [ 419.293918][ T6290] ___sys_recvmsg+0x56b/0x690 [ 419.298430][ T6290] ? __sys_recvmsg+0x260/0x260 [ 419.303029][ T6290] ? vfs_write+0x9ec/0x1110 [ 419.307376][ T6290] ? __fdget+0x1bc/0x240 [ 419.311449][ T6290] __x64_sys_recvmsg+0x1dc/0x2b0 [ 419.316223][ T6290] ? fput+0x1a/0x20 [ 419.319867][ T6290] ? ___sys_recvmsg+0x690/0x690 [ 419.324563][ T6290] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 419.330457][ T6290] ? exit_to_user_mode_prepare+0x39/0xa0 [ 419.335925][ T6290] do_syscall_64+0x3d/0xb0 [ 419.340180][ T6290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 419.345906][ T6290] RIP: 0033:0x7f58f64bf3b9 [ 419.350168][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.369603][ T6290] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 419.377846][ T6290] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 419.385660][ T6290] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003 [ 419.393469][ T6290] RBP: 00007f58f513f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 419.401282][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.409092][ T6290] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 419.416913][ T6290] [ 423.455493][ T30] audit: type=1400 audit(1722375150.923:132): avc: denied { create } for pid=6426 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.709082][ T30] audit: type=1400 audit(1722375154.153:133): avc: denied { create } for pid=6538 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.326817][ T6557] FAULT_INJECTION: forcing a failure. [ 427.326817][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.466398][ T6557] CPU: 0 PID: 6557 Comm: syz.2.1771 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 427.476117][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 427.486012][ T6557] Call Trace: [ 427.489133][ T6557] [ 427.491911][ T6557] dump_stack_lvl+0x151/0x1b7 [ 427.496431][ T6557] ? io_uring_drop_tctx_refs+0x190/0x190 [ 427.501889][ T6557] ? __kmalloc+0x13a/0x270 [ 427.506146][ T6557] ? kvmalloc_node+0x1f0/0x4d0 [ 427.510743][ T6557] dump_stack+0x15/0x17 [ 427.514742][ T6557] should_fail+0x3c6/0x510 [ 427.518989][ T6557] should_fail_usercopy+0x1a/0x20 [ 427.523848][ T6557] _copy_from_user+0x20/0xd0 [ 427.528275][ T6557] btf_new_fd+0x360/0x910 [ 427.532444][ T6557] bpf_btf_load+0x6f/0x90 [ 427.536606][ T6557] __sys_bpf+0x50e/0x760 [ 427.540686][ T6557] ? fput_many+0x160/0x1b0 [ 427.544940][ T6557] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 427.550150][ T6557] ? debug_smp_processor_id+0x17/0x20 [ 427.555356][ T6557] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 427.561258][ T6557] __x64_sys_bpf+0x7c/0x90 [ 427.565511][ T6557] do_syscall_64+0x3d/0xb0 [ 427.569762][ T6557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.575491][ T6557] RIP: 0033:0x7f288a94b3b9 [ 427.579747][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.599185][ T6557] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.607430][ T6557] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 427.615248][ T6557] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 427.623053][ T6557] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 427.630865][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.638678][ T6557] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 427.646501][ T6557] [ 427.867006][ T6562] device syzkaller0 entered promiscuous mode [ 429.036653][ T100] udevd[100]: worker [4060] terminated by signal 33 (Unknown signal 33) [ 429.061369][ T100] udevd[100]: worker [4060] failed while handling '/devices/virtual/block/loop4' [ 429.728769][ T30] audit: type=1400 audit(1722375157.193:134): avc: denied { read } for pid=6651 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.796845][ T30] audit: type=1400 audit(1722375157.223:135): avc: denied { write } for pid=6651 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.450883][ T6665] device sit0 left promiscuous mode [ 430.975586][ T6668] device sit0 entered promiscuous mode [ 434.527541][ T30] audit: type=1400 audit(1722375162.003:136): avc: denied { setopt } for pid=6762 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.660591][ T6883] FAULT_INJECTION: forcing a failure. [ 439.660591][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 439.673037][ T6883] CPU: 0 PID: 6883 Comm: syz.2.1865 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 439.682727][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.692613][ T6883] Call Trace: [ 439.695745][ T6883] [ 439.698514][ T6883] dump_stack_lvl+0x151/0x1b7 [ 439.703030][ T6883] ? io_uring_drop_tctx_refs+0x190/0x190 [ 439.708505][ T6883] ? kernelmode_fixup_or_oops+0x222/0x270 [ 439.714053][ T6883] dump_stack+0x15/0x17 [ 439.718041][ T6883] should_fail+0x3c6/0x510 [ 439.722298][ T6883] __should_failslab+0xa4/0xe0 [ 439.726894][ T6883] should_failslab+0x9/0x20 [ 439.731234][ T6883] slab_pre_alloc_hook+0x37/0xd0 [ 439.736008][ T6883] ? __napi_alloc_skb+0x167/0x2e0 [ 439.740868][ T6883] __kmalloc_track_caller+0x6c/0x260 [ 439.745988][ T6883] ? __napi_alloc_skb+0x167/0x2e0 [ 439.750851][ T6883] ? __napi_alloc_skb+0x167/0x2e0 [ 439.755711][ T6883] __alloc_skb+0x10c/0x550 [ 439.759963][ T6883] __napi_alloc_skb+0x167/0x2e0 [ 439.764651][ T6883] napi_get_frags+0x6a/0x170 [ 439.769078][ T6883] tun_get_user+0xd85/0x3aa0 [ 439.773512][ T6883] ? _kstrtoull+0x3a0/0x4a0 [ 439.777846][ T6883] ? tun_do_read+0x1ef0/0x1ef0 [ 439.782444][ T6883] ? kstrtouint_from_user+0x20a/0x2a0 [ 439.787651][ T6883] ? kstrtol_from_user+0x310/0x310 [ 439.792607][ T6883] ? bpf_probe_read_compat_str+0x15c/0x180 [ 439.798242][ T6883] ? bpf_trace_run3+0x123/0x250 [ 439.802926][ T6883] ? avc_policy_seqno+0x1b/0x70 [ 439.807612][ T6883] ? selinux_file_permission+0x2c4/0x570 [ 439.813084][ T6883] tun_chr_write_iter+0x1e1/0x2e0 [ 439.817941][ T6883] vfs_write+0xd5d/0x1110 [ 439.822109][ T6883] ? kmem_cache_free+0x2c3/0x2e0 [ 439.826891][ T6883] ? file_end_write+0x1c0/0x1c0 [ 439.831569][ T6883] ? __fdget_pos+0x209/0x3a0 [ 439.836003][ T6883] ? ksys_write+0x77/0x2c0 [ 439.840377][ T6883] ksys_write+0x199/0x2c0 [ 439.844542][ T6883] ? __ia32_sys_read+0x90/0x90 [ 439.849140][ T6883] ? debug_smp_processor_id+0x17/0x20 [ 439.854348][ T6883] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 439.860261][ T6883] __x64_sys_write+0x7b/0x90 [ 439.864676][ T6883] do_syscall_64+0x3d/0xb0 [ 439.869047][ T6883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 439.874772][ T6883] RIP: 0033:0x7f288a94b3b9 [ 439.879029][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.898467][ T6883] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.906722][ T6883] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 439.914524][ T6883] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000005 [ 439.922337][ T6883] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.930149][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.937960][ T6883] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 439.945774][ T6883] [ 440.958525][ T6934] FAULT_INJECTION: forcing a failure. [ 440.958525][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 440.987436][ T6934] CPU: 0 PID: 6934 Comm: syz.3.1882 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 440.997154][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 441.007048][ T6934] Call Trace: [ 441.010170][ T6934] [ 441.012949][ T6934] dump_stack_lvl+0x151/0x1b7 [ 441.017461][ T6934] ? io_uring_drop_tctx_refs+0x190/0x190 [ 441.022930][ T6934] ? avc_has_perm+0x16f/0x260 [ 441.027444][ T6934] ? __kasan_check_write+0x14/0x20 [ 441.032391][ T6934] dump_stack+0x15/0x17 [ 441.036398][ T6934] should_fail+0x3c6/0x510 [ 441.040637][ T6934] __should_failslab+0xa4/0xe0 [ 441.045234][ T6934] ? sock_alloc_inode+0x1b/0xb0 [ 441.049920][ T6934] should_failslab+0x9/0x20 [ 441.054262][ T6934] slab_pre_alloc_hook+0x37/0xd0 [ 441.059037][ T6934] ? sock_alloc_inode+0x1b/0xb0 [ 441.063721][ T6934] kmem_cache_alloc+0x44/0x200 [ 441.068337][ T6934] ? sockfs_init_fs_context+0xb0/0xb0 [ 441.073531][ T6934] sock_alloc_inode+0x1b/0xb0 [ 441.078043][ T6934] ? sockfs_init_fs_context+0xb0/0xb0 [ 441.083255][ T6934] new_inode_pseudo+0x64/0x220 [ 441.087854][ T6934] __sock_create+0x135/0x760 [ 441.092277][ T6934] __sys_socketpair+0x29f/0x6e0 [ 441.096964][ T6934] ? __ia32_sys_socket+0x90/0x90 [ 441.101737][ T6934] ? debug_smp_processor_id+0x17/0x20 [ 441.106944][ T6934] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 441.112847][ T6934] __x64_sys_socketpair+0x9b/0xb0 [ 441.117708][ T6934] do_syscall_64+0x3d/0xb0 [ 441.121960][ T6934] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.127688][ T6934] RIP: 0033:0x7f91322a63b9 [ 441.131943][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.151383][ T6934] RSP: 002b:00007f9130f26048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 441.159628][ T6934] RAX: ffffffffffffffda RBX: 00007f9132434f80 RCX: 00007f91322a63b9 [ 441.167439][ T6934] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 441.175252][ T6934] RBP: 00007f9130f260a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.183062][ T6934] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.190876][ T6934] R13: 000000000000000b R14: 00007f9132434f80 R15: 00007fff4a5707f8 [ 441.198689][ T6934] [ 441.215959][ T30] audit: type=1400 audit(1722375168.683:137): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 441.227564][ T6934] socket: no more sockets [ 444.772086][ T7037] FAULT_INJECTION: forcing a failure. [ 444.772086][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.788042][ T7037] CPU: 1 PID: 7037 Comm: syz.2.1915 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 444.797750][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 444.807644][ T7037] Call Trace: [ 444.810769][ T7037] [ 444.813544][ T7037] dump_stack_lvl+0x151/0x1b7 [ 444.818058][ T7037] ? io_uring_drop_tctx_refs+0x190/0x190 [ 444.823527][ T7037] dump_stack+0x15/0x17 [ 444.827518][ T7037] should_fail+0x3c6/0x510 [ 444.831926][ T7037] should_fail_usercopy+0x1a/0x20 [ 444.836780][ T7037] _copy_from_user+0x20/0xd0 [ 444.841206][ T7037] __sys_bpf+0x1e9/0x760 [ 444.845281][ T7037] ? fput_many+0x160/0x1b0 [ 444.849534][ T7037] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 444.854744][ T7037] ? debug_smp_processor_id+0x17/0x20 [ 444.859949][ T7037] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 444.865852][ T7037] __x64_sys_bpf+0x7c/0x90 [ 444.870104][ T7037] do_syscall_64+0x3d/0xb0 [ 444.874357][ T7037] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 444.880085][ T7037] RIP: 0033:0x7f288a94b3b9 [ 444.884340][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.903781][ T7037] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.912025][ T7037] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 444.919837][ T7037] RDX: 0000000000000050 RSI: 0000000020000900 RDI: 000000000000000a [ 444.927647][ T7037] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 444.935475][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.943278][ T7037] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 444.951104][ T7037] [ 449.187295][ T7100] device syzkaller0 entered promiscuous mode [ 450.259098][ T7120] device syzkaller0 entered promiscuous mode [ 450.338703][ T7123] FAULT_INJECTION: forcing a failure. [ 450.338703][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 450.351142][ T7123] CPU: 0 PID: 7123 Comm: syz.4.1940 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 450.360831][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 450.370726][ T7123] Call Trace: [ 450.373849][ T7123] [ 450.376627][ T7123] dump_stack_lvl+0x151/0x1b7 [ 450.381156][ T7123] ? io_uring_drop_tctx_refs+0x190/0x190 [ 450.386610][ T7123] dump_stack+0x15/0x17 [ 450.390601][ T7123] should_fail+0x3c6/0x510 [ 450.394855][ T7123] __should_failslab+0xa4/0xe0 [ 450.399457][ T7123] should_failslab+0x9/0x20 [ 450.403793][ T7123] slab_pre_alloc_hook+0x37/0xd0 [ 450.408566][ T7123] ? __napi_alloc_skb+0x167/0x2e0 [ 450.413429][ T7123] __kmalloc_track_caller+0x6c/0x260 [ 450.418549][ T7123] ? __napi_alloc_skb+0x167/0x2e0 [ 450.423414][ T7123] ? __napi_alloc_skb+0x167/0x2e0 [ 450.428270][ T7123] __alloc_skb+0x10c/0x550 [ 450.432524][ T7123] __napi_alloc_skb+0x167/0x2e0 [ 450.437210][ T7123] napi_get_frags+0x6a/0x170 [ 450.441635][ T7123] tun_get_user+0xd85/0x3aa0 [ 450.446062][ T7123] ? kasan_set_track+0x4b/0x70 [ 450.450660][ T7123] ? kasan_set_free_info+0x23/0x40 [ 450.455610][ T7123] ? ____kasan_slab_free+0x126/0x160 [ 450.460728][ T7123] ? __kasan_slab_free+0x11/0x20 [ 450.465506][ T7123] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 450.471407][ T7123] ? _kstrtoull+0x3a0/0x4a0 [ 450.475745][ T7123] ? tun_do_read+0x1ef0/0x1ef0 [ 450.480346][ T7123] ? kstrtouint_from_user+0x20a/0x2a0 [ 450.485554][ T7123] ? kstrtol_from_user+0x310/0x310 [ 450.490503][ T7123] ? avc_policy_seqno+0x1b/0x70 [ 450.495188][ T7123] ? selinux_file_permission+0x2c4/0x570 [ 450.500658][ T7123] tun_chr_write_iter+0x1e1/0x2e0 [ 450.505520][ T7123] vfs_write+0xd5d/0x1110 [ 450.509680][ T7123] ? kmem_cache_free+0x116/0x2e0 [ 450.514459][ T7123] ? file_end_write+0x1c0/0x1c0 [ 450.519145][ T7123] ? __fdget_pos+0x209/0x3a0 [ 450.523567][ T7123] ? ksys_write+0x77/0x2c0 [ 450.527822][ T7123] ksys_write+0x199/0x2c0 [ 450.531989][ T7123] ? __ia32_sys_read+0x90/0x90 [ 450.536589][ T7123] ? debug_smp_processor_id+0x17/0x20 [ 450.541797][ T7123] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 450.547699][ T7123] __x64_sys_write+0x7b/0x90 [ 450.552124][ T7123] do_syscall_64+0x3d/0xb0 [ 450.556377][ T7123] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 450.562103][ T7123] RIP: 0033:0x7fc385bcd3b9 [ 450.566357][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.585802][ T7123] RSP: 002b:00007fc38482c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.594044][ T7123] RAX: ffffffffffffffda RBX: 00007fc385d5c058 RCX: 00007fc385bcd3b9 [ 450.601856][ T7123] RDX: 0000000000000036 RSI: 0000000020000180 RDI: 0000000000000003 [ 450.609667][ T7123] RBP: 00007fc38482c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.617480][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.625290][ T7123] R13: 000000000000006e R14: 00007fc385d5c058 R15: 00007fff37028858 [ 450.633105][ T7123] [ 453.538758][ T7177] device syzkaller0 entered promiscuous mode [ 458.342829][ T7237] device sit0 entered promiscuous mode [ 462.819848][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.826745][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.833845][ T7262] device bridge_slave_0 entered promiscuous mode [ 462.903892][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.048791][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.140584][ T7262] device bridge_slave_1 entered promiscuous mode [ 464.441566][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.449040][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.580545][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.655807][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.663796][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.670670][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.838233][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.946171][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.954173][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.961031][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.006617][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.019171][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.042499][ T7262] device veth0_vlan entered promiscuous mode [ 465.057285][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.068261][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.076487][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.084227][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.092624][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.101026][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.108901][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.122183][ T7262] device veth1_macvtap entered promiscuous mode [ 465.135662][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.142946][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.162741][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.170970][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.179482][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.200867][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.209846][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.218238][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.226901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.257231][ T6913] device vlan1 left promiscuous mode [ 465.262409][ T6913] bridge0: port 3(vlan1) entered disabled state [ 465.376181][ T6913] device bridge_slave_1 left promiscuous mode [ 465.425416][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.529276][ T6913] device bridge_slave_0 left promiscuous mode [ 465.535228][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.649717][ T6913] device veth1_macvtap left promiscuous mode [ 465.925370][ T30] audit: type=1400 audit(1722375193.393:138): avc: denied { mounton } for pid=7262 comm="syz-executor" path="/root/syzkaller.l43MWb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.951977][ T30] audit: type=1400 audit(1722375193.433:139): avc: denied { mount } for pid=7262 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 465.996899][ T30] audit: type=1400 audit(1722375193.453:140): avc: denied { mounton } for pid=7262 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 469.989071][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.996107][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.042402][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.049279][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.056409][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.063239][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.080642][ T7380] device bridge0 entered promiscuous mode [ 470.788672][ T7388] device veth0_vlan left promiscuous mode [ 470.879633][ T7388] device veth0_vlan entered promiscuous mode [ 471.104660][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.132087][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 471.179103][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.147418][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.154410][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.189052][ T7417] FAULT_INJECTION: forcing a failure. [ 473.189052][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.208242][ T7417] CPU: 1 PID: 7417 Comm: syz.4.2021 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 473.217955][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 473.227851][ T7417] Call Trace: [ 473.230975][ T7417] [ 473.233752][ T7417] dump_stack_lvl+0x151/0x1b7 [ 473.238267][ T7417] ? io_uring_drop_tctx_refs+0x190/0x190 [ 473.243735][ T7417] dump_stack+0x15/0x17 [ 473.247726][ T7417] should_fail+0x3c6/0x510 [ 473.251983][ T7417] should_fail_usercopy+0x1a/0x20 [ 473.256839][ T7417] _copy_from_user+0x20/0xd0 [ 473.261266][ T7417] __sys_bpf+0x1e9/0x760 [ 473.265345][ T7417] ? fput_many+0x160/0x1b0 [ 473.269602][ T7417] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 473.274810][ T7417] ? debug_smp_processor_id+0x17/0x20 [ 473.280013][ T7417] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 473.285918][ T7417] __x64_sys_bpf+0x7c/0x90 [ 473.290172][ T7417] do_syscall_64+0x3d/0xb0 [ 473.294421][ T7417] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 473.300149][ T7417] RIP: 0033:0x7fc385bcd3b9 [ 473.304401][ T7417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.323846][ T7417] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.332089][ T7417] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 473.339899][ T7417] RDX: 0000000000000050 RSI: 0000000020000900 RDI: 000000000000000a [ 473.347710][ T7417] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.355522][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.363334][ T7417] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 473.371151][ T7417] [ 473.431977][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.438849][ T7414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.445968][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.452720][ T7414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.459811][ T7414] FAULT_INJECTION: forcing a failure. [ 473.459811][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 473.472160][ T7414] CPU: 1 PID: 7414 Comm: syz.1.2019 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 473.481866][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 473.491764][ T7414] Call Trace: [ 473.494882][ T7414] [ 473.497661][ T7414] dump_stack_lvl+0x151/0x1b7 [ 473.502171][ T7414] ? io_uring_drop_tctx_refs+0x190/0x190 [ 473.507641][ T7414] dump_stack+0x15/0x17 [ 473.511632][ T7414] should_fail+0x3c6/0x510 [ 473.515885][ T7414] __should_failslab+0xa4/0xe0 [ 473.520485][ T7414] should_failslab+0x9/0x20 [ 473.524824][ T7414] slab_pre_alloc_hook+0x37/0xd0 [ 473.529605][ T7414] ? br_info_notify+0xb4/0x170 [ 473.534198][ T7414] __kmalloc_track_caller+0x6c/0x260 [ 473.539324][ T7414] ? br_info_notify+0xb4/0x170 [ 473.543919][ T7414] ? br_info_notify+0xb4/0x170 [ 473.548518][ T7414] __alloc_skb+0x10c/0x550 [ 473.552772][ T7414] br_info_notify+0xb4/0x170 [ 473.557198][ T7414] br_ifinfo_notify+0x28/0x30 [ 473.561711][ T7414] br_stp_enable_port+0x19d/0x260 [ 473.566575][ T7414] br_stp_enable_bridge+0x22e/0x2c0 [ 473.571614][ T7414] br_dev_open+0x71/0xe0 [ 473.575685][ T7414] __dev_open+0x353/0x4e0 [ 473.579851][ T7414] ? dev_open+0x260/0x260 [ 473.584018][ T7414] ? _raw_spin_unlock_bh+0x51/0x60 [ 473.588965][ T7414] ? dev_set_rx_mode+0x245/0x2e0 [ 473.593738][ T7414] ? __kasan_check_read+0x11/0x20 [ 473.598601][ T7414] __dev_change_flags+0x1db/0x6e0 [ 473.603461][ T7414] ? avc_denied+0x1b0/0x1b0 [ 473.607801][ T7414] ? dev_get_flags+0x1e0/0x1e0 [ 473.612402][ T7414] dev_change_flags+0x8c/0x1a0 [ 473.617000][ T7414] dev_ifsioc+0x147/0x10c0 [ 473.621255][ T7414] ? dev_ioctl+0xe70/0xe70 [ 473.625535][ T7414] ? mutex_lock+0x135/0x1e0 [ 473.629856][ T7414] ? wait_for_completion_killable_timeout+0x10/0x10 [ 473.636273][ T7414] dev_ioctl+0x54d/0xe70 [ 473.640349][ T7414] sock_do_ioctl+0x34f/0x5a0 [ 473.644775][ T7414] ? sock_show_fdinfo+0xa0/0xa0 [ 473.649463][ T7414] ? selinux_file_ioctl+0x3cc/0x540 [ 473.654496][ T7414] sock_ioctl+0x455/0x740 [ 473.658688][ T7414] ? sock_poll+0x400/0x400 [ 473.662911][ T7414] ? __fget_files+0x31e/0x380 [ 473.667427][ T7414] ? security_file_ioctl+0x84/0xb0 [ 473.672373][ T7414] ? sock_poll+0x400/0x400 [ 473.676626][ T7414] __se_sys_ioctl+0x114/0x190 [ 473.681140][ T7414] __x64_sys_ioctl+0x7b/0x90 [ 473.685653][ T7414] do_syscall_64+0x3d/0xb0 [ 473.689911][ T7414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 473.695633][ T7414] RIP: 0033:0x7f8a9afae3b9 [ 473.699888][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.719330][ T7414] RSP: 002b:00007f8a99c0d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.727574][ T7414] RAX: ffffffffffffffda RBX: 00007f8a9b13d058 RCX: 00007f8a9afae3b9 [ 473.735393][ T7414] RDX: 0000000020000900 RSI: 0000000000008914 RDI: 0000000000000009 [ 473.743198][ T7414] RBP: 00007f8a99c0d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.751007][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.758821][ T7414] R13: 000000000000006e R14: 00007f8a9b13d058 R15: 00007fffbfc9d628 [ 473.766636][ T7414] [ 473.769905][ T7414] device bridge0 entered promiscuous mode [ 474.285411][ T7435] FAULT_INJECTION: forcing a failure. [ 474.285411][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.388268][ T7435] CPU: 1 PID: 7435 Comm: syz.0.2027 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 474.397989][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 474.407886][ T7435] Call Trace: [ 474.411006][ T7435] [ 474.413784][ T7435] dump_stack_lvl+0x151/0x1b7 [ 474.418302][ T7435] ? io_uring_drop_tctx_refs+0x190/0x190 [ 474.423770][ T7435] ? __check_object_size+0x2d9/0x3d0 [ 474.428896][ T7435] dump_stack+0x15/0x17 [ 474.432879][ T7435] should_fail+0x3c6/0x510 [ 474.437132][ T7435] should_fail_usercopy+0x1a/0x20 [ 474.441992][ T7435] _copy_from_user+0x20/0xd0 [ 474.446422][ T7435] generic_map_update_batch+0x4ef/0x860 [ 474.451804][ T7435] ? generic_map_delete_batch+0x5f0/0x5f0 [ 474.457355][ T7435] ? generic_map_delete_batch+0x5f0/0x5f0 [ 474.462912][ T7435] bpf_map_do_batch+0x4c3/0x620 [ 474.467599][ T7435] __sys_bpf+0x5dc/0x760 [ 474.471677][ T7435] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 474.476890][ T7435] ? debug_smp_processor_id+0x17/0x20 [ 474.482091][ T7435] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 474.487992][ T7435] __x64_sys_bpf+0x7c/0x90 [ 474.492244][ T7435] do_syscall_64+0x3d/0xb0 [ 474.496498][ T7435] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 474.502138][ T7435] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 474.507868][ T7435] RIP: 0033:0x7f58f64bf3b9 [ 474.512123][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.531561][ T7435] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.539807][ T7435] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 474.547622][ T7435] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 474.555432][ T7435] RBP: 00007f58f513f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 474.563242][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.571052][ T7435] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 474.578873][ T7435] [ 474.762150][ T7446] device veth0_vlan left promiscuous mode [ 474.778039][ T7446] device veth0_vlan entered promiscuous mode [ 475.033823][ T7463] device sit0 left promiscuous mode [ 475.152176][ T7470] FAULT_INJECTION: forcing a failure. [ 475.152176][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 475.164628][ T7470] CPU: 0 PID: 7470 Comm: syz.4.2038 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 475.174305][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 475.184200][ T7470] Call Trace: [ 475.187322][ T7470] [ 475.190102][ T7470] dump_stack_lvl+0x151/0x1b7 [ 475.194617][ T7470] ? io_uring_drop_tctx_refs+0x190/0x190 [ 475.200197][ T7470] ? ____kasan_kmalloc+0xed/0x110 [ 475.205060][ T7470] ? __kasan_check_write+0x14/0x20 [ 475.210087][ T7470] dump_stack+0x15/0x17 [ 475.214081][ T7470] should_fail+0x3c6/0x510 [ 475.218337][ T7470] __should_failslab+0xa4/0xe0 [ 475.222932][ T7470] should_failslab+0x9/0x20 [ 475.227272][ T7470] slab_pre_alloc_hook+0x37/0xd0 [ 475.232046][ T7470] kmem_cache_alloc_trace+0x48/0x210 [ 475.237166][ T7470] ? tipc_topsrv_queue_evt+0x162/0x350 [ 475.242467][ T7470] tipc_topsrv_queue_evt+0x162/0x350 [ 475.247586][ T7470] tipc_sub_report_overlap+0x4ac/0x840 [ 475.252878][ T7470] tipc_nametbl_insert_publ+0x101e/0x1490 [ 475.258437][ T7470] tipc_nametbl_publish+0x18c/0x300 [ 475.263466][ T7470] tipc_sk_publish+0x238/0x4b0 [ 475.268067][ T7470] ? tipc_sk_withdraw+0x890/0x890 [ 475.272926][ T7470] ? tipc_nametbl_build_group+0x3a3/0x400 [ 475.278486][ T7470] tipc_sk_join+0x455/0x8a0 [ 475.282825][ T7470] ? proc_fail_nth_read+0x210/0x210 [ 475.287856][ T7470] ? __tipc_sendstream+0x1310/0x1310 [ 475.292980][ T7470] ? selinux_socket_setsockopt+0x260/0x360 [ 475.298622][ T7470] ? __kasan_check_write+0x14/0x20 [ 475.303568][ T7470] ? _copy_from_user+0x96/0xd0 [ 475.308195][ T7470] tipc_setsockopt+0x794/0xb80 [ 475.312770][ T7470] ? tipc_shutdown+0x400/0x400 [ 475.317366][ T7470] ? security_socket_setsockopt+0x82/0xb0 [ 475.322919][ T7470] ? tipc_shutdown+0x400/0x400 [ 475.327521][ T7470] __sys_setsockopt+0x4dc/0x840 [ 475.332295][ T7470] ? __ia32_sys_recv+0xb0/0xb0 [ 475.336896][ T7470] __x64_sys_setsockopt+0xbf/0xd0 [ 475.341755][ T7470] do_syscall_64+0x3d/0xb0 [ 475.346005][ T7470] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 475.351733][ T7470] RIP: 0033:0x7fc385bcd3b9 [ 475.355989][ T7470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.375432][ T7470] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.383675][ T7470] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 475.391485][ T7470] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 475.399295][ T7470] RBP: 00007fc38484d0a0 R08: 00000000000004bd R09: 0000000000000000 [ 475.407106][ T7470] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 475.414918][ T7470] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 475.422739][ T7470] [ 476.848400][ T7497] device veth0_vlan left promiscuous mode [ 476.858054][ T7497] device veth0_vlan entered promiscuous mode [ 476.988781][ T7508] FAULT_INJECTION: forcing a failure. [ 476.988781][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 477.166265][ T7508] CPU: 0 PID: 7508 Comm: syz.1.2050 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 477.175987][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 477.185885][ T7508] Call Trace: [ 477.189006][ T7508] [ 477.191787][ T7508] dump_stack_lvl+0x151/0x1b7 [ 477.196300][ T7508] ? io_uring_drop_tctx_refs+0x190/0x190 [ 477.201767][ T7508] dump_stack+0x15/0x17 [ 477.205756][ T7508] should_fail+0x3c6/0x510 [ 477.210014][ T7508] __should_failslab+0xa4/0xe0 [ 477.214611][ T7508] ? __d_alloc+0x2d/0x6c0 [ 477.218781][ T7508] should_failslab+0x9/0x20 [ 477.223116][ T7508] slab_pre_alloc_hook+0x37/0xd0 [ 477.227890][ T7508] ? __d_alloc+0x2d/0x6c0 [ 477.232057][ T7508] kmem_cache_alloc+0x44/0x200 [ 477.236657][ T7508] __d_alloc+0x2d/0x6c0 [ 477.240650][ T7508] ? perf_event_exit_event+0x530/0x530 [ 477.245942][ T7508] d_alloc_pseudo+0x1d/0x70 [ 477.250282][ T7508] alloc_file_pseudo+0x131/0x2f0 [ 477.255054][ T7508] ? alloc_empty_file_noaccount+0x80/0x80 [ 477.260609][ T7508] anon_inode_getfile+0xa7/0x180 [ 477.265389][ T7508] __se_sys_perf_event_open+0x1006/0x3ce0 [ 477.270946][ T7508] ? file_end_write+0x1c0/0x1c0 [ 477.275624][ T7508] ? wait_for_common_io+0x2c1/0x2e0 [ 477.280658][ T7508] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 477.286126][ T7508] ? __kasan_check_write+0x14/0x20 [ 477.291072][ T7508] ? fput_many+0x160/0x1b0 [ 477.295326][ T7508] ? debug_smp_processor_id+0x17/0x20 [ 477.300531][ T7508] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 477.306436][ T7508] __x64_sys_perf_event_open+0xbf/0xd0 [ 477.311730][ T7508] do_syscall_64+0x3d/0xb0 [ 477.315983][ T7508] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 477.321710][ T7508] RIP: 0033:0x7f8a9afae3b9 [ 477.325965][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.345578][ T7508] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 477.353823][ T7508] RAX: ffffffffffffffda RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 477.361636][ T7508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 477.369446][ T7508] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 477.377257][ T7508] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 477.385069][ T7508] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 477.392884][ T7508] [ 478.067101][ T7554] device veth0_vlan left promiscuous mode [ 478.228616][ T7554] device veth0_vlan entered promiscuous mode [ 479.409269][ T7624] device veth0_vlan left promiscuous mode [ 479.457288][ T7624] device veth0_vlan entered promiscuous mode [ 479.530842][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.538888][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 479.546678][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.372735][ T7672] device veth0_vlan left promiscuous mode [ 480.400600][ T7672] device veth0_vlan entered promiscuous mode [ 481.608952][ T7724] device veth0_to_bridge entered promiscuous mode [ 483.333960][ T7782] FAULT_INJECTION: forcing a failure. [ 483.333960][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 483.352236][ T7782] CPU: 1 PID: 7782 Comm: syz.1.2130 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 483.361943][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 483.371837][ T7782] Call Trace: [ 483.374959][ T7782] [ 483.377737][ T7782] dump_stack_lvl+0x151/0x1b7 [ 483.382249][ T7782] ? io_uring_drop_tctx_refs+0x190/0x190 [ 483.387723][ T7782] ? alloc_empty_file+0x38/0x180 [ 483.392491][ T7782] dump_stack+0x15/0x17 [ 483.396483][ T7782] should_fail+0x3c6/0x510 [ 483.400735][ T7782] __should_failslab+0xa4/0xe0 [ 483.405336][ T7782] ? __alloc_file+0x29/0x2a0 [ 483.409764][ T7782] should_failslab+0x9/0x20 [ 483.414103][ T7782] slab_pre_alloc_hook+0x37/0xd0 [ 483.418881][ T7782] ? __alloc_file+0x29/0x2a0 [ 483.423301][ T7782] kmem_cache_alloc+0x44/0x200 [ 483.427904][ T7782] __alloc_file+0x29/0x2a0 [ 483.432154][ T7782] alloc_empty_file+0x95/0x180 [ 483.436755][ T7782] path_openat+0xfe/0x2f40 [ 483.441008][ T7782] ? __stack_depot_save+0x16b/0x470 [ 483.446044][ T7782] ? __kasan_slab_alloc+0xc3/0xe0 [ 483.450909][ T7782] ? __kasan_slab_alloc+0xb1/0xe0 [ 483.455763][ T7782] ? slab_post_alloc_hook+0x53/0x2c0 [ 483.460884][ T7782] ? kmem_cache_alloc+0xf5/0x200 [ 483.465656][ T7782] ? getname_flags+0xba/0x520 [ 483.470171][ T7782] ? getname+0x19/0x20 [ 483.474076][ T7782] ? do_sys_openat2+0xd7/0x830 [ 483.478677][ T7782] ? __x64_sys_openat+0x243/0x290 [ 483.483537][ T7782] ? do_syscall_64+0x3d/0xb0 [ 483.487964][ T7782] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 483.493868][ T7782] ? do_filp_open+0x460/0x460 [ 483.498380][ T7782] do_filp_open+0x21c/0x460 [ 483.502719][ T7782] ? vfs_tmpfile+0x2c0/0x2c0 [ 483.507149][ T7782] do_sys_openat2+0x13f/0x830 [ 483.511657][ T7782] ? ktime_get+0x12f/0x160 [ 483.515911][ T7782] ? lapic_next_event+0x5f/0x70 [ 483.520598][ T7782] ? do_sys_open+0x220/0x220 [ 483.525030][ T7782] __x64_sys_openat+0x243/0x290 [ 483.529713][ T7782] ? __ia32_sys_open+0x270/0x270 [ 483.534484][ T7782] ? debug_smp_processor_id+0x17/0x20 [ 483.539694][ T7782] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 483.545596][ T7782] ? exit_to_user_mode_prepare+0x39/0xa0 [ 483.551062][ T7782] do_syscall_64+0x3d/0xb0 [ 483.555315][ T7782] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 483.560957][ T7782] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 483.566685][ T7782] RIP: 0033:0x7f8a9afacd50 [ 483.570943][ T7782] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 483.590381][ T7782] RSP: 002b:00007f8a99c2df20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 483.598625][ T7782] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8a9afacd50 [ 483.606437][ T7782] RDX: 0000000000000002 RSI: 00007f8a99c2dfb0 RDI: 00000000ffffff9c [ 483.614257][ T7782] RBP: 00007f8a99c2dfb0 R08: 0000000000000000 R09: 0000000000000000 [ 483.622064][ T7782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 483.629871][ T7782] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 483.637686][ T7782] [ 484.670979][ T7818] FAULT_INJECTION: forcing a failure. [ 484.670979][ T7818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.727214][ T7818] CPU: 0 PID: 7818 Comm: syz.1.2141 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 484.736932][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 484.746824][ T7818] Call Trace: [ 484.749948][ T7818] [ 484.752726][ T7818] dump_stack_lvl+0x151/0x1b7 [ 484.757239][ T7818] ? io_uring_drop_tctx_refs+0x190/0x190 [ 484.762709][ T7818] dump_stack+0x15/0x17 [ 484.766698][ T7818] should_fail+0x3c6/0x510 [ 484.770954][ T7818] should_fail_alloc_page+0x5a/0x80 [ 484.775986][ T7818] prepare_alloc_pages+0x15c/0x700 [ 484.780941][ T7818] ? __alloc_pages+0x8f0/0x8f0 [ 484.785535][ T7818] ? __alloc_pages_bulk+0xe40/0xe40 [ 484.790568][ T7818] ? __kasan_check_write+0x14/0x20 [ 484.795514][ T7818] ? _raw_spin_lock+0xa4/0x1b0 [ 484.800117][ T7818] __alloc_pages+0x18c/0x8f0 [ 484.804541][ T7818] ? prep_new_page+0x110/0x110 [ 484.809142][ T7818] ? lru_cache_add+0x279/0x540 [ 484.813741][ T7818] wp_page_copy+0x1d4/0x1b00 [ 484.818171][ T7818] ? __kasan_check_write+0x14/0x20 [ 484.823114][ T7818] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 484.828943][ T7818] ? __pte_map_lock+0x442/0x620 [ 484.833623][ T7818] ? vm_normal_page+0x1e1/0x1f0 [ 484.838305][ T7818] do_wp_page+0x6fa/0xb60 [ 484.842471][ T7818] handle_pte_fault+0x7c0/0x24d0 [ 484.847242][ T7818] ? __kasan_check_write+0x14/0x20 [ 484.852191][ T7818] ? fault_around_bytes_set+0xc0/0xc0 [ 484.857399][ T7818] do_handle_mm_fault+0x20bc/0x2400 [ 484.862435][ T7818] ? numa_migrate_prep+0xe0/0xe0 [ 484.867208][ T7818] ? __alloc_pages+0x8f0/0x8f0 [ 484.871809][ T7818] ? down_read_trylock+0x3d6/0x7d0 [ 484.876755][ T7818] ? __init_rwsem+0x1d0/0x1d0 [ 484.881265][ T7818] ? vmacache_find+0x21f/0x4d0 [ 484.885866][ T7818] ? __find_vma+0x30/0x150 [ 484.890120][ T7818] exc_page_fault+0x3b5/0x830 [ 484.894637][ T7818] asm_exc_page_fault+0x27/0x30 [ 484.899320][ T7818] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 484.905742][ T7818] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 484.925184][ T7818] RSP: 0018:ffffc90000d07d18 EFLAGS: 00050206 [ 484.931085][ T7818] RAX: ffffffff82656201 RBX: 0000000000008400 RCX: 0000000000003b80 [ 484.938909][ T7818] RDX: 0000000000008400 RSI: ffff88810daa4880 RDI: 0000000020006000 [ 484.946709][ T7818] RBP: ffffc90000d07d48 R08: dffffc0000000000 R09: ffffed1021b55080 [ 484.954546][ T7818] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007ffffffff000 [ 484.962331][ T7818] R13: 0000000020009b80 R14: ffff88810daa0000 R15: 0000000020001780 [ 484.970144][ T7818] ? _copy_to_user+0x61/0x90 [ 484.974572][ T7818] ? _copy_to_user+0x78/0x90 [ 484.979083][ T7818] map_lookup_elem+0x4c8/0x620 [ 484.983682][ T7818] __sys_bpf+0x452/0x760 [ 484.987761][ T7818] ? fput_many+0x160/0x1b0 [ 484.992015][ T7818] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 484.997229][ T7818] ? debug_smp_processor_id+0x17/0x20 [ 485.002431][ T7818] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 485.008335][ T7818] __x64_sys_bpf+0x7c/0x90 [ 485.012585][ T7818] do_syscall_64+0x3d/0xb0 [ 485.016837][ T7818] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 485.022567][ T7818] RIP: 0033:0x7f8a9afae3b9 [ 485.026822][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.046263][ T7818] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.054506][ T7818] RAX: ffffffffffffffda RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 485.062317][ T7818] RDX: 0000000000000020 RSI: 0000000020000200 RDI: 0000000000000001 [ 485.070130][ T7818] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 485.077940][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.085752][ T7818] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 485.093565][ T7818] [ 485.196170][ T7830] FAULT_INJECTION: forcing a failure. [ 485.196170][ T7830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 485.435645][ T7830] CPU: 1 PID: 7830 Comm: syz.0.2143 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 485.445367][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 485.455260][ T7830] Call Trace: [ 485.458384][ T7830] [ 485.461162][ T7830] dump_stack_lvl+0x151/0x1b7 [ 485.465673][ T7830] ? io_uring_drop_tctx_refs+0x190/0x190 [ 485.471145][ T7830] dump_stack+0x15/0x17 [ 485.475134][ T7830] should_fail+0x3c6/0x510 [ 485.479387][ T7830] should_fail_alloc_page+0x5a/0x80 [ 485.484422][ T7830] prepare_alloc_pages+0x15c/0x700 [ 485.489371][ T7830] ? __alloc_pages+0x8f0/0x8f0 [ 485.493970][ T7830] ? __alloc_pages_bulk+0xe40/0xe40 [ 485.499007][ T7830] __alloc_pages+0x18c/0x8f0 [ 485.503427][ T7830] ? __x64_sys_bpf+0x7c/0x90 [ 485.507856][ T7830] ? prep_new_page+0x110/0x110 [ 485.512456][ T7830] ? __kasan_check_write+0x14/0x20 [ 485.517406][ T7830] __get_free_pages+0x10/0x30 [ 485.521918][ T7830] kasan_populate_vmalloc_pte+0x39/0x130 [ 485.527385][ T7830] ? __apply_to_page_range+0x8ca/0xbe0 [ 485.532681][ T7830] __apply_to_page_range+0x8dd/0xbe0 [ 485.537798][ T7830] ? kasan_populate_vmalloc+0x70/0x70 [ 485.543008][ T7830] ? kasan_populate_vmalloc+0x70/0x70 [ 485.548215][ T7830] apply_to_page_range+0x3b/0x50 [ 485.552986][ T7830] kasan_populate_vmalloc+0x65/0x70 [ 485.558022][ T7830] alloc_vmap_area+0x192f/0x1a80 [ 485.562799][ T7830] ? vm_map_ram+0xa90/0xa90 [ 485.567133][ T7830] ? __kasan_kmalloc+0x9/0x10 [ 485.571647][ T7830] ? kmem_cache_alloc_trace+0x115/0x210 [ 485.577030][ T7830] __get_vm_area_node+0x158/0x360 [ 485.581890][ T7830] __vmalloc_node_range+0xe2/0x8d0 [ 485.586835][ T7830] ? dev_map_alloc+0x35f/0x790 [ 485.591438][ T7830] bpf_map_area_alloc+0xd9/0xf0 [ 485.596128][ T7830] ? dev_map_alloc+0x35f/0x790 [ 485.600726][ T7830] dev_map_alloc+0x35f/0x790 [ 485.605150][ T7830] map_create+0x411/0x2050 [ 485.609404][ T7830] __sys_bpf+0x296/0x760 [ 485.613482][ T7830] ? fput_many+0x160/0x1b0 [ 485.617747][ T7830] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 485.622948][ T7830] ? debug_smp_processor_id+0x17/0x20 [ 485.628149][ T7830] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 485.634056][ T7830] __x64_sys_bpf+0x7c/0x90 [ 485.638305][ T7830] do_syscall_64+0x3d/0xb0 [ 485.642562][ T7830] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 485.648286][ T7830] RIP: 0033:0x7f58f64bf3b9 [ 485.652539][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.672189][ T7830] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.680428][ T7830] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 485.688221][ T7830] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0600000000000000 [ 485.696033][ T7830] RBP: 00007f58f513f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 485.703845][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.711656][ T7830] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 485.719474][ T7830] [ 485.818303][ T7846] FAULT_INJECTION: forcing a failure. [ 485.818303][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.858472][ T7846] CPU: 1 PID: 7846 Comm: syz.4.2149 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 485.868190][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 485.878086][ T7846] Call Trace: [ 485.881207][ T7846] [ 485.883984][ T7846] dump_stack_lvl+0x151/0x1b7 [ 485.888498][ T7846] ? io_uring_drop_tctx_refs+0x190/0x190 [ 485.893966][ T7846] ? migrate_enable+0x1c1/0x2a0 [ 485.898654][ T7846] ? migrate_disable+0x190/0x190 [ 485.903428][ T7846] dump_stack+0x15/0x17 [ 485.907420][ T7846] should_fail+0x3c6/0x510 [ 485.911673][ T7846] should_fail_usercopy+0x1a/0x20 [ 485.916532][ T7846] _copy_from_user+0x20/0xd0 [ 485.920960][ T7846] generic_map_update_batch+0x4ef/0x860 [ 485.926342][ T7846] ? generic_map_delete_batch+0x5f0/0x5f0 [ 485.931896][ T7846] ? generic_map_delete_batch+0x5f0/0x5f0 [ 485.937452][ T7846] bpf_map_do_batch+0x4c3/0x620 [ 485.942139][ T7846] __sys_bpf+0x5dc/0x760 [ 485.946223][ T7846] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 485.951429][ T7846] ? debug_smp_processor_id+0x17/0x20 [ 485.956634][ T7846] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 485.962530][ T7846] __x64_sys_bpf+0x7c/0x90 [ 485.966784][ T7846] do_syscall_64+0x3d/0xb0 [ 485.971036][ T7846] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 485.976678][ T7846] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 485.982408][ T7846] RIP: 0033:0x7fc385bcd3b9 [ 485.986661][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.006104][ T7846] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.014351][ T7846] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 486.022158][ T7846] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 486.029969][ T7846] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 486.037780][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.045593][ T7846] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 486.053407][ T7846] [ 490.149790][ T7942] FAULT_INJECTION: forcing a failure. [ 490.149790][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.244974][ T7942] CPU: 0 PID: 7942 Comm: syz.2.2176 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 490.254695][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 490.264589][ T7942] Call Trace: [ 490.267710][ T7942] [ 490.270497][ T7942] dump_stack_lvl+0x151/0x1b7 [ 490.275002][ T7942] ? io_uring_drop_tctx_refs+0x190/0x190 [ 490.280472][ T7942] dump_stack+0x15/0x17 [ 490.284461][ T7942] should_fail+0x3c6/0x510 [ 490.288716][ T7942] should_fail_usercopy+0x1a/0x20 [ 490.293578][ T7942] strncpy_from_user+0x24/0x2d0 [ 490.298264][ T7942] bpf_prog_load+0x185/0x1b50 [ 490.302778][ T7942] ? timerqueue_add+0x250/0x270 [ 490.307464][ T7942] ? map_freeze+0x370/0x370 [ 490.311804][ T7942] ? selinux_bpf+0xcb/0x100 [ 490.316140][ T7942] ? security_bpf+0x82/0xb0 [ 490.320481][ T7942] __sys_bpf+0x4bc/0x760 [ 490.324561][ T7942] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 490.329767][ T7942] ? debug_smp_processor_id+0x17/0x20 [ 490.334973][ T7942] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 490.340876][ T7942] __x64_sys_bpf+0x7c/0x90 [ 490.345129][ T7942] do_syscall_64+0x3d/0xb0 [ 490.349383][ T7942] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 490.355023][ T7942] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 490.360750][ T7942] RIP: 0033:0x7f288a94b3b9 [ 490.365006][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.384451][ T7942] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.392690][ T7942] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 490.400503][ T7942] RDX: 0000000000000023 RSI: 0000000020000300 RDI: 0000000000000005 [ 490.408315][ T7942] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 490.416128][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.423936][ T7942] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 490.431757][ T7942] [ 493.468799][ T8066] FAULT_INJECTION: forcing a failure. [ 493.468799][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.554222][ T8066] CPU: 1 PID: 8066 Comm: syz.3.2216 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 493.563944][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 493.573834][ T8066] Call Trace: [ 493.576955][ T8066] [ 493.579735][ T8066] dump_stack_lvl+0x151/0x1b7 [ 493.584246][ T8066] ? io_uring_drop_tctx_refs+0x190/0x190 [ 493.589712][ T8066] ? __kmalloc+0x13a/0x270 [ 493.593966][ T8066] ? kvmalloc_node+0x1f0/0x4d0 [ 493.598568][ T8066] dump_stack+0x15/0x17 [ 493.602560][ T8066] should_fail+0x3c6/0x510 [ 493.606813][ T8066] should_fail_usercopy+0x1a/0x20 [ 493.611673][ T8066] _copy_from_user+0x20/0xd0 [ 493.616099][ T8066] btf_new_fd+0x360/0x910 [ 493.620265][ T8066] bpf_btf_load+0x6f/0x90 [ 493.624430][ T8066] __sys_bpf+0x50e/0x760 [ 493.628510][ T8066] ? fput_many+0x160/0x1b0 [ 493.632763][ T8066] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 493.637972][ T8066] ? debug_smp_processor_id+0x17/0x20 [ 493.643178][ T8066] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 493.649084][ T8066] __x64_sys_bpf+0x7c/0x90 [ 493.653334][ T8066] do_syscall_64+0x3d/0xb0 [ 493.657588][ T8066] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 493.663315][ T8066] RIP: 0033:0x7f91322a63b9 [ 493.667568][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.687011][ T8066] RSP: 002b:00007f9130f26048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.695253][ T8066] RAX: ffffffffffffffda RBX: 00007f9132434f80 RCX: 00007f91322a63b9 [ 493.703065][ T8066] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 493.710878][ T8066] RBP: 00007f9130f260a0 R08: 0000000000000000 R09: 0000000000000000 [ 493.718688][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.726499][ T8066] R13: 000000000000000b R14: 00007f9132434f80 R15: 00007fff4a5707f8 [ 493.734317][ T8066] [ 497.545938][ T8133] FAULT_INJECTION: forcing a failure. [ 497.545938][ T8133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.657847][ T8133] CPU: 1 PID: 8133 Comm: syz.0.2233 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 497.667571][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 497.677464][ T8133] Call Trace: [ 497.680584][ T8133] [ 497.683368][ T8133] dump_stack_lvl+0x151/0x1b7 [ 497.687902][ T8133] ? io_uring_drop_tctx_refs+0x190/0x190 [ 497.693345][ T8133] dump_stack+0x15/0x17 [ 497.697340][ T8133] should_fail+0x3c6/0x510 [ 497.701590][ T8133] should_fail_usercopy+0x1a/0x20 [ 497.706453][ T8133] _copy_to_user+0x20/0x90 [ 497.710708][ T8133] simple_read_from_buffer+0xc7/0x150 [ 497.715914][ T8133] proc_fail_nth_read+0x1a3/0x210 [ 497.720774][ T8133] ? proc_fault_inject_write+0x390/0x390 [ 497.726239][ T8133] ? fsnotify_perm+0x470/0x5d0 [ 497.730842][ T8133] ? security_file_permission+0x86/0xb0 [ 497.736219][ T8133] ? proc_fault_inject_write+0x390/0x390 [ 497.741688][ T8133] vfs_read+0x27d/0xd40 [ 497.745681][ T8133] ? kernel_read+0x1f0/0x1f0 [ 497.750105][ T8133] ? __kasan_check_write+0x14/0x20 [ 497.755052][ T8133] ? mutex_lock+0xb6/0x1e0 [ 497.759306][ T8133] ? wait_for_completion_killable_timeout+0x10/0x10 [ 497.765767][ T8133] ? __fdget_pos+0x2e7/0x3a0 [ 497.770153][ T8133] ? ksys_read+0x77/0x2c0 [ 497.774321][ T8133] ksys_read+0x199/0x2c0 [ 497.778402][ T8133] ? vfs_write+0x1110/0x1110 [ 497.782824][ T8133] ? __kasan_check_read+0x11/0x20 [ 497.787688][ T8133] __x64_sys_read+0x7b/0x90 [ 497.792027][ T8133] do_syscall_64+0x3d/0xb0 [ 497.796280][ T8133] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.802007][ T8133] RIP: 0033:0x7f58f64bddfc [ 497.806262][ T8133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 497.825706][ T8133] RSP: 002b:00007f58f513f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.833946][ T8133] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bddfc [ 497.841762][ T8133] RDX: 000000000000000f RSI: 00007f58f513f0b0 RDI: 0000000000000009 [ 497.849585][ T8133] RBP: 00007f58f513f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.857381][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.865193][ T8133] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 497.873012][ T8133] [ 499.197791][ T8154] device syzkaller0 entered promiscuous mode [ 499.468408][ T8154] syz.2.2238[8154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.468479][ T8154] syz.2.2238[8154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.219177][ T30] audit: type=1400 audit(1722375228.693:141): avc: denied { tracepoint } for pid=8210 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 501.676593][ T8229] device veth0_vlan left promiscuous mode [ 501.776860][ T8229] device veth0_vlan entered promiscuous mode [ 502.334912][ T8256] FAULT_INJECTION: forcing a failure. [ 502.334912][ T8256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 502.459318][ T8256] CPU: 1 PID: 8256 Comm: syz.2.2266 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 502.469042][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 502.478930][ T8256] Call Trace: [ 502.482054][ T8256] [ 502.484832][ T8256] dump_stack_lvl+0x151/0x1b7 [ 502.489347][ T8256] ? io_uring_drop_tctx_refs+0x190/0x190 [ 502.494814][ T8256] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 502.500456][ T8256] dump_stack+0x15/0x17 [ 502.504456][ T8256] should_fail+0x3c6/0x510 [ 502.508701][ T8256] should_fail_alloc_page+0x5a/0x80 [ 502.513744][ T8256] prepare_alloc_pages+0x15c/0x700 [ 502.518684][ T8256] ? __alloc_pages_bulk+0xe40/0xe40 [ 502.523717][ T8256] __alloc_pages+0x18c/0x8f0 [ 502.528145][ T8256] ? prep_new_page+0x110/0x110 [ 502.532745][ T8256] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 502.538309][ T8256] ? shmem_swapin_page+0x1520/0x1520 [ 502.543432][ T8256] ? xas_start+0x32c/0x3f0 [ 502.547679][ T8256] ? xas_load+0x2b7/0x2d0 [ 502.551844][ T8256] ? pagecache_get_page+0xdc2/0xeb0 [ 502.556880][ T8256] ? page_cache_prev_miss+0x410/0x410 [ 502.562089][ T8256] shmem_getpage_gfp+0x1388/0x23c0 [ 502.567038][ T8256] ? shmem_getpage+0xa0/0xa0 [ 502.571461][ T8256] ? fault_in_safe_writeable+0x240/0x240 [ 502.576929][ T8256] shmem_write_begin+0xca/0x1b0 [ 502.581615][ T8256] generic_perform_write+0x2bc/0x5a0 [ 502.586737][ T8256] ? grab_cache_page_write_begin+0xa0/0xa0 [ 502.592378][ T8256] ? file_remove_privs+0x610/0x610 [ 502.597323][ T8256] ? rwsem_write_trylock+0x153/0x340 [ 502.602445][ T8256] ? rwsem_mark_wake+0x770/0x770 [ 502.607222][ T8256] __generic_file_write_iter+0x25b/0x4b0 [ 502.612688][ T8256] generic_file_write_iter+0xaf/0x1c0 [ 502.618007][ T8256] vfs_write+0xd5d/0x1110 [ 502.622169][ T8256] ? __hrtimer_run_queues+0x46b/0xad0 [ 502.627383][ T8256] ? file_end_write+0x1c0/0x1c0 [ 502.632064][ T8256] ? mutex_lock+0xb6/0x1e0 [ 502.636318][ T8256] ? wait_for_completion_killable_timeout+0x10/0x10 [ 502.642739][ T8256] ? __fdget_pos+0x2e7/0x3a0 [ 502.647192][ T8256] ? ksys_write+0x77/0x2c0 [ 502.651421][ T8256] ksys_write+0x199/0x2c0 [ 502.655594][ T8256] ? __ia32_sys_read+0x90/0x90 [ 502.660189][ T8256] ? debug_smp_processor_id+0x17/0x20 [ 502.665394][ T8256] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 502.671300][ T8256] __x64_sys_write+0x7b/0x90 [ 502.675721][ T8256] do_syscall_64+0x3d/0xb0 [ 502.679975][ T8256] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 502.685625][ T8256] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 502.691345][ T8256] RIP: 0033:0x7f288a94b3b9 [ 502.695598][ T8256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.715049][ T8256] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.723284][ T8256] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 502.731094][ T8256] RDX: 00000000002a979d RSI: 0000000020000000 RDI: 0000000000000003 [ 502.738911][ T8256] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.746720][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.754530][ T8256] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 502.762345][ T8256] [ 504.620422][ T8289] FAULT_INJECTION: forcing a failure. [ 504.620422][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 504.730152][ T8289] CPU: 1 PID: 8289 Comm: syz.2.2276 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 504.739868][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 504.749766][ T8289] Call Trace: [ 504.752885][ T8289] [ 504.755663][ T8289] dump_stack_lvl+0x151/0x1b7 [ 504.760214][ T8289] ? io_uring_drop_tctx_refs+0x190/0x190 [ 504.765644][ T8289] dump_stack+0x15/0x17 [ 504.769636][ T8289] should_fail+0x3c6/0x510 [ 504.773891][ T8289] __should_failslab+0xa4/0xe0 [ 504.778488][ T8289] should_failslab+0x9/0x20 [ 504.782827][ T8289] slab_pre_alloc_hook+0x37/0xd0 [ 504.787610][ T8289] kmem_cache_alloc_trace+0x48/0x210 [ 504.792855][ T8289] ? __kthread_create_on_node+0x135/0x560 [ 504.798552][ T8289] ? put_cpu_map_entry+0x750/0x750 [ 504.803441][ T8289] __kthread_create_on_node+0x135/0x560 [ 504.808846][ T8289] ? kthread_create_on_node+0x120/0x120 [ 504.814207][ T8289] ? put_cpu_map_entry+0x750/0x750 [ 504.819154][ T8289] kthread_create_on_node+0xda/0x120 [ 504.824271][ T8289] ? tsk_fork_get_node+0x10/0x10 [ 504.829044][ T8289] ? __kmalloc+0x13a/0x270 [ 504.833297][ T8289] ? bpf_map_kmalloc_node+0x118/0x160 [ 504.838510][ T8289] cpu_map_update_elem+0x9d6/0xea0 [ 504.843457][ T8289] ? cpu_map_lookup_elem+0x100/0x100 [ 504.848573][ T8289] ? kvmalloc_node+0x281/0x4d0 [ 504.853174][ T8289] bpf_map_update_value+0x1a3/0x3c0 [ 504.858219][ T8289] map_update_elem+0x644/0x770 [ 504.862811][ T8289] __sys_bpf+0x405/0x760 [ 504.866888][ T8289] ? fput_many+0x160/0x1b0 [ 504.871143][ T8289] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 504.876347][ T8289] ? debug_smp_processor_id+0x17/0x20 [ 504.881554][ T8289] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 504.887456][ T8289] __x64_sys_bpf+0x7c/0x90 [ 504.891710][ T8289] do_syscall_64+0x3d/0xb0 [ 504.896086][ T8289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 504.901811][ T8289] RIP: 0033:0x7f288a94b3b9 [ 504.906066][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.925592][ T8289] RSP: 002b:00007f28895cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.933837][ T8289] RAX: ffffffffffffffda RBX: 00007f288aad9f80 RCX: 00007f288a94b3b9 [ 504.941649][ T8289] RDX: 0000000000000020 RSI: 0000000020000940 RDI: 0000000000000002 [ 504.949460][ T8289] RBP: 00007f28895cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 504.957272][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.965088][ T8289] R13: 000000000000000b R14: 00007f288aad9f80 R15: 00007fffae582b28 [ 504.972901][ T8289] [ 509.937415][ T8386] device syzkaller0 entered promiscuous mode [ 512.109921][ T8429] FAULT_INJECTION: forcing a failure. [ 512.109921][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 512.172513][ T8429] CPU: 0 PID: 8429 Comm: syz.1.2315 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 512.182237][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 512.192128][ T8429] Call Trace: [ 512.195248][ T8429] [ 512.198025][ T8429] dump_stack_lvl+0x151/0x1b7 [ 512.202540][ T8429] ? io_uring_drop_tctx_refs+0x190/0x190 [ 512.208010][ T8429] ? __kasan_check_read+0x11/0x20 [ 512.212870][ T8429] dump_stack+0x15/0x17 [ 512.216862][ T8429] should_fail+0x3c6/0x510 [ 512.221114][ T8429] __should_failslab+0xa4/0xe0 [ 512.225713][ T8429] ? __alloc_skb+0xbe/0x550 [ 512.230052][ T8429] should_failslab+0x9/0x20 [ 512.234389][ T8429] slab_pre_alloc_hook+0x37/0xd0 [ 512.239164][ T8429] ? __alloc_skb+0xbe/0x550 [ 512.243502][ T8429] kmem_cache_alloc+0x44/0x200 [ 512.248106][ T8429] __alloc_skb+0xbe/0x550 [ 512.252270][ T8429] br_info_notify+0xb4/0x170 [ 512.256697][ T8429] br_ifinfo_notify+0x28/0x30 [ 512.261214][ T8429] br_device_event+0x6ad/0x7c0 [ 512.265811][ T8429] ? br_boolopt_multi_get+0xf0/0xf0 [ 512.270855][ T8429] ? packet_notifier+0x8ad/0x8c0 [ 512.275619][ T8429] ? ipv6_mc_netdev_event+0xa4/0x480 [ 512.280737][ T8429] raw_notifier_call_chain+0x8c/0xf0 [ 512.285859][ T8429] dev_set_mac_address+0x325/0x470 [ 512.290807][ T8429] ? dev_pre_changeaddr_notify+0x220/0x220 [ 512.296455][ T8429] dev_set_mac_address_user+0x31/0x50 [ 512.301655][ T8429] dev_ifsioc+0x7ef/0x10c0 [ 512.305908][ T8429] ? dev_ioctl+0xe70/0xe70 [ 512.310159][ T8429] ? mutex_lock+0x135/0x1e0 [ 512.314502][ T8429] ? wait_for_completion_killable_timeout+0x10/0x10 [ 512.320925][ T8429] dev_ioctl+0x54d/0xe70 [ 512.325003][ T8429] sock_do_ioctl+0x34f/0x5a0 [ 512.329432][ T8429] ? sock_show_fdinfo+0xa0/0xa0 [ 512.334118][ T8429] ? selinux_file_ioctl+0x3cc/0x540 [ 512.339153][ T8429] sock_ioctl+0x455/0x740 [ 512.343317][ T8429] ? sock_poll+0x400/0x400 [ 512.347577][ T8429] ? __fget_files+0x31e/0x380 [ 512.352083][ T8429] ? security_file_ioctl+0x84/0xb0 [ 512.357032][ T8429] ? sock_poll+0x400/0x400 [ 512.361284][ T8429] __se_sys_ioctl+0x114/0x190 [ 512.365796][ T8429] __x64_sys_ioctl+0x7b/0x90 [ 512.370222][ T8429] do_syscall_64+0x3d/0xb0 [ 512.374476][ T8429] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 512.380202][ T8429] RIP: 0033:0x7f8a9afae3b9 [ 512.384459][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.403897][ T8429] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.412142][ T8429] RAX: ffffffffffffffda RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 512.419953][ T8429] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 512.427766][ T8429] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 512.435576][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.443387][ T8429] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 512.451204][ T8429] [ 515.330407][ T30] audit: type=1400 audit(1722375242.793:142): avc: denied { create } for pid=8485 comm="syz.3.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 517.689299][ T8540] FAULT_INJECTION: forcing a failure. [ 517.689299][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 517.703206][ T8540] CPU: 1 PID: 8540 Comm: syz.4.2347 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 517.712912][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 517.722807][ T8540] Call Trace: [ 517.725929][ T8540] [ 517.728709][ T8540] dump_stack_lvl+0x151/0x1b7 [ 517.733221][ T8540] ? io_uring_drop_tctx_refs+0x190/0x190 [ 517.738687][ T8540] ? kmem_cache_free+0x116/0x2e0 [ 517.743462][ T8540] ? kasan_set_track+0x5d/0x70 [ 517.748067][ T8540] ? kasan_set_free_info+0x23/0x40 [ 517.753010][ T8540] ? ____kasan_slab_free+0x126/0x160 [ 517.758127][ T8540] ? __kasan_slab_free+0x11/0x20 [ 517.762901][ T8540] ? kmem_cache_free+0x116/0x2e0 [ 517.767675][ T8540] ? putname+0xfa/0x150 [ 517.771685][ T8540] dump_stack+0x15/0x17 [ 517.775661][ T8540] should_fail+0x3c6/0x510 [ 517.779913][ T8540] __should_failslab+0xa4/0xe0 [ 517.784515][ T8540] should_failslab+0x9/0x20 [ 517.788852][ T8540] slab_pre_alloc_hook+0x37/0xd0 [ 517.793629][ T8540] __kmalloc+0x6d/0x270 [ 517.797617][ T8540] ? bpf_test_init+0x101/0x1b0 [ 517.802219][ T8540] bpf_test_init+0x101/0x1b0 [ 517.806649][ T8540] bpf_prog_test_run_skb+0x268/0x1420 [ 517.811852][ T8540] ? __kasan_check_write+0x14/0x20 [ 517.816800][ T8540] ? proc_fail_nth_write+0x20b/0x290 [ 517.821918][ T8540] ? selinux_file_permission+0x2c4/0x570 [ 517.827389][ T8540] ? proc_fail_nth_read+0x210/0x210 [ 517.832424][ T8540] ? fsnotify_perm+0x6a/0x5d0 [ 517.836942][ T8540] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 517.842664][ T8540] ? __kasan_check_write+0x14/0x20 [ 517.847612][ T8540] ? fput_many+0x160/0x1b0 [ 517.851872][ T8540] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 517.857608][ T8540] bpf_prog_test_run+0x3b0/0x630 [ 517.862366][ T8540] ? bpf_prog_query+0x220/0x220 [ 517.867053][ T8540] ? selinux_bpf+0xd2/0x100 [ 517.871394][ T8540] ? security_bpf+0x82/0xb0 [ 517.875732][ T8540] __sys_bpf+0x525/0x760 [ 517.879814][ T8540] ? fput_many+0x160/0x1b0 [ 517.884066][ T8540] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 517.889276][ T8540] ? debug_smp_processor_id+0x17/0x20 [ 517.894481][ T8540] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 517.900383][ T8540] __x64_sys_bpf+0x7c/0x90 [ 517.904636][ T8540] do_syscall_64+0x3d/0xb0 [ 517.908888][ T8540] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 517.914616][ T8540] RIP: 0033:0x7fc385bcd3b9 [ 517.918871][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.938314][ T8540] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.946560][ T8540] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 517.954374][ T8540] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 517.962178][ T8540] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 517.969989][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.977802][ T8540] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 517.985618][ T8540] [ 518.061313][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.068249][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.075725][ T8518] device bridge_slave_0 entered promiscuous mode [ 518.088031][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.094928][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.102412][ T8518] device bridge_slave_1 entered promiscuous mode [ 518.284744][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.291609][ T8518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.425399][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.433031][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.443698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.490847][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.498932][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.506909][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.513737][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.520986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.528945][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.535780][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.542924][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.569528][ T8518] device veth0_vlan entered promiscuous mode [ 518.832629][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.840850][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.848656][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.855884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.863083][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.919159][ T8518] device veth1_macvtap entered promiscuous mode [ 518.926342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 518.967876][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.031317][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.998665][ T356] device bridge_slave_1 left promiscuous mode [ 520.004621][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.133070][ T8579] FAULT_INJECTION: forcing a failure. [ 520.133070][ T8579] name failslab, interval 1, probability 0, space 0, times 0 [ 520.150620][ T8579] CPU: 1 PID: 8579 Comm: syz.0.2359 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 520.160330][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 520.170224][ T8579] Call Trace: [ 520.173351][ T8579] [ 520.176129][ T8579] dump_stack_lvl+0x151/0x1b7 [ 520.180641][ T8579] ? io_uring_drop_tctx_refs+0x190/0x190 [ 520.186110][ T8579] ? avc_denied+0x1b0/0x1b0 [ 520.190448][ T8579] dump_stack+0x15/0x17 [ 520.194439][ T8579] should_fail+0x3c6/0x510 [ 520.198694][ T8579] __should_failslab+0xa4/0xe0 [ 520.203293][ T8579] ? __d_alloc+0x2d/0x6c0 [ 520.207458][ T8579] should_failslab+0x9/0x20 [ 520.211797][ T8579] slab_pre_alloc_hook+0x37/0xd0 [ 520.216589][ T8579] ? __d_alloc+0x2d/0x6c0 [ 520.220737][ T8579] kmem_cache_alloc+0x44/0x200 [ 520.225337][ T8579] __d_alloc+0x2d/0x6c0 [ 520.229330][ T8579] ? down_read+0xd50/0x1900 [ 520.233672][ T8579] d_alloc_parallel+0xe6/0x12e0 [ 520.238356][ T8579] ? __down_common+0x550/0x550 [ 520.242954][ T8579] ? __d_lookup+0x4ff/0x580 [ 520.247293][ T8579] ? link_path_walk+0xb29/0xd90 [ 520.251981][ T8579] ? d_hash_and_lookup+0x1e0/0x1e0 [ 520.256926][ T8579] ? __mnt_want_write+0x1f6/0x270 [ 520.261790][ T8579] path_openat+0xa02/0x2f40 [ 520.266127][ T8579] ? stack_trace_snprint+0xf0/0xf0 [ 520.271083][ T8579] ? __kasan_slab_alloc+0xb1/0xe0 [ 520.275936][ T8579] ? kmem_cache_alloc+0xf5/0x200 [ 520.280712][ T8579] ? do_filp_open+0x460/0x460 [ 520.285239][ T8579] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 520.291212][ T8579] do_filp_open+0x21c/0x460 [ 520.295553][ T8579] ? vfs_tmpfile+0x2c0/0x2c0 [ 520.299981][ T8579] ? noop_direct_IO+0x20/0x20 [ 520.304496][ T8579] do_sys_openat2+0x13f/0x830 [ 520.309009][ T8579] ? do_sys_open+0x220/0x220 [ 520.313430][ T8579] ? _raw_spin_unlock+0x4d/0x70 [ 520.318118][ T8579] ? __schedule+0xda2/0x1590 [ 520.322546][ T8579] __x64_sys_openat+0x243/0x290 [ 520.327241][ T8579] ? __ia32_sys_open+0x270/0x270 [ 520.332004][ T8579] ? __kasan_check_read+0x11/0x20 [ 520.336866][ T8579] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 520.342336][ T8579] do_syscall_64+0x3d/0xb0 [ 520.346587][ T8579] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 520.352234][ T8579] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 520.357957][ T8579] RIP: 0033:0x7f58f64bdd50 [ 520.362211][ T8579] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 520.381652][ T8579] RSP: 002b:00007f58f513ef20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 520.389898][ T8579] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f58f64bdd50 [ 520.397707][ T8579] RDX: 0000000000000002 RSI: 00007f58f513efb0 RDI: 00000000ffffff9c [ 520.405519][ T8579] RBP: 00007f58f513efb0 R08: 0000000000000000 R09: 0000000000000000 [ 520.413329][ T8579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 520.421149][ T8579] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 520.428958][ T8579] [ 520.434030][ T356] device bridge_slave_0 left promiscuous mode [ 520.442075][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.455765][ T356] device veth1_macvtap left promiscuous mode [ 520.461629][ T356] device veth0_vlan left promiscuous mode [ 521.706488][ T8621] FAULT_INJECTION: forcing a failure. [ 521.706488][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 521.839070][ T8621] CPU: 1 PID: 8621 Comm: syz.1.2369 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 521.848790][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 521.858685][ T8621] Call Trace: [ 521.861805][ T8621] [ 521.864583][ T8621] dump_stack_lvl+0x151/0x1b7 [ 521.869099][ T8621] ? io_uring_drop_tctx_refs+0x190/0x190 [ 521.874568][ T8621] dump_stack+0x15/0x17 [ 521.878559][ T8621] should_fail+0x3c6/0x510 [ 521.882811][ T8621] __should_failslab+0xa4/0xe0 [ 521.887411][ T8621] should_failslab+0x9/0x20 [ 521.891751][ T8621] slab_pre_alloc_hook+0x37/0xd0 [ 521.896524][ T8621] ? tipc_msg_create+0x4c/0x530 [ 521.901210][ T8621] __kmalloc_track_caller+0x6c/0x260 [ 521.906334][ T8621] ? tipc_msg_create+0x4c/0x530 [ 521.911017][ T8621] ? tipc_msg_create+0x4c/0x530 [ 521.915704][ T8621] __alloc_skb+0x10c/0x550 [ 521.919958][ T8621] tipc_msg_create+0x4c/0x530 [ 521.924473][ T8621] tipc_group_proto_xmit+0x14a/0x890 [ 521.929595][ T8621] ? kmem_cache_free+0x2c3/0x2e0 [ 521.934365][ T8621] tipc_group_delete+0x123/0x430 [ 521.939141][ T8621] ? kfree_skbmem+0x104/0x170 [ 521.943654][ T8621] ? tipc_group_update_member+0x3f0/0x3f0 [ 521.949209][ T8621] ? __tipc_shutdown+0x122d/0x1510 [ 521.954155][ T8621] ? tipc_group_self+0x27/0x1d0 [ 521.958854][ T8621] tipc_sk_leave+0x1b8/0x700 [ 521.963272][ T8621] ? sock_init_data+0xc0/0xc0 [ 521.967781][ T8621] ? __tipc_shutdown+0x1510/0x1510 [ 521.972728][ T8621] ? kasan_record_aux_stack+0xe/0x10 [ 521.977849][ T8621] ? task_work_add+0x27/0x1d0 [ 521.982362][ T8621] ? fput+0x1a/0x20 [ 521.986007][ T8621] ? filp_close+0x106/0x150 [ 521.990347][ T8621] ? close_fd+0x74/0x80 [ 521.994341][ T8621] ? locks_remove_posix+0x610/0x610 [ 521.999375][ T8621] tipc_release+0x110/0x1300 [ 522.003801][ T8621] ? rwsem_write_trylock+0x153/0x340 [ 522.008921][ T8621] ? tipc_sock_destruct+0x190/0x190 [ 522.013959][ T8621] sock_close+0xdf/0x270 [ 522.018034][ T8621] ? sock_mmap+0xa0/0xa0 [ 522.022114][ T8621] __fput+0x3fe/0x910 [ 522.025937][ T8621] ____fput+0x15/0x20 [ 522.029751][ T8621] task_work_run+0x129/0x190 [ 522.034181][ T8621] exit_to_user_mode_loop+0xc4/0xe0 [ 522.039214][ T8621] exit_to_user_mode_prepare+0x5a/0xa0 [ 522.044506][ T8621] syscall_exit_to_user_mode+0x26/0x160 [ 522.049887][ T8621] do_syscall_64+0x49/0xb0 [ 522.054140][ T8621] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 522.059867][ T8621] RIP: 0033:0x7f8a9afae3b9 [ 522.064121][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.083561][ T8621] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 522.091806][ T8621] RAX: 0000000000000000 RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 522.099618][ T8621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 522.107431][ T8621] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.115240][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.123054][ T8621] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 522.130871][ T8621] [ 522.153752][ T8624] device vlan0 entered promiscuous mode [ 523.489919][ T8670] syz.2.2385[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.489990][ T8670] syz.2.2385[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.908001][ T8710] syz.1.2399[8710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.107501][ T8710] syz.1.2399[8710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.163021][ T8714] FAULT_INJECTION: forcing a failure. [ 525.163021][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.335593][ T8714] CPU: 1 PID: 8714 Comm: syz.4.2401 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 525.345315][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 525.355210][ T8714] Call Trace: [ 525.358330][ T8714] [ 525.361110][ T8714] dump_stack_lvl+0x151/0x1b7 [ 525.365624][ T8714] ? io_uring_drop_tctx_refs+0x190/0x190 [ 525.371093][ T8714] dump_stack+0x15/0x17 [ 525.375081][ T8714] should_fail+0x3c6/0x510 [ 525.379346][ T8714] should_fail_usercopy+0x1a/0x20 [ 525.384193][ T8714] _copy_from_user+0x20/0xd0 [ 525.388620][ T8714] ___sys_recvmsg+0x150/0x690 [ 525.393142][ T8714] ? __sys_recvmsg+0x260/0x260 [ 525.397733][ T8714] ? vfs_write+0x9ec/0x1110 [ 525.402078][ T8714] ? __fdget+0x1bc/0x240 [ 525.406152][ T8714] __x64_sys_recvmsg+0x1dc/0x2b0 [ 525.410925][ T8714] ? fput+0x1a/0x20 [ 525.414581][ T8714] ? ___sys_recvmsg+0x690/0x690 [ 525.419259][ T8714] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 525.425168][ T8714] ? exit_to_user_mode_prepare+0x39/0xa0 [ 525.430628][ T8714] do_syscall_64+0x3d/0xb0 [ 525.434881][ T8714] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 525.440608][ T8714] RIP: 0033:0x7fc385bcd3b9 [ 525.444864][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.464303][ T8714] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 525.472556][ T8714] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 525.480361][ T8714] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000006 [ 525.488172][ T8714] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 525.495983][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.503794][ T8714] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 525.511611][ T8714] [ 526.502383][ T8734] FAULT_INJECTION: forcing a failure. [ 526.502383][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 526.662725][ T8734] CPU: 1 PID: 8734 Comm: syz.4.2406 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 526.672448][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 526.682341][ T8734] Call Trace: [ 526.685461][ T8734] [ 526.688240][ T8734] dump_stack_lvl+0x151/0x1b7 [ 526.692753][ T8734] ? io_uring_drop_tctx_refs+0x190/0x190 [ 526.698221][ T8734] ? __kasan_check_write+0x14/0x20 [ 526.703168][ T8734] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 526.708898][ T8734] dump_stack+0x15/0x17 [ 526.712888][ T8734] should_fail+0x3c6/0x510 [ 526.717142][ T8734] __should_failslab+0xa4/0xe0 [ 526.721744][ T8734] should_failslab+0x9/0x20 [ 526.726081][ T8734] slab_pre_alloc_hook+0x37/0xd0 [ 526.730857][ T8734] kmem_cache_alloc_trace+0x48/0x210 [ 526.735974][ T8734] ? selinux_bpf_prog_alloc+0x51/0x140 [ 526.741272][ T8734] selinux_bpf_prog_alloc+0x51/0x140 [ 526.746394][ T8734] security_bpf_prog_alloc+0x62/0x90 [ 526.751512][ T8734] bpf_prog_load+0x9ee/0x1b50 [ 526.756028][ T8734] ? map_freeze+0x370/0x370 [ 526.760369][ T8734] ? selinux_bpf+0xcb/0x100 [ 526.764704][ T8734] ? security_bpf+0x82/0xb0 [ 526.769045][ T8734] __sys_bpf+0x4bc/0x760 [ 526.773122][ T8734] ? fput_many+0x160/0x1b0 [ 526.777378][ T8734] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 526.782586][ T8734] ? debug_smp_processor_id+0x17/0x20 [ 526.787790][ T8734] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 526.793694][ T8734] __x64_sys_bpf+0x7c/0x90 [ 526.797948][ T8734] do_syscall_64+0x3d/0xb0 [ 526.802199][ T8734] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 526.807927][ T8734] RIP: 0033:0x7fc385bcd3b9 [ 526.812181][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.831629][ T8734] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.839869][ T8734] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 526.847679][ T8734] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 526.855518][ T8734] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.863303][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.871111][ T8734] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 526.878931][ T8734] [ 527.517581][ T8748] syz.4.2410[8748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.517648][ T8748] syz.4.2410[8748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.881790][ T8781] syz.4.2418[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.899998][ T8781] syz.4.2418[8781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.396627][ T30] audit: type=1400 audit(1722375258.873:143): avc: denied { create } for pid=8880 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 532.185757][ T8902] FAULT_INJECTION: forcing a failure. [ 532.185757][ T8902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.347865][ T8902] CPU: 0 PID: 8902 Comm: syz.4.2454 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 532.357590][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 532.367485][ T8902] Call Trace: [ 532.370626][ T8902] [ 532.373385][ T8902] dump_stack_lvl+0x151/0x1b7 [ 532.377898][ T8902] ? io_uring_drop_tctx_refs+0x190/0x190 [ 532.383365][ T8902] ? kmem_cache_free+0x116/0x2e0 [ 532.388143][ T8902] dump_stack+0x15/0x17 [ 532.392133][ T8902] should_fail+0x3c6/0x510 [ 532.396388][ T8902] should_fail_usercopy+0x1a/0x20 [ 532.401253][ T8902] copy_page_from_iter+0x2eb/0x640 [ 532.406196][ T8902] pipe_write+0x92b/0x1930 [ 532.410450][ T8902] ? pipe_read+0x1040/0x1040 [ 532.414873][ T8902] ? selinux_file_permission+0x450/0x570 [ 532.420342][ T8902] ? fsnotify_perm+0x6a/0x5d0 [ 532.424856][ T8902] ? iov_iter_init+0x53/0x190 [ 532.429367][ T8902] vfs_write+0xd5d/0x1110 [ 532.433533][ T8902] ? kmem_cache_free+0x116/0x2e0 [ 532.438309][ T8902] ? file_end_write+0x1c0/0x1c0 [ 532.443020][ T8902] ? __fdget_pos+0x209/0x3a0 [ 532.447418][ T8902] ? ksys_write+0x77/0x2c0 [ 532.451672][ T8902] ksys_write+0x199/0x2c0 [ 532.455841][ T8902] ? __ia32_sys_read+0x90/0x90 [ 532.460462][ T8902] ? debug_smp_processor_id+0x17/0x20 [ 532.465656][ T8902] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 532.471561][ T8902] __x64_sys_write+0x7b/0x90 [ 532.475977][ T8902] do_syscall_64+0x3d/0xb0 [ 532.480236][ T8902] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 532.485956][ T8902] RIP: 0033:0x7fc385bcd3b9 [ 532.490212][ T8902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.509653][ T8902] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.517895][ T8902] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 532.525711][ T8902] RDX: 0000000000000015 RSI: 0000000020000000 RDI: 0000000000000000 [ 532.533641][ T8902] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 532.541451][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.549262][ T8902] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 532.557079][ T8902] [ 532.841160][ T8912] FAULT_INJECTION: forcing a failure. [ 532.841160][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.892537][ T8912] CPU: 1 PID: 8912 Comm: syz.1.2456 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 532.902252][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 532.912153][ T8912] Call Trace: [ 532.915278][ T8912] [ 532.918048][ T8912] dump_stack_lvl+0x151/0x1b7 [ 532.922561][ T8912] ? io_uring_drop_tctx_refs+0x190/0x190 [ 532.928033][ T8912] dump_stack+0x15/0x17 [ 532.932020][ T8912] should_fail+0x3c6/0x510 [ 532.936279][ T8912] should_fail_usercopy+0x1a/0x20 [ 532.941133][ T8912] _copy_from_user+0x20/0xd0 [ 532.945561][ T8912] ___sys_recvmsg+0x150/0x690 [ 532.950078][ T8912] ? __sys_recvmsg+0x260/0x260 [ 532.954675][ T8912] ? enqueue_hrtimer+0xca/0x240 [ 532.959362][ T8912] ? __hrtimer_run_queues+0xa6f/0xad0 [ 532.964574][ T8912] ? ___sys_recvmsg+0x6/0x690 [ 532.969082][ T8912] __x64_sys_recvmsg+0x1dc/0x2b0 [ 532.973856][ T8912] ? ___sys_recvmsg+0x690/0x690 [ 532.978543][ T8912] ? kvm_sched_clock_read+0x18/0x40 [ 532.983578][ T8912] ? debug_smp_processor_id+0x17/0x20 [ 532.988784][ T8912] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 532.994687][ T8912] ? exit_to_user_mode_prepare+0x39/0xa0 [ 533.000153][ T8912] do_syscall_64+0x3d/0xb0 [ 533.004407][ T8912] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 533.010049][ T8912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 533.015780][ T8912] RIP: 0033:0x7f8a9afae3b9 [ 533.020035][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.039473][ T8912] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 533.047719][ T8912] RAX: ffffffffffffffda RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 533.055530][ T8912] RDX: 0000000000001f00 RSI: 0000000020000500 RDI: 0000000000000005 [ 533.063343][ T8912] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 533.071152][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.078965][ T8912] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 533.086776][ T8912] [ 536.374755][ T9006] FAULT_INJECTION: forcing a failure. [ 536.374755][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 536.477194][ T9006] CPU: 0 PID: 9006 Comm: syz.4.2481 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 536.486912][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 536.496808][ T9006] Call Trace: [ 536.499931][ T9006] [ 536.502709][ T9006] dump_stack_lvl+0x151/0x1b7 [ 536.507221][ T9006] ? io_uring_drop_tctx_refs+0x190/0x190 [ 536.512687][ T9006] ? debug_smp_processor_id+0x17/0x20 [ 536.517896][ T9006] ? get_nohz_timer_target+0x79/0x750 [ 536.523104][ T9006] dump_stack+0x15/0x17 [ 536.527096][ T9006] should_fail+0x3c6/0x510 [ 536.531350][ T9006] __should_failslab+0xa4/0xe0 [ 536.535948][ T9006] ? __d_alloc+0x2d/0x6c0 [ 536.540116][ T9006] should_failslab+0x9/0x20 [ 536.544454][ T9006] slab_pre_alloc_hook+0x37/0xd0 [ 536.549230][ T9006] ? __d_alloc+0x2d/0x6c0 [ 536.553394][ T9006] kmem_cache_alloc+0x44/0x200 [ 536.557997][ T9006] __d_alloc+0x2d/0x6c0 [ 536.561987][ T9006] d_alloc_pseudo+0x1d/0x70 [ 536.566330][ T9006] alloc_file_pseudo+0x131/0x2f0 [ 536.571105][ T9006] ? alloc_empty_file_noaccount+0x80/0x80 [ 536.576655][ T9006] ? tipc_sk_finish_conn+0x5a7/0x850 [ 536.581780][ T9006] sock_alloc_file+0xbb/0x260 [ 536.586308][ T9006] __sys_socketpair+0x405/0x6e0 [ 536.590980][ T9006] ? __ia32_sys_socket+0x90/0x90 [ 536.595753][ T9006] ? debug_smp_processor_id+0x17/0x20 [ 536.600958][ T9006] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 536.606872][ T9006] __x64_sys_socketpair+0x9b/0xb0 [ 536.611724][ T9006] do_syscall_64+0x3d/0xb0 [ 536.615974][ T9006] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 536.621702][ T9006] RIP: 0033:0x7fc385bcd3b9 [ 536.625955][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.645397][ T9006] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 536.653642][ T9006] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 536.661452][ T9006] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 536.669267][ T9006] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 536.677075][ T9006] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 536.684885][ T9006] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 536.692703][ T9006] [ 539.444700][ T30] audit: type=1400 audit(1722375266.913:144): avc: denied { create } for pid=9116 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 540.251974][ T9148] FAULT_INJECTION: forcing a failure. [ 540.251974][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.345176][ T9148] CPU: 0 PID: 9148 Comm: syz.0.2525 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 540.354895][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 540.364790][ T9148] Call Trace: [ 540.367913][ T9148] [ 540.370689][ T9148] dump_stack_lvl+0x151/0x1b7 [ 540.375203][ T9148] ? io_uring_drop_tctx_refs+0x190/0x190 [ 540.380673][ T9148] dump_stack+0x15/0x17 [ 540.384665][ T9148] should_fail+0x3c6/0x510 [ 540.388916][ T9148] should_fail_usercopy+0x1a/0x20 [ 540.393776][ T9148] copy_fpstate_to_sigframe+0x708/0x9a0 [ 540.399160][ T9148] ? fpregs_set+0x6f0/0x6f0 [ 540.403497][ T9148] ? kmem_cache_free+0x116/0x2e0 [ 540.408271][ T9148] ? ____kasan_slab_free+0x131/0x160 [ 540.413391][ T9148] ? __kasan_slab_free+0x11/0x20 [ 540.418165][ T9148] ? slab_free_freelist_hook+0xbd/0x190 [ 540.423547][ T9148] ? fpu__alloc_mathframe+0x89/0x150 [ 540.428669][ T9148] get_sigframe+0x378/0x4b0 [ 540.433009][ T9148] ? memcpy+0x56/0x70 [ 540.436827][ T9148] ? restore_sigcontext+0x710/0x710 [ 540.441863][ T9148] arch_do_signal_or_restart+0x2ad/0x1680 [ 540.447415][ T9148] ? __traceiter_signal_generate+0xbf/0xe0 [ 540.453058][ T9148] ? __send_signal+0xc92/0xcb0 [ 540.457659][ T9148] ? get_sigframe_size+0x10/0x10 [ 540.462431][ T9148] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 540.468073][ T9148] ? force_sig_info_to_task+0x31c/0x440 [ 540.473457][ T9148] ? force_sig+0x114/0x1d0 [ 540.477704][ T9148] ? send_sig+0x60/0x60 [ 540.481701][ T9148] exit_to_user_mode_loop+0xa0/0xe0 [ 540.486734][ T9148] exit_to_user_mode_prepare+0x5a/0xa0 [ 540.492028][ T9148] irqentry_exit_to_user_mode+0x9/0x20 [ 540.497322][ T9148] irqentry_exit+0x12/0x40 [ 540.501576][ T9148] exc_general_protection+0x327/0x4b0 [ 540.506783][ T9148] ? debug_smp_processor_id+0x17/0x20 [ 540.511990][ T9148] ? syscall_exit_to_user_mode+0x34/0x160 [ 540.517552][ T9148] asm_exc_general_protection+0x27/0x30 [ 540.522925][ T9148] RIP: 0033:0x7f58f6497c39 [ 540.527179][ T9148] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 540.546620][ T9148] RSP: 002b:00007f58f513e7d8 EFLAGS: 00010283 [ 540.552520][ T9148] RAX: 0000000000000999 RBX: 00007f58f513ed40 RCX: 00007f58f660e160 [ 540.560332][ T9148] RDX: 9999999999999999 RSI: 00007f58f652c6a4 RDI: 9999999999999999 [ 540.568145][ T9148] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 540.575957][ T9148] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 540.583767][ T9148] R13: 00007f58f513eec0 R14: 9999999999999999 R15: 0000000000000000 [ 540.591588][ T9148] [ 544.450882][ T9257] device syzkaller0 entered promiscuous mode [ 544.678794][ T9274] FAULT_INJECTION: forcing a failure. [ 544.678794][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 544.698459][ T9274] CPU: 1 PID: 9274 Comm: syz.4.2565 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 544.708175][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 544.718069][ T9274] Call Trace: [ 544.721192][ T9274] [ 544.723979][ T9274] dump_stack_lvl+0x151/0x1b7 [ 544.728484][ T9274] ? io_uring_drop_tctx_refs+0x190/0x190 [ 544.733949][ T9274] ? kmem_cache_free+0x116/0x2e0 [ 544.738722][ T9274] ? kasan_set_track+0x5d/0x70 [ 544.743321][ T9274] ? kasan_set_free_info+0x23/0x40 [ 544.748270][ T9274] ? ____kasan_slab_free+0x126/0x160 [ 544.753390][ T9274] ? __kasan_slab_free+0x11/0x20 [ 544.758166][ T9274] ? kmem_cache_free+0x116/0x2e0 [ 544.762937][ T9274] ? putname+0xfa/0x150 [ 544.766932][ T9274] dump_stack+0x15/0x17 [ 544.770923][ T9274] should_fail+0x3c6/0x510 [ 544.775176][ T9274] __should_failslab+0xa4/0xe0 [ 544.779777][ T9274] should_failslab+0x9/0x20 [ 544.784142][ T9274] slab_pre_alloc_hook+0x37/0xd0 [ 544.788890][ T9274] __kmalloc+0x6d/0x270 [ 544.792880][ T9274] ? bpf_test_init+0x101/0x1b0 [ 544.797485][ T9274] bpf_test_init+0x101/0x1b0 [ 544.801909][ T9274] bpf_prog_test_run_skb+0x268/0x1420 [ 544.807116][ T9274] ? __kasan_check_write+0x14/0x20 [ 544.812064][ T9274] ? proc_fail_nth_write+0x20b/0x290 [ 544.817186][ T9274] ? selinux_file_permission+0x2c4/0x570 [ 544.822653][ T9274] ? proc_fail_nth_read+0x210/0x210 [ 544.827688][ T9274] ? fsnotify_perm+0x6a/0x5d0 [ 544.832200][ T9274] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 544.837929][ T9274] ? __kasan_check_write+0x14/0x20 [ 544.842874][ T9274] ? fput_many+0x160/0x1b0 [ 544.847129][ T9274] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 544.852856][ T9274] bpf_prog_test_run+0x3b0/0x630 [ 544.857642][ T9274] ? bpf_prog_query+0x220/0x220 [ 544.862324][ T9274] ? selinux_bpf+0xd2/0x100 [ 544.866657][ T9274] ? security_bpf+0x82/0xb0 [ 544.870996][ T9274] __sys_bpf+0x525/0x760 [ 544.875077][ T9274] ? fput_many+0x160/0x1b0 [ 544.879331][ T9274] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 544.884539][ T9274] ? debug_smp_processor_id+0x17/0x20 [ 544.889745][ T9274] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 544.895646][ T9274] __x64_sys_bpf+0x7c/0x90 [ 544.899898][ T9274] do_syscall_64+0x3d/0xb0 [ 544.904150][ T9274] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 544.909881][ T9274] RIP: 0033:0x7fc385bcd3b9 [ 544.914133][ T9274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.933573][ T9274] RSP: 002b:00007fc38484d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.941819][ T9274] RAX: ffffffffffffffda RBX: 00007fc385d5bf80 RCX: 00007fc385bcd3b9 [ 544.949630][ T9274] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 544.957442][ T9274] RBP: 00007fc38484d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 544.965252][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.973067][ T9274] R13: 000000000000000b R14: 00007fc385d5bf80 R15: 00007fff37028858 [ 544.980883][ T9274] [ 545.689225][ T9299] FAULT_INJECTION: forcing a failure. [ 545.689225][ T9299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.702543][ T9299] CPU: 0 PID: 9299 Comm: syz.3.2572 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 545.712339][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 545.722229][ T9299] Call Trace: [ 545.725352][ T9299] [ 545.728129][ T9299] dump_stack_lvl+0x151/0x1b7 [ 545.732642][ T9299] ? io_uring_drop_tctx_refs+0x190/0x190 [ 545.738113][ T9299] dump_stack+0x15/0x17 [ 545.742105][ T9299] should_fail+0x3c6/0x510 [ 545.746365][ T9299] should_fail_alloc_page+0x5a/0x80 [ 545.751391][ T9299] prepare_alloc_pages+0x15c/0x700 [ 545.756339][ T9299] ? __alloc_pages_bulk+0xe40/0xe40 [ 545.761397][ T9299] ? __kasan_check_write+0x14/0x20 [ 545.766316][ T9299] ? proc_fail_nth_write+0x20b/0x290 [ 545.771438][ T9299] __alloc_pages+0x18c/0x8f0 [ 545.775864][ T9299] ? prep_new_page+0x110/0x110 [ 545.780463][ T9299] ? vfs_write+0x9ec/0x1110 [ 545.784807][ T9299] ? file_end_write+0x1c0/0x1c0 [ 545.789490][ T9299] new_slab+0x9a/0x4e0 [ 545.793398][ T9299] ___slab_alloc+0x39e/0x830 [ 545.797822][ T9299] ? getname_flags+0xba/0x520 [ 545.802337][ T9299] ? getname_flags+0xba/0x520 [ 545.806850][ T9299] __slab_alloc+0x4a/0x90 [ 545.811018][ T9299] ? getname_flags+0xba/0x520 [ 545.815532][ T9299] kmem_cache_alloc+0x134/0x200 [ 545.820216][ T9299] getname_flags+0xba/0x520 [ 545.824558][ T9299] __x64_sys_mkdirat+0x7c/0xa0 [ 545.829158][ T9299] do_syscall_64+0x3d/0xb0 [ 545.833411][ T9299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 545.839137][ T9299] RIP: 0033:0x7f91322a63b9 [ 545.843392][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.862835][ T9299] RSP: 002b:00007f9130f26048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 545.871077][ T9299] RAX: ffffffffffffffda RBX: 00007f9132434f80 RCX: 00007f91322a63b9 [ 545.878893][ T9299] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 545.886699][ T9299] RBP: 00007f9130f260a0 R08: 0000000000000000 R09: 0000000000000000 [ 545.894516][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.902322][ T9299] R13: 000000000000000b R14: 00007f9132434f80 R15: 00007fff4a5707f8 [ 545.910150][ T9299] [ 545.976827][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.983784][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.990858][ T9307] device bridge0 left promiscuous mode [ 546.003003][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.010001][ T9307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.017103][ T9307] FAULT_INJECTION: forcing a failure. [ 546.017103][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 546.029498][ T9307] CPU: 0 PID: 9307 Comm: syz.1.2575 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 546.039181][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 546.049076][ T9307] Call Trace: [ 546.052198][ T9307] [ 546.054977][ T9307] dump_stack_lvl+0x151/0x1b7 [ 546.059490][ T9307] ? irqentry_exit+0x30/0x40 [ 546.063924][ T9307] ? io_uring_drop_tctx_refs+0x190/0x190 [ 546.069384][ T9307] ? __wake_up_klogd+0xd5/0x110 [ 546.074071][ T9307] dump_stack+0x15/0x17 [ 546.078068][ T9307] should_fail+0x3c6/0x510 [ 546.082318][ T9307] __should_failslab+0xa4/0xe0 [ 546.086917][ T9307] ? __alloc_skb+0xbe/0x550 [ 546.091254][ T9307] should_failslab+0x9/0x20 [ 546.095596][ T9307] slab_pre_alloc_hook+0x37/0xd0 [ 546.100370][ T9307] ? __alloc_skb+0xbe/0x550 [ 546.104709][ T9307] kmem_cache_alloc+0x44/0x200 [ 546.109314][ T9307] __alloc_skb+0xbe/0x550 [ 546.113476][ T9307] br_info_notify+0xb4/0x170 [ 546.117902][ T9307] br_ifinfo_notify+0x28/0x30 [ 546.122414][ T9307] br_make_forwarding+0x1f9/0x870 [ 546.127276][ T9307] br_port_state_selection+0x26c/0x840 [ 546.132570][ T9307] br_stp_enable_port+0x18e/0x260 [ 546.137433][ T9307] br_stp_enable_bridge+0x22e/0x2c0 [ 546.142467][ T9307] br_dev_open+0x71/0xe0 [ 546.146542][ T9307] __dev_open+0x353/0x4e0 [ 546.150714][ T9307] ? dev_open+0x260/0x260 [ 546.154876][ T9307] ? _raw_spin_unlock_bh+0x51/0x60 [ 546.159825][ T9307] ? dev_set_rx_mode+0x245/0x2e0 [ 546.164600][ T9307] __dev_change_flags+0x1db/0x6e0 [ 546.169463][ T9307] ? avc_denied+0x1b0/0x1b0 [ 546.173798][ T9307] ? dev_get_flags+0x1e0/0x1e0 [ 546.178401][ T9307] ? _kstrtoull+0x3a0/0x4a0 [ 546.182741][ T9307] dev_change_flags+0x8c/0x1a0 [ 546.187337][ T9307] dev_ifsioc+0x147/0x10c0 [ 546.191590][ T9307] ? dev_ioctl+0xe70/0xe70 [ 546.195840][ T9307] ? mutex_lock+0xb6/0x1e0 [ 546.200097][ T9307] ? wait_for_completion_killable_timeout+0x10/0x10 [ 546.206520][ T9307] dev_ioctl+0x54d/0xe70 [ 546.210597][ T9307] sock_do_ioctl+0x34f/0x5a0 [ 546.215026][ T9307] ? sock_show_fdinfo+0xa0/0xa0 [ 546.219713][ T9307] ? sock_ioctl+0x19e/0x740 [ 546.224050][ T9307] ? sock_ioctl+0x441/0x740 [ 546.228400][ T9307] sock_ioctl+0x455/0x740 [ 546.232557][ T9307] ? sock_poll+0x400/0x400 [ 546.236810][ T9307] ? __fget_files+0x31e/0x380 [ 546.241330][ T9307] ? security_file_ioctl+0x84/0xb0 [ 546.246278][ T9307] ? sock_poll+0x400/0x400 [ 546.250523][ T9307] __se_sys_ioctl+0x114/0x190 [ 546.255037][ T9307] __x64_sys_ioctl+0x7b/0x90 [ 546.259461][ T9307] do_syscall_64+0x3d/0xb0 [ 546.263713][ T9307] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 546.269356][ T9307] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 546.275084][ T9307] RIP: 0033:0x7f8a9afae3b9 [ 546.279339][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.298779][ T9307] RSP: 002b:00007f8a99c2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.307025][ T9307] RAX: ffffffffffffffda RBX: 00007f8a9b13cf80 RCX: 00007f8a9afae3b9 [ 546.314838][ T9307] RDX: 0000000020000900 RSI: 0000000000008914 RDI: 0000000000000008 [ 546.322646][ T9307] RBP: 00007f8a99c2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 546.330457][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.338271][ T9307] R13: 000000000000000b R14: 00007f8a9b13cf80 R15: 00007fffbfc9d628 [ 546.346088][ T9307] [ 546.349212][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.356102][ T9307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.368375][ T9307] device bridge0 entered promiscuous mode [ 546.584421][ T9324] device syzkaller0 entered promiscuous mode [ 547.267660][ T9333] FAULT_INJECTION: forcing a failure. [ 547.267660][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 547.440691][ T9333] CPU: 0 PID: 9333 Comm: syz.0.2584 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 547.450413][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 547.460305][ T9333] Call Trace: [ 547.463426][ T9333] [ 547.466205][ T9333] dump_stack_lvl+0x151/0x1b7 [ 547.470717][ T9333] ? io_uring_drop_tctx_refs+0x190/0x190 [ 547.476187][ T9333] ? avc_has_perm_noaudit+0x2dd/0x430 [ 547.481394][ T9333] dump_stack+0x15/0x17 [ 547.485387][ T9333] should_fail+0x3c6/0x510 [ 547.489657][ T9333] __should_failslab+0xa4/0xe0 [ 547.494240][ T9333] should_failslab+0x9/0x20 [ 547.498578][ T9333] slab_pre_alloc_hook+0x37/0xd0 [ 547.503353][ T9333] __kmalloc+0x6d/0x270 [ 547.507349][ T9333] ? bpf_map_meta_alloc+0x1cc/0x8b0 [ 547.512402][ T9333] ? __fdget+0x1bc/0x240 [ 547.516458][ T9333] bpf_map_meta_alloc+0x1cc/0x8b0 [ 547.521319][ T9333] array_of_map_alloc+0x38/0xc0 [ 547.526010][ T9333] map_create+0x411/0x2050 [ 547.530259][ T9333] __sys_bpf+0x296/0x760 [ 547.534336][ T9333] ? fput_many+0x160/0x1b0 [ 547.538590][ T9333] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 547.543802][ T9333] ? debug_smp_processor_id+0x17/0x20 [ 547.549008][ T9333] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 547.554911][ T9333] __x64_sys_bpf+0x7c/0x90 [ 547.559162][ T9333] do_syscall_64+0x3d/0xb0 [ 547.563412][ T9333] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 547.569143][ T9333] RIP: 0033:0x7f58f64bf3b9 [ 547.573395][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.592840][ T9333] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.601083][ T9333] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 547.608891][ T9333] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000000 [ 547.616706][ T9333] RBP: 00007f58f513f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 547.624515][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.632325][ T9333] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 547.640144][ T9333] [ 548.853303][ T9369] FAULT_INJECTION: forcing a failure. [ 548.853303][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.870646][ T9369] CPU: 0 PID: 9369 Comm: syz.3.2593 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 548.880366][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 548.890258][ T9369] Call Trace: [ 548.893380][ T9369] [ 548.896161][ T9369] dump_stack_lvl+0x151/0x1b7 [ 548.900676][ T9369] ? io_uring_drop_tctx_refs+0x190/0x190 [ 548.906143][ T9369] dump_stack+0x15/0x17 [ 548.910132][ T9369] should_fail+0x3c6/0x510 [ 548.914385][ T9369] should_fail_usercopy+0x1a/0x20 [ 548.919246][ T9369] _copy_to_user+0x20/0x90 [ 548.923498][ T9369] simple_read_from_buffer+0xc7/0x150 [ 548.928707][ T9369] proc_fail_nth_read+0x1a3/0x210 [ 548.933567][ T9369] ? proc_fault_inject_write+0x390/0x390 [ 548.939034][ T9369] ? fsnotify_perm+0x470/0x5d0 [ 548.943651][ T9369] ? security_file_permission+0x86/0xb0 [ 548.949014][ T9369] ? proc_fault_inject_write+0x390/0x390 [ 548.954482][ T9369] vfs_read+0x27d/0xd40 [ 548.958476][ T9369] ? __kasan_check_write+0x14/0x20 [ 548.963423][ T9369] ? kernel_read+0x1f0/0x1f0 [ 548.967851][ T9369] ? __kasan_check_write+0x14/0x20 [ 548.972797][ T9369] ? mutex_lock+0xb6/0x1e0 [ 548.977051][ T9369] ? wait_for_completion_killable_timeout+0x10/0x10 [ 548.983474][ T9369] ? __fdget_pos+0x2e7/0x3a0 [ 548.987897][ T9369] ? ksys_read+0x77/0x2c0 [ 548.992064][ T9369] ksys_read+0x199/0x2c0 [ 548.996146][ T9369] ? vfs_write+0x1110/0x1110 [ 549.000569][ T9369] ? debug_smp_processor_id+0x17/0x20 [ 549.005775][ T9369] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 549.011678][ T9369] __x64_sys_read+0x7b/0x90 [ 549.016017][ T9369] do_syscall_64+0x3d/0xb0 [ 549.020270][ T9369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 549.025997][ T9369] RIP: 0033:0x7f91322a4dfc [ 549.030252][ T9369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 549.049693][ T9369] RSP: 002b:00007f9130f26040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.057938][ T9369] RAX: ffffffffffffffda RBX: 00007f9132434f80 RCX: 00007f91322a4dfc [ 549.065748][ T9369] RDX: 000000000000000f RSI: 00007f9130f260b0 RDI: 0000000000000005 [ 549.073560][ T9369] RBP: 00007f9130f260a0 R08: 0000000000000000 R09: 0000000000000000 [ 549.081371][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.089184][ T9369] R13: 000000000000000b R14: 00007f9132434f80 R15: 00007fff4a5707f8 [ 549.096999][ T9369] [ 549.130495][ T9374] device syzkaller0 entered promiscuous mode [ 549.159643][ T9376] device syzkaller0 entered promiscuous mode [ 649.185468][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 649.192218][ C1] (detected by 1, t=10002 jiffies, g=66633, q=122) [ 649.198636][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295002140-4294992137), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 649.211837][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g66633 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 649.222852][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 649.232659][ C1] rcu: RCU grace-period kthread stack dump: [ 649.238389][ C1] task:rcu_preempt state:R running task stack:28248 pid: 14 ppid: 2 flags:0x00004000 [ 649.248986][ C1] Call Trace: [ 649.252102][ C1] [ 649.254886][ C1] __schedule+0xccc/0x1590 [ 649.259133][ C1] ? __sched_text_start+0x8/0x8 [ 649.263820][ C1] ? __kasan_check_write+0x14/0x20 [ 649.268766][ C1] schedule+0x11f/0x1e0 [ 649.272757][ C1] schedule_timeout+0x18c/0x370 [ 649.277445][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 649.282478][ C1] ? console_conditional_schedule+0x30/0x30 [ 649.288207][ C1] ? update_process_times+0x200/0x200 [ 649.293415][ C1] ? prepare_to_swait_event+0x308/0x320 [ 649.298797][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 649.303396][ C1] ? debug_smp_processor_id+0x17/0x20 [ 649.308603][ C1] ? __note_gp_changes+0x4ab/0x920 [ 649.313552][ C1] ? rcu_gp_init+0xc30/0xc30 [ 649.317979][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 649.323011][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 649.327440][ C1] rcu_gp_kthread+0xa4/0x350 [ 649.331878][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 649.336552][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 649.341064][ C1] ? __kasan_check_read+0x11/0x20 [ 649.345925][ C1] ? __kthread_parkme+0xb2/0x200 [ 649.350698][ C1] kthread+0x421/0x510 [ 649.354603][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 649.359141][ C1] ? kthread_blkcg+0xd0/0xd0 [ 649.363553][ C1] ret_from_fork+0x1f/0x30 [ 649.367800][ C1] [ 649.370663][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 649.376834][ C1] NMI backtrace for cpu 1 [ 649.380990][ C1] CPU: 1 PID: 9376 Comm: syz.0.2596 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 649.390711][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 649.400607][ C1] Call Trace: [ 649.403732][ C1] [ 649.406422][ C1] dump_stack_lvl+0x151/0x1b7 [ 649.410933][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 649.416403][ C1] dump_stack+0x15/0x17 [ 649.420393][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 649.425169][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 649.431166][ C1] ? panic+0x751/0x751 [ 649.435062][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 649.440963][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 649.446785][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 649.452683][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 649.458409][ C1] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 649.464399][ C1] print_other_cpu_stall+0x112d/0x1340 [ 649.469695][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 649.474464][ C1] ? __kasan_check_read+0x11/0x20 [ 649.479328][ C1] ? __kasan_check_read+0x11/0x20 [ 649.484187][ C1] rcu_sched_clock_irq+0xaec/0x12f0 [ 649.489223][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 649.495216][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 649.500246][ C1] update_process_times+0x198/0x200 [ 649.505279][ C1] tick_sched_timer+0x188/0x240 [ 649.509965][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 649.515347][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 649.520383][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 649.525326][ C1] ? clockevents_program_event+0x22f/0x300 [ 649.530982][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 649.536872][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 649.541647][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 649.547372][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 649.552844][ C1] [ 649.555632][ C1] [ 649.558395][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 649.564212][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 649.568987][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 649.588427][ C1] RSP: 0018:ffffc90000a164a0 EFLAGS: 00000246 [ 649.594327][ C1] RAX: 0000000000000003 RBX: 1ffff92000142c98 RCX: ffffffff8155068f [ 649.602139][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88811e2aff58 [ 649.609958][ C1] RBP: ffffc90000a16550 R08: dffffc0000000000 R09: ffffed1023c55fec [ 649.617766][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 649.625578][ C1] R13: ffff88811e2aff58 R14: 0000000000000003 R15: 1ffff92000142c9c [ 649.633388][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 649.639466][ C1] ? asm_common_interrupt+0x27/0x40 [ 649.644493][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 649.649443][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 649.655518][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 649.661422][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 649.667668][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 649.672440][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 649.677478][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 649.682772][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 649.687805][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 649.693098][ C1] bpf_trace_run4+0x13f/0x270 [ 649.697613][ C1] ? bpf_trace_run3+0x250/0x250 [ 649.702300][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 649.707682][ C1] __alloc_pages+0x3cb/0x8f0 [ 649.712107][ C1] ? prep_new_page+0x110/0x110 [ 649.716707][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 649.722268][ C1] ? stack_trace_save+0x113/0x1c0 [ 649.727129][ C1] __stack_depot_save+0x38d/0x470 [ 649.731991][ C1] stack_depot_save+0xe/0x10 [ 649.736414][ C1] save_stack+0x104/0x1e0 [ 649.740580][ C1] ? __reset_page_owner+0x190/0x190 [ 649.745614][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 649.750387][ C1] ? prep_new_page+0x1b/0x110 [ 649.754900][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 649.760455][ C1] ? __alloc_pages+0x27e/0x8f0 [ 649.765056][ C1] ? __stack_depot_save+0x38d/0x470 [ 649.770089][ C1] ? kasan_set_track+0x5d/0x70 [ 649.774688][ C1] ? kasan_set_free_info+0x23/0x40 [ 649.779637][ C1] ? ____kasan_slab_free+0x126/0x160 [ 649.784757][ C1] ? __kasan_slab_free+0x11/0x20 [ 649.789531][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 649.794913][ C1] ? kfree+0xc8/0x220 [ 649.798733][ C1] ? sock_map_unref+0x352/0x4d0 [ 649.803419][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 649.808722][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 649.814181][ C1] ? bpf_trace_run4+0x13f/0x270 [ 649.818868][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 649.824343][ C1] ? bpf_int_jit_compile+0xb2a2/0xc6d0 [ 649.829641][ C1] __set_page_owner+0x28/0x2e0 [ 649.834233][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 649.839440][ C1] post_alloc_hook+0x1a3/0x1b0 [ 649.844042][ C1] prep_new_page+0x1b/0x110 [ 649.848379][ C1] get_page_from_freelist+0x3550/0x35d0 [ 649.853780][ C1] ? stack_depot_save+0xe/0x10 [ 649.858366][ C1] ? lruvec_init+0x150/0x150 [ 649.862788][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 649.867388][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 649.872420][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 649.877282][ C1] __alloc_pages+0x27e/0x8f0 [ 649.881708][ C1] ? prep_new_page+0x110/0x110 [ 649.886320][ C1] ? stack_trace_save+0x113/0x1c0 [ 649.891168][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 649.896124][ C1] __stack_depot_save+0x38d/0x470 [ 649.900974][ C1] ? kfree+0xc8/0x220 [ 649.904793][ C1] kasan_set_track+0x5d/0x70 [ 649.909223][ C1] ? kasan_set_track+0x4b/0x70 [ 649.913820][ C1] ? kasan_set_free_info+0x23/0x40 [ 649.918767][ C1] ? ____kasan_slab_free+0x126/0x160 [ 649.923887][ C1] ? __kasan_slab_free+0x11/0x20 [ 649.928664][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 649.934043][ C1] ? kfree+0xc8/0x220 [ 649.937860][ C1] ? sock_map_unref+0x352/0x4d0 [ 649.942548][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 649.947844][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 649.953310][ C1] ? bpf_trace_run4+0x13f/0x270 [ 649.957999][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 649.963464][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 649.968065][ C1] ? kmalloc_order+0x4a/0x160 [ 649.972577][ C1] ? kmalloc_order_trace+0x1a/0xb0 [ 649.977526][ C1] ? __kmalloc_track_caller+0x19b/0x260 [ 649.982906][ C1] ? pskb_expand_head+0x113/0x1240 [ 649.987854][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 649.992540][ C1] ? tun_chr_write_iter+0x1e1/0x2e0 [ 649.997574][ C1] ? vfs_write+0xd5d/0x1110 [ 650.001913][ C1] ? ksys_write+0x199/0x2c0 [ 650.006260][ C1] ? __x64_sys_write+0x7b/0x90 [ 650.010853][ C1] ? do_syscall_64+0x3d/0xb0 [ 650.015290][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 650.021192][ C1] ? prep_compound_page+0x271/0x4a0 [ 650.026220][ C1] kasan_set_free_info+0x23/0x40 [ 650.030993][ C1] ____kasan_slab_free+0x126/0x160 [ 650.035945][ C1] __kasan_slab_free+0x11/0x20 [ 650.040706][ C1] slab_free_freelist_hook+0xbd/0x190 [ 650.045905][ C1] ? sock_map_unref+0x352/0x4d0 [ 650.050589][ C1] kfree+0xc8/0x220 [ 650.054239][ C1] sock_map_unref+0x352/0x4d0 [ 650.058751][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 650.063871][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 650.069165][ C1] bpf_trace_run4+0x13f/0x270 [ 650.073678][ C1] ? bpf_trace_run3+0x250/0x250 [ 650.078367][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 650.083659][ C1] __alloc_pages+0x3cb/0x8f0 [ 650.088085][ C1] ? prep_new_page+0x110/0x110 [ 650.092692][ C1] kmalloc_order+0x4a/0x160 [ 650.097027][ C1] kmalloc_order_trace+0x1a/0xb0 [ 650.101799][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 650.106496][ C1] __kmalloc_track_caller+0x19b/0x260 [ 650.111694][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 650.116380][ C1] pskb_expand_head+0x113/0x1240 [ 650.121154][ C1] ? __napi_alloc_skb+0x174/0x2e0 [ 650.126014][ C1] tun_get_user+0x13b3/0x3aa0 [ 650.130528][ C1] ? __jump_label_update+0x36a/0x380 [ 650.135650][ C1] ? mutex_unlock+0xb2/0x260 [ 650.140073][ C1] ? cpus_read_unlock+0x68/0xa0 [ 650.144760][ C1] ? tun_do_read+0x1ef0/0x1ef0 [ 650.149362][ C1] ? tracepoint_add_func+0x77e/0x940 [ 650.154481][ C1] ? alloc_file_pseudo+0x280/0x2f0 [ 650.159431][ C1] ? __slab_free+0x130/0x290 [ 650.163855][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 650.168716][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 650.173751][ C1] ? preempt_count_add+0x92/0x1a0 [ 650.178610][ C1] ? avc_policy_seqno+0x1b/0x70 [ 650.183297][ C1] ? selinux_file_permission+0x2c4/0x570 [ 650.188766][ C1] tun_chr_write_iter+0x1e1/0x2e0 [ 650.193626][ C1] vfs_write+0xd5d/0x1110 [ 650.197791][ C1] ? map_freeze+0x370/0x370 [ 650.202132][ C1] ? file_end_write+0x1c0/0x1c0 [ 650.206821][ C1] ? __fdget_pos+0x209/0x3a0 [ 650.211243][ C1] ? ksys_write+0x77/0x2c0 [ 650.215496][ C1] ksys_write+0x199/0x2c0 [ 650.219665][ C1] ? __ia32_sys_read+0x90/0x90 [ 650.224262][ C1] ? __kasan_check_read+0x11/0x20 [ 650.229124][ C1] __x64_sys_write+0x7b/0x90 [ 650.233551][ C1] do_syscall_64+0x3d/0xb0 [ 650.237803][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 650.243531][ C1] RIP: 0033:0x7f58f64bf3b9 [ 650.247796][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.267228][ C1] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.275474][ C1] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 650.283284][ C1] RDX: 000000000000fdef RSI: 0000000020000380 RDI: 0000000000000005 [ 650.291095][ C1] RBP: 00007f58f652c8e6 R08: 0000000000000000 R09: 0000000000000000 [ 650.298906][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.306716][ C1] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 650.314533][ C1] [ 683.019547][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz-executor:7262] [ 683.027780][ C0] Modules linked in: [ 683.031509][ C0] CPU: 0 PID: 7262 Comm: syz-executor Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 683.041403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 683.051299][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 683.056071][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 683.076035][ C0] RSP: 0018:ffffc90000966920 EFLAGS: 00000246 [ 683.081936][ C0] RAX: 0000000000000001 RBX: 1ffff9200012cd28 RCX: 1ffffffff0d5aa9c [ 683.089748][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 683.097558][ C0] RBP: ffffc900009669d0 R08: dffffc0000000000 R09: ffffed103ee0715b [ 683.105369][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 683.113181][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff9200012cd2c [ 683.120993][ C0] FS: 0000555555ab2500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 683.129759][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.136182][ C0] CR2: 0000555555acd4a8 CR3: 000000010cd38000 CR4: 00000000003506b0 [ 683.143996][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.151807][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 683.159619][ C0] Call Trace: [ 683.162742][ C0] [ 683.165434][ C0] ? show_regs+0x58/0x60 [ 683.169511][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 683.174457][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 683.179579][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 683.184787][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 683.189733][ C0] ? clockevents_program_event+0x22f/0x300 [ 683.195376][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 683.201278][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 683.206226][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 683.212128][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 683.217767][ C0] [ 683.220567][ C0] [ 683.223323][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 683.229314][ C0] ? kvm_wait+0x147/0x180 [ 683.233477][ C0] ? page_ext_put+0x1c/0x30 [ 683.237817][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 683.242771][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 683.248671][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 683.254221][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 683.260472][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 683.265242][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 683.270279][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 683.275574][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 683.280609][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 683.285901][ C0] bpf_trace_run4+0x13f/0x270 [ 683.290414][ C0] ? bpf_trace_run3+0x250/0x250 [ 683.295103][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.300396][ C0] __alloc_pages+0x3cb/0x8f0 [ 683.304823][ C0] ? prep_new_page+0x110/0x110 [ 683.309423][ C0] ? __kasan_kmalloc+0x9/0x10 [ 683.313934][ C0] ? __kmalloc+0x13a/0x270 [ 683.318188][ C0] ? __vmalloc_node_range+0x2d6/0x8d0 [ 683.323396][ C0] __vmalloc_node_range+0x482/0x8d0 [ 683.328437][ C0] ? alloc_counters+0x69/0x510 [ 683.333037][ C0] vzalloc+0x78/0x90 [ 683.336763][ C0] ? alloc_counters+0x69/0x510 [ 683.341360][ C0] alloc_counters+0x69/0x510 [ 683.345789][ C0] ? xt_find_table_lock+0x373/0x3f0 [ 683.350840][ C0] do_arpt_get_ctl+0xe58/0x1680 [ 683.355510][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 683.360370][ C0] ? do_arpt_set_ctl+0x3080/0x3080 [ 683.365318][ C0] ? update_load_avg+0xb67/0x1150 [ 683.370178][ C0] ? __kasan_check_write+0x14/0x20 [ 683.375124][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 683.379985][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 683.385018][ C0] ? __kasan_check_write+0x14/0x20 [ 683.389966][ C0] ? mutex_unlock+0xb2/0x260 [ 683.394393][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 683.399521][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 683.404375][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 683.409409][ C0] ? sched_clock_cpu+0x18/0x3b0 [ 683.414096][ C0] nf_getsockopt+0x26c/0x290 [ 683.418522][ C0] ip_getsockopt+0x1434/0x1da0 [ 683.423121][ C0] ? ip_setsockopt+0x4730/0x4730 [ 683.427901][ C0] ? 0xffffffffa0028240 [ 683.431886][ C0] ? is_bpf_text_address+0x172/0x190 [ 683.437008][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 683.441870][ C0] tcp_getsockopt+0x257/0x7150 [ 683.446472][ C0] ? 0xffffffffa0028240 [ 683.450459][ C0] ? is_bpf_text_address+0x172/0x190 [ 683.455583][ C0] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 683.461049][ C0] ? __kernel_text_address+0x9b/0x110 [ 683.466258][ C0] ? unwind_get_return_address+0x4d/0x90 [ 683.471724][ C0] ? arch_stack_walk+0xf3/0x140 [ 683.476414][ C0] ? stack_trace_save+0x113/0x1c0 [ 683.481272][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 683.486219][ C0] ? __stack_depot_save+0x34/0x470 [ 683.491169][ C0] ? __kasan_slab_alloc+0xc3/0xe0 [ 683.496031][ C0] ? __kasan_slab_alloc+0xb1/0xe0 [ 683.500886][ C0] ? slab_post_alloc_hook+0x53/0x2c0 [ 683.506008][ C0] ? kmem_cache_alloc+0xf5/0x200 [ 683.510781][ C0] ? security_file_alloc+0x29/0x120 [ 683.515817][ C0] ? __alloc_file+0xb2/0x2a0 [ 683.520242][ C0] ? alloc_empty_file+0x95/0x180 [ 683.525013][ C0] ? alloc_file+0x5a/0x4e0 [ 683.529268][ C0] ? alloc_file_pseudo+0x259/0x2f0 [ 683.534216][ C0] ? sock_alloc_file+0xbb/0x260 [ 683.538903][ C0] ? __sys_socket+0x194/0x370 [ 683.543418][ C0] ? __x64_sys_socket+0x7a/0x90 [ 683.548103][ C0] ? do_syscall_64+0x3d/0xb0 [ 683.552529][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 683.558436][ C0] ? avc_has_perm_noaudit+0x348/0x430 [ 683.563638][ C0] ? memcpy+0x56/0x70 [ 683.567460][ C0] ? avc_has_perm_noaudit+0x2dd/0x430 [ 683.572666][ C0] ? avc_denied+0x1b0/0x1b0 [ 683.577008][ C0] ? avc_has_perm+0x16f/0x260 [ 683.581519][ C0] ? avc_has_perm_noaudit+0x430/0x430 [ 683.586728][ C0] ? memcpy+0x56/0x70 [ 683.590545][ C0] ? errseq_sample+0x44/0x70 [ 683.594972][ C0] ? selinux_socket_getsockopt+0x243/0x340 [ 683.600623][ C0] ? selinux_socket_getpeername+0x340/0x340 [ 683.606348][ C0] ? alloc_empty_file_noaccount+0x80/0x80 [ 683.611897][ C0] ? preempt_count_add+0x92/0x1a0 [ 683.616759][ C0] sock_common_getsockopt+0x99/0xb0 [ 683.621793][ C0] ? sock_recv_errqueue+0x4b0/0x4b0 [ 683.626826][ C0] __sys_getsockopt+0x290/0x4f0 [ 683.631513][ C0] __x64_sys_getsockopt+0xbf/0xd0 [ 683.636373][ C0] do_syscall_64+0x3d/0xb0 [ 683.640625][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 683.646354][ C0] RIP: 0033:0x7f8a9afafffa [ 683.650610][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 683.670050][ C0] RSP: 002b:00007fffbfc9d2f8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 683.678295][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8a9afafffa [ 683.686104][ C0] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 683.693916][ C0] RBP: 00007fffbfc9d360 R08: 00007fffbfc9d30c R09: 00007fffbfc9d6f7 [ 683.701727][ C0] R10: 00007fffbfc9d360 R11: 0000000000000212 R12: 00007fffbfc9d30c [ 683.709538][ C0] R13: 00000000000860e6 R14: 0000000000085fe9 R15: 00007fffbfc9da30 [ 683.717356][ C0] [ 683.720214][ C0] Sending NMI from CPU 0 to CPUs 1: [ 683.725279][ C1] NMI backtrace for cpu 1 [ 683.725289][ C1] CPU: 1 PID: 9376 Comm: syz.0.2596 Not tainted 5.15.151-syzkaller-00134-gd0a6506ecafd #0 [ 683.725306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 683.725315][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 683.725336][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 2b 02 13 04 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 683.725349][ C1] RSP: 0018:ffffc90000a164a0 EFLAGS: 00000246 [ 683.725363][ C1] RAX: 0000000000000003 RBX: 1ffff92000142c98 RCX: ffffffff8155068f [ 683.725375][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88811e2aff58 [ 683.725387][ C1] RBP: ffffc90000a16550 R08: dffffc0000000000 R09: ffffed1023c55fec [ 683.725399][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 683.725410][ C1] R13: ffff88811e2aff58 R14: 0000000000000003 R15: 1ffff92000142c9c [ 683.725421][ C1] FS: 00007f58f513f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 683.725439][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.725451][ C1] CR2: 0000001b2d30bff8 CR3: 0000000116b23000 CR4: 00000000003506a0 [ 683.725465][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.725474][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.725485][ C1] Call Trace: [ 683.725490][ C1] [ 683.725498][ C1] ? show_regs+0x58/0x60 [ 683.725514][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 683.725534][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 683.725553][ C1] ? kvm_wait+0x147/0x180 [ 683.725566][ C1] ? kvm_wait+0x147/0x180 [ 683.725580][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 683.725597][ C1] ? nmi_handle+0xa8/0x280 [ 683.725613][ C1] ? kvm_wait+0x147/0x180 [ 683.725627][ C1] ? default_do_nmi+0x69/0x160 [ 683.725647][ C1] ? exc_nmi+0xaf/0x120 [ 683.725660][ C1] ? end_repeat_nmi+0x16/0x31 [ 683.725675][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 683.725694][ C1] ? kvm_wait+0x147/0x180 [ 683.725708][ C1] ? kvm_wait+0x147/0x180 [ 683.725722][ C1] ? kvm_wait+0x147/0x180 [ 683.725736][ C1] [ 683.725741][ C1] [ 683.725746][ C1] ? asm_common_interrupt+0x27/0x40 [ 683.725764][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 683.725779][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 683.725797][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 683.725817][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 683.725836][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 683.725852][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 683.725869][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 683.725888][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 683.725906][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 683.725920][ C1] bpf_trace_run4+0x13f/0x270 [ 683.725937][ C1] ? bpf_trace_run3+0x250/0x250 [ 683.725956][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.725972][ C1] __alloc_pages+0x3cb/0x8f0 [ 683.725988][ C1] ? prep_new_page+0x110/0x110 [ 683.726004][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.726021][ C1] ? stack_trace_save+0x113/0x1c0 [ 683.726038][ C1] __stack_depot_save+0x38d/0x470 [ 683.726054][ C1] stack_depot_save+0xe/0x10 [ 683.726066][ C1] save_stack+0x104/0x1e0 [ 683.726081][ C1] ? __reset_page_owner+0x190/0x190 [ 683.726095][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 683.726109][ C1] ? prep_new_page+0x1b/0x110 [ 683.726124][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 683.726140][ C1] ? __alloc_pages+0x27e/0x8f0 [ 683.726155][ C1] ? __stack_depot_save+0x38d/0x470 [ 683.726168][ C1] ? kasan_set_track+0x5d/0x70 [ 683.726182][ C1] ? kasan_set_free_info+0x23/0x40 [ 683.726196][ C1] ? ____kasan_slab_free+0x126/0x160 [ 683.726210][ C1] ? __kasan_slab_free+0x11/0x20 [ 683.726224][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 683.726241][ C1] ? kfree+0xc8/0x220 [ 683.726255][ C1] ? sock_map_unref+0x352/0x4d0 [ 683.726270][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 683.726286][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 683.726298][ C1] ? bpf_trace_run4+0x13f/0x270 [ 683.726314][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.726330][ C1] ? bpf_int_jit_compile+0xb2a2/0xc6d0 [ 683.726347][ C1] __set_page_owner+0x28/0x2e0 [ 683.726361][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 683.726377][ C1] post_alloc_hook+0x1a3/0x1b0 [ 683.726392][ C1] prep_new_page+0x1b/0x110 [ 683.726407][ C1] get_page_from_freelist+0x3550/0x35d0 [ 683.726423][ C1] ? stack_depot_save+0xe/0x10 [ 683.726445][ C1] ? lruvec_init+0x150/0x150 [ 683.726464][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 683.726480][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 683.726496][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 683.726513][ C1] __alloc_pages+0x27e/0x8f0 [ 683.726529][ C1] ? prep_new_page+0x110/0x110 [ 683.726546][ C1] ? stack_trace_save+0x113/0x1c0 [ 683.726562][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 683.726578][ C1] __stack_depot_save+0x38d/0x470 [ 683.726593][ C1] ? kfree+0xc8/0x220 [ 683.726607][ C1] kasan_set_track+0x5d/0x70 [ 683.726621][ C1] ? kasan_set_track+0x4b/0x70 [ 683.726638][ C1] ? kasan_set_free_info+0x23/0x40 [ 683.726653][ C1] ? ____kasan_slab_free+0x126/0x160 [ 683.726667][ C1] ? __kasan_slab_free+0x11/0x20 [ 683.726681][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 683.726698][ C1] ? kfree+0xc8/0x220 [ 683.726712][ C1] ? sock_map_unref+0x352/0x4d0 [ 683.726728][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 683.726744][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 683.726756][ C1] ? bpf_trace_run4+0x13f/0x270 [ 683.726771][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.726786][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 683.726801][ C1] ? kmalloc_order+0x4a/0x160 [ 683.726814][ C1] ? kmalloc_order_trace+0x1a/0xb0 [ 683.726828][ C1] ? __kmalloc_track_caller+0x19b/0x260 [ 683.726844][ C1] ? pskb_expand_head+0x113/0x1240 [ 683.726860][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 683.726877][ C1] ? tun_chr_write_iter+0x1e1/0x2e0 [ 683.726893][ C1] ? vfs_write+0xd5d/0x1110 [ 683.726907][ C1] ? ksys_write+0x199/0x2c0 [ 683.726920][ C1] ? __x64_sys_write+0x7b/0x90 [ 683.726933][ C1] ? do_syscall_64+0x3d/0xb0 [ 683.726949][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 683.726974][ C1] ? prep_compound_page+0x271/0x4a0 [ 683.726990][ C1] kasan_set_free_info+0x23/0x40 [ 683.727005][ C1] ____kasan_slab_free+0x126/0x160 [ 683.727020][ C1] __kasan_slab_free+0x11/0x20 [ 683.727034][ C1] slab_free_freelist_hook+0xbd/0x190 [ 683.727052][ C1] ? sock_map_unref+0x352/0x4d0 [ 683.727068][ C1] kfree+0xc8/0x220 [ 683.727084][ C1] sock_map_unref+0x352/0x4d0 [ 683.727102][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 683.727120][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x44 [ 683.727133][ C1] bpf_trace_run4+0x13f/0x270 [ 683.727149][ C1] ? bpf_trace_run3+0x250/0x250 [ 683.727168][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 683.727184][ C1] __alloc_pages+0x3cb/0x8f0 [ 683.727200][ C1] ? prep_new_page+0x110/0x110 [ 683.727220][ C1] kmalloc_order+0x4a/0x160 [ 683.727235][ C1] kmalloc_order_trace+0x1a/0xb0 [ 683.727249][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 683.727265][ C1] __kmalloc_track_caller+0x19b/0x260 [ 683.727282][ C1] ? tun_get_user+0x13b3/0x3aa0 [ 683.727298][ C1] pskb_expand_head+0x113/0x1240 [ 683.727313][ C1] ? __napi_alloc_skb+0x174/0x2e0 [ 683.727330][ C1] tun_get_user+0x13b3/0x3aa0 [ 683.727345][ C1] ? __jump_label_update+0x36a/0x380 [ 683.727363][ C1] ? mutex_unlock+0xb2/0x260 [ 683.727377][ C1] ? cpus_read_unlock+0x68/0xa0 [ 683.727391][ C1] ? tun_do_read+0x1ef0/0x1ef0 [ 683.727406][ C1] ? tracepoint_add_func+0x77e/0x940 [ 683.727421][ C1] ? alloc_file_pseudo+0x280/0x2f0 [ 683.727439][ C1] ? __slab_free+0x130/0x290 [ 683.727454][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 683.727469][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 683.727485][ C1] ? preempt_count_add+0x92/0x1a0 [ 683.727500][ C1] ? avc_policy_seqno+0x1b/0x70 [ 683.727516][ C1] ? selinux_file_permission+0x2c4/0x570 [ 683.727534][ C1] tun_chr_write_iter+0x1e1/0x2e0 [ 683.727551][ C1] vfs_write+0xd5d/0x1110 [ 683.727565][ C1] ? map_freeze+0x370/0x370 [ 683.727582][ C1] ? file_end_write+0x1c0/0x1c0 [ 683.727600][ C1] ? __fdget_pos+0x209/0x3a0 [ 683.727613][ C1] ? ksys_write+0x77/0x2c0 [ 683.727627][ C1] ksys_write+0x199/0x2c0 [ 683.727646][ C1] ? __ia32_sys_read+0x90/0x90 [ 683.727660][ C1] ? __kasan_check_read+0x11/0x20 [ 683.727676][ C1] __x64_sys_write+0x7b/0x90 [ 683.727690][ C1] do_syscall_64+0x3d/0xb0 [ 683.727706][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 683.727723][ C1] RIP: 0033:0x7f58f64bf3b9 [ 683.727737][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.727750][ C1] RSP: 002b:00007f58f513f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.727765][ C1] RAX: ffffffffffffffda RBX: 00007f58f664df80 RCX: 00007f58f64bf3b9 [ 683.727777][ C1] RDX: 000000000000fdef RSI: 0000000020000380 RDI: 0000000000000005 [ 683.727788][ C1] RBP: 00007f58f652c8e6 R08: 0000000000000000 R09: 0000000000000000 [ 683.727798][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.727808][ C1] R13: 000000000000000b R14: 00007f58f664df80 R15: 00007ffde63d4548 [ 683.727822][ C1]