last executing test programs: 15.158043826s ago: executing program 3 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f00000003c0)="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", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468", 0xa2}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.851532024s ago: executing program 3 (id=3054): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffc, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r6}, 0x18) 14.003976662s ago: executing program 3 (id=3061): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x30f9, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='devices.list\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000580)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000280)=""/2, 0x41100, 0x10, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x8, 0xfffffff8, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r3, r4, r5, r6, r7, r8, r9, 0x1, r10], 0x0, 0x10, 0xe6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0000000000000000eaff008000000000000000008488defcd20b412ac1fbda8100188cab759ceb91af05001f794770217c27417d5f5fdaffe257f957b4d4240bc9435b9d268f33cf460ceb15a8861f015ab6dfc5e4d12165bcbd2f389644145102c9f8dfddb50460904ccf6796a8cd97f034e0130d9b90886e941b081e6ded7d6474f042199fecc53439349399b68576196b802ac87651f671bb47d7672c932b479ce21ea0ff3004be83bb9226f9dbf9d57c51f715c6eb381f72ab027e5cd233442882dcb74078ec358b3a6919a030a10039febe5dce748acf175e3fdf13f0fb1b67252a1aa32b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r10, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x2f, &(0x7f0000000b00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @call={0x85, 0x0, 0x0, 0x68}, @call={0x85, 0x0, 0x0, 0x86}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000800)='syzkaller\x00', 0x6, 0x73, &(0x7f0000000840)=""/115, 0x41100, 0x64, '\x00', r12, 0x0, r6, 0x8, &(0x7f0000000a00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x3, 0x101, 0xa5d}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000cc0)=[{0x5, 0x3, 0xc, 0xd}, {0x5, 0x1, 0xb}, {0x3, 0x5, 0x1, 0x5}, {0x14, 0x5, 0xe, 0xa}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r13}, 0x10) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r15 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r15, &(0x7f0000000040)={'b', ' *:* ', 'm\x00'}, 0x8) close(r14) 13.899681271s ago: executing program 3 (id=3062): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000cf0700007b8af8ff0000597f2368556ca587d30000bfa200000000000007020000f8ffffffb703000208000000b70400000000000a8500000800000000950000eb00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000004000000060000000500000010100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000feffffff010000"], 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffe8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 13.850702826s ago: executing program 3 (id=3065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000007c0)=ANY=[], 0x6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='N\n'], 0x6a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40001) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10003}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, &(0x7f0000000040)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r11, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.803921878s ago: executing program 3 (id=3093): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0xd, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sock_ops, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff33, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.593786397s ago: executing program 2 (id=3097): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffc, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r6}, 0x18) 9.584618948s ago: executing program 2 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="7be45b50a9e02f0fc959a73f93815375ef8bcd394c6a5bf519a5cfb375c9a1ea2bfa4c4829991ed3e08c909aab120b3bb873eb24e42e9b1e0f1febe9d2caae1894dc3c221bcbf1c962a78513ed861b2eaaad9ecfebebdd9209b694280d54ee5e85fa249b389be84137d9cbbc9edfd2f69b937b5c4ed811cdf7bc82b47093c4eced385f3851e3763a748d47cc7a4861f66ec7d396da5e5eda8c5c860cc7e9f4a446a7ea2f32745cd919e65b2e93cd4c6b6543ab55a40ce8cf757662a32dc4a9ec9ceb8c5920ee12630663402fe26efbcb68b7516c7a1dd4f4e20198c769a917f8447f2c7d714ba7ab92aae09cc8e85322618d43af14edabb4a584b1e79a7bc2edd0965b497ebb3b8d1d442aa74ab85cb84d2f59d98003dafba991c6c6b0af00fe5d290e773d7fc1dbcbdea0b31dcee2ac1e43494ced349e542a427beae67c015a84b2c5eaacd6d8fbbdad5d4dbb59c0d58950cfb1ea0fb3612cfb1f60bf52215247b76ae40cb8501c88e5c63d59cf5110a0ca3eeb8ea97c9ebb05737692d1a3be5f8eabfe035dbad86d85a70c86279cf827bb60a17e44b16895a3f5e607178a86f4d9cf404e78648c423bb5181b65e6cb562abc3c10b3e59cf45708f623a98b6024ecb16eebbbf0f54b2cef8deea3db70c12b315f18ca2856213f4946d509f655c482a5de3e6d7b981b680d7df24bde916cb948750666015cc60fbb17240f27f575a1a35ad65fb19e38319403511e4d0091f5f6175e58ea7d3480fae7e8da75eadc2fb7c64fc57dc67393cec89e504b652928ca79bf7df49a73a79e7a599680d25609df6a04f67eefbc73a47c5f842eb8ad9b474683adfc8c2cff0c7516916e3bbae5a07891191e7cbad33bb3e212c811dd14f1b64f68ae69c158993b06fbba7d0aec136785ac7d5c2a4c9f1e899e0d5c324ab38f2d9f7bc9f8596f7ad7353f31d464de7b6c700e140f1bb7e36d2246353392a8ba2b2b0b6d43d764c36d0ac46cc57ac6f4d7f8f51c75c013a6d5f69f27f39f48ff47fc88e8b1cee15f20b290c9a9206483428f049de3690bc38f36ff641d97197f3d9d4708f5a175d566e7f0243856e97be963401b43223d4ee5717b8d3820f74867bf2e26149bd4c1c7fa0aeaec1d4e170670bbf0e175b0dd56e3a6dea12d9b32e423ba60c80c5b3872b5498fe455a63cc46729864554436763adb8e15f99b8f357afab24736e5b3ef72271ff4e09e5c501bf3b19d157a6562e7349bb6b13bf217c6c15c70d809aeb62e211253aec8c2e3511447a48620bb609e9a7d9c05439009c2301a79ea536869b8af8920ef7356066059b387756a72bd4980ac981a415c98a1fd13a0f2f7b76358e758dec9d77b5737b4794530915bd93be1a64360366549e5396b122e937a67779b4ffb69f9e4c5d01d5f66e58db6887bcabb88509c2e3c7f4f79a41d95013db19bdf33eecd767f8a22a8a43abba913a4cb2464ef492fa2eceff35734b1861f770d19f79e98fe30358b47a520428c365a36bcc161d7d67e12ec6dd302abb86e64c396a60470cd99f60bcd5c8d5894e835047b5492ccbada2c6c4f095006b68768aa22d8303f38f53084ee3550871ad5d452202f54520431deb3d709acb3e8e31a35d25ea23da0ee6f932885bdc49393cae473a4e05654cac29abb821e6dd654d8abbfde29fbe3df71a13be1b4221960aca42a52e563db90e6291c73883ccbebd42d3c5af211da6e2a99c8b0e4ae35e89fe9f53a2dd54c61d21e509ecec441cb84d3b25514a6bec011bb0c1fdc208c04485d5e649692fcbebd8cbce4fddd3b29dc6ee7f1c64842f53d60807b5f8bcbd35214ef085e7a60393040f6d62a76e279bffb878c114e969f223eb75f586f2ee579798c53fc2e9d6e08b40664834634875f66c14ed7aa1c0f6e6ccaa473cee4bbce5b1570179c74977e769b2773daaef3573757f0c33a7b410e2e10812d24e50d9f118da4e7b4b5b4e822e627f29c939a7682f0f20435c27b3d9dc1ee54aa89572d882ff538655bf32a05afa94b714bcef853e2b8ff44129b4d5aff00c654e4012056b1b969b9316eda23e872c778119b87cc991ae131b3f78497c621ededafa3106fe3ed86e429912f871a90ca93646419a24da3f2e0c8ad7619c2d6bf8a24e055f26fc7a8b4a071002c34e673448a44b3c17e4dd7fca95d087114224f708a74aa8906f24322d0f4f25111836306ff24babae3b8efd9c197eda986277776501e5b664ef7c276987bd89d40d5f2c2d6a670b964f64dd0e46d8b681aebf239cea0520aef11eb05e69b4ee800d84974fc9647ad8f043d9e1bfeba172ac5d31cee53ce8b9c3739f2dd583101754542a3346c1ab9192c4dd5e4fb303fd8167a8ec2fdc1334452d9dab3d567ab70c49a1d08fe2ab42e2465f5ff41fee7623cf1d05970d363b88585aa1e4ef78c544f078cec4cbb433ef1f8a2be61e3c86938f9e24de5edb7ebed6cf56392bb5b9162e5d6c0b9e8f2ce962b37c29934580cc8556e273f488d572dfa47ab8b3831abd14495defd8c15c099b39c9422123c0df9188ca536e8de2453a1b39d8f8624e49c5f0b5c5ea1e6d3f9141d810b8ebb020631a8ff8f0ebfe5018e2c4ba3b64e4844ebc931e4f21dcb639e7146aa36d4ad2d067ed72ef3cf1e0b994a8fa1fa484d18c92d63ab1f3a0cb55a2dfb13fbdf53505405485ebb36a5ed7eadc74c3fb0fd454cb596ae5f4617ad85d0920f96f860ddb46188bde5a70d054adb43fdaf46946b6caf06225492822c0ce5ea2242225fe4937ec8d749303445c0da8d6dc88a1ee607a0d3b0b82b548bcff0fb2c7d181d8173fc9a7b6e38f826a6ae579694d9e05bd59d8cc468eeb9e0233f70a1307d49e60d7f2dfe4218e7f6fb772afcaed3f15849a13d1f833b4646721ce2e8e63732623628970f544dcf3a42f4fb7e560abed5612a283d0381f9158565ab12174c56d289febe7cce85d46add4dbeb082a95bdc99a60d09315c63e7f246c9c1cd792507df10b987d761d564284ef256c67bcb106190b38ae0621cf60832a798131e6a8c9953921e24163c4fd82b22fd651d62c667533a0309aeef95b74045b4f5c5e874bbacd3e2049e4dda241e4c6a9ce7de53909b0809675a9d5ad63f48cf55ca3286a52b5f683d43b46d21e371391a42fa996980151074d84461e3ecd94784e35fe202f604923c44629e7e9d593c2de26d5024b868a534776535fc9ba997d66cf05aeaa88b5df7bd4183cae704d85ca141d403067d48b2603d5decfac929e40100f328a31200734bb0cbf0806bea754a8649ff12755252934fb7dcf156ef36bf33a8c7bf0005f4ff7f660af908567db8bf4cb95ab8a76f9d2bffa2afd6f3188f61b14ab0d54596887a6e2fadd201f3695a699dbe1e459da7fb98f0bc711492d464d3ad06c79c5904b5cea995b22dcd07bac997e5b233f5081f406d5926b1a87713a46f56d238c2fea07dc1f2f40c033e1ad43ded81c60fdff1dc5b7ac8834f4a04d4c267ba0bc88556269565e1330792e2fbb408d67ea249f90e8b2d076d086d935eaeb1eed0472ac5c31fab2919087228ac9799a453d853f1f86f00ace0348eb011b1bd664e4c318ca011308948de7ac85d09f0daefe089d94e69a51956faac95d552cbedb688e6b60e387a6881b3f2e718a40c53da3bd7c770ccfbacd8f282cc0a36899de39b4ab9f6663497fbc9271b0936448378f4aedf92957b9a38d3c7aebccbd748fab057942766cd9c85d709e7bb5277d06880dcdeec7b0286b84925db909234bd72836cd24e8dfc3ac71f41b9d60dd543db1e522a4b2444b7d97a23ea34c8465270c9d962fc9e2c19b95af453ad4a6c50038526d6a2b49bc4b1752835e9f4e7756927e5341a2b5dc19eff0a5a666575e29a6de57b6e693d0e0451722f7c4f4616fa94de99c139be1a7c8a7b23faa1d8b4f87f36b07d0355602eeee0e6e4596b8bb8e2263e1616bb7b39c802e250acc9b6dd98e99c52ef5a0fef1301016d886959082394e70b31dade2399e545ff6577dc529ecd4899eb11c1ed7503d4ea1ea89e901e9e66461e1637dacb5fd2f0c2af3ec25af080b6820fcc7e58b981f5b1c1928b263632aa89aa53f6ea159ba1c3392ffb6afdb581122ff78086e80d105e747853a431a8cf7cd6ed0bf2cf6fcaa307870005d324bf4fe4db618642ea71951ddb48ca8db835342cab25822960a39f70fdc21df5c9059c751f2248cca59e6e1fb1e69c0f850640869db82adf81d398032d0311137e34d69c62547363ee077d3d124baf23a414f42b6acb1c0c3bb761f18a1bf2a42f072a606fc2f39e1f9351841177e72fa482700751635cf9b514c1db318b88e3f29990df3eca73dce7a4c866c58f52ff1021c8c09d1772060cb5765ed7fb522ca372384947e6813d43e4a15448237d54806845143aca5f9db07c83b30c76e41096d556cb066c598b7194ae28ed8b03e7a091e71b58aae911169be68cb183050f849c5f92f14ea38ffafe6db0ffb8d220fbedfb7ab1ab737df0a11cb24eb43b7bb275cb29bfef9eced9a65440eb224acfc99ae3e7d09498a15c20c61886dfe7aa204da0de657eed30e62c8ad87bae19a21d3fd338fae63c207808064e8842c36afc0018d74ee6edf66024084585b06fe3620c21015371962d39ebdcb108309dc96ed869abf4d4eef640f40dc47243e56590bd234419bac7473b5a0fa197a6aecdc2591e44c8d68b92d3aa0c37445960bd0e2de7526e3dc4de334d2aab013364ce5d796ec6c4ee89a1824bfb8d596cd9ebeded2042c5c251b537e5cd664cc75a3dd193bdb53319ab367209e80f6bfe9d1226ad80d1f4de7f4bdc2e5e65068664903a8ffbf6fa7bbbfa8e9ef54f94d517ec0ab6772dc68b33e98f60764a038e762acae70fbd5826af48681f59ab425d42a1c1d08c02f47b3f71bf9c5583134612db765baaa056395e2aa71de25893ad061a44b9e804c55f9488d2b965aad3e69bcf333f6fcab981ce3930d67c8ea22c747c3a68e6f5d331b65dc1132b9f559b8394a2a1e10c72d9c480aecef9b809c2ce45fea30504d1870e5fa9d074fb868039be7b3d22326652777ce5a979c19823a623c402efbbfce3a61d667bbd294a557ceee1d4ba49b6d191b2e5b08a4ce6a06718e35194d991d0fac568e44d75a94c10f8e3085d8015b96071588969deee33e6feb0519b1f189003605b43e5198ae4d29fbbb77ccf9c78ab56e0948523e4598574c20340990e7c81b8aff4fddd4ae701cb5e330fcf1447c877de30b4ce7d80d306831ffb4a87b7c46fc4ebd25612366dd977289b826f5df6b1066dc5430e172db37d6d66f35b4f5a74b69d9a93db98ac8ab6945ce94368df8f87406a5553b60797bd2eaa11762cffceea4d88bb32dda836e1f58296e572008ff4156416b1a05b5d2f8689c1911b8b20a164d78087e16cfe93af716a73ceb7e48c24b8f0a9903256ee5e661d18a282ff74ebf7f2045b8ea223dcda2e92daea16316ec142e9ba38deeb12e61dcb4d0ecb9eb271927d8479d5e14cfd99ae80d73bc966a8bfc98eb1a1a6164c774add00abcb583b01858cf1a957de9663e5a422e71a578b2972fba1e0bd9319eafd6156eea41b4f86675927e2ee20ca1587982e0404ab82474a14d2efb88e85c591660cf05d9b970185c7ceb4aa40c53e5432fe3669acfb3e54bf58948707fa9060ee99d2df64c2cbc962a768436964617f0739d903bbdd2f78f374b7413dc2137477526efffd9a7dd3d9d0d27eccec0238257567de43f8db08857f7a077df8770224e3c01c49a8775cc47bd1a8c", 0x1000}, {&(0x7f00000003c0)="aff36223e93cd6b2d9e0bb1b88ba436ca08579a9de1cf8cd7356f65864e292f9ed6dbb3c5e17a9a2e88d7b90b0ad2bd604928bb396d0e16de6d4eeb80dc1f68f79fddbd9a987a7b554bda7878e651df20bcd0711c4e622f40033d2cdec848b2d9c249e6454529c3253bb0c5bc378a83479bb19952d780c57eefda93c577ecc0bc8f143c9f3e583636ce620b34830a6be6726d86e842112b935b0dc5f8061eab7ef1d76579c77a85356cc68f06455fedce6793498a4ec67623374f045bf3c787090c457a775498b7155ee7696b940272edf0cfe9de018918167aced2fa40fcd66b3cef209fb4bc07feb6e063e27a0773b9fc853a53a09a1b01766ee692a3006", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468f8ff033346f9a3964002cce1268b538c15ca169e5f23dc28ed93c9", 0xbd}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.196726858s ago: executing program 2 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f00000003c0)="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", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468f8ff033346f9a3964002cce1268b538c15ca169e5f23dc28ed93c9", 0xbd}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.340818259s ago: executing program 2 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f00000003c0)="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", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468f8ff033346f9a3964002cce1268b538c15ca169e5f23dc28ed93c9", 0xbd}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.301892704s ago: executing program 1 (id=3139): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x15, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7, 0x7, 0xfa2, 0x3014, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x3, 0x4, 0x0, 0x3, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000940)=[{0x0}], 0x1}, 0x48810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x15004100, &(0x7f0000000180)="5ca44104bacbd4ed9a63193f03d96fcefefd4c56923e051251f71eefebe02d822d2c0d9349613bfa55ccc1f6", 0x2c, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)="1f81eef4ee181e80fb2a2d9e44a2ea6c3bb91cc12e751c9611191b10c80c12a93708fa0f91eafae5c809118816c5710c24cd41ce5529bb7cb04953f3b41bc1da72c434430e0e8b310ccad3ce8da4e43133be39d1073241d151933e51fbf91d95b4e439d6122c5d681eec57cae963327499a16b3fe1") syz_open_procfs$namespace(r5, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000200)='7\x1e!=k\x03\x86\xd4\x94\xbb\x9c\x06\xb8d\x8bL6\x9b\xa4B\xf4\xa0\xa8\x9ddny\t\xa1\x8f@M\\\x1b/\xc3\xb1\xccS\xf1') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 4.012104231s ago: executing program 1 (id=3142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000040000b70c000080ff00007b8af8ff00000000a3a200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095182be74db94f043a1b93f2039efb64e17efd579611dc06c06ad41ead89cf8d085d9662af64d9120793ddf3ef34db7de5a8857f5a30f3b6fd974aac4a64cdfc5219923ffdb7fe70abea7298c8b843cbfea3932e5639ca9c2fa5b4347bcf6faa538f4c472ea9a3e8e554c9ea"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfee1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0xfffffffe, 0x0, 0x48}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x6, 0x6, 0x8, 0x0, 0x0, 0x4a883, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3c, 0x2, @perf_bp={&(0x7f0000000500), 0x1}, 0x0, 0x6, 0x1, 0x1, 0x2, 0x6, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffff8f6}, 0x0, 0x7, r3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x1d8, 0x0, 0x0, 0x1}, r5, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) 3.515899547s ago: executing program 1 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000061000000540000000000000095000000000000003ae42aba1001704938282f5d8e1be0900bfd6a63afc20de2b70d69d20a13da857ad3816a3b26eb2542e2b99fa8cdf3a51e46e9f91271c534818e3bd00c02d196b657284d64", @ANYRESOCT=r2], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000300"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000205cf0296d0dfe85000000000000589a27834fffa46a62c79a00"], 0x7c) 3.426714215s ago: executing program 1 (id=3148): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe1) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x28, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb6ee}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc00000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x20, &(0x7f0000000200)=""/32, 0x41000, 0x71, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x9, 0x10000}, 0x10, 0xb2b1, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[r0, r0, r0, r0, r6, r1], &(0x7f0000000600)=[{0x4, 0x5, 0x2, 0x7}, {0x5, 0x5, 0xa, 0x5}, {0x1, 0x1, 0x3, 0x8}, {0x1, 0x1, 0x10, 0x2}, {0x0, 0x4, 0xc, 0x7}], 0x10, 0x1ff, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80090) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.669817144s ago: executing program 2 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f00000003c0)="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", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468f8ff033346f9a3964002cce1268b538c15ca169e5f23dc28ed93c9", 0xbd}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.201178488s ago: executing program 1 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000000000000000000000000001000000", @ANYRES32, @ANYBLOB="f0ffff040500000000000000ef1d6c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xe04f, 0x96, &(0x7f00000002c0)=""/150, 0x41100, 0x35, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0xed5, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0xffffffffffffffff], &(0x7f0000000b00)=[{0x1, 0x1, 0x0, 0x7}, {0x3, 0x1, 0x2, 0xb}, {0x2, 0x4, 0x3, 0x8}, {0x5, 0x1, 0x2}, {0x3, 0x4, 0x6, 0x1}], 0x10, 0x8, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x3, 0x5670}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18004bc727200000000000fffffffffffffff900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.329333988s ago: executing program 0 (id=3169): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x9d, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xee, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="1852000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000182a0000", @ANYRES32=0x1, @ANYBLOB="393a4b8fbb060aee83ba9f4b9961c8b100254c66c3c0f5aad494cb85eddd501c4f1f5240c4fc65c9f43a4ac4fac9ad6cc804e7355f739bd14c14", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bd81c0ff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000"], &(0x7f0000000640)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x3c, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x6, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r1], &(0x7f0000000800)=[{0x400003, 0x4, 0x14, 0xc}, {0x5, 0x5, 0xb, 0x5}, {0x5, 0x1, 0x3, 0x7}, {0x2, 0x5, 0x9, 0x3}, {0x3, 0x22, 0x9, 0xb}, {0x3, 0x4, 0xe, 0x7}], 0x10, 0x9a36, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0x1, 0x1, 0x0, 0x8, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0xc, 0x8c, &(0x7f0000000540)=""/140, 0x40f00, 0x1c, '\x00', r2, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0xc, 0x11b, 0x4}, 0x10, 0x0, r4, 0x3, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0xd, 0x9}, {0x0, 0x4, 0x9, 0xb}, {0x0, 0x5, 0x1, 0xa}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.186382771s ago: executing program 4 (id=3172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001d00000000000000000dd10052ed4231a30000000000fffffff3fffffff4"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001180b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x2000ff00) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x95e3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r6}, 0x10) 1.168557842s ago: executing program 4 (id=3173): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x5, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x90, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f0000000880), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010001000000000000001c0000001c00000009000000000000013b2e174238c426ef00000000320004010b000000000000"], &(0x7f0000000b40)=""/207, 0x37, 0xcf, 0x0, 0x2, 0x0, @void, @value}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x3, 0x7fc, 0xfffffffc, 0x6, r3, 0x6, '\x00', 0x0, r4, 0x400005, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xfe00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.058216362s ago: executing program 4 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r5) 1.047738013s ago: executing program 0 (id=3175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000300)=@raw=[@map_fd, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000580)='GPL\x00', 0x10, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x1, 0x5, 0x1574}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)=[{0x2, 0x0, 0x0, 0xc}], 0x10, 0x40, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='wake_reaper\x00', r2}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2e, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)="acf513f392d69a2df4419d99a7fecd6fef35a651f243e41a19a236be7c4fecad549f82b48f27490708d6dc393d041efb059802009b86e6e40c56be52d3e7ffdab992c42410dcb05af85256142b506f584f994dc75f570b42d60be64556be1eb656cc0d70c969104387e6d79155ca0c69dee9afcd36dd7fd9ea47a2f4b5f297556481c28a7b7a652d24", &(0x7f0000000080), 0xb7e0, r3, 0x0, 0xa00369a4}, 0x3c) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r4) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18bce265a3ebc7009791d05cac70799c3d2e2429ef2e705c0695c4d58000000000000000000000200000791226000000000095000000000000001e188c022bbc15c4b5a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0xfffffffffffffffc}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e782"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 1.013007467s ago: executing program 0 (id=3176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='percpu_destroy_chunk\x00', r0, 0x0, 0x3}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x302) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b0110000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[], 0xffbf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='percpu_free_percpu\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/19], 0x48) 726.786833ms ago: executing program 4 (id=3177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) write$cgroup_subtree(r5, 0x0, 0x9) 692.585356ms ago: executing program 0 (id=3178): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5bceadfc, 0x0, 0xffffffffffffffff, 0x624, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_clone(0x30000000, &(0x7f0000000980)="a26a4dceaae4403710045255520ca885e78a93495aafa3e67442b8d891f86908baa6a628ca698c60e7336d2619cbd669ce35a9d2c094298a9f323e68dc6afa7d8a17acbb4fa070fd5c1de0d8a6f54dadd8ee95d02a204de84e44196660c953db316472832254fe0fd0541ac2", 0x6c, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="9551fb644bd5378d36396ef279dd6fc1a90eb2a0a3d3e1c1102e88e9f85734ed9fd2c66e02dba5e979aa839d80ff316f00d046e1f9c7653f91a433a37d92d5a7149914e62e1ba81ecf52d199301029c179f872bc313362eac25c0bbd052de4eec34cc3903024b086574e200b7d677b10f5354b1578073070f0bbb405f1c9782183125ec9ff2704eb20de73f0849c3039b4a3ebaf0c91ae8a9b671f76bb34") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="2100000000000000040000000300d76264b4008029f6f2362df7f263ff96123c04e61ce8cb981cbe49598410c4ffded89482dfd77accd33f01e66595dcb740f5db32a5b18e527bc4bef8f6957c446491277d45bb40805950f07da075a0ae6d17fb372d71ea21cc9a6dfd42dbc7dfddfa564dffbd0000000000000700e9bd9379014b9bb821a3eceb57f720e9218f5aab000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="5c4d4488c1ca3873b99e32f9b02836a7e416dd9bb7c07d1839b11223baf455c02936f62a8d1662bcaf97727b92f550b85ef6190f54e582cf19fee6b8ab5998c633f57182b9298fd08171a76952cce4cae23b041dba9932aa24bdb77e26112efb75d7913698f517477771d4c9c221403d4bfa4a0cf9fd387f799e2c64386939f21f58ce552d3bd3627f86a8ed8a3426b3b83cdd02c7eadfbcc9ca5612bb4a34805678cb2547", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x85900, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x40, 0x0, &(0x7f0000000500)="3837844887964f5eddec4ef9fa02e257a24887d8f3d5d3a1db714ec7497228588c0a41504ef2475f4878251bff21d9f1d70c064493a5b0e83adc438bc5f26dfe", 0x0}, 0x50) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2d6e65745f636c732000696f202b6e65745f636c733ce983bf0490209a1676c04763732169b861"], 0x16) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'full', 0x20, 0x9, 0x20, 0x5}, 0x2f) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100}]}}, &(0x7f0000000000)=""/144, 0x32, 0x90, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000b40)='rxrpc_transmit\x00', r1, 0x0, 0x5}, 0x18) 682.314577ms ago: executing program 0 (id=3179): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcc, 0x2, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x19, 0x6, 0x7, 0x0, 0x611, 0xffffffffffffffff, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES8=r9, @ANYRES8, @ANYRES32, @ANYRESOCT=r11, @ANYRESDEC=r7, @ANYRES16=r7, @ANYRES8=r10], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0xfffffffffffffd3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="00000000000000c5a600"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000002c0)='btrfs_inode_mod_outstanding_extents\x00'}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 655.94475ms ago: executing program 2 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffd81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000b5ea1da868c5eb89a7b2", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000026c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000daf800007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)="e238b3747e305afacb9ac86d1f701b7eabe73982a903335680d5c5fbe36959190a33174f00a50b04355761ef5a4cd1ee4e49f951ff88f2a9609e9e3d61d287f52771bbf374c7f4e76f629878daac659a37180cbd463dcd653ef6dc0fa830c1fc22414544c6f271e1b679ce9aabd633c4eb68f21782a70fe1c7a08eeb8ad2b709333ace274245f2cef15b2f689e3b9d4125fd6b", 0x93}, {&(0x7f0000000300)="9e052e68ae58920f9dfcd6b1e41551e08071401b3d219af416bd13b8866ec39516e40c7cb7792a4a7616c7d58f45d3bfa93943be39e605a626875af819ee8dd2f35ec426850be42ae134797475c84989f4b6b51a7d103688463ea152401617264ac3f2848b0f516984d23da4245fbb14d92e42a763b6bd4090bc8d24e1886d75447aeb77ea3d02d7a09c652acba16b484074d898dbc0d9a678b1f0aaea9b20b708495167486101749db1b753169481990026b430415e18", 0xb7}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f00000003c0)="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", 0xff}], 0x4, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x150}, 0x40044) r13 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r14 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r14, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="65075153e747bad9af2ce54b019c5598c4c9af1330d38a53ac5efad75a604a146e716b42fe175c4bc99d56091b392fe831a9f714046d6c1d5c07f13dee83b2375d9306879d936a318a9110e1bf4a375beb6cb54b2e3f08f6462a597d596b5d09efb2d6c4c96828c59e6014d1d32fc4bc577c3d6f99db0c81c4a855c76e672d53f7923f01aa185bc53b11987819c9ea76fad56beb39e3f4acb2f7f0851d971e4a1468f8ff033346f9a3964002cce1268b538c15ca169e5f23dc28ed93c9", 0xbd}, {&(0x7f0000000080)="79a8f129036b778bb91330879a49e727b4096433214109d90be9adf79f8b0540", 0x20}, {&(0x7f0000000680)="8284243c495adbb7c4de7b06cdc5e1fc71b558abea87dd664c679489d1d06cfa35514438665154d044c46e9a16843bbcaec762600683c033b21d1bb177071b341fc6a0762912d21119308a7cf2fbdcfd63012876fb5597bfea916fefd5ad27c6b6f1dd8e8e039c2116e317e97a3ffd3e0770fe4a5c60e668d9f9d4c7d24ea9a21ce80fdc76d769b090e6f05a31ef61863a1cda0d1b7e45c09840675e3bab6405179b5c8e3ecbc775af16fa3f72cd15c208edbc0d42187e85e9ecb052860acc1e6b311b0b5898aa53dd9af8f966bc61be407a1e86e20cd9560af4fa34838a4257fe32c02eef0bf0a10c84bc77dd8e", 0xee}], 0x3, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r11, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xd0, 0x880}, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 96.023461ms ago: executing program 0 (id=3180): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffc, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x0) (fail_nth: 85) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r6}, 0x18) 81.911763ms ago: executing program 1 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 81.510553ms ago: executing program 4 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1e6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4908, 0x0, 0xfffffffe, 0x5, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000061000000540000000000000095000000000000003ae42aba1001704938282f5d8e1be0900bfd6a63afc20de2b70d69d20a13da857ad3816a3b26eb2542e2b99fa8cdf3a51e46e9f91271c534818e3bd00c02d196b657284d64", @ANYRESOCT=r2], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000300"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000205cf0296d0dfe85000000000000589a27834fffa46a62c79a00"], 0x7c) 0s ago: executing program 4 (id=3183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mem_return_failed\x00', r0, 0x0, 0x65}, 0x18) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000180), 0x20000000}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082b00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ae32b3108ddccb3169a266fa8a824820f973668ab88ea1f67e7efc3902806557ad8ba4415c0ceb2e336c9a774de8eb2c9fc7dd8cdde1b4c338a4b3c16d241b55ef3398d3e2ba9e7196ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000030000000000000000000000000000020000000000000000000000060200000000003753d160925ff2c0f5497b32f8fb728a0beeb74f951a2b58f1a956d4aa0b0a83c5bc632c165723d2d8102c3a6e0853d661"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='ext4_writepages\x00'}, 0x1) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xd, 0x1, 0x1, 0x8083, r3, 0xed, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @value=r6, @void, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x10, 0xb, 0x100, r5, 0x4f, '\x00', r1, 0xffffffffffffffff, 0x0, 0x8000, 0x1, 0x3, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4][ T8996] ? __do_sys_vfork+0x130/0x130 [ 294.490102][ T8996] ? debug_smp_processor_id+0x17/0x20 [ 294.495337][ T8996] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 294.501210][ T8996] x64_sys_call+0x1b0/0x9a0 [ 294.505549][ T8996] do_syscall_64+0x3b/0xb0 [ 294.509803][ T8996] ? clear_bhb_loop+0x35/0x90 [ 294.514313][ T8996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.520040][ T8996] RIP: 0033:0x7ff843da6ef9 [ 294.524294][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.543734][ T8996] RSP: 002b:00007ff842a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.551980][ T8996] RAX: ffffffffffffffda RBX: 00007ff843f5ef80 RCX: 00007ff843da6ef9 [ 294.559795][ T8996] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.567602][ T8996] RBP: 00007ff842a20090 R08: 0000000000000000 R09: 0000000000000000 [ 294.575413][ T8996] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 294.583224][ T8996] R13: 0000000000000000 R14: 00007ff843f5ef80 R15: 00007fff62d0a598 [ 294.591042][ T8996] [ 294.646120][ T9009] syz.2.2699[9009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.646189][ T9009] syz.2.2699[9009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.668003][ T9010] syz.2.2699[9010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.682246][ T9010] syz.2.2699[9010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.733367][ T9015] syz.2.2701[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.772978][ T9015] syz.2.2701[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.837909][ T9015] syz.2.2701[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.879571][ T9015] syz.2.2701[9015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.240742][ T9029] syz.0.2704[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.252860][ T9032] syz.3.2705[9032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.468562][ T9047] FAULT_INJECTION: forcing a failure. [ 295.468562][ T9047] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.647189][ T9047] CPU: 1 PID: 9047 Comm: syz.3.2710 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 295.658308][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 295.668327][ T9047] Call Trace: [ 295.671452][ T9047] [ 295.674228][ T9047] dump_stack_lvl+0x151/0x1c0 [ 295.678744][ T9047] ? io_uring_drop_tctx_refs+0x190/0x190 [ 295.684212][ T9047] dump_stack+0x15/0x20 [ 295.688202][ T9047] should_fail+0x3c6/0x510 [ 295.692453][ T9047] should_fail_alloc_page+0x5a/0x80 [ 295.697488][ T9047] prepare_alloc_pages+0x15c/0x700 [ 295.702436][ T9047] ? __alloc_pages_bulk+0xe40/0xe40 [ 295.707469][ T9047] __alloc_pages+0x18c/0x8f0 [ 295.711893][ T9047] ? prep_new_page+0x110/0x110 [ 295.716495][ T9047] ? __alloc_pages+0x27e/0x8f0 [ 295.721098][ T9047] ? __kasan_check_write+0x14/0x20 [ 295.726045][ T9047] ? _raw_spin_lock+0xa4/0x1b0 [ 295.730645][ T9047] pte_alloc_one+0x73/0x1b0 [ 295.734983][ T9047] ? pfn_modify_allowed+0x2f0/0x2f0 [ 295.740018][ T9047] ? __pmd_alloc+0x48d/0x550 [ 295.744445][ T9047] __pte_alloc+0x86/0x350 [ 295.748607][ T9047] ? __pud_alloc+0x260/0x260 [ 295.753031][ T9047] ? __pud_alloc+0x213/0x260 [ 295.757460][ T9047] ? free_pgtables+0x280/0x280 [ 295.762059][ T9047] ? do_handle_mm_fault+0x2400/0x2400 [ 295.767267][ T9047] ? __stack_depot_save+0x34/0x470 [ 295.772214][ T9047] ? anon_vma_clone+0x9a/0x500 [ 295.776816][ T9047] copy_page_range+0x28a8/0x2f90 [ 295.781593][ T9047] ? __kasan_slab_alloc+0xb1/0xe0 [ 295.786448][ T9047] ? slab_post_alloc_hook+0x53/0x2c0 [ 295.791693][ T9047] ? kernel_clone+0x21e/0x9e0 [ 295.796187][ T9047] ? x64_sys_call+0x1b0/0x9a0 [ 295.800697][ T9047] ? do_syscall_64+0x3b/0xb0 [ 295.805121][ T9047] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.811031][ T9047] ? pfn_valid+0x1e0/0x1e0 [ 295.815276][ T9047] ? irqentry_exit+0x30/0x40 [ 295.819702][ T9047] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 295.825344][ T9047] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 295.831336][ T9047] copy_mm+0xc7e/0x13e0 [ 295.835326][ T9047] ? irqentry_exit+0x30/0x40 [ 295.839753][ T9047] ? copy_signal+0x610/0x610 [ 295.844175][ T9047] ? __init_rwsem+0xfe/0x1d0 [ 295.848604][ T9047] ? copy_signal+0x4e3/0x610 [ 295.853033][ T9047] copy_process+0x1149/0x3290 [ 295.857557][ T9047] ? __kasan_check_write+0x14/0x20 [ 295.862497][ T9047] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 295.867438][ T9047] ? vfs_write+0x9ec/0x1110 [ 295.871782][ T9047] kernel_clone+0x21e/0x9e0 [ 295.876115][ T9047] ? irqentry_exit+0x30/0x40 [ 295.880543][ T9047] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 295.886183][ T9047] ? create_io_thread+0x1e0/0x1e0 [ 295.891049][ T9047] __x64_sys_clone+0x23f/0x290 [ 295.895645][ T9047] ? __do_sys_vfork+0x130/0x130 [ 295.900333][ T9047] ? debug_smp_processor_id+0x17/0x20 [ 295.905539][ T9047] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 295.911442][ T9047] ? exit_to_user_mode_prepare+0x39/0xa0 [ 295.916911][ T9047] x64_sys_call+0x1b0/0x9a0 [ 295.921246][ T9047] do_syscall_64+0x3b/0xb0 [ 295.925500][ T9047] ? clear_bhb_loop+0x35/0x90 [ 295.930012][ T9047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.935744][ T9047] RIP: 0033:0x7f0217265ef9 [ 295.939998][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.959436][ T9047] RSP: 002b:00007f0215edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 295.967679][ T9047] RAX: ffffffffffffffda RBX: 00007f021741df80 RCX: 00007f0217265ef9 [ 295.975492][ T9047] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.983305][ T9047] RBP: 00007f0215edf090 R08: 0000000000000000 R09: 0000000000000000 [ 295.991116][ T9047] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 295.998928][ T9047] R13: 0000000000000000 R14: 00007f021741df80 R15: 00007ffecb928c18 [ 296.006743][ T9047] [ 296.079007][ T30] audit: type=1400 audit(1727242546.549:160): avc: denied { create } for pid=9059 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 296.154445][ T9060] device macsec0 entered promiscuous mode [ 296.416195][ T9079] device veth0_vlan left promiscuous mode [ 296.601735][ T9079] device veth0_vlan entered promiscuous mode [ 297.031898][ T9093] FAULT_INJECTION: forcing a failure. [ 297.031898][ T9093] name failslab, interval 1, probability 0, space 0, times 0 [ 297.105551][ T9093] CPU: 1 PID: 9093 Comm: syz.1.2724 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 297.116681][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 297.126577][ T9093] Call Trace: [ 297.129704][ T9093] [ 297.132485][ T9093] dump_stack_lvl+0x151/0x1c0 [ 297.136993][ T9093] ? io_uring_drop_tctx_refs+0x190/0x190 [ 297.142466][ T9093] dump_stack+0x15/0x20 [ 297.146450][ T9093] should_fail+0x3c6/0x510 [ 297.150707][ T9093] __should_failslab+0xa4/0xe0 [ 297.155306][ T9093] ? anon_vma_clone+0x9a/0x500 [ 297.160069][ T9093] should_failslab+0x9/0x20 [ 297.164409][ T9093] slab_pre_alloc_hook+0x37/0xd0 [ 297.169182][ T9093] ? anon_vma_clone+0x9a/0x500 [ 297.173781][ T9093] kmem_cache_alloc+0x44/0x200 [ 297.178381][ T9093] anon_vma_clone+0x9a/0x500 [ 297.182807][ T9093] anon_vma_fork+0x91/0x4e0 [ 297.187143][ T9093] ? anon_vma_name+0x4c/0x70 [ 297.191571][ T9093] ? vm_area_dup+0x17a/0x230 [ 297.196001][ T9093] copy_mm+0xa3a/0x13e0 [ 297.199998][ T9093] ? copy_signal+0x610/0x610 [ 297.204417][ T9093] ? __init_rwsem+0xfe/0x1d0 [ 297.208842][ T9093] ? copy_signal+0x4e3/0x610 [ 297.213271][ T9093] copy_process+0x1149/0x3290 [ 297.217787][ T9093] ? __kasan_check_write+0x14/0x20 [ 297.222737][ T9093] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 297.227677][ T9093] ? vfs_write+0x9ec/0x1110 [ 297.232017][ T9093] kernel_clone+0x21e/0x9e0 [ 297.236354][ T9093] ? __kasan_check_write+0x14/0x20 [ 297.241303][ T9093] ? create_io_thread+0x1e0/0x1e0 [ 297.246166][ T9093] __x64_sys_clone+0x23f/0x290 [ 297.250763][ T9093] ? __do_sys_vfork+0x130/0x130 [ 297.255463][ T9093] ? debug_smp_processor_id+0x17/0x20 [ 297.260661][ T9093] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 297.266559][ T9093] ? exit_to_user_mode_prepare+0x39/0xa0 [ 297.272026][ T9093] x64_sys_call+0x1b0/0x9a0 [ 297.276366][ T9093] do_syscall_64+0x3b/0xb0 [ 297.280619][ T9093] ? clear_bhb_loop+0x35/0x90 [ 297.285135][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.290861][ T9093] RIP: 0033:0x7ff843da6ef9 [ 297.295115][ T9093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.314556][ T9093] RSP: 002b:00007ff842a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 297.322801][ T9093] RAX: ffffffffffffffda RBX: 00007ff843f5ef80 RCX: 00007ff843da6ef9 [ 297.330613][ T9093] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.338421][ T9093] RBP: 00007ff842a20090 R08: 0000000000000000 R09: 0000000000000000 [ 297.346231][ T9093] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 297.354044][ T9093] R13: 0000000000000000 R14: 00007ff843f5ef80 R15: 00007fff62d0a598 [ 297.361862][ T9093] [ 298.564040][ T9156] FAULT_INJECTION: forcing a failure. [ 298.564040][ T9156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.577863][ T9156] CPU: 1 PID: 9156 Comm: syz.0.2740 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 298.588958][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.598851][ T9156] Call Trace: [ 298.601980][ T9156] [ 298.604755][ T9156] dump_stack_lvl+0x151/0x1c0 [ 298.609267][ T9156] ? io_uring_drop_tctx_refs+0x190/0x190 [ 298.614737][ T9156] ? kvm_sched_clock_read+0x18/0x40 [ 298.619775][ T9156] ? sched_clock+0x9/0x10 [ 298.623937][ T9156] ? sched_clock_cpu+0x18/0x3b0 [ 298.628622][ T9156] ? _raw_spin_lock+0xa4/0x1b0 [ 298.633225][ T9156] dump_stack+0x15/0x20 [ 298.637214][ T9156] should_fail+0x3c6/0x510 [ 298.641474][ T9156] should_fail_alloc_page+0x5a/0x80 [ 298.646502][ T9156] prepare_alloc_pages+0x15c/0x700 [ 298.651453][ T9156] ? __alloc_pages_bulk+0xe40/0xe40 [ 298.656483][ T9156] ? native_set_ldt+0x360/0x360 [ 298.661171][ T9156] __alloc_pages+0x18c/0x8f0 [ 298.665596][ T9156] ? _raw_spin_unlock+0x4d/0x70 [ 298.670437][ T9156] ? prep_new_page+0x110/0x110 [ 298.675040][ T9156] pte_alloc_one+0x73/0x1b0 [ 298.679373][ T9156] ? pfn_modify_allowed+0x2f0/0x2f0 [ 298.684407][ T9156] __pte_alloc+0x86/0x350 [ 298.688570][ T9156] ? irqentry_exit+0x30/0x40 [ 298.692999][ T9156] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 298.698637][ T9156] ? free_pgtables+0x280/0x280 [ 298.703242][ T9156] ? __kasan_check_write+0x14/0x20 [ 298.708191][ T9156] copy_page_range+0x28a8/0x2f90 [ 298.712959][ T9156] ? __kasan_slab_alloc+0xb1/0xe0 [ 298.717833][ T9156] ? pfn_valid+0x1e0/0x1e0 [ 298.722074][ T9156] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 298.727630][ T9156] ? __rb_insert_augmented+0x5de/0x610 [ 298.732929][ T9156] copy_mm+0xc7e/0x13e0 [ 298.736921][ T9156] ? copy_signal+0x610/0x610 [ 298.741345][ T9156] ? __init_rwsem+0xfe/0x1d0 [ 298.745766][ T9156] ? copy_signal+0x4e3/0x610 [ 298.750190][ T9156] copy_process+0x1149/0x3290 [ 298.754712][ T9156] ? __kasan_check_write+0x14/0x20 [ 298.759658][ T9156] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 298.764599][ T9156] ? vfs_write+0x9ec/0x1110 [ 298.768958][ T9156] kernel_clone+0x21e/0x9e0 [ 298.773276][ T9156] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 298.778919][ T9156] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 298.784908][ T9156] ? create_io_thread+0x1e0/0x1e0 [ 298.789774][ T9156] ? memset+0x35/0x40 [ 298.793589][ T9156] __x64_sys_clone+0x23f/0x290 [ 298.798190][ T9156] ? __do_sys_vfork+0x130/0x130 [ 298.802900][ T9156] ? debug_smp_processor_id+0x17/0x20 [ 298.808083][ T9156] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 298.813983][ T9156] ? exit_to_user_mode_prepare+0x39/0xa0 [ 298.819452][ T9156] x64_sys_call+0x1b0/0x9a0 [ 298.823788][ T9156] do_syscall_64+0x3b/0xb0 [ 298.828042][ T9156] ? clear_bhb_loop+0x35/0x90 [ 298.832557][ T9156] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.838286][ T9156] RIP: 0033:0x7fcbdd415ef9 [ 298.842540][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.861976][ T9156] RSP: 002b:00007fcbdc08efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 298.870225][ T9156] RAX: ffffffffffffffda RBX: 00007fcbdd5cdf80 RCX: 00007fcbdd415ef9 [ 298.878035][ T9156] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.885943][ T9156] RBP: 00007fcbdc08f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.893748][ T9156] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 298.901562][ T9156] R13: 0000000000000000 R14: 00007fcbdd5cdf80 R15: 00007fff11df4418 [ 298.909382][ T9156] [ 298.971040][ T9155] device syzkaller0 entered promiscuous mode [ 299.183251][ T9161] device syzkaller0 entered promiscuous mode [ 299.668140][ T9179] bpf_get_probe_write_proto: 14 callbacks suppressed [ 299.668159][ T9179] syz.1.2750[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.718411][ T9179] syz.1.2750[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.718642][ T9185] syz.1.2750[9185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.766713][ T9185] syz.1.2750[9185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.899943][ T9194] FAULT_INJECTION: forcing a failure. [ 299.899943][ T9194] name failslab, interval 1, probability 0, space 0, times 0 [ 300.000816][ T9194] CPU: 0 PID: 9194 Comm: syz.4.2754 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 300.011939][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 300.021829][ T9194] Call Trace: [ 300.024950][ T9194] [ 300.027728][ T9194] dump_stack_lvl+0x151/0x1c0 [ 300.032244][ T9194] ? io_uring_drop_tctx_refs+0x190/0x190 [ 300.037711][ T9194] dump_stack+0x15/0x20 [ 300.041700][ T9194] should_fail+0x3c6/0x510 [ 300.045958][ T9194] __should_failslab+0xa4/0xe0 [ 300.050553][ T9194] ? anon_vma_fork+0xf7/0x4e0 [ 300.055066][ T9194] should_failslab+0x9/0x20 [ 300.059409][ T9194] slab_pre_alloc_hook+0x37/0xd0 [ 300.064179][ T9194] ? anon_vma_fork+0xf7/0x4e0 [ 300.068692][ T9194] kmem_cache_alloc+0x44/0x200 [ 300.073292][ T9194] anon_vma_fork+0xf7/0x4e0 [ 300.077636][ T9194] ? anon_vma_name+0x4c/0x70 [ 300.082062][ T9194] ? vm_area_dup+0x17a/0x230 [ 300.086487][ T9194] copy_mm+0xa3a/0x13e0 [ 300.090484][ T9194] ? copy_signal+0x610/0x610 [ 300.094903][ T9194] ? __init_rwsem+0xfe/0x1d0 [ 300.099332][ T9194] ? copy_signal+0x4e3/0x610 [ 300.103757][ T9194] copy_process+0x1149/0x3290 [ 300.108273][ T9194] ? __kasan_check_write+0x14/0x20 [ 300.113223][ T9194] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 300.118164][ T9194] ? vfs_write+0x9ec/0x1110 [ 300.122508][ T9194] kernel_clone+0x21e/0x9e0 [ 300.126847][ T9194] ? irqentry_exit+0x30/0x40 [ 300.131269][ T9194] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 300.136909][ T9194] ? create_io_thread+0x1e0/0x1e0 [ 300.141775][ T9194] __x64_sys_clone+0x23f/0x290 [ 300.146370][ T9194] ? __do_sys_vfork+0x130/0x130 [ 300.151064][ T9194] ? debug_smp_processor_id+0x17/0x20 [ 300.156265][ T9194] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 300.162168][ T9194] ? exit_to_user_mode_prepare+0x39/0xa0 [ 300.167637][ T9194] x64_sys_call+0x1b0/0x9a0 [ 300.171975][ T9194] do_syscall_64+0x3b/0xb0 [ 300.176231][ T9194] ? clear_bhb_loop+0x35/0x90 [ 300.180741][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.186470][ T9194] RIP: 0033:0x7eff7d85fef9 [ 300.190728][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.210166][ T9194] RSP: 002b:00007eff7c4d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 300.218406][ T9194] RAX: ffffffffffffffda RBX: 00007eff7da17f80 RCX: 00007eff7d85fef9 [ 300.226222][ T9194] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.234030][ T9194] RBP: 00007eff7c4d9090 R08: 0000000000000000 R09: 0000000000000000 [ 300.241846][ T9194] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 300.249656][ T9194] R13: 0000000000000000 R14: 00007eff7da17f80 R15: 00007fffbad88328 [ 300.257470][ T9194] [ 300.371506][ T9204] device syzkaller0 entered promiscuous mode [ 300.764828][ T9221] device syzkaller0 entered promiscuous mode [ 300.998427][ T9235] FAULT_INJECTION: forcing a failure. [ 300.998427][ T9235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.021382][ T9235] CPU: 0 PID: 9235 Comm: syz.0.2767 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 301.032500][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 301.042386][ T9235] Call Trace: [ 301.045510][ T9235] [ 301.048288][ T9235] dump_stack_lvl+0x151/0x1c0 [ 301.052801][ T9235] ? io_uring_drop_tctx_refs+0x190/0x190 [ 301.058267][ T9235] ? kvm_sched_clock_read+0x18/0x40 [ 301.063301][ T9235] ? sched_clock+0x9/0x10 [ 301.067467][ T9235] ? sched_clock_cpu+0x18/0x3b0 [ 301.072155][ T9235] ? _raw_spin_lock+0xa4/0x1b0 [ 301.076757][ T9235] dump_stack+0x15/0x20 [ 301.080746][ T9235] should_fail+0x3c6/0x510 [ 301.085004][ T9235] should_fail_alloc_page+0x5a/0x80 [ 301.090041][ T9235] prepare_alloc_pages+0x15c/0x700 [ 301.094982][ T9235] ? __alloc_pages_bulk+0xe40/0xe40 [ 301.100022][ T9235] __alloc_pages+0x18c/0x8f0 [ 301.104442][ T9235] ? prep_new_page+0x110/0x110 [ 301.109045][ T9235] pte_alloc_one+0x73/0x1b0 [ 301.113378][ T9235] ? pfn_modify_allowed+0x2f0/0x2f0 [ 301.118419][ T9235] ? irqentry_exit+0x30/0x40 [ 301.122852][ T9235] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 301.128483][ T9235] __pte_alloc+0x86/0x350 [ 301.132649][ T9235] ? free_pgtables+0x280/0x280 [ 301.137246][ T9235] ? __kasan_check_write+0x14/0x20 [ 301.142214][ T9235] copy_page_range+0x28a8/0x2f90 [ 301.146968][ T9235] ? __kasan_slab_alloc+0xb1/0xe0 [ 301.151837][ T9235] ? pfn_valid+0x1e0/0x1e0 [ 301.156082][ T9235] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 301.161634][ T9235] ? __rb_insert_augmented+0x5de/0x610 [ 301.166937][ T9235] copy_mm+0xc7e/0x13e0 [ 301.170927][ T9235] ? copy_signal+0x610/0x610 [ 301.175347][ T9235] ? __init_rwsem+0xfe/0x1d0 [ 301.179775][ T9235] ? copy_signal+0x4e3/0x610 [ 301.184202][ T9235] copy_process+0x1149/0x3290 [ 301.188718][ T9235] ? __kasan_check_write+0x14/0x20 [ 301.193663][ T9235] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 301.198627][ T9235] kernel_clone+0x21e/0x9e0 [ 301.202947][ T9235] ? __kasan_check_write+0x14/0x20 [ 301.207893][ T9235] ? create_io_thread+0x1e0/0x1e0 [ 301.212758][ T9235] __x64_sys_clone+0x23f/0x290 [ 301.217355][ T9235] ? __do_sys_vfork+0x130/0x130 [ 301.222044][ T9235] ? debug_smp_processor_id+0x17/0x20 [ 301.227254][ T9235] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 301.233149][ T9235] ? exit_to_user_mode_prepare+0x39/0xa0 [ 301.238620][ T9235] x64_sys_call+0x1b0/0x9a0 [ 301.242961][ T9235] do_syscall_64+0x3b/0xb0 [ 301.247214][ T9235] ? clear_bhb_loop+0x35/0x90 [ 301.251723][ T9235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.257455][ T9235] RIP: 0033:0x7fcbdd415ef9 [ 301.261719][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.281466][ T9235] RSP: 002b:00007fcbdc08efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 301.289706][ T9235] RAX: ffffffffffffffda RBX: 00007fcbdd5cdf80 RCX: 00007fcbdd415ef9 [ 301.297517][ T9235] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.305343][ T9235] RBP: 00007fcbdc08f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.313143][ T9235] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 301.320958][ T9235] R13: 0000000000000000 R14: 00007fcbdd5cdf80 R15: 00007fff11df4418 [ 301.328770][ T9235] [ 301.825729][ T9249] device syzkaller0 entered promiscuous mode [ 302.796700][ T9292] FAULT_INJECTION: forcing a failure. [ 302.796700][ T9292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.825031][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.840305][ T9292] CPU: 0 PID: 9292 Comm: syz.4.2783 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 302.851409][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.861301][ T9292] Call Trace: [ 302.864425][ T9292] [ 302.867217][ T9292] dump_stack_lvl+0x151/0x1c0 [ 302.871750][ T9292] ? io_uring_drop_tctx_refs+0x190/0x190 [ 302.877193][ T9292] dump_stack+0x15/0x20 [ 302.881193][ T9292] should_fail+0x3c6/0x510 [ 302.885430][ T9292] should_fail_alloc_page+0x5a/0x80 [ 302.890465][ T9292] prepare_alloc_pages+0x15c/0x700 [ 302.895411][ T9292] ? __alloc_pages+0x8f0/0x8f0 [ 302.900015][ T9292] ? __alloc_pages_bulk+0xe40/0xe40 [ 302.905049][ T9292] __alloc_pages+0x18c/0x8f0 [ 302.909471][ T9292] ? prep_new_page+0x110/0x110 [ 302.914074][ T9292] ? __mod_node_page_state+0xac/0xf0 [ 302.919194][ T9292] pte_alloc_one+0x73/0x1b0 [ 302.923630][ T9292] ? pfn_modify_allowed+0x2f0/0x2f0 [ 302.928662][ T9292] __pte_alloc+0x86/0x350 [ 302.932825][ T9292] ? irqentry_exit+0x30/0x40 [ 302.937251][ T9292] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 302.942892][ T9292] ? free_pgtables+0x280/0x280 [ 302.947495][ T9292] ? __kasan_check_write+0x14/0x20 [ 302.952444][ T9292] copy_page_range+0x28a8/0x2f90 [ 302.957228][ T9292] ? __kasan_slab_alloc+0xb1/0xe0 [ 302.962085][ T9292] ? pfn_valid+0x1e0/0x1e0 [ 302.966332][ T9292] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 302.971884][ T9292] ? __rb_insert_augmented+0x5de/0x610 [ 302.977185][ T9292] copy_mm+0xc7e/0x13e0 [ 302.981171][ T9292] ? irqentry_exit_cond_resched+0x2a/0x30 [ 302.986727][ T9292] ? copy_signal+0x610/0x610 [ 302.991152][ T9292] ? __init_rwsem+0xfe/0x1d0 [ 302.995576][ T9292] ? copy_signal+0x4e3/0x610 [ 303.000004][ T9292] copy_process+0x1149/0x3290 [ 303.004533][ T9292] ? timerqueue_add+0x250/0x270 [ 303.009203][ T9292] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 303.014151][ T9292] ? enqueue_hrtimer+0xca/0x240 [ 303.018838][ T9292] ? __hrtimer_run_queues+0x46b/0xad0 [ 303.024050][ T9292] kernel_clone+0x21e/0x9e0 [ 303.028384][ T9292] ? irqentry_exit+0x30/0x40 [ 303.032809][ T9292] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 303.038455][ T9292] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 303.044442][ T9292] ? create_io_thread+0x1e0/0x1e0 [ 303.049303][ T9292] __x64_sys_clone+0x23f/0x290 [ 303.053902][ T9292] ? __do_sys_vfork+0x130/0x130 [ 303.058597][ T9292] x64_sys_call+0x1b0/0x9a0 [ 303.062930][ T9292] do_syscall_64+0x3b/0xb0 [ 303.067178][ T9292] ? clear_bhb_loop+0x35/0x90 [ 303.071696][ T9292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.077424][ T9292] RIP: 0033:0x7eff7d85fef9 [ 303.081676][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.101114][ T9292] RSP: 002b:00007eff7c4d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 303.109363][ T9292] RAX: ffffffffffffffda RBX: 00007eff7da17f80 RCX: 00007eff7d85fef9 [ 303.117173][ T9292] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.124984][ T9292] RBP: 00007eff7c4d9090 R08: 0000000000000000 R09: 0000000000000000 [ 303.132797][ T9292] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 303.140606][ T9292] R13: 0000000000000000 R14: 00007eff7da17f80 R15: 00007fffbad88328 [ 303.148427][ T9292] [ 303.984681][ T9342] FAULT_INJECTION: forcing a failure. [ 303.984681][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 304.097089][ T9342] CPU: 0 PID: 9342 Comm: syz.1.2800 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 304.108212][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 304.118106][ T9342] Call Trace: [ 304.121230][ T9342] [ 304.124009][ T9342] dump_stack_lvl+0x151/0x1c0 [ 304.128520][ T9342] ? io_uring_drop_tctx_refs+0x190/0x190 [ 304.133993][ T9342] dump_stack+0x15/0x20 [ 304.137979][ T9342] should_fail+0x3c6/0x510 [ 304.142237][ T9342] __should_failslab+0xa4/0xe0 [ 304.146832][ T9342] ? vm_area_dup+0x26/0x230 [ 304.151176][ T9342] should_failslab+0x9/0x20 [ 304.155516][ T9342] slab_pre_alloc_hook+0x37/0xd0 [ 304.160284][ T9342] ? vm_area_dup+0x26/0x230 [ 304.164620][ T9342] kmem_cache_alloc+0x44/0x200 [ 304.169223][ T9342] vm_area_dup+0x26/0x230 [ 304.173388][ T9342] copy_mm+0x9a1/0x13e0 [ 304.177380][ T9342] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 304.183025][ T9342] ? copy_signal+0x610/0x610 [ 304.187450][ T9342] ? __init_rwsem+0xfe/0x1d0 [ 304.191875][ T9342] ? copy_signal+0x4e3/0x610 [ 304.196303][ T9342] copy_process+0x1149/0x3290 [ 304.200817][ T9342] ? __kasan_check_write+0x14/0x20 [ 304.205763][ T9342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 304.210705][ T9342] ? vfs_write+0x9ec/0x1110 [ 304.215051][ T9342] kernel_clone+0x21e/0x9e0 [ 304.219387][ T9342] ? __kasan_check_write+0x14/0x20 [ 304.224332][ T9342] ? create_io_thread+0x1e0/0x1e0 [ 304.229198][ T9342] __x64_sys_clone+0x23f/0x290 [ 304.233794][ T9342] ? __do_sys_vfork+0x130/0x130 [ 304.238481][ T9342] ? debug_smp_processor_id+0x17/0x20 [ 304.243686][ T9342] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 304.249590][ T9342] ? exit_to_user_mode_prepare+0x39/0xa0 [ 304.255060][ T9342] x64_sys_call+0x1b0/0x9a0 [ 304.259397][ T9342] do_syscall_64+0x3b/0xb0 [ 304.263647][ T9342] ? clear_bhb_loop+0x35/0x90 [ 304.268165][ T9342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.273892][ T9342] RIP: 0033:0x7ff843da6ef9 [ 304.278145][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.297584][ T9342] RSP: 002b:00007ff842a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 304.305834][ T9342] RAX: ffffffffffffffda RBX: 00007ff843f5ef80 RCX: 00007ff843da6ef9 [ 304.313647][ T9342] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.321453][ T9342] RBP: 00007ff842a20090 R08: 0000000000000000 R09: 0000000000000000 [ 304.329354][ T9342] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 304.337161][ T9342] R13: 0000000000000000 R14: 00007ff843f5ef80 R15: 00007fff62d0a598 [ 304.344978][ T9342] [ 304.782652][ T9368] syz.1.2808[9368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.782729][ T9368] syz.1.2808[9368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.882719][ T9368] syz.1.2808[9368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.973868][ T9368] syz.1.2808[9368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.103718][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.330600][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.338043][ T9363] device bridge_slave_0 entered promiscuous mode [ 305.425189][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.468006][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.475331][ T9363] device bridge_slave_1 entered promiscuous mode [ 305.729006][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.736378][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.820047][ T9390] FAULT_INJECTION: forcing a failure. [ 305.820047][ T9390] name failslab, interval 1, probability 0, space 0, times 0 [ 305.864324][ T10] device veth1_macvtap left promiscuous mode [ 305.870187][ T10] device veth0_vlan left promiscuous mode [ 305.907252][ T9390] CPU: 1 PID: 9390 Comm: syz.0.2814 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 305.918361][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.928252][ T9390] Call Trace: [ 305.931380][ T9390] [ 305.934155][ T9390] dump_stack_lvl+0x151/0x1c0 [ 305.938670][ T9390] ? io_uring_drop_tctx_refs+0x190/0x190 [ 305.944136][ T9390] dump_stack+0x15/0x20 [ 305.948127][ T9390] should_fail+0x3c6/0x510 [ 305.952385][ T9390] __should_failslab+0xa4/0xe0 [ 305.956978][ T9390] ? anon_vma_clone+0x9a/0x500 [ 305.961578][ T9390] should_failslab+0x9/0x20 [ 305.965918][ T9390] slab_pre_alloc_hook+0x37/0xd0 [ 305.970708][ T9390] ? anon_vma_clone+0x9a/0x500 [ 305.975293][ T9390] kmem_cache_alloc+0x44/0x200 [ 305.979915][ T9390] anon_vma_clone+0x9a/0x500 [ 305.984324][ T9390] anon_vma_fork+0x91/0x4e0 [ 305.988676][ T9390] ? anon_vma_name+0x4c/0x70 [ 305.993086][ T9390] ? vm_area_dup+0x17a/0x230 [ 305.997512][ T9390] copy_mm+0xa3a/0x13e0 [ 306.001508][ T9390] ? copy_signal+0x610/0x610 [ 306.005931][ T9390] ? __init_rwsem+0xfe/0x1d0 [ 306.010356][ T9390] ? copy_signal+0x4e3/0x610 [ 306.014786][ T9390] copy_process+0x1149/0x3290 [ 306.019317][ T9390] ? __kasan_check_write+0x14/0x20 [ 306.024246][ T9390] ? irqentry_exit+0x30/0x40 [ 306.028670][ T9390] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 306.033622][ T9390] ? kernel_clone+0x1fa/0x9e0 [ 306.038135][ T9390] kernel_clone+0x21e/0x9e0 [ 306.042473][ T9390] ? __kasan_check_write+0x14/0x20 [ 306.047417][ T9390] ? create_io_thread+0x1e0/0x1e0 [ 306.052280][ T9390] __x64_sys_clone+0x23f/0x290 [ 306.056892][ T9390] ? __do_sys_vfork+0x130/0x130 [ 306.061565][ T9390] ? debug_smp_processor_id+0x17/0x20 [ 306.066770][ T9390] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 306.072674][ T9390] ? exit_to_user_mode_prepare+0x39/0xa0 [ 306.078145][ T9390] x64_sys_call+0x1b0/0x9a0 [ 306.082481][ T9390] do_syscall_64+0x3b/0xb0 [ 306.086734][ T9390] ? clear_bhb_loop+0x35/0x90 [ 306.091247][ T9390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.096975][ T9390] RIP: 0033:0x7fcbdd415ef9 [ 306.101231][ T9390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.120669][ T9390] RSP: 002b:00007fcbdc08efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.128916][ T9390] RAX: ffffffffffffffda RBX: 00007fcbdd5cdf80 RCX: 00007fcbdd415ef9 [ 306.136728][ T9390] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.144538][ T9390] RBP: 00007fcbdc08f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.152350][ T9390] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 306.160274][ T9390] R13: 0000000000000000 R14: 00007fcbdd5cdf80 R15: 00007fff11df4418 [ 306.168088][ T9390] [ 306.530211][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.560846][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.630290][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.637183][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.705211][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.727094][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.735110][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.741982][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.785280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.807097][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.814954][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.839804][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.847913][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.933018][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.941607][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.956811][ T9363] device veth0_vlan entered promiscuous mode [ 307.020947][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.031706][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.049553][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.057812][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.084845][ T9419] FAULT_INJECTION: forcing a failure. [ 307.084845][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 307.098775][ T9419] CPU: 1 PID: 9419 Comm: syz.3.2824 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 307.109880][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 307.113338][ T9363] device veth1_macvtap entered promiscuous mode [ 307.119773][ T9419] Call Trace: [ 307.119782][ T9419] [ 307.119790][ T9419] dump_stack_lvl+0x151/0x1c0 [ 307.136266][ T9419] ? io_uring_drop_tctx_refs+0x190/0x190 [ 307.141736][ T9419] dump_stack+0x15/0x20 [ 307.145725][ T9419] should_fail+0x3c6/0x510 [ 307.150007][ T9419] __should_failslab+0xa4/0xe0 [ 307.154583][ T9419] ? anon_vma_fork+0xf7/0x4e0 [ 307.159090][ T9419] should_failslab+0x9/0x20 [ 307.163427][ T9419] slab_pre_alloc_hook+0x37/0xd0 [ 307.168202][ T9419] ? anon_vma_fork+0xf7/0x4e0 [ 307.172716][ T9419] kmem_cache_alloc+0x44/0x200 [ 307.177318][ T9419] anon_vma_fork+0xf7/0x4e0 [ 307.181656][ T9419] ? anon_vma_name+0x4c/0x70 [ 307.186087][ T9419] ? vm_area_dup+0x17a/0x230 [ 307.190518][ T9419] copy_mm+0xa3a/0x13e0 [ 307.194505][ T9419] ? copy_signal+0x610/0x610 [ 307.198929][ T9419] ? __init_rwsem+0xfe/0x1d0 [ 307.203357][ T9419] ? copy_signal+0x4e3/0x610 [ 307.207802][ T9419] copy_process+0x1149/0x3290 [ 307.212295][ T9419] ? __kasan_check_write+0x14/0x20 [ 307.217246][ T9419] ? irqentry_exit+0x30/0x40 [ 307.221668][ T9419] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 307.226615][ T9419] ? kernel_clone+0x1fa/0x9e0 [ 307.231130][ T9419] kernel_clone+0x21e/0x9e0 [ 307.235466][ T9419] ? __kasan_check_write+0x14/0x20 [ 307.240414][ T9419] ? create_io_thread+0x1e0/0x1e0 [ 307.245278][ T9419] __x64_sys_clone+0x23f/0x290 [ 307.249877][ T9419] ? __do_sys_vfork+0x130/0x130 [ 307.254565][ T9419] ? debug_smp_processor_id+0x17/0x20 [ 307.259784][ T9419] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 307.265679][ T9419] ? exit_to_user_mode_prepare+0x39/0xa0 [ 307.271137][ T9419] x64_sys_call+0x1b0/0x9a0 [ 307.275478][ T9419] do_syscall_64+0x3b/0xb0 [ 307.279731][ T9419] ? clear_bhb_loop+0x35/0x90 [ 307.284242][ T9419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.289970][ T9419] RIP: 0033:0x7f0217265ef9 [ 307.294222][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.313666][ T9419] RSP: 002b:00007f0215edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.321912][ T9419] RAX: ffffffffffffffda RBX: 00007f021741df80 RCX: 00007f0217265ef9 [ 307.329722][ T9419] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.337530][ T9419] RBP: 00007f0215edf090 R08: 0000000000000000 R09: 0000000000000000 [ 307.345349][ T9419] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 307.353157][ T9419] R13: 0000000000000000 R14: 00007f021741df80 R15: 00007ffecb928c18 [ 307.360974][ T9419] [ 307.373803][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.402336][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.451022][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.464359][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.478632][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.486857][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.496203][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.026983][ T9435] device syzkaller0 entered promiscuous mode [ 308.435671][ T9463] FAULT_INJECTION: forcing a failure. [ 308.435671][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 308.546034][ T9463] CPU: 0 PID: 9463 Comm: syz.0.2838 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 308.557150][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 308.567046][ T9463] Call Trace: [ 308.570164][ T9463] [ 308.572940][ T9463] dump_stack_lvl+0x151/0x1c0 [ 308.577456][ T9463] ? io_uring_drop_tctx_refs+0x190/0x190 [ 308.582930][ T9463] dump_stack+0x15/0x20 [ 308.586914][ T9463] should_fail+0x3c6/0x510 [ 308.591171][ T9463] __should_failslab+0xa4/0xe0 [ 308.595769][ T9463] ? vm_area_dup+0x26/0x230 [ 308.600109][ T9463] should_failslab+0x9/0x20 [ 308.604453][ T9463] slab_pre_alloc_hook+0x37/0xd0 [ 308.609311][ T9463] ? vm_area_dup+0x26/0x230 [ 308.613653][ T9463] kmem_cache_alloc+0x44/0x200 [ 308.618265][ T9463] vm_area_dup+0x26/0x230 [ 308.622419][ T9463] copy_mm+0x9a1/0x13e0 [ 308.626410][ T9463] ? copy_signal+0x610/0x610 [ 308.630835][ T9463] ? __init_rwsem+0xfe/0x1d0 [ 308.635262][ T9463] ? copy_signal+0x4e3/0x610 [ 308.639697][ T9463] copy_process+0x1149/0x3290 [ 308.644204][ T9463] ? timerqueue_add+0x250/0x270 [ 308.648888][ T9463] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 308.653836][ T9463] ? enqueue_hrtimer+0xca/0x240 [ 308.658619][ T9463] ? __hrtimer_run_queues+0x46b/0xad0 [ 308.663828][ T9463] kernel_clone+0x21e/0x9e0 [ 308.668172][ T9463] ? create_io_thread+0x1e0/0x1e0 [ 308.673026][ T9463] ? clockevents_program_event+0x22f/0x300 [ 308.678670][ T9463] __x64_sys_clone+0x23f/0x290 [ 308.683268][ T9463] ? __do_sys_vfork+0x130/0x130 [ 308.687962][ T9463] ? debug_smp_processor_id+0x17/0x20 [ 308.693163][ T9463] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 308.699070][ T9463] x64_sys_call+0x1b0/0x9a0 [ 308.703402][ T9463] do_syscall_64+0x3b/0xb0 [ 308.707655][ T9463] ? clear_bhb_loop+0x35/0x90 [ 308.712168][ T9463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.717899][ T9463] RIP: 0033:0x7fcbdd415ef9 [ 308.722154][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.741590][ T9463] RSP: 002b:00007fcbdc08efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.749973][ T9463] RAX: ffffffffffffffda RBX: 00007fcbdd5cdf80 RCX: 00007fcbdd415ef9 [ 308.757785][ T9463] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.765598][ T9463] RBP: 00007fcbdc08f090 R08: 0000000000000000 R09: 0000000000000000 [ 308.773412][ T9463] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 308.781218][ T9463] R13: 0000000000000000 R14: 00007fcbdd5cdf80 R15: 00007fff11df4418 [ 308.789038][ T9463] [ 308.850145][ T9459] device veth0_vlan left promiscuous mode [ 308.873536][ T9459] device veth0_vlan entered promiscuous mode [ 308.968820][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.993123][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.098370][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.190906][ T286] syz-executor (286) used greatest stack depth: 19712 bytes left [ 309.266205][ T9484] device syzkaller0 entered promiscuous mode [ 309.343862][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.351229][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.358639][ T9473] device bridge_slave_0 entered promiscuous mode [ 309.371162][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.378327][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.385883][ T9473] device bridge_slave_1 entered promiscuous mode [ 309.473019][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.479911][ T9473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.487018][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.493758][ T9473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.597748][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.609583][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.630838][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.680155][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.691622][ T9503] FAULT_INJECTION: forcing a failure. [ 309.691622][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 309.705479][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.712458][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.720152][ T9503] CPU: 0 PID: 9503 Comm: syz.2.2849 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 309.731252][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 309.741147][ T9503] Call Trace: [ 309.744268][ T9503] [ 309.747067][ T9503] dump_stack_lvl+0x151/0x1c0 [ 309.751562][ T9503] ? io_uring_drop_tctx_refs+0x190/0x190 [ 309.757029][ T9503] dump_stack+0x15/0x20 [ 309.761019][ T9503] should_fail+0x3c6/0x510 [ 309.765277][ T9503] __should_failslab+0xa4/0xe0 [ 309.769881][ T9503] ? vm_area_dup+0x26/0x230 [ 309.774215][ T9503] should_failslab+0x9/0x20 [ 309.778553][ T9503] slab_pre_alloc_hook+0x37/0xd0 [ 309.783327][ T9503] ? vm_area_dup+0x26/0x230 [ 309.787667][ T9503] kmem_cache_alloc+0x44/0x200 [ 309.792271][ T9503] vm_area_dup+0x26/0x230 [ 309.796432][ T9503] copy_mm+0x9a1/0x13e0 [ 309.800429][ T9503] ? copy_signal+0x610/0x610 [ 309.804853][ T9503] ? __init_rwsem+0xfe/0x1d0 [ 309.809275][ T9503] ? copy_signal+0x4e3/0x610 [ 309.813710][ T9503] copy_process+0x1149/0x3290 [ 309.818219][ T9503] ? timerqueue_add+0x250/0x270 [ 309.822901][ T9503] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 309.827848][ T9503] ? enqueue_hrtimer+0xca/0x240 [ 309.832534][ T9503] ? __hrtimer_run_queues+0x46b/0xad0 [ 309.837880][ T9503] kernel_clone+0x21e/0x9e0 [ 309.842220][ T9503] ? create_io_thread+0x1e0/0x1e0 [ 309.847076][ T9503] ? clockevents_program_event+0x22f/0x300 [ 309.852723][ T9503] __x64_sys_clone+0x23f/0x290 [ 309.857318][ T9503] ? __do_sys_vfork+0x130/0x130 [ 309.862012][ T9503] ? debug_smp_processor_id+0x17/0x20 [ 309.867212][ T9503] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 309.873114][ T9503] x64_sys_call+0x1b0/0x9a0 [ 309.877452][ T9503] do_syscall_64+0x3b/0xb0 [ 309.881707][ T9503] ? clear_bhb_loop+0x35/0x90 [ 309.886218][ T9503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.891946][ T9503] RIP: 0033:0x7fcb91f71ef9 [ 309.896197][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.915639][ T9503] RSP: 002b:00007fcb90beafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 309.923885][ T9503] RAX: ffffffffffffffda RBX: 00007fcb92129f80 RCX: 00007fcb91f71ef9 [ 309.931695][ T9503] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.939506][ T9503] RBP: 00007fcb90beb090 R08: 0000000000000000 R09: 0000000000000000 [ 309.947319][ T9503] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 309.955129][ T9503] R13: 0000000000000000 R14: 00007fcb92129f80 R15: 00007ffe13bc1488 [ 309.962945][ T9503] [ 309.967767][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.975779][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.982712][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.990000][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.015080][ T9473] device veth0_vlan entered promiscuous mode [ 310.024380][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.033229][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.042077][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.077279][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.084537][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.097197][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.105116][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.140780][ T9473] device veth1_macvtap entered promiscuous mode [ 310.154194][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.175746][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.184868][ T9523] syz.3.2855[9523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.184937][ T9523] syz.3.2855[9523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.197027][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.216781][ T9523] syz.3.2855[9523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.216846][ T9523] syz.3.2855[9523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.252996][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.367515][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.449926][ T9526] device syzkaller0 entered promiscuous mode [ 310.513892][ T10] device bridge_slave_1 left promiscuous mode [ 310.528546][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.546071][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.561937][ T10] device veth1_macvtap left promiscuous mode [ 310.719901][ T9540] FAULT_INJECTION: forcing a failure. [ 310.719901][ T9540] name failslab, interval 1, probability 0, space 0, times 0 [ 310.739857][ T9540] CPU: 1 PID: 9540 Comm: syz.0.2859 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 310.750966][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 310.760857][ T9540] Call Trace: [ 310.763981][ T9540] [ 310.766760][ T9540] dump_stack_lvl+0x151/0x1c0 [ 310.771273][ T9540] ? io_uring_drop_tctx_refs+0x190/0x190 [ 310.776744][ T9540] dump_stack+0x15/0x20 [ 310.780735][ T9540] should_fail+0x3c6/0x510 [ 310.784987][ T9540] __should_failslab+0xa4/0xe0 [ 310.789584][ T9540] ? vm_area_dup+0x26/0x230 [ 310.793926][ T9540] should_failslab+0x9/0x20 [ 310.798284][ T9540] slab_pre_alloc_hook+0x37/0xd0 [ 310.803039][ T9540] ? vm_area_dup+0x26/0x230 [ 310.807379][ T9540] kmem_cache_alloc+0x44/0x200 [ 310.811980][ T9540] vm_area_dup+0x26/0x230 [ 310.816145][ T9540] copy_mm+0x9a1/0x13e0 [ 310.820158][ T9540] ? copy_signal+0x610/0x610 [ 310.824561][ T9540] ? __init_rwsem+0xfe/0x1d0 [ 310.828992][ T9540] ? copy_signal+0x4e3/0x610 [ 310.833414][ T9540] copy_process+0x1149/0x3290 [ 310.837933][ T9540] ? __kasan_check_write+0x14/0x20 [ 310.842881][ T9540] ? irqentry_exit+0x30/0x40 [ 310.847301][ T9540] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 310.852252][ T9540] ? kernel_clone+0x1fa/0x9e0 [ 310.856767][ T9540] kernel_clone+0x21e/0x9e0 [ 310.861102][ T9540] ? __kasan_check_write+0x14/0x20 [ 310.866047][ T9540] ? create_io_thread+0x1e0/0x1e0 [ 310.870917][ T9540] __x64_sys_clone+0x23f/0x290 [ 310.875514][ T9540] ? __do_sys_vfork+0x130/0x130 [ 310.880206][ T9540] x64_sys_call+0x1b0/0x9a0 [ 310.884535][ T9540] do_syscall_64+0x3b/0xb0 [ 310.888789][ T9540] ? clear_bhb_loop+0x35/0x90 [ 310.893307][ T9540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.899030][ T9540] RIP: 0033:0x7f61fdf4fef9 [ 310.903281][ T9540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.922724][ T9540] RSP: 002b:00007f61fcbc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.930964][ T9540] RAX: ffffffffffffffda RBX: 00007f61fe107f80 RCX: 00007f61fdf4fef9 [ 310.938775][ T9540] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.946586][ T9540] RBP: 00007f61fcbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 310.954401][ T9540] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 310.962213][ T9540] R13: 0000000000000000 R14: 00007f61fe107f80 R15: 00007ffc4bd393c8 [ 310.970025][ T9540] [ 312.425942][ T9587] device syzkaller0 entered promiscuous mode [ 312.594485][ T9589] FAULT_INJECTION: forcing a failure. [ 312.594485][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 312.760501][ T9589] CPU: 1 PID: 9589 Comm: syz.2.2874 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 312.771623][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 312.781519][ T9589] Call Trace: [ 312.784644][ T9589] [ 312.787420][ T9589] dump_stack_lvl+0x151/0x1c0 [ 312.791934][ T9589] ? io_uring_drop_tctx_refs+0x190/0x190 [ 312.797405][ T9589] dump_stack+0x15/0x20 [ 312.801393][ T9589] should_fail+0x3c6/0x510 [ 312.805647][ T9589] __should_failslab+0xa4/0xe0 [ 312.810292][ T9589] ? vm_area_dup+0x26/0x230 [ 312.814739][ T9589] should_failslab+0x9/0x20 [ 312.819078][ T9589] slab_pre_alloc_hook+0x37/0xd0 [ 312.823847][ T9589] ? vm_area_dup+0x26/0x230 [ 312.828190][ T9589] kmem_cache_alloc+0x44/0x200 [ 312.832788][ T9589] vm_area_dup+0x26/0x230 [ 312.836952][ T9589] copy_mm+0x9a1/0x13e0 [ 312.840949][ T9589] ? copy_signal+0x610/0x610 [ 312.845373][ T9589] ? __init_rwsem+0xfe/0x1d0 [ 312.849800][ T9589] ? copy_signal+0x4e3/0x610 [ 312.854227][ T9589] copy_process+0x1149/0x3290 [ 312.858740][ T9589] ? __kasan_check_write+0x14/0x20 [ 312.863689][ T9589] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 312.868631][ T9589] ? vfs_write+0x9ec/0x1110 [ 312.872975][ T9589] kernel_clone+0x21e/0x9e0 [ 312.877317][ T9589] ? irqentry_exit+0x30/0x40 [ 312.881739][ T9589] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 312.887376][ T9589] ? create_io_thread+0x1e0/0x1e0 [ 312.892243][ T9589] __x64_sys_clone+0x23f/0x290 [ 312.896838][ T9589] ? __do_sys_vfork+0x130/0x130 [ 312.901530][ T9589] ? debug_smp_processor_id+0x17/0x20 [ 312.906731][ T9589] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 312.912635][ T9589] ? exit_to_user_mode_prepare+0x39/0xa0 [ 312.918119][ T9589] x64_sys_call+0x1b0/0x9a0 [ 312.922443][ T9589] do_syscall_64+0x3b/0xb0 [ 312.926694][ T9589] ? clear_bhb_loop+0x35/0x90 [ 312.931297][ T9589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.937022][ T9589] RIP: 0033:0x7fcb91f71ef9 [ 312.941277][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.960723][ T9589] RSP: 002b:00007fcb90beafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.968968][ T9589] RAX: ffffffffffffffda RBX: 00007fcb92129f80 RCX: 00007fcb91f71ef9 [ 312.976771][ T9589] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.984670][ T9589] RBP: 00007fcb90beb090 R08: 0000000000000000 R09: 0000000000000000 [ 312.992480][ T9589] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 313.000294][ T9589] R13: 0000000000000000 R14: 00007fcb92129f80 R15: 00007ffe13bc1488 [ 313.008110][ T9589] [ 313.682443][ T9625] syz.2.2885[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.682519][ T9625] syz.2.2885[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.694272][ T9625] syz.2.2885[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.705485][ T9625] syz.2.2885[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.079338][ T9634] device syzkaller0 entered promiscuous mode [ 316.997239][ T9661] Q±6ã×\b‹¡Y­4: renamed from lo [ 317.982826][ T9677] device veth0_vlan left promiscuous mode [ 318.124846][ T9677] device veth0_vlan entered promiscuous mode [ 318.176918][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.187354][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.203524][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.567852][ T9693] bridge0: port 3(veth0_to_batadv) entered blocking state [ 318.649141][ T9693] bridge0: port 3(veth0_to_batadv) entered disabled state [ 318.737359][ T9693] device veth0_to_batadv entered promiscuous mode [ 318.756389][ T9693] bridge0: port 3(veth0_to_batadv) entered blocking state [ 318.764164][ T9693] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 318.805253][ T9696] device veth0_to_batadv left promiscuous mode [ 318.817761][ T9696] bridge0: port 3(veth0_to_batadv) entered disabled state [ 318.826332][ T9708] syz.3.2907[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.826396][ T9708] syz.3.2907[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.838714][ T9708] syz.3.2907[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.850376][ T9708] syz.3.2907[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.363857][ T9719] device syzkaller0 entered promiscuous mode [ 319.578823][ T9730] device veth0_vlan left promiscuous mode [ 319.598614][ T9734] FAULT_INJECTION: forcing a failure. [ 319.598614][ T9734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.625038][ T9730] device veth0_vlan entered promiscuous mode [ 319.630967][ T9734] CPU: 1 PID: 9734 Comm: syz.4.2914 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 319.642063][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 319.652043][ T9734] Call Trace: [ 319.655169][ T9734] [ 319.657948][ T9734] dump_stack_lvl+0x151/0x1c0 [ 319.662460][ T9734] ? io_uring_drop_tctx_refs+0x190/0x190 [ 319.667925][ T9734] ? kvm_sched_clock_read+0x18/0x40 [ 319.672958][ T9734] ? sched_clock+0x9/0x10 [ 319.677213][ T9734] ? sched_clock_cpu+0x18/0x3b0 [ 319.681897][ T9734] ? _raw_spin_lock+0xa4/0x1b0 [ 319.686503][ T9734] dump_stack+0x15/0x20 [ 319.690494][ T9734] should_fail+0x3c6/0x510 [ 319.694745][ T9734] should_fail_alloc_page+0x5a/0x80 [ 319.699783][ T9734] prepare_alloc_pages+0x15c/0x700 [ 319.704740][ T9734] ? __alloc_pages_bulk+0xe40/0xe40 [ 319.709763][ T9734] __alloc_pages+0x18c/0x8f0 [ 319.714189][ T9734] ? prep_new_page+0x110/0x110 [ 319.718788][ T9734] ? 0xffffffffa0028000 [ 319.722867][ T9734] ? is_bpf_text_address+0x172/0x190 [ 319.727987][ T9734] pte_alloc_one+0x73/0x1b0 [ 319.732326][ T9734] ? pfn_modify_allowed+0x2f0/0x2f0 [ 319.737360][ T9734] __pte_alloc+0x86/0x350 [ 319.741525][ T9734] ? irqentry_exit+0x30/0x40 [ 319.745952][ T9734] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 319.751593][ T9734] ? free_pgtables+0x280/0x280 [ 319.756194][ T9734] ? __kasan_check_write+0x14/0x20 [ 319.761142][ T9734] copy_page_range+0x28a8/0x2f90 [ 319.765912][ T9734] ? __kasan_slab_alloc+0xb1/0xe0 [ 319.770783][ T9734] ? pfn_valid+0x1e0/0x1e0 [ 319.775028][ T9734] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 319.781287][ T9734] copy_mm+0xc7e/0x13e0 [ 319.785279][ T9734] ? copy_signal+0x610/0x610 [ 319.789701][ T9734] ? __init_rwsem+0xfe/0x1d0 [ 319.794118][ T9734] ? copy_signal+0x4e3/0x610 [ 319.798545][ T9734] copy_process+0x1149/0x3290 [ 319.803069][ T9734] ? timerqueue_add+0x250/0x270 [ 319.807747][ T9734] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 319.812690][ T9734] ? enqueue_hrtimer+0xca/0x240 [ 319.817380][ T9734] ? __hrtimer_run_queues+0x46b/0xad0 [ 319.822587][ T9734] kernel_clone+0x21e/0x9e0 [ 319.826926][ T9734] ? create_io_thread+0x1e0/0x1e0 [ 319.831785][ T9734] ? clockevents_program_event+0x22f/0x300 [ 319.837429][ T9734] __x64_sys_clone+0x23f/0x290 [ 319.842026][ T9734] ? __do_sys_vfork+0x130/0x130 [ 319.846717][ T9734] ? debug_smp_processor_id+0x17/0x20 [ 319.851922][ T9734] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 319.857825][ T9734] x64_sys_call+0x1b0/0x9a0 [ 319.862165][ T9734] do_syscall_64+0x3b/0xb0 [ 319.866420][ T9734] ? clear_bhb_loop+0x35/0x90 [ 319.870929][ T9734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.876662][ T9734] RIP: 0033:0x7fb89d0f5ef9 [ 319.880911][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.900353][ T9734] RSP: 002b:00007fb89bd6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.908597][ T9734] RAX: ffffffffffffffda RBX: 00007fb89d2adf80 RCX: 00007fb89d0f5ef9 [ 319.916406][ T9734] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.924218][ T9734] RBP: 00007fb89bd6f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.932031][ T9734] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 319.939839][ T9734] R13: 0000000000000000 R14: 00007fb89d2adf80 R15: 00007ffecaad92a8 [ 319.947662][ T9734] [ 319.951104][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.966735][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.986548][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.028575][ T9744] syz.0.2917[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.028643][ T9744] syz.0.2917[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.049512][ T9744] syz.0.2917[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.077235][ T9744] syz.0.2917[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.590813][ T9755] syz.4.2922[9755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.660645][ T9753] device syzkaller0 entered promiscuous mode [ 320.702337][ T9758] syz.4.2922[9758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.979378][ T9761] device pim6reg1 entered promiscuous mode [ 321.206243][ T9780] device veth0_vlan left promiscuous mode [ 321.268277][ T9780] device veth0_vlan entered promiscuous mode [ 321.598100][ T9787] FAULT_INJECTION: forcing a failure. [ 321.598100][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 321.635072][ T9787] CPU: 1 PID: 9787 Comm: syz.2.2932 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 321.646190][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.656081][ T9787] Call Trace: [ 321.659210][ T9787] [ 321.661986][ T9787] dump_stack_lvl+0x151/0x1c0 [ 321.666499][ T9787] ? io_uring_drop_tctx_refs+0x190/0x190 [ 321.671975][ T9787] dump_stack+0x15/0x20 [ 321.675956][ T9787] should_fail+0x3c6/0x510 [ 321.680223][ T9787] __should_failslab+0xa4/0xe0 [ 321.684811][ T9787] ? vm_area_dup+0x26/0x230 [ 321.689147][ T9787] should_failslab+0x9/0x20 [ 321.693489][ T9787] slab_pre_alloc_hook+0x37/0xd0 [ 321.698262][ T9787] ? vm_area_dup+0x26/0x230 [ 321.702602][ T9787] kmem_cache_alloc+0x44/0x200 [ 321.707203][ T9787] vm_area_dup+0x26/0x230 [ 321.711368][ T9787] copy_mm+0x9a1/0x13e0 [ 321.715373][ T9787] ? copy_signal+0x610/0x610 [ 321.719791][ T9787] ? copy_signal+0x508/0x610 [ 321.724214][ T9787] copy_process+0x1149/0x3290 [ 321.728730][ T9787] ? timerqueue_add+0x250/0x270 [ 321.733416][ T9787] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 321.738363][ T9787] ? enqueue_hrtimer+0xca/0x240 [ 321.743047][ T9787] ? __hrtimer_run_queues+0x46b/0xad0 [ 321.748262][ T9787] kernel_clone+0x21e/0x9e0 [ 321.752593][ T9787] ? irqentry_exit+0x30/0x40 [ 321.757021][ T9787] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 321.762661][ T9787] ? create_io_thread+0x1e0/0x1e0 [ 321.767613][ T9787] __x64_sys_clone+0x23f/0x290 [ 321.772213][ T9787] ? __do_sys_vfork+0x130/0x130 [ 321.776899][ T9787] ? debug_smp_processor_id+0x17/0x20 [ 321.782113][ T9787] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 321.788007][ T9787] x64_sys_call+0x1b0/0x9a0 [ 321.792343][ T9787] do_syscall_64+0x3b/0xb0 [ 321.796595][ T9787] ? clear_bhb_loop+0x35/0x90 [ 321.801106][ T9787] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.806834][ T9787] RIP: 0033:0x7fcb91f71ef9 [ 321.811089][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.830527][ T9787] RSP: 002b:00007fcb90beafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 321.838777][ T9787] RAX: ffffffffffffffda RBX: 00007fcb92129f80 RCX: 00007fcb91f71ef9 [ 321.846583][ T9787] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.854394][ T9787] RBP: 00007fcb90beb090 R08: 0000000000000000 R09: 0000000000000000 [ 321.862207][ T9787] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 321.870020][ T9787] R13: 0000000000000000 R14: 00007fcb92129f80 R15: 00007ffe13bc1488 [ 321.877839][ T9787] [ 321.968160][ T9807] device syzkaller0 entered promiscuous mode [ 323.103922][ T9833] device syzkaller0 entered promiscuous mode [ 323.398008][ T9840] FAULT_INJECTION: forcing a failure. [ 323.398008][ T9840] name failslab, interval 1, probability 0, space 0, times 0 [ 323.567407][ T9840] CPU: 1 PID: 9840 Comm: syz.1.2948 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 323.578520][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 323.588415][ T9840] Call Trace: [ 323.591538][ T9840] [ 323.594313][ T9840] dump_stack_lvl+0x151/0x1c0 [ 323.598827][ T9840] ? io_uring_drop_tctx_refs+0x190/0x190 [ 323.604296][ T9840] dump_stack+0x15/0x20 [ 323.608289][ T9840] should_fail+0x3c6/0x510 [ 323.612541][ T9840] __should_failslab+0xa4/0xe0 [ 323.617142][ T9840] ? anon_vma_clone+0x9a/0x500 [ 323.621741][ T9840] should_failslab+0x9/0x20 [ 323.626097][ T9840] slab_pre_alloc_hook+0x37/0xd0 [ 323.630860][ T9840] ? anon_vma_clone+0x9a/0x500 [ 323.635459][ T9840] kmem_cache_alloc+0x44/0x200 [ 323.640062][ T9840] anon_vma_clone+0x9a/0x500 [ 323.644495][ T9840] anon_vma_fork+0x91/0x4e0 [ 323.648819][ T9840] ? anon_vma_name+0x43/0x70 [ 323.653246][ T9840] ? vm_area_dup+0x17a/0x230 [ 323.657675][ T9840] copy_mm+0xa3a/0x13e0 [ 323.661677][ T9840] ? copy_signal+0x610/0x610 [ 323.666092][ T9840] ? __init_rwsem+0xfe/0x1d0 [ 323.670520][ T9840] ? copy_signal+0x4e3/0x610 [ 323.674949][ T9840] copy_process+0x1149/0x3290 [ 323.679460][ T9840] ? __kasan_check_write+0x14/0x20 [ 323.684405][ T9840] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 323.690397][ T9840] ? vfs_write+0x3f4/0x1110 [ 323.694742][ T9840] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 323.699684][ T9840] ? vfs_write+0x9ec/0x1110 [ 323.704025][ T9840] kernel_clone+0x21e/0x9e0 [ 323.708361][ T9840] ? irqentry_exit+0x30/0x40 [ 323.712783][ T9840] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 323.718436][ T9840] ? create_io_thread+0x1e0/0x1e0 [ 323.723294][ T9840] __x64_sys_clone+0x23f/0x290 [ 323.727886][ T9840] ? __do_sys_vfork+0x130/0x130 [ 323.732577][ T9840] ? debug_smp_processor_id+0x17/0x20 [ 323.737783][ T9840] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 323.743687][ T9840] ? exit_to_user_mode_prepare+0x39/0xa0 [ 323.749151][ T9840] x64_sys_call+0x1b0/0x9a0 [ 323.753504][ T9840] do_syscall_64+0x3b/0xb0 [ 323.757746][ T9840] ? clear_bhb_loop+0x35/0x90 [ 323.762262][ T9840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.767985][ T9840] RIP: 0033:0x7ff843da6ef9 [ 323.772327][ T9840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.791769][ T9840] RSP: 002b:00007ff842a1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 323.800009][ T9840] RAX: ffffffffffffffda RBX: 00007ff843f5ef80 RCX: 00007ff843da6ef9 [ 323.807820][ T9840] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.815634][ T9840] RBP: 00007ff842a20090 R08: 0000000000000000 R09: 0000000000000000 [ 323.823446][ T9840] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 323.831257][ T9840] R13: 0000000000000000 R14: 00007ff843f5ef80 R15: 00007fff62d0a598 [ 323.839176][ T9840] [ 324.035094][ T9858] bpf_get_probe_write_proto: 6 callbacks suppressed [ 324.035113][ T9858] syz.2.2953[9858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.051615][ T9858] syz.2.2953[9858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.079387][ T9858] syz.2.2953[9858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.090745][ T9858] syz.2.2953[9858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.877448][ T9880] device syzkaller0 entered promiscuous mode [ 325.108370][ T9889] syz.1.2961[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.108444][ T9889] syz.1.2961[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.120762][ T9889] syz.1.2961[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.132037][ T9889] syz.1.2961[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.158814][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.178794][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.494619][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.501513][ T9890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.508741][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.515581][ T9890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.522820][ T9890] device bridge0 entered promiscuous mode [ 325.909712][ T9904] FAULT_INJECTION: forcing a failure. [ 325.909712][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 325.923855][ T9904] CPU: 1 PID: 9904 Comm: syz.4.2966 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 325.934976][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.944873][ T9904] Call Trace: [ 325.947993][ T9904] [ 325.950790][ T9904] dump_stack_lvl+0x151/0x1c0 [ 325.955287][ T9904] ? io_uring_drop_tctx_refs+0x190/0x190 [ 325.960752][ T9904] dump_stack+0x15/0x20 [ 325.964744][ T9904] should_fail+0x3c6/0x510 [ 325.968998][ T9904] __should_failslab+0xa4/0xe0 [ 325.973596][ T9904] ? vm_area_dup+0x26/0x230 [ 325.977938][ T9904] should_failslab+0x9/0x20 [ 325.982276][ T9904] slab_pre_alloc_hook+0x37/0xd0 [ 325.987050][ T9904] ? vm_area_dup+0x26/0x230 [ 325.991384][ T9904] kmem_cache_alloc+0x44/0x200 [ 325.995987][ T9904] vm_area_dup+0x26/0x230 [ 326.000155][ T9904] copy_mm+0x9a1/0x13e0 [ 326.004145][ T9904] ? irqentry_exit+0x30/0x40 [ 326.008580][ T9904] ? copy_signal+0x610/0x610 [ 326.012997][ T9904] ? __init_rwsem+0xfe/0x1d0 [ 326.017424][ T9904] ? copy_signal+0x4e3/0x610 [ 326.021851][ T9904] copy_process+0x1149/0x3290 [ 326.026372][ T9904] ? irqentry_exit+0x30/0x40 [ 326.030792][ T9904] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 326.035740][ T9904] ? kernel_clone+0x1fa/0x9e0 [ 326.040382][ T9904] kernel_clone+0x21e/0x9e0 [ 326.044677][ T9904] ? create_io_thread+0x1e0/0x1e0 [ 326.049537][ T9904] ? clockevents_program_event+0x22f/0x300 [ 326.055179][ T9904] __x64_sys_clone+0x23f/0x290 [ 326.059780][ T9904] ? __do_sys_vfork+0x130/0x130 [ 326.064470][ T9904] ? debug_smp_processor_id+0x17/0x20 [ 326.069677][ T9904] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 326.075583][ T9904] x64_sys_call+0x1b0/0x9a0 [ 326.079920][ T9904] do_syscall_64+0x3b/0xb0 [ 326.084169][ T9904] ? clear_bhb_loop+0x35/0x90 [ 326.088686][ T9904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.094411][ T9904] RIP: 0033:0x7fb89d0f5ef9 [ 326.098665][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.118107][ T9904] RSP: 002b:00007fb89bd6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 326.126367][ T9904] RAX: ffffffffffffffda RBX: 00007fb89d2adf80 RCX: 00007fb89d0f5ef9 [ 326.134162][ T9904] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.141970][ T9904] RBP: 00007fb89bd6f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.149783][ T9904] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 326.157593][ T9904] R13: 0000000000000000 R14: 00007fb89d2adf80 R15: 00007ffecaad92a8 [ 326.165414][ T9904] [ 328.803019][ T9930] device syzkaller0 entered promiscuous mode [ 329.433754][ T9948] syz.3.2976[9948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.433823][ T9948] syz.3.2976[9948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.559212][ T9947] FAULT_INJECTION: forcing a failure. [ 329.559212][ T9947] name failslab, interval 1, probability 0, space 0, times 0 [ 329.616806][ T9952] device sit0 entered promiscuous mode [ 329.747655][ T9947] CPU: 1 PID: 9947 Comm: syz.0.2978 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 329.758798][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.768683][ T9947] Call Trace: [ 329.771805][ T9947] [ 329.774580][ T9947] dump_stack_lvl+0x151/0x1c0 [ 329.779094][ T9947] ? io_uring_drop_tctx_refs+0x190/0x190 [ 329.784563][ T9947] ? avc_denied+0x1b0/0x1b0 [ 329.788902][ T9947] dump_stack+0x15/0x20 [ 329.792899][ T9947] should_fail+0x3c6/0x510 [ 329.797148][ T9947] __should_failslab+0xa4/0xe0 [ 329.801745][ T9947] ? vm_area_dup+0x26/0x230 [ 329.806083][ T9947] should_failslab+0x9/0x20 [ 329.810427][ T9947] slab_pre_alloc_hook+0x37/0xd0 [ 329.815195][ T9947] ? vm_area_dup+0x26/0x230 [ 329.819534][ T9947] kmem_cache_alloc+0x44/0x200 [ 329.824139][ T9947] vm_area_dup+0x26/0x230 [ 329.828304][ T9947] copy_mm+0x9a1/0x13e0 [ 329.832317][ T9947] ? copy_signal+0x610/0x610 [ 329.836937][ T9947] ? __init_rwsem+0xfe/0x1d0 [ 329.841365][ T9947] ? copy_signal+0x4e3/0x610 [ 329.845783][ T9947] copy_process+0x1149/0x3290 [ 329.850299][ T9947] ? timerqueue_add+0x250/0x270 [ 329.854978][ T9947] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 329.859926][ T9947] ? enqueue_hrtimer+0xca/0x240 [ 329.864786][ T9947] ? __hrtimer_run_queues+0x46b/0xad0 [ 329.869997][ T9947] kernel_clone+0x21e/0x9e0 [ 329.874343][ T9947] ? create_io_thread+0x1e0/0x1e0 [ 329.879199][ T9947] ? clockevents_program_event+0x22f/0x300 [ 329.884845][ T9947] __x64_sys_clone+0x23f/0x290 [ 329.889437][ T9947] ? __do_sys_vfork+0x130/0x130 [ 329.894125][ T9947] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 329.899941][ T9947] x64_sys_call+0x1b0/0x9a0 [ 329.904277][ T9947] do_syscall_64+0x3b/0xb0 [ 329.908530][ T9947] ? clear_bhb_loop+0x35/0x90 [ 329.913130][ T9947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.918858][ T9947] RIP: 0033:0x7f61fdf4fef9 [ 329.923111][ T9947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.942551][ T9947] RSP: 002b:00007f61fcbc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 329.950800][ T9947] RAX: ffffffffffffffda RBX: 00007f61fe107f80 RCX: 00007f61fdf4fef9 [ 329.958608][ T9947] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.966424][ T9947] RBP: 00007f61fcbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 329.974231][ T9947] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 329.982042][ T9947] R13: 0000000000000000 R14: 00007f61fe107f80 R15: 00007ffc4bd393c8 [ 329.989863][ T9947] [ 330.072500][ T9962] syz.1.2982[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.072579][ T9962] syz.1.2982[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.085204][ T9962] syz.1.2982[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.104639][ T9962] syz.1.2982[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.516868][ T9978] syz.1.2985[9978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.627786][ T9980] syz.1.2985[9980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.707186][ T9980] syz.1.2985[9980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.763390][ T9978] syz.1.2985[9978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.206178][T10002] FAULT_INJECTION: forcing a failure. [ 331.206178][T10002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.230922][T10002] CPU: 1 PID: 10002 Comm: syz.3.2993 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 331.242113][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.252009][T10002] Call Trace: [ 331.255130][T10002] [ 331.257909][T10002] dump_stack_lvl+0x151/0x1c0 [ 331.262421][T10002] ? io_uring_drop_tctx_refs+0x190/0x190 [ 331.267889][T10002] ? ___ratelimit+0xb2/0x5a0 [ 331.272315][T10002] dump_stack+0x15/0x20 [ 331.276314][T10002] should_fail+0x3c6/0x510 [ 331.280565][T10002] should_fail_alloc_page+0x5a/0x80 [ 331.285594][T10002] prepare_alloc_pages+0x15c/0x700 [ 331.290543][T10002] ? __alloc_pages_bulk+0xe40/0xe40 [ 331.295582][T10002] ? native_set_ldt+0x360/0x360 [ 331.300295][T10002] __alloc_pages+0x18c/0x8f0 [ 331.304687][T10002] ? _raw_spin_unlock+0x4d/0x70 [ 331.309374][T10002] ? prep_new_page+0x110/0x110 [ 331.313977][T10002] pte_alloc_one+0x73/0x1b0 [ 331.318313][T10002] ? pfn_modify_allowed+0x2f0/0x2f0 [ 331.323348][T10002] ? irqentry_exit+0x30/0x40 [ 331.327775][T10002] __pte_alloc+0x86/0x350 [ 331.331940][T10002] ? irqentry_exit+0x30/0x40 [ 331.336365][T10002] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 331.342009][T10002] ? free_pgtables+0x280/0x280 [ 331.346607][T10002] ? __kasan_check_write+0x14/0x20 [ 331.351559][T10002] copy_page_range+0x28a8/0x2f90 [ 331.356332][T10002] ? __kasan_slab_alloc+0xb1/0xe0 [ 331.361199][T10002] ? pfn_valid+0x1e0/0x1e0 [ 331.365443][T10002] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 331.370997][T10002] ? __rb_insert_augmented+0x5de/0x610 [ 331.376294][T10002] copy_mm+0xc7e/0x13e0 [ 331.380289][T10002] ? copy_signal+0x610/0x610 [ 331.384710][T10002] ? __init_rwsem+0xfe/0x1d0 [ 331.389138][T10002] ? copy_signal+0x4e3/0x610 [ 331.393564][T10002] copy_process+0x1149/0x3290 [ 331.398076][T10002] ? __kasan_check_write+0x14/0x20 [ 331.403026][T10002] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 331.407969][T10002] ? vfs_write+0x9ec/0x1110 [ 331.412312][T10002] kernel_clone+0x21e/0x9e0 [ 331.416648][T10002] ? __kasan_check_write+0x14/0x20 [ 331.421595][T10002] ? create_io_thread+0x1e0/0x1e0 [ 331.426458][T10002] __x64_sys_clone+0x23f/0x290 [ 331.431056][T10002] ? __do_sys_vfork+0x130/0x130 [ 331.435752][T10002] ? debug_smp_processor_id+0x17/0x20 [ 331.440950][T10002] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 331.446852][T10002] ? exit_to_user_mode_prepare+0x39/0xa0 [ 331.452321][T10002] x64_sys_call+0x1b0/0x9a0 [ 331.456662][T10002] do_syscall_64+0x3b/0xb0 [ 331.460914][T10002] ? clear_bhb_loop+0x35/0x90 [ 331.465425][T10002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.471153][T10002] RIP: 0033:0x7f0217265ef9 [ 331.475408][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.494973][T10002] RSP: 002b:00007f0215edefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 331.503219][T10002] RAX: ffffffffffffffda RBX: 00007f021741df80 RCX: 00007f0217265ef9 [ 331.511023][T10002] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.518839][T10002] RBP: 00007f0215edf090 R08: 0000000000000000 R09: 0000000000000000 [ 331.526646][T10002] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 331.534454][T10002] R13: 0000000000000000 R14: 00007f021741df80 R15: 00007ffecb928c18 [ 331.542278][T10002] [ 331.888437][T10009] device syzkaller0 entered promiscuous mode [ 332.006657][T10024] bridge0: port 3(veth0_to_batadv) entered blocking state [ 332.014949][T10024] bridge0: port 3(veth0_to_batadv) entered disabled state [ 332.038861][T10024] device veth0_to_batadv entered promiscuous mode [ 332.067543][T10024] bridge0: port 3(veth0_to_batadv) entered blocking state [ 332.076108][T10024] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 332.355363][T10042] FAULT_INJECTION: forcing a failure. [ 332.355363][T10042] name failslab, interval 1, probability 0, space 0, times 0 [ 332.400003][T10042] CPU: 1 PID: 10042 Comm: syz.2.3004 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 332.411225][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.421118][T10042] Call Trace: [ 332.424238][T10042] [ 332.427019][T10042] dump_stack_lvl+0x151/0x1c0 [ 332.431533][T10042] ? io_uring_drop_tctx_refs+0x190/0x190 [ 332.436999][T10042] dump_stack+0x15/0x20 [ 332.440989][T10042] should_fail+0x3c6/0x510 [ 332.445246][T10042] __should_failslab+0xa4/0xe0 [ 332.449842][T10042] ? vm_area_dup+0x26/0x230 [ 332.454181][T10042] should_failslab+0x9/0x20 [ 332.458523][T10042] slab_pre_alloc_hook+0x37/0xd0 [ 332.463301][T10042] ? vm_area_dup+0x26/0x230 [ 332.467633][T10042] kmem_cache_alloc+0x44/0x200 [ 332.472238][T10042] vm_area_dup+0x26/0x230 [ 332.476404][T10042] copy_mm+0x9a1/0x13e0 [ 332.480399][T10042] ? copy_signal+0x610/0x610 [ 332.484821][T10042] ? __init_rwsem+0xfe/0x1d0 [ 332.489246][T10042] ? copy_signal+0x4e3/0x610 [ 332.493672][T10042] copy_process+0x1149/0x3290 [ 332.498189][T10042] ? __kasan_check_write+0x14/0x20 [ 332.503135][T10042] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 332.508079][T10042] ? vfs_write+0x9ec/0x1110 [ 332.512422][T10042] kernel_clone+0x21e/0x9e0 [ 332.516761][T10042] ? __kasan_check_write+0x14/0x20 [ 332.521705][T10042] ? create_io_thread+0x1e0/0x1e0 [ 332.526572][T10042] __x64_sys_clone+0x23f/0x290 [ 332.531168][T10042] ? __do_sys_vfork+0x130/0x130 [ 332.535856][T10042] ? debug_smp_processor_id+0x17/0x20 [ 332.541065][T10042] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 332.546962][T10042] ? exit_to_user_mode_prepare+0x39/0xa0 [ 332.552435][T10042] x64_sys_call+0x1b0/0x9a0 [ 332.556775][T10042] do_syscall_64+0x3b/0xb0 [ 332.561030][T10042] ? clear_bhb_loop+0x35/0x90 [ 332.565539][T10042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.571266][T10042] RIP: 0033:0x7fcb91f71ef9 [ 332.575517][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.594958][T10042] RSP: 002b:00007fcb90bc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 332.603206][T10042] RAX: ffffffffffffffda RBX: 00007fcb9212a058 RCX: 00007fcb91f71ef9 [ 332.611018][T10042] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.618840][T10042] RBP: 00007fcb90bca090 R08: 0000000000000000 R09: 0000000000000000 [ 332.626639][T10042] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 332.634452][T10042] R13: 0000000000000000 R14: 00007fcb9212a058 R15: 00007ffe13bc1488 [ 332.642266][T10042] [ 333.723371][T10083] device syzkaller0 entered promiscuous mode [ 334.150376][T10103] FAULT_INJECTION: forcing a failure. [ 334.150376][T10103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.237204][T10103] CPU: 0 PID: 10103 Comm: syz.2.3020 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 334.248419][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.258315][T10103] Call Trace: [ 334.261436][T10103] [ 334.264217][T10103] dump_stack_lvl+0x151/0x1c0 [ 334.268726][T10103] ? io_uring_drop_tctx_refs+0x190/0x190 [ 334.274194][T10103] ? kvm_sched_clock_read+0x18/0x40 [ 334.279228][T10103] ? sched_clock+0x9/0x10 [ 334.283390][T10103] ? sched_clock_cpu+0x18/0x3b0 [ 334.288080][T10103] ? _raw_spin_lock+0xa4/0x1b0 [ 334.292683][T10103] dump_stack+0x15/0x20 [ 334.296671][T10103] should_fail+0x3c6/0x510 [ 334.300930][T10103] should_fail_alloc_page+0x5a/0x80 [ 334.305959][T10103] prepare_alloc_pages+0x15c/0x700 [ 334.310907][T10103] ? __alloc_pages_bulk+0xe40/0xe40 [ 334.315944][T10103] __alloc_pages+0x18c/0x8f0 [ 334.320367][T10103] ? prep_new_page+0x110/0x110 [ 334.324965][T10103] ? 0xffffffffa0028000 [ 334.328958][T10103] ? is_bpf_text_address+0x172/0x190 [ 334.334080][T10103] pte_alloc_one+0x73/0x1b0 [ 334.338417][T10103] ? pfn_modify_allowed+0x2f0/0x2f0 [ 334.343450][T10103] ? arch_stack_walk+0xf3/0x140 [ 334.348138][T10103] __pte_alloc+0x86/0x350 [ 334.352303][T10103] ? irqentry_exit+0x30/0x40 [ 334.356815][T10103] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 334.362459][T10103] ? free_pgtables+0x280/0x280 [ 334.367059][T10103] ? __kasan_check_write+0x14/0x20 [ 334.372008][T10103] copy_page_range+0x28a8/0x2f90 [ 334.376780][T10103] ? __kasan_slab_alloc+0xb1/0xe0 [ 334.381650][T10103] ? pfn_valid+0x1e0/0x1e0 [ 334.385891][T10103] ? irqentry_exit+0x30/0x40 [ 334.390321][T10103] ? sysvec_call_function_single+0x90/0xb0 [ 334.395959][T10103] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 334.401520][T10103] ? __rb_insert_augmented+0x5de/0x610 [ 334.406816][T10103] copy_mm+0xc7e/0x13e0 [ 334.410810][T10103] ? copy_signal+0x610/0x610 [ 334.415228][T10103] ? __init_rwsem+0xfe/0x1d0 [ 334.419655][T10103] ? copy_signal+0x4e3/0x610 [ 334.424085][T10103] copy_process+0x1149/0x3290 [ 334.428597][T10103] ? timerqueue_add+0x250/0x270 [ 334.433284][T10103] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 334.438229][T10103] ? enqueue_hrtimer+0xca/0x240 [ 334.442918][T10103] ? __hrtimer_run_queues+0x46b/0xad0 [ 334.448124][T10103] kernel_clone+0x21e/0x9e0 [ 334.452465][T10103] ? create_io_thread+0x1e0/0x1e0 [ 334.457327][T10103] ? clockevents_program_event+0x22f/0x300 [ 334.462966][T10103] __x64_sys_clone+0x23f/0x290 [ 334.467563][T10103] ? __do_sys_vfork+0x130/0x130 [ 334.472260][T10103] x64_sys_call+0x1b0/0x9a0 [ 334.476592][T10103] do_syscall_64+0x3b/0xb0 [ 334.480848][T10103] ? clear_bhb_loop+0x35/0x90 [ 334.485358][T10103] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.491089][T10103] RIP: 0033:0x7fcb91f71ef9 [ 334.495342][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.514778][T10103] RSP: 002b:00007fcb90bc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 334.523026][T10103] RAX: ffffffffffffffda RBX: 00007fcb9212a058 RCX: 00007fcb91f71ef9 [ 334.530834][T10103] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.538648][T10103] RBP: 00007fcb90bca090 R08: 0000000000000000 R09: 0000000000000000 [ 334.546457][T10103] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 334.554266][T10103] R13: 0000000000000000 R14: 00007fcb9212a058 R15: 00007ffe13bc1488 [ 334.562093][T10103] [ 335.294943][T10132] device syzkaller0 entered promiscuous mode [ 335.321180][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.328212][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.350081][T10136] device bridge0 left promiscuous mode [ 335.439713][T10142] bpf_get_probe_write_proto: 4 callbacks suppressed [ 335.439742][T10142] syz.1.3033[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.446245][T10142] syz.1.3033[10142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.475132][T10146] syz.4.3035[10146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.547652][T10146] syz.4.3035[10146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.577310][T10150] syz.4.3035[10150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.589386][T10152] syz.1.3033[10152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.721918][T10152] syz.1.3033[10152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.753609][T10150] syz.4.3035[10150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.776067][T10151] FAULT_INJECTION: forcing a failure. [ 335.776067][T10151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.847280][T10151] CPU: 1 PID: 10151 Comm: syz.2.3037 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 335.858582][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 335.868474][T10151] Call Trace: [ 335.871597][T10151] [ 335.874375][T10151] dump_stack_lvl+0x151/0x1c0 [ 335.878897][T10151] ? io_uring_drop_tctx_refs+0x190/0x190 [ 335.884365][T10151] ? kvm_sched_clock_read+0x18/0x40 [ 335.889391][T10151] dump_stack+0x15/0x20 [ 335.893383][T10151] should_fail+0x3c6/0x510 [ 335.897638][T10151] should_fail_alloc_page+0x5a/0x80 [ 335.902670][T10151] prepare_alloc_pages+0x15c/0x700 [ 335.907616][T10151] ? __alloc_pages+0x8f0/0x8f0 [ 335.912223][T10151] ? __alloc_pages_bulk+0xe40/0xe40 [ 335.917252][T10151] ? sched_clock+0x9/0x10 [ 335.921422][T10151] __alloc_pages+0x18c/0x8f0 [ 335.925845][T10151] ? prep_new_page+0x110/0x110 [ 335.930447][T10151] ? 0xffffffffa0028000 [ 335.934438][T10151] ? is_bpf_text_address+0x172/0x190 [ 335.939557][T10151] pte_alloc_one+0x73/0x1b0 [ 335.943894][T10151] ? pfn_modify_allowed+0x2f0/0x2f0 [ 335.949090][T10151] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 335.954726][T10151] __pte_alloc+0x86/0x350 [ 335.958891][T10151] ? free_pgtables+0x280/0x280 [ 335.963490][T10151] ? __kasan_check_write+0x14/0x20 [ 335.968438][T10151] copy_page_range+0x28a8/0x2f90 [ 335.973210][T10151] ? __kasan_slab_alloc+0xb1/0xe0 [ 335.978083][T10151] ? pfn_valid+0x1e0/0x1e0 [ 335.982323][T10151] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 335.988068][T10151] ? __rb_insert_augmented+0x5de/0x610 [ 335.993293][T10151] copy_mm+0xc7e/0x13e0 [ 335.997285][T10151] ? copy_signal+0x610/0x610 [ 336.001711][T10151] ? __init_rwsem+0xfe/0x1d0 [ 336.006129][T10151] ? copy_signal+0x4e3/0x610 [ 336.010557][T10151] copy_process+0x1149/0x3290 [ 336.015083][T10151] ? __kasan_check_write+0x14/0x20 [ 336.020025][T10151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 336.024961][T10151] ? vfs_write+0x9ec/0x1110 [ 336.029310][T10151] kernel_clone+0x21e/0x9e0 [ 336.033642][T10151] ? irqentry_exit+0x30/0x40 [ 336.038071][T10151] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 336.043714][T10151] ? create_io_thread+0x1e0/0x1e0 [ 336.048575][T10151] __x64_sys_clone+0x23f/0x290 [ 336.053170][T10151] ? __do_sys_vfork+0x130/0x130 [ 336.057862][T10151] ? debug_smp_processor_id+0x17/0x20 [ 336.063069][T10151] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 336.068980][T10151] ? exit_to_user_mode_prepare+0x39/0xa0 [ 336.074433][T10151] x64_sys_call+0x1b0/0x9a0 [ 336.078772][T10151] do_syscall_64+0x3b/0xb0 [ 336.083022][T10151] ? clear_bhb_loop+0x35/0x90 [ 336.087540][T10151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.093265][T10151] RIP: 0033:0x7fcb91f71ef9 [ 336.097520][T10151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.116963][T10151] RSP: 002b:00007fcb90beafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 336.125208][T10151] RAX: ffffffffffffffda RBX: 00007fcb92129f80 RCX: 00007fcb91f71ef9 [ 336.133019][T10151] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.140829][T10151] RBP: 00007fcb90beb090 R08: 0000000000000000 R09: 0000000000000000 [ 336.148657][T10151] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 336.156453][T10151] R13: 0000000000000000 R14: 00007fcb92129f80 R15: 00007ffe13bc1488 [ 336.164269][T10151] [ 336.790558][T10194] device syzkaller0 entered promiscuous mode [ 336.972040][T10201] device sit0 left promiscuous mode [ 337.312113][T10209] FAULT_INJECTION: forcing a failure. [ 337.312113][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 337.375076][T10209] CPU: 0 PID: 10209 Comm: syz.2.3052 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 337.386376][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 337.396270][T10209] Call Trace: [ 337.399395][T10209] [ 337.402171][T10209] dump_stack_lvl+0x151/0x1c0 [ 337.406685][T10209] ? io_uring_drop_tctx_refs+0x190/0x190 [ 337.412158][T10209] dump_stack+0x15/0x20 [ 337.416144][T10209] should_fail+0x3c6/0x510 [ 337.420399][T10209] __should_failslab+0xa4/0xe0 [ 337.424998][T10209] ? vm_area_dup+0x26/0x230 [ 337.429335][T10209] should_failslab+0x9/0x20 [ 337.433676][T10209] slab_pre_alloc_hook+0x37/0xd0 [ 337.438451][T10209] ? vm_area_dup+0x26/0x230 [ 337.442792][T10209] kmem_cache_alloc+0x44/0x200 [ 337.447390][T10209] vm_area_dup+0x26/0x230 [ 337.451554][T10209] copy_mm+0x9a1/0x13e0 [ 337.455553][T10209] ? copy_signal+0x610/0x610 [ 337.459974][T10209] ? __init_rwsem+0xfe/0x1d0 [ 337.464400][T10209] ? copy_signal+0x4e3/0x610 [ 337.468829][T10209] copy_process+0x1149/0x3290 [ 337.473345][T10209] ? _raw_spin_unlock+0x4d/0x70 [ 337.478029][T10209] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 337.483845][T10209] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 337.488786][T10209] ? __perf_event_task_sched_in+0x219/0x2a0 [ 337.494519][T10209] kernel_clone+0x21e/0x9e0 [ 337.498860][T10209] ? create_io_thread+0x1e0/0x1e0 [ 337.503715][T10209] ? finish_task_switch+0x167/0x7b0 [ 337.508757][T10209] __x64_sys_clone+0x23f/0x290 [ 337.513353][T10209] ? __do_sys_vfork+0x130/0x130 [ 337.518037][T10209] ? switch_fpu_return+0x1ed/0x3d0 [ 337.522993][T10209] ? __kasan_check_read+0x11/0x20 [ 337.527847][T10209] x64_sys_call+0x1b0/0x9a0 [ 337.532184][T10209] do_syscall_64+0x3b/0xb0 [ 337.536438][T10209] ? clear_bhb_loop+0x35/0x90 [ 337.540952][T10209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.546678][T10209] RIP: 0033:0x7fcb91f71ef9 [ 337.550936][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.570373][T10209] RSP: 002b:00007fcb90beafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 337.578616][T10209] RAX: ffffffffffffffda RBX: 00007fcb92129f80 RCX: 00007fcb91f71ef9 [ 337.586431][T10209] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.594241][T10209] RBP: 00007fcb90beb090 R08: 0000000000000000 R09: 0000000000000000 [ 337.602050][T10209] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 337.609966][T10209] R13: 0000000000000000 R14: 00007fcb92129f80 R15: 00007ffe13bc1488 [ 337.617795][T10209] [ 338.274704][T10230] device syzkaller0 entered promiscuous mode [ 338.338014][T10251] syz.3.3065[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.338094][T10251] syz.3.3065[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.396629][T10253] FAULT_INJECTION: forcing a failure. [ 338.396629][T10253] name failslab, interval 1, probability 0, space 0, times 0 [ 338.527063][T10253] CPU: 0 PID: 10253 Comm: syz.4.3068 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 338.538279][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 338.548173][T10253] Call Trace: [ 338.551294][T10253] [ 338.554081][T10253] dump_stack_lvl+0x151/0x1c0 [ 338.558584][T10253] ? io_uring_drop_tctx_refs+0x190/0x190 [ 338.564054][T10253] ? avc_denied+0x1b0/0x1b0 [ 338.568393][T10253] dump_stack+0x15/0x20 [ 338.572381][T10253] should_fail+0x3c6/0x510 [ 338.576639][T10253] __should_failslab+0xa4/0xe0 [ 338.581236][T10253] ? vm_area_dup+0x26/0x230 [ 338.585574][T10253] should_failslab+0x9/0x20 [ 338.589915][T10253] slab_pre_alloc_hook+0x37/0xd0 [ 338.594686][T10253] ? vm_area_dup+0x26/0x230 [ 338.599028][T10253] kmem_cache_alloc+0x44/0x200 [ 338.603630][T10253] vm_area_dup+0x26/0x230 [ 338.607796][T10253] copy_mm+0x9a1/0x13e0 [ 338.611793][T10253] ? copy_signal+0x610/0x610 [ 338.616209][T10253] ? __init_rwsem+0xfe/0x1d0 [ 338.620638][T10253] ? copy_signal+0x4e3/0x610 [ 338.625067][T10253] copy_process+0x1149/0x3290 [ 338.629587][T10253] ? preempt_count_add+0x14e/0x1a0 [ 338.634533][T10253] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 338.639474][T10253] ? vfs_write+0x9ec/0x1110 [ 338.643813][T10253] kernel_clone+0x21e/0x9e0 [ 338.648153][T10253] ? __kasan_check_write+0x14/0x20 [ 338.653098][T10253] ? create_io_thread+0x1e0/0x1e0 [ 338.657965][T10253] __x64_sys_clone+0x23f/0x290 [ 338.662558][T10253] ? __do_sys_vfork+0x130/0x130 [ 338.667246][T10253] ? switch_fpu_return+0x1ed/0x3d0 [ 338.672199][T10253] ? __kasan_check_read+0x11/0x20 [ 338.677054][T10253] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 338.682523][T10253] x64_sys_call+0x1b0/0x9a0 [ 338.686862][T10253] do_syscall_64+0x3b/0xb0 [ 338.691116][T10253] ? clear_bhb_loop+0x35/0x90 [ 338.695626][T10253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.701354][T10253] RIP: 0033:0x7fb89d0f5ef9 [ 338.705607][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.725046][T10253] RSP: 002b:00007fb89bd6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 338.733290][T10253] RAX: ffffffffffffffda RBX: 00007fb89d2adf80 RCX: 00007fb89d0f5ef9 [ 338.741103][T10253] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.748914][T10253] RBP: 00007fb89bd6f090 R08: 0000000000000000 R09: 0000000000000000 [ 338.756727][T10253] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 338.764536][T10253] R13: 0000000000000000 R14: 00007fb89d2adf80 R15: 00007ffecaad92a8 [ 338.772358][T10253] [ 339.453764][T10271] device syzkaller0 entered promiscuous mode [ 340.087374][T10292] device syzkaller0 entered promiscuous mode [ 340.262535][T10302] FAULT_INJECTION: forcing a failure. [ 340.262535][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 340.285467][T10302] CPU: 1 PID: 10302 Comm: syz.4.3082 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 340.296760][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 340.306651][T10302] Call Trace: [ 340.309774][T10302] [ 340.312551][T10302] dump_stack_lvl+0x151/0x1c0 [ 340.317066][T10302] ? io_uring_drop_tctx_refs+0x190/0x190 [ 340.322537][T10302] dump_stack+0x15/0x20 [ 340.326525][T10302] should_fail+0x3c6/0x510 [ 340.330780][T10302] __should_failslab+0xa4/0xe0 [ 340.335379][T10302] ? anon_vma_clone+0x9a/0x500 [ 340.339978][T10302] should_failslab+0x9/0x20 [ 340.344327][T10302] slab_pre_alloc_hook+0x37/0xd0 [ 340.349091][T10302] ? anon_vma_clone+0x9a/0x500 [ 340.353688][T10302] kmem_cache_alloc+0x44/0x200 [ 340.358294][T10302] anon_vma_clone+0x9a/0x500 [ 340.362722][T10302] anon_vma_fork+0x91/0x4e0 [ 340.367055][T10302] ? anon_vma_name+0x43/0x70 [ 340.371481][T10302] ? vm_area_dup+0x17a/0x230 [ 340.375908][T10302] copy_mm+0xa3a/0x13e0 [ 340.379906][T10302] ? copy_signal+0x610/0x610 [ 340.384331][T10302] ? __init_rwsem+0xfe/0x1d0 [ 340.388754][T10302] ? copy_signal+0x4e3/0x610 [ 340.393186][T10302] copy_process+0x1149/0x3290 [ 340.397699][T10302] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 340.402643][T10302] kernel_clone+0x21e/0x9e0 [ 340.406982][T10302] ? irqentry_exit+0x30/0x40 [ 340.411405][T10302] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 340.417049][T10302] ? create_io_thread+0x1e0/0x1e0 [ 340.421911][T10302] __x64_sys_clone+0x23f/0x290 [ 340.426518][T10302] ? __do_sys_vfork+0x130/0x130 [ 340.431200][T10302] x64_sys_call+0x1b0/0x9a0 [ 340.435533][T10302] do_syscall_64+0x3b/0xb0 [ 340.439788][T10302] ? clear_bhb_loop+0x35/0x90 [ 340.444298][T10302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.450029][T10302] RIP: 0033:0x7fb89d0f5ef9 [ 340.454303][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.473725][T10302] RSP: 002b:00007fb89bd6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 340.481967][T10302] RAX: ffffffffffffffda RBX: 00007fb89d2adf80 RCX: 00007fb89d0f5ef9 [ 340.489779][T10302] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.497592][T10302] RBP: 00007fb89bd6f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.505402][T10302] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 340.513212][T10302] R13: 0000000000000000 R14: 00007fb89d2adf80 R15: 00007ffecaad92a8 [ 340.521031][T10302] [ 342.562403][T10350] device syzkaller0 entered promiscuous mode [ 342.756394][T10358] device syzkaller0 entered promiscuous mode [ 343.187061][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.195942][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.207970][T10363] device bridge_slave_0 entered promiscuous mode [ 343.214954][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.221849][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.229037][T10363] device bridge_slave_1 entered promiscuous mode [ 343.271830][T10381] bpf_get_probe_write_proto: 6 callbacks suppressed [ 343.271848][T10381] syz.0.3105[10381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.278645][T10381] syz.0.3105[10381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.291406][T10381] syz.0.3105[10381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.303390][T10381] syz.0.3105[10381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.480264][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.498419][T10363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.505521][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.512310][T10363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.677434][T10399] syz.4.3111[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.677512][T10399] syz.4.3111[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.751783][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.751812][T10400] syz.4.3111[10400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.769918][T10400] syz.4.3111[10400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.810363][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.888284][ T9740] device bridge_slave_1 left promiscuous mode [ 343.904400][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.957208][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.990529][ T9740] device veth1_macvtap left promiscuous mode [ 344.342822][T10408] device syzkaller0 entered promiscuous mode [ 344.457714][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.465662][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.473241][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.482847][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.504765][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.511614][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.518816][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.529077][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.537046][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.543878][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.551032][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.558765][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.566427][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.574211][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.581982][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.590060][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.598096][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.605697][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.613970][T10363] device veth0_vlan entered promiscuous mode [ 344.664088][T10412] device syzkaller0 entered promiscuous mode [ 344.671455][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.678747][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.700091][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.709190][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.745662][T10363] device veth1_macvtap entered promiscuous mode [ 344.758079][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.773067][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.782088][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.791037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.808051][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.448334][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.455192][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.481057][T10423] device bridge_slave_0 entered promiscuous mode [ 345.532519][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.603173][T10423] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.646024][T10423] device bridge_slave_1 entered promiscuous mode [ 345.750433][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.757500][T10423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.764593][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.771398][T10423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.797652][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.852497][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.891908][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.941127][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.979707][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.987932][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.996042][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.002919][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.065152][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.101970][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.137362][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.144276][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.171408][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.185765][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.193775][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.201978][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.260673][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.279665][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.291827][T10452] syz.4.3125[10452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.291904][T10452] syz.4.3125[10452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.311862][T10423] device veth0_vlan entered promiscuous mode [ 346.377967][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.396874][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.431978][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.484452][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.566113][T10423] device veth1_macvtap entered promiscuous mode [ 346.579892][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.590514][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.607421][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.637590][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.655899][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.672650][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.680839][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.757806][T10457] device syzkaller0 entered promiscuous mode [ 346.936185][T10460] device sit0 entered promiscuous mode [ 347.207704][ T9740] device bridge_slave_1 left promiscuous mode [ 347.213683][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.230075][ T9740] device bridge_slave_0 left promiscuous mode [ 347.236056][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.244427][ T9740] device veth1_macvtap left promiscuous mode [ 347.250270][ T9740] device veth0_vlan left promiscuous mode [ 347.578385][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.585278][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.592492][T10461] device bridge_slave_0 entered promiscuous mode [ 347.611208][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.618162][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.625230][T10461] device bridge_slave_1 entered promiscuous mode [ 347.857746][T10494] device syzkaller0 entered promiscuous mode [ 348.111437][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.119446][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.218181][T10510] FAULT_INJECTION: forcing a failure. [ 348.218181][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 348.231570][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.240356][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.248555][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.255397][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.262653][T10510] CPU: 1 PID: 10510 Comm: syz.0.3152 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 348.273832][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 348.283729][T10510] Call Trace: [ 348.286850][T10510] [ 348.289634][T10510] dump_stack_lvl+0x151/0x1c0 [ 348.294143][T10510] ? io_uring_drop_tctx_refs+0x190/0x190 [ 348.299615][T10510] dump_stack+0x15/0x20 [ 348.303601][T10510] should_fail+0x3c6/0x510 [ 348.307854][T10510] __should_failslab+0xa4/0xe0 [ 348.312455][T10510] ? anon_vma_clone+0x9a/0x500 [ 348.317053][T10510] should_failslab+0x9/0x20 [ 348.321393][T10510] slab_pre_alloc_hook+0x37/0xd0 [ 348.326168][T10510] ? anon_vma_clone+0x9a/0x500 [ 348.330764][T10510] kmem_cache_alloc+0x44/0x200 [ 348.335366][T10510] anon_vma_clone+0x9a/0x500 [ 348.339797][T10510] anon_vma_fork+0x91/0x4e0 [ 348.344130][T10510] ? anon_vma_name+0x43/0x70 [ 348.348556][T10510] ? vm_area_dup+0x17a/0x230 [ 348.352989][T10510] copy_mm+0xa3a/0x13e0 [ 348.356979][T10510] ? copy_signal+0x610/0x610 [ 348.361401][T10510] ? __init_rwsem+0xfe/0x1d0 [ 348.365828][T10510] ? copy_signal+0x4e3/0x610 [ 348.370255][T10510] copy_process+0x1149/0x3290 [ 348.374778][T10510] ? timerqueue_add+0x250/0x270 [ 348.379459][T10510] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 348.384402][T10510] ? enqueue_hrtimer+0xca/0x240 [ 348.389087][T10510] ? __hrtimer_run_queues+0x46b/0xad0 [ 348.394309][T10510] kernel_clone+0x21e/0x9e0 [ 348.398640][T10510] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 348.404625][T10510] ? create_io_thread+0x1e0/0x1e0 [ 348.409490][T10510] ? kasan_check_range+0x6/0x2a0 [ 348.414258][T10510] __x64_sys_clone+0x23f/0x290 [ 348.418858][T10510] ? __do_sys_vfork+0x130/0x130 [ 348.423548][T10510] ? debug_smp_processor_id+0x17/0x20 [ 348.428756][T10510] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 348.434655][T10510] x64_sys_call+0x1b0/0x9a0 [ 348.438997][T10510] do_syscall_64+0x3b/0xb0 [ 348.443247][T10510] ? clear_bhb_loop+0x35/0x90 [ 348.447764][T10510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.453489][T10510] RIP: 0033:0x7f61fdf4fef9 [ 348.457754][T10510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.477185][T10510] RSP: 002b:00007f61fcbc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 348.485430][T10510] RAX: ffffffffffffffda RBX: 00007f61fe107f80 RCX: 00007f61fdf4fef9 [ 348.493238][T10510] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.501048][T10510] RBP: 00007f61fcbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 348.508864][T10510] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 348.516673][T10510] R13: 0000000000000000 R14: 00007f61fe107f80 R15: 00007ffc4bd393c8 [ 348.524497][T10510] [ 348.531059][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.547350][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.555338][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.562183][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.662310][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.683571][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.721911][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.737580][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.755193][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.764164][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.785673][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.855542][T10461] device veth0_vlan entered promiscuous mode [ 348.938286][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.946272][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.031361][T10461] device veth1_macvtap entered promiscuous mode [ 349.114862][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.132087][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.191850][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.203766][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.211967][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.269364][T10533] device syzkaller0 entered promiscuous mode [ 349.518367][T10544] FAULT_INJECTION: forcing a failure. [ 349.518367][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 349.531232][T10544] CPU: 0 PID: 10544 Comm: syz.0.3156 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 349.542416][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 349.552310][T10544] Call Trace: [ 349.555436][T10544] [ 349.558211][T10544] dump_stack_lvl+0x151/0x1c0 [ 349.562725][T10544] ? io_uring_drop_tctx_refs+0x190/0x190 [ 349.568195][T10544] dump_stack+0x15/0x20 [ 349.572187][T10544] should_fail+0x3c6/0x510 [ 349.576448][T10544] __should_failslab+0xa4/0xe0 [ 349.581039][T10544] ? anon_vma_clone+0x9a/0x500 [ 349.585643][T10544] should_failslab+0x9/0x20 [ 349.589978][T10544] slab_pre_alloc_hook+0x37/0xd0 [ 349.594753][T10544] ? anon_vma_clone+0x9a/0x500 [ 349.599349][T10544] kmem_cache_alloc+0x44/0x200 [ 349.603951][T10544] anon_vma_clone+0x9a/0x500 [ 349.608383][T10544] anon_vma_fork+0x91/0x4e0 [ 349.612715][T10544] ? anon_vma_name+0x43/0x70 [ 349.617144][T10544] ? vm_area_dup+0x17a/0x230 [ 349.621570][T10544] copy_mm+0xa3a/0x13e0 [ 349.625570][T10544] ? copy_signal+0x610/0x610 [ 349.629988][T10544] ? __init_rwsem+0xfe/0x1d0 [ 349.634416][T10544] ? copy_signal+0x4e3/0x610 [ 349.638845][T10544] copy_process+0x1149/0x3290 [ 349.643358][T10544] ? __kasan_check_write+0x14/0x20 [ 349.648306][T10544] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 349.653249][T10544] ? vfs_write+0x9ec/0x1110 [ 349.657594][T10544] kernel_clone+0x21e/0x9e0 [ 349.661931][T10544] ? __kasan_check_write+0x14/0x20 [ 349.666884][T10544] ? create_io_thread+0x1e0/0x1e0 [ 349.671742][T10544] __x64_sys_clone+0x23f/0x290 [ 349.676336][T10544] ? __do_sys_vfork+0x130/0x130 [ 349.681066][T10544] ? debug_smp_processor_id+0x17/0x20 [ 349.686232][T10544] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 349.692136][T10544] ? exit_to_user_mode_prepare+0x39/0xa0 [ 349.697601][T10544] x64_sys_call+0x1b0/0x9a0 [ 349.701939][T10544] do_syscall_64+0x3b/0xb0 [ 349.706189][T10544] ? clear_bhb_loop+0x35/0x90 [ 349.710707][T10544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.716432][T10544] RIP: 0033:0x7f61fdf4fef9 [ 349.720689][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.740127][T10544] RSP: 002b:00007f61fcbc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 349.748370][T10544] RAX: ffffffffffffffda RBX: 00007f61fe107f80 RCX: 00007f61fdf4fef9 [ 349.756179][T10544] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.763991][T10544] RBP: 00007f61fcbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 349.771802][T10544] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 349.779613][T10544] R13: 0000000000000000 R14: 00007f61fe107f80 R15: 00007ffc4bd393c8 [ 349.787435][T10544] [ 349.877144][ T9740] device bridge_slave_1 left promiscuous mode [ 349.883082][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.890806][ T9740] device bridge_slave_0 left promiscuous mode [ 349.896717][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.905303][ T9740] device veth1_macvtap left promiscuous mode [ 349.911145][ T9740] device veth0_vlan left promiscuous mode [ 350.106338][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.117970][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.132888][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.141555][T10556] device bridge_slave_0 entered promiscuous mode [ 350.154897][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.170799][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.178837][T10556] device bridge_slave_1 entered promiscuous mode [ 350.311410][T10579] device syzkaller0 entered promiscuous mode [ 350.523812][T10588] FAULT_INJECTION: forcing a failure. [ 350.523812][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 350.536563][T10588] CPU: 1 PID: 10588 Comm: syz.4.3168 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 350.547769][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 350.557658][T10588] Call Trace: [ 350.560785][T10588] [ 350.563562][T10588] dump_stack_lvl+0x151/0x1c0 [ 350.568074][T10588] ? io_uring_drop_tctx_refs+0x190/0x190 [ 350.573545][T10588] dump_stack+0x15/0x20 [ 350.577534][T10588] should_fail+0x3c6/0x510 [ 350.581786][T10588] __should_failslab+0xa4/0xe0 [ 350.586385][T10588] ? anon_vma_clone+0x9a/0x500 [ 350.590984][T10588] should_failslab+0x9/0x20 [ 350.595324][T10588] slab_pre_alloc_hook+0x37/0xd0 [ 350.600096][T10588] ? anon_vma_clone+0x9a/0x500 [ 350.604696][T10588] kmem_cache_alloc+0x44/0x200 [ 350.609298][T10588] anon_vma_clone+0x9a/0x500 [ 350.613725][T10588] anon_vma_fork+0x91/0x4e0 [ 350.618065][T10588] ? anon_vma_name+0x4c/0x70 [ 350.622490][T10588] ? vm_area_dup+0x17a/0x230 [ 350.626927][T10588] copy_mm+0xa3a/0x13e0 [ 350.630917][T10588] ? copy_signal+0x610/0x610 [ 350.635475][T10588] ? __init_rwsem+0xfe/0x1d0 [ 350.639889][T10588] ? copy_signal+0x4e3/0x610 [ 350.644317][T10588] copy_process+0x1149/0x3290 [ 350.648836][T10588] ? timerqueue_add+0x250/0x270 [ 350.653514][T10588] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 350.658562][T10588] ? enqueue_hrtimer+0xca/0x240 [ 350.663242][T10588] ? __hrtimer_run_queues+0x46b/0xad0 [ 350.668454][T10588] kernel_clone+0x21e/0x9e0 [ 350.672793][T10588] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 350.678433][T10588] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 350.684423][T10588] ? create_io_thread+0x1e0/0x1e0 [ 350.689284][T10588] ? memset_erms+0xb/0x10 [ 350.693448][T10588] __x64_sys_clone+0x23f/0x290 [ 350.698051][T10588] ? __do_sys_vfork+0x130/0x130 [ 350.702738][T10588] ? debug_smp_processor_id+0x17/0x20 [ 350.707942][T10588] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 350.713847][T10588] x64_sys_call+0x1b0/0x9a0 [ 350.718183][T10588] do_syscall_64+0x3b/0xb0 [ 350.722436][T10588] ? clear_bhb_loop+0x35/0x90 [ 350.726951][T10588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.732677][T10588] RIP: 0033:0x7fb89d0f5ef9 [ 350.736933][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.756372][T10588] RSP: 002b:00007fb89bd6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 350.764615][T10588] RAX: ffffffffffffffda RBX: 00007fb89d2adf80 RCX: 00007fb89d0f5ef9 [ 350.772427][T10588] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.780238][T10588] RBP: 00007fb89bd6f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.788051][T10588] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 350.795864][T10588] R13: 0000000000000000 R14: 00007fb89d2adf80 R15: 00007ffecaad92a8 [ 350.803679][T10588] [ 350.841859][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.848739][T10556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.855852][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.862620][T10556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.917532][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.924584][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.969817][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.977493][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.992395][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.000541][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.008534][ T818] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.015397][ T818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.024339][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.032514][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.040512][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.047358][ T818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.061228][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.069108][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.076829][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.084653][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.141101][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.153224][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.166229][T10556] device veth0_vlan entered promiscuous mode [ 351.172690][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.186223][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.253216][T10620] device syzkaller0 entered promiscuous mode [ 351.259826][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.272777][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.282039][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.290083][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.298376][T10556] device veth1_macvtap entered promiscuous mode [ 351.352609][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.360279][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.371134][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.411822][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.419862][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.659102][ T9740] device bridge_slave_1 left promiscuous mode [ 351.665057][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.676196][ T9740] device bridge_slave_0 left promiscuous mode [ 351.682252][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.690373][ T9740] device veth1_macvtap left promiscuous mode [ 351.696214][ T9740] device veth0_vlan left promiscuous mode [ 352.139989][T10634] FAULT_INJECTION: forcing a failure. [ 352.139989][T10634] name failslab, interval 1, probability 0, space 0, times 0 [ 352.167038][T10634] CPU: 1 PID: 10634 Comm: syz.0.3180 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 352.178238][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.188145][T10634] Call Trace: [ 352.191257][T10634] [ 352.194033][T10634] dump_stack_lvl+0x151/0x1c0 [ 352.198548][T10634] ? io_uring_drop_tctx_refs+0x190/0x190 [ 352.204143][T10634] dump_stack+0x15/0x20 [ 352.208125][T10634] should_fail+0x3c6/0x510 [ 352.212376][T10634] __should_failslab+0xa4/0xe0 [ 352.216973][T10634] ? anon_vma_fork+0x1df/0x4e0 [ 352.221574][T10634] should_failslab+0x9/0x20 [ 352.225914][T10634] slab_pre_alloc_hook+0x37/0xd0 [ 352.230692][T10634] ? anon_vma_fork+0x1df/0x4e0 [ 352.235375][T10634] kmem_cache_alloc+0x44/0x200 [ 352.239978][T10634] anon_vma_fork+0x1df/0x4e0 [ 352.244404][T10634] copy_mm+0xa3a/0x13e0 [ 352.248404][T10634] ? copy_signal+0x610/0x610 [ 352.252821][T10634] ? __init_rwsem+0xfe/0x1d0 [ 352.257245][T10634] ? copy_signal+0x4e3/0x610 [ 352.261675][T10634] copy_process+0x1149/0x3290 [ 352.266192][T10634] ? timerqueue_add+0x250/0x270 [ 352.270874][T10634] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 352.275819][T10634] ? enqueue_hrtimer+0xca/0x240 [ 352.280509][T10634] ? __hrtimer_run_queues+0x46b/0xad0 [ 352.285716][T10634] kernel_clone+0x21e/0x9e0 [ 352.290054][T10634] ? irqentry_exit+0x30/0x40 [ 352.294477][T10634] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.300125][T10634] ? create_io_thread+0x1e0/0x1e0 [ 352.304984][T10634] __x64_sys_clone+0x23f/0x290 [ 352.309581][T10634] ? __do_sys_vfork+0x130/0x130 [ 352.314272][T10634] ? debug_smp_processor_id+0x17/0x20 [ 352.319475][T10634] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 352.325379][T10634] x64_sys_call+0x1b0/0x9a0 [ 352.329715][T10634] do_syscall_64+0x3b/0xb0 [ 352.333969][T10634] ? clear_bhb_loop+0x35/0x90 [ 352.338484][T10634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.344211][T10634] RIP: 0033:0x7f61fdf4fef9 [ 352.348464][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.367902][T10634] RSP: 002b:00007f61fcbc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 352.376148][T10634] RAX: ffffffffffffffda RBX: 00007f61fe107f80 RCX: 00007f61fdf4fef9 [ 352.383961][T10634] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.391779][T10634] RBP: 00007f61fcbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 352.399589][T10634] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000002 [ 352.407394][T10634] R13: 0000000000000000 R14: 00007f61fe107f80 R15: 00007ffc4bd393c8 [ 352.415216][T10634] [ 352.437428][T10634] ------------[ cut here ]------------ [ 352.442366][T10644] BUG: unable to handle page fault for address: ffffed1800000027 [ 352.442947][T10634] refcount_t: underflow; use-after-free. [ 352.450355][T10644] #PF: supervisor read access in kernel mode [ 352.450367][T10644] #PF: error_code(0x0000) - not-present page [ 352.450377][T10644] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 352.450403][T10644] Oops: 0000 [#1] PREEMPT SMP KASAN [ 352.450420][T10644] CPU: 1 PID: 10644 Comm: syz-executor Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 352.450441][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.450453][T10644] RIP: 0010:vma_interval_tree_remove+0x634/0xba0 [ 352.450481][T10644] Code: 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 80 63 0d 00 4c 89 3b 4d 85 e4 74 c1 49 8d 7c 24 40 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 c0 62 0d 00 4d 8d 74 24 a8 4d 8b 7c 24 40 [ 352.450498][T10644] RSP: 0018:ffffc90000a97990 EFLAGS: 00010a06 [ 352.450515][T10644] RAX: 1ffff11800000027 RBX: 1ffff11023d2acec RCX: ffff88810f3293c0 [ 352.450530][T10644] RDX: 0000000000000000 RSI: 0000000000000304 RDI: ffff88c000000138 [ 352.450544][T10644] RBP: ffffc90000a979f8 R08: ffffffff81a54579 R09: ffffed10237512a4 [ 352.450559][T10644] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88c0000000f8 [ 352.450573][T10644] R13: dffffc0000000000 R14: 0000000000000304 R15: ffff88811e956760 [ 352.450588][T10644] FS: 0000555555ce6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 352.450605][T10644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.450619][T10644] CR2: ffffed1800000027 CR3: 0000000125513000 CR4: 00000000003506a0 [ 352.450636][T10644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.450648][T10644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 352.450661][T10644] Call Trace: [ 352.450666][T10644] [ 352.450673][T10644] ? __die_body+0x62/0xb0 [ 352.450696][T10644] ? __die+0x7e/0x90 [ 352.450713][T10644] ? page_fault_oops+0x7f9/0xa90 [ 352.450738][T10644] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 352.450761][T10644] ? 0xffffffffa0028000 [ 352.450775][T10644] ? is_prefetch+0x47a/0x6d0 [ 352.450795][T10644] ? vma_interval_tree_remove+0x634/0xba0 [ 352.450816][T10644] ? vma_interval_tree_remove+0x634/0xba0 [ 352.450838][T10644] ? fixup_exception+0xbb/0x13c0 [ 352.450855][T10644] ? stack_trace_save+0x1c0/0x1c0 [ 352.450875][T10644] ? __kernel_text_address+0x9b/0x110 [ 352.450897][T10644] ? kernelmode_fixup_or_oops+0xb9/0xd0 [ 352.450919][T10644] ? __bad_area_nosemaphore+0xc2/0x480 [ 352.450944][T10644] ? bad_area_nosemaphore+0x2d/0x40 [ 352.450966][T10644] ? do_kern_addr_fault+0x69/0x80 [ 352.450987][T10644] ? exc_page_fault+0x4dd/0x7f0 [ 352.451009][T10644] ? __kasan_slab_alloc+0xc3/0xe0 [ 352.451027][T10644] ? __kasan_slab_alloc+0xb1/0xe0 [ 352.451045][T10644] ? slab_post_alloc_hook+0x53/0x2c0 [ 352.451066][T10644] ? kmem_cache_alloc+0xf5/0x200 [ 352.451084][T10644] ? anon_vma_clone+0x9a/0x500 [ 352.451107][T10644] ? __split_vma+0x194/0x470 [ 352.451125][T10644] ? split_vma+0x7c/0xd0 [ 352.451143][T10644] ? mprotect_fixup+0x55e/0x7f0 [ 352.451163][T10644] ? do_mprotect_pkey+0x79e/0xb20 [ 352.451180][T10644] ? __x64_sys_mprotect+0x80/0x90 [ 352.451197][T10644] ? x64_sys_call+0x6e/0x9a0 [ 352.451215][T10644] ? do_syscall_64+0x3b/0xb0 [ 352.451235][T10644] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.451261][T10644] ? asm_exc_page_fault+0x27/0x30 [ 352.457736][T10634] WARNING: CPU: 0 PID: 10634 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 352.462511][T10644] ? vma_interval_tree_remove+0x779/0xba0 [ 352.462540][T10644] ? vma_interval_tree_remove+0x634/0xba0 [ 352.462568][T10644] __vma_adjust+0x873/0x2c10 [ 352.462596][T10644] ? anon_vma_clone+0x4a6/0x500 [ 352.468450][T10634] Modules linked in: [ 352.473448][T10644] __split_vma+0x35e/0x470 [ 352.473476][T10644] split_vma+0x7c/0xd0 [ 352.473509][T10644] mprotect_fixup+0x55e/0x7f0 [ 352.473534][T10644] ? change_protection+0x18e0/0x18e0 [ 352.480617][T10634] [ 352.489850][T10644] ? security_file_mprotect+0x84/0xb0 [ 352.489880][T10644] do_mprotect_pkey+0x79e/0xb20 [ 352.489903][T10644] ? prot_none_test+0x10/0x10 [ 352.489919][T10644] ? exit_to_user_mode_prepare+0x39/0xa0 [ 352.489947][T10644] __x64_sys_mprotect+0x80/0x90 [ 352.489965][T10644] x64_sys_call+0x6e/0x9a0 [ 352.489984][T10644] do_syscall_64+0x3b/0xb0 [ 352.490004][T10644] ? clear_bhb_loop+0x35/0x90 [ 352.490023][T10644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.512175][T10634] CPU: 0 PID: 10634 Comm: syz.0.3180 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 352.525483][T10644] RIP: 0033:0x7f5974588fb7 [ 352.525505][T10644] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.525523][T10644] RSP: 002b:00007ffe3d5fe178 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 352.525545][T10644] RAX: ffffffffffffffda RBX: 00007f5974717700 RCX: 00007f5974588fb7 [ 352.525561][T10644] RDX: 0000000000000001 RSI: 0000000000094000 RDI: 00007f597467c000 [ 352.525575][T10644] RBP: 00007ffe3d5fe2b8 R08: 0000555555ce7810 R09: 0000555555ce7830 [ 352.525590][T10644] R10: 0000000000000005 R11: 0000000000000206 R12: 00007ffe3d5fe2d0 [ 352.525603][T10644] R13: 00007ffe3d5fe2b8 R14: 00007ffe3d5fe250 R15: 00007ffe3d5fe248 [ 352.525625][T10644] [ 352.525632][T10644] Modules linked in: [ 352.525659][T10644] CR2: ffffed1800000027 [ 352.525682][T10644] ---[ end trace b58505e1323546bb ]--- [ 352.525696][T10644] RIP: 0010:vma_interval_tree_remove+0x634/0xba0 [ 352.525724][T10644] Code: 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 80 63 0d 00 4c 89 3b 4d 85 e4 74 c1 49 8d 7c 24 40 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 c0 62 0d 00 4d 8d 74 24 a8 4d 8b 7c 24 40 [ 352.531697][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.539388][T10644] RSP: 0018:ffffc90000a97990 EFLAGS: 00010a06 [ 352.539409][T10644] RAX: 1ffff11800000027 RBX: 1ffff11023d2acec RCX: ffff88810f3293c0 [ 352.539426][T10644] RDX: 0000000000000000 RSI: 0000000000000304 RDI: ffff88c000000138 [ 352.539440][T10644] RBP: ffffc90000a979f8 R08: ffffffff81a54579 R09: ffffed10237512a4 [ 352.539456][T10644] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88c0000000f8 [ 352.539471][T10644] R13: dffffc0000000000 R14: 0000000000000304 R15: ffff88811e956760 [ 352.547380][T10634] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 352.555010][T10644] FS: 0000555555ce6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 352.555031][T10644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.555046][T10644] CR2: ffffed1800000027 CR3: 0000000125513000 CR4: 00000000003506a0 [ 352.555072][T10644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.555090][T10644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 352.555115][T10644] Kernel panic - not syncing: Fatal exception [ 352.562959][T10634] Code: 04 01 48 c7 c7 a0 f7 a2 85 e8 e4 27 dc fe 0f 0b eb 8b e8 8b ea 0a ff c6 05 74 e5 c0 04 01 48 c7 c7 00 f8 a2 85 e8 c8 27 dc fe <0f> 0b e9 6c ff ff ff e8 6c ea 0a ff c6 05 56 e5 c0 04 01 48 c7 c7 [ 352.571033][T10644] Kernel Offset: disabled [ 353.110011][T10644] Rebooting in 86400 seconds..