last executing test programs: 14.486340825s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) 10.713296308s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) 9.060498164s ago: executing program 2 (id=895): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xb, 0x1, 0x9, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.847601224s ago: executing program 2 (id=902): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000001340)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x112245, 0x0, 0x7ffffffd, 0x5, 0x2, 0x1, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x81b) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f00000000c0)="e10a549d7d24e51d1fee8534297aab99", &(0x7f0000000100)=""/102}, 0x20) 6.654098345s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) 6.421311035s ago: executing program 2 (id=902): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000001340)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x112245, 0x0, 0x7ffffffd, 0x5, 0x2, 0x1, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x81b) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f00000000c0)="e10a549d7d24e51d1fee8534297aab99", &(0x7f0000000100)=""/102}, 0x20) 4.061587364s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) 3.47677194s ago: executing program 2 (id=902): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000001340)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x112245, 0x0, 0x7ffffffd, 0x5, 0x2, 0x1, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x81b) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f00000000c0)="e10a549d7d24e51d1fee8534297aab99", &(0x7f0000000100)=""/102}, 0x20) 3.204349153s ago: executing program 1 (id=954): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf614b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x9048, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000071185f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1901], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000500)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6, 0xfd, 0x0, 0xfffffffd}]}) r7 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f0000000040)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00') syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.867076618s ago: executing program 4 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="19a3d5214a1374eb341818", &(0x7f0000000040)=""/151, &(0x7f0000000240)="ba93b4a13b46b8062b22e40e47e8d968a360b3fc95ba5ac2609d8c72e381c42eecb6fd754b0cdfa7a39c1eada4f6f9c534246e895fe9e17832143b9a9640c66d512afa5fc27424a115441d43dd68b43ae8358b8261f19a746c347e408e6b903cced69366a84c8bddc37f23c93ef242ff51e8b61e5df19c4f008b35fc45ee8037bd6399ee3c946f3d2bce", &(0x7f0000000300)="57742574ebc437e920977d88ec3637af1e9c0228b206b5ed57a6b07f44764cbb0be7e000ec9bf5622a1c493a85ad5772ed848297ccd9e833", 0x10000000, r0, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 2.769491703s ago: executing program 4 (id=960): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff000005ff6100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.767558303s ago: executing program 1 (id=961): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d40), &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2042}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (fail_nth: 22) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000a00)=""/239, 0x4d, 0xef, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a04000004000000ff0f0000d200000012000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x20, &(0x7f00000008c0)={&(0x7f00000006c0)=""/226, 0xe2, 0x0, &(0x7f00000007c0)=""/244, 0xf4}}, 0x10) 2.714025235s ago: executing program 4 (id=962): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x7, 0x76, 0x40, 0x0, 0x0, 0x2, 0x2012, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x3}, 0x4000, 0x9c1, 0x7, 0x9, 0x66d0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x5ff7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000000900750400000000000000c0c218100000", @ANYRES32=r0, @ANYRESOCT], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0xfe3e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000008000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000003000000000000000100008000020000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x1fe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x5c, &(0x7f0000000280)=""/92, 0x40f00, 0x45, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x2, 0x5478}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x0, 0x5, 0xb, 0x3}], 0x10, 0x7fffffff}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.197328959s ago: executing program 1 (id=964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x4, 0x14}, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002a000000958417bd8a000000"], 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000200)=r4, 0x12) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000, 0x0, @perf_config_ext={0x40, 0x1}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0x7}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r11, 0x4) (async) sendmsg$inet(r8, &(0x7f0000002280)={&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="97275b80d9bc04f494eb7920f8f8afbfebad2ec6e864cdffbae4d0ac09afc98c66cd7abd8321596aafefcbff81b6ac0cfe2e6cd3a00171ff45a1ebc4d70b1fe57faece8efb33325cb8e1450b6b2a42535f53031f65f9b2a4c4f8ebbdb564a9caff11212605a12e9ddc28affc982715ae8bc89b4a5ece0a8295d178292817a4b38d8cad61918e72709635e8388c37b2defaca2d57b1ce404bbd1b8b7bbdb84d655251fb7933348d47d63ff78d49891310c6cf0a3f40463f28723d4b4439edf8ed26fe24bb3b1360ff7a3d447089ce1bc024309ca874a371da1aa717bf99da0dbc68", 0xe1}, {&(0x7f0000002140)="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", 0xfd}], 0x3}, 0x800) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r12, r9, 0x4, r9}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x3, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r13}, 0xc) 1.985139849s ago: executing program 3 (id=966): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d40), &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2042}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x500000000000000) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000a00)=""/239, 0x4d, 0xef, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a04000004000000ff0f0000d200000012000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x20, &(0x7f00000008c0)={&(0x7f00000006c0)=""/226, 0xe2, 0x0, &(0x7f00000007c0)=""/244, 0xf4}}, 0x10) 1.945310331s ago: executing program 1 (id=967): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x108a91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000ffffffff7fffffff00000000530000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum64={0x9, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x9, 0x400}, {0xb, 0xfffffc00, 0x6}, {0x3, 0x2, 0x2}, {0x1, 0x0, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x0, 0x61, 0x30]}}, &(0x7f00000007c0)=""/84, 0x5c, 0x54, 0x0, 0xd1, 0x10000}, 0x28) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x9, 0x40, 0x1cd, 0x30880, r3, 0x2, '\x00', 0x0, r4, 0x0, 0x1, 0x1, 0x3, @void, @value, @value=r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r6, &(0x7f0000000a80), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7, r2}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r11, 0x400454dc, &(0x7f0000000280)) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x2d, 0x0, 0x3, 0xffffeffc}, {0x15, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000200)) 1.813278547s ago: executing program 4 (id=968): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180900000000000000000000060000008500000061000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000060000000000000000b00000055119c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1901], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x21) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r7) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x6, 0x8, 0x9, 0x0, 0xfc, 0x4000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x6, 0xfffffff3, 0x8, 0x7, 0x7f, 0x4, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(0x3) 1.812730307s ago: executing program 3 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.796912607s ago: executing program 3 (id=970): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000500000004"], 0x48) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdaa00000000000071101b00000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000090000000300000006000093010000000100000003000200010000000200000007000000010000000500000009000000030011000500000002000000030000000400000078000000000000000c0000000a00000002d30000002e61615f5f61"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) 1.645909384s ago: executing program 3 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(r0, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) openat$cgroup_int(r2, &(0x7f0000000500)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xc3, 0x8, 0x2}, @initr0, @exit]}, &(0x7f0000000700)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}, @union={0xc, 0x8, 0x0, 0x5, 0x0, 0xfff, [{0x2, 0x2, 0x4}, {0x9, 0x3, 0x8}, {0x4, 0x1, 0x4}, {0x0, 0x3, 0x8a}, {0x8, 0x3, 0x8}, {0xe, 0x0, 0x80000001}, {0x8, 0x3, 0x2}, {0x2, 0x4}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x26, 0x2}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x5f, 0x61, 0x18fddcbbf1a6cc39, 0x0]}}, &(0x7f0000000740)=""/107, 0xbb, 0x6b, 0x0, 0x8000000, 0x10000}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}, @enum64={0x7, 0x3, 0x0, 0x13, 0x0, 0x7, [{0x9, 0x9, 0x7fffffff}, {0x9}, {0x101, 0x7, 0x3}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0xa, 0x2}, {0x1, 0x5}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000940)=""/115, 0x88, 0x73, 0x0, 0xfff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0xc, 0x6, 0x2, 0x8012, r5, 0x2d6a, '\x00', 0x0, r7, 0x3, 0x2, 0x5, 0x0, @value=r8}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000080000000000000000000000085000000080000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 1.5374067s ago: executing program 3 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x10, 0x0, 0x14, &(0x7f00000001c0)) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) 1.53405007s ago: executing program 2 (id=902): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000001340)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x112245, 0x0, 0x7ffffffd, 0x5, 0x2, 0x1, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x81b) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f00000000c0)="e10a549d7d24e51d1fee8534297aab99", &(0x7f0000000100)=""/102}, 0x20) 1.405538395s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) 572.139533ms ago: executing program 4 (id=973): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff0000003c6100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 571.509613ms ago: executing program 1 (id=974): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d40), &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES16=r0, @ANYRES32=0xee01, @ANYRES64=r1], 0x38}, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2042}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) close(r4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111e", 0x0, 0x0, 0x0, 0x4000}, 0x38) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000002c0)=""/119, &(0x7f0000000540)="9270febf44dad838d304772691943c579fb87a4e9c631e2a2bcbc9cc12138a399e6fa672ee558c2ea3ce6d249dff05162d0f50bf5c3daaffbf08abfca05dfce2a460fbf5b39ea9420e24274b35ab65bb5ef28934f68b0aa99194aac07bb3eb2b825d568740c5e0a0ec568b3c021b817975710fab18f0f6372fc14e9b5e7f00ab8648d067c00e11ec29301c6cf5be78eca7b29307a40e419d191bf81c37236c4d88087f25a229bcb743743f564084ca5e4f", &(0x7f0000000340)="842ba89debdf5295beecd77b767e18951b98417ef47b7cfb4d3162", 0x8, r9}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="b10000002b5f6b474e18f66f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000a00)=""/239, 0x4d, 0xef, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a04000004000000ff0f0000d200000012000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r10, 0x20, &(0x7f00000008c0)={&(0x7f00000006c0)=""/226, 0xe2, 0x0, &(0x7f00000007c0)=""/244, 0xf4}}, 0x10) 571.166244ms ago: executing program 2 (id=902): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000001340)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x112245, 0x0, 0x7ffffffd, 0x5, 0x2, 0x1, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x81b) openat$cgroup_ro(r5, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f00000000c0)="e10a549d7d24e51d1fee8534297aab99", &(0x7f0000000100)=""/102}, 0x20) 70.008637ms ago: executing program 3 (id=975): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000dbef2db1ba4443e1676f97eb61e3f469783c6eb4d0afe87c909117ad679b81a43fc006c0801e7e892f43de0a1240c91d3100dacedf7bde630eb9d5e465b8b12505000000f63d10f97001f2ffe45378bd8ffc6640f0190693050f0bca04d48be3cd0e31250f4470f1013bd7a854a909243f2a25bdb99ceb4f42b2dc2e816c05949da521b29273fe5b8332317b9ae7ac4943802f67b6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="4f8ae4b6233c13dc352d7bbe81064ae7ff1387490deda7b9a311058224f41621717b95076b3aad23d70f6f60afaa7e8bb1266d0d174de2b96fb0425ee11f8fdf7d5c9de08fd28280c2c7deca09797b8314174612b8a86058b633c5d3130f6a4d88fdd2bd50ff3694ee961dd09f7e036ed53ac0b20cceaf0c676711ee46dc94402e7e2c00cb1d3803389e77bb806773eab1bf1087fd77d668d508263d69545ab3159b43", &(0x7f00000001c0)=""/7, &(0x7f0000000280)="3e56859b9c245aa2d77f0a", &(0x7f00000002c0)="915276672b406e9e88a15614c4c501c1047eeb0b812a715d4f66acdc4b17b23bc08ad9d1eb2086dd5f7fbc720cbaa5545eb63b886073a7e47ab963498b7f82a8f5a6131b43badb30e880f2e7c6240e9c7769bd0c3a7b8b42075caf756e312d90679be8b9bb6c7b26fc9d7f534f925498b83ae2", 0x534a, r6}, 0x38) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) 68.651197ms ago: executing program 1 (id=976): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d40), &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2042}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (fail_nth: 23) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000a00)=""/239, 0x4d, 0xef, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a04000004000000ff0f0000d200000012000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x20, &(0x7f00000008c0)={&(0x7f00000006c0)=""/226, 0xe2, 0x0, &(0x7f00000007c0)=""/244, 0xf4}}, 0x10) 68.195447ms ago: executing program 4 (id=977): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 0 (id=745): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=@raw=[@generic={0x2, 0xd, 0x0, 0x5, 0x6}], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00}, 0x94) kernel console output (not intermixed with test programs): 8 ff ff ff f7 d8 64 89 01 48 [ 97.506883][ T3217] RSP: 002b:00007ffaa6956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 97.515335][ T3217] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 97.523425][ T3217] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 97.531430][ T3217] RBP: 00007ffaa6956090 R08: 0000000000000000 R09: 0000000000000000 [ 97.539429][ T3217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.547434][ T3217] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffce1d41648 [ 97.555427][ T3217] [ 97.747162][ T28] audit: type=1400 audit(1789144598.188:149): avc: denied { create } for pid=3229 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.753352][ T3245] device syzkaller0 entered promiscuous mode [ 99.090345][ T3268] FAULT_INJECTION: forcing a failure. [ 99.090345][ T3268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.139814][ T3268] CPU: 1 PID: 3268 Comm: syz.2.747 Not tainted syzkaller #0 [ 99.147170][ T3268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.157261][ T3268] Call Trace: [ 99.160566][ T3268] [ 99.163518][ T3268] __dump_stack+0x21/0x24 [ 99.167882][ T3268] dump_stack_lvl+0x110/0x170 [ 99.172588][ T3268] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.177636][ T3268] ? debug_smp_processor_id+0x17/0x20 [ 99.183030][ T3268] ? try_charge_memcg+0x258/0x1650 [ 99.188160][ T3268] dump_stack+0x15/0x24 [ 99.192333][ T3268] should_fail_ex+0x3bf/0x510 [ 99.197036][ T3268] should_fail_alloc_page+0x61/0x90 [ 99.202259][ T3268] prepare_alloc_pages+0x131/0x570 [ 99.207396][ T3268] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 99.212613][ T3268] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 99.218786][ T3268] __alloc_pages+0x15b/0x610 [ 99.223398][ T3268] ? __cfi___alloc_pages+0x10/0x10 [ 99.228619][ T3268] ? folio_add_lru+0x2d6/0x650 [ 99.233404][ T3268] ? __cfi_folio_add_lru+0x10/0x10 [ 99.238547][ T3268] __folio_alloc+0x12/0x40 [ 99.242986][ T3268] wp_page_copy+0x258/0x1490 [ 99.247598][ T3268] ? fault_dirty_shared_page+0x310/0x310 [ 99.253251][ T3268] ? preempt_count_add+0x42/0x1b0 [ 99.258288][ T3268] ? vm_normal_page+0x1eb/0x200 [ 99.263159][ T3268] do_wp_page+0x9b5/0xf70 [ 99.267508][ T3268] handle_mm_fault+0x114f/0x26b0 [ 99.272461][ T3268] ? __cfi_handle_mm_fault+0x10/0x10 [ 99.277756][ T3268] ? down_read_trylock+0x27f/0x660 [ 99.282892][ T3268] ? lock_mm_and_find_vma+0x9e/0x320 [ 99.288188][ T3268] ? do_user_addr_fault+0x2eb/0x1030 [ 99.293498][ T3268] do_user_addr_fault+0x61e/0x1030 [ 99.298633][ T3268] exc_page_fault+0x51/0xb0 [ 99.303155][ T3268] asm_exc_page_fault+0x27/0x30 [ 99.308017][ T3268] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 99.314646][ T3268] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 99.334262][ T3268] RSP: 0018:ffffc9000dcff6a0 EFLAGS: 00050206 [ 99.340373][ T3268] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 000000000000b5d0 [ 99.348365][ T3268] RDX: 00000000000101d0 RSI: ffff888128084cc8 RDI: 0000200000005000 [ 99.356370][ T3268] RBP: ffffc9000dcff6d0 R08: ffff888128090297 R09: 1ffff11025012052 [ 99.364353][ T3268] R10: dffffc0000000000 R11: ffffed1025012053 R12: 00007ffffffeee30 [ 99.372359][ T3268] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881280800c8 [ 99.380346][ T3268] ? copy_pipe_to_iter+0xf1/0x150 [ 99.385404][ T3268] ? copyout+0x82/0xa0 [ 99.389489][ T3268] _copy_to_iter+0x3ce/0xe60 [ 99.394102][ T3268] ? __cfi__copy_to_iter+0x10/0x10 [ 99.399233][ T3268] ? irqentry_exit+0x37/0x40 [ 99.403942][ T3268] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 99.409764][ T3268] ? __kasan_check_read+0x11/0x20 [ 99.414802][ T3268] ? __check_object_size+0x45a/0x600 [ 99.420100][ T3268] simple_copy_to_iter+0x50/0x70 [ 99.425057][ T3268] __skb_datagram_iter+0xf1/0x730 [ 99.430111][ T3268] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 99.435595][ T3268] ? tsk_importance+0x150/0x150 [ 99.440465][ T3268] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 99.446117][ T3268] skb_copy_datagram_iter+0x40/0x150 [ 99.451434][ T3268] tipc_recvstream+0x703/0xe70 [ 99.456228][ T3268] ? __cfi_tipc_recvstream+0x10/0x10 [ 99.461559][ T3268] ____sys_recvmsg+0x2d6/0x5c0 [ 99.466346][ T3268] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 99.472523][ T3268] ? __sys_recvmsg_sock+0x50/0x50 [ 99.477574][ T3268] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 99.483145][ T3268] ? import_iovec+0x7c/0xb0 [ 99.487663][ T3268] ___sys_recvmsg+0x210/0x590 [ 99.492370][ T3268] ? __sys_recvmsg+0x290/0x290 [ 99.497156][ T3268] ? enqueue_hrtimer+0xcd/0x250 [ 99.502021][ T3268] ? __fget_files+0x2d1/0x330 [ 99.506808][ T3268] ? __fdget+0x19c/0x220 [ 99.511070][ T3268] __x64_sys_recvmsg+0x20a/0x2e0 [ 99.516035][ T3268] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 99.521543][ T3268] ? sched_clock_cpu+0x6e/0x260 [ 99.526419][ T3268] ? debug_smp_processor_id+0x17/0x20 [ 99.531815][ T3268] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 99.537901][ T3268] x64_sys_call+0x75/0x9a0 [ 99.542344][ T3268] do_syscall_64+0x4c/0xa0 [ 99.546781][ T3268] ? clear_bhb_loop+0x30/0x80 [ 99.551494][ T3268] ? clear_bhb_loop+0x30/0x80 [ 99.556185][ T3268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.562104][ T3268] RIP: 0033:0x7ffaa599e159 [ 99.566529][ T3268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.586146][ T3268] RSP: 002b:00007ffaa6956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 99.594573][ T3268] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 99.602556][ T3268] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 99.610542][ T3268] RBP: 00007ffaa6956090 R08: 0000000000000000 R09: 0000000000000000 [ 99.618618][ T3268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.626613][ T3268] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffce1d41648 [ 99.634613][ T3268] [ 99.991983][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.001415][ T3284] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.010728][ T3284] device bridge_slave_0 entered promiscuous mode [ 100.019568][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.038363][ T3284] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.063961][ T3284] device bridge_slave_1 entered promiscuous mode [ 100.590907][ T28] audit: type=1400 audit(1789144601.028:150): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.657052][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.664178][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.671539][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.678645][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.682064][ T3365] FAULT_INJECTION: forcing a failure. [ 100.682064][ T3365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.704292][ T28] audit: type=1400 audit(1789144601.068:151): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.729375][ T3365] CPU: 0 PID: 3365 Comm: syz.1.761 Not tainted syzkaller #0 [ 100.736731][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.746982][ T3365] Call Trace: [ 100.750303][ T3365] [ 100.753334][ T3365] __dump_stack+0x21/0x24 [ 100.757719][ T3365] dump_stack_lvl+0x110/0x170 [ 100.762452][ T3365] ? __cfi_dump_stack_lvl+0x8/0x8 [ 100.767620][ T3365] ? debug_smp_processor_id+0x17/0x20 [ 100.773037][ T3365] ? try_charge_memcg+0x258/0x1650 [ 100.778202][ T3365] dump_stack+0x15/0x24 [ 100.782407][ T3365] should_fail_ex+0x3bf/0x510 [ 100.787136][ T3365] should_fail_alloc_page+0x61/0x90 [ 100.792427][ T3365] prepare_alloc_pages+0x131/0x570 [ 100.797589][ T3365] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 100.802837][ T3365] ? cgroup_rstat_updated+0xf0/0x360 [ 100.808168][ T3365] __alloc_pages+0x15b/0x610 [ 100.812815][ T3365] ? __cfi___alloc_pages+0x10/0x10 [ 100.817974][ T3365] ? folio_add_lru+0x2d6/0x650 [ 100.822790][ T3365] ? __cfi_folio_add_lru+0x10/0x10 [ 100.827957][ T3365] __folio_alloc+0x12/0x40 [ 100.832438][ T3365] wp_page_copy+0x258/0x1490 [ 100.837121][ T3365] ? fault_dirty_shared_page+0x310/0x310 [ 100.842837][ T3365] ? vm_normal_page+0x1eb/0x200 [ 100.847733][ T3365] do_wp_page+0x9b5/0xf70 [ 100.852100][ T3365] handle_mm_fault+0x114f/0x26b0 [ 100.857073][ T3365] ? __cfi_handle_mm_fault+0x10/0x10 [ 100.862387][ T3365] ? down_read_trylock+0x27f/0x660 [ 100.867565][ T3365] ? lock_mm_and_find_vma+0x9e/0x320 [ 100.872894][ T3365] ? do_user_addr_fault+0x2eb/0x1030 [ 100.878229][ T3365] do_user_addr_fault+0x61e/0x1030 [ 100.883437][ T3365] exc_page_fault+0x51/0xb0 [ 100.887980][ T3365] asm_exc_page_fault+0x27/0x30 [ 100.892913][ T3365] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 100.899552][ T3365] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 100.919195][ T3365] RSP: 0018:ffffc900013276a0 EFLAGS: 00050206 [ 100.925302][ T3365] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 000000000000a5d0 [ 100.933312][ T3365] RDX: 00000000000101d0 RSI: ffff888127bc5cc8 RDI: 0000200000006000 [ 100.941326][ T3365] RBP: ffffc900013276d0 R08: ffff888127bd0297 R09: 1ffff11024f7a052 [ 100.949341][ T3365] R10: dffffc0000000000 R11: ffffed1024f7a053 R12: 00007ffffffeee30 [ 100.957374][ T3365] R13: 0000000000010100 R14: 0000200000000400 R15: ffff888127bc00c8 [ 100.965409][ T3365] ? copy_pipe_to_iter+0xf1/0x150 [ 100.970537][ T3365] ? copyout+0x82/0xa0 [ 100.974657][ T3365] _copy_to_iter+0x3ce/0xe60 [ 100.979316][ T3365] ? __cfi__copy_to_iter+0x10/0x10 [ 100.984492][ T3365] ? irqentry_exit+0x37/0x40 [ 100.989122][ T3365] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 100.994976][ T3365] ? __kasan_check_read+0x11/0x20 [ 101.000037][ T3365] ? __check_object_size+0x45a/0x600 [ 101.005369][ T3365] simple_copy_to_iter+0x50/0x70 [ 101.010364][ T3365] __skb_datagram_iter+0xf1/0x730 [ 101.015451][ T3365] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 101.020996][ T3365] ? tsk_importance+0x150/0x150 [ 101.025893][ T3365] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 101.031578][ T3365] skb_copy_datagram_iter+0x40/0x150 [ 101.036911][ T3365] tipc_recvstream+0x703/0xe70 [ 101.041719][ T3365] ? __cfi_tipc_recvstream+0x10/0x10 [ 101.047040][ T3365] ____sys_recvmsg+0x2d6/0x5c0 [ 101.051841][ T3365] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 101.058026][ T3365] ? __sys_recvmsg_sock+0x50/0x50 [ 101.063086][ T3365] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 101.068670][ T3365] ? import_iovec+0x7c/0xb0 [ 101.073205][ T3365] ___sys_recvmsg+0x210/0x590 [ 101.077920][ T3365] ? __sys_recvmsg+0x290/0x290 [ 101.082722][ T3365] ? enqueue_hrtimer+0xcd/0x250 [ 101.087608][ T3365] ? __fget_files+0x2d1/0x330 [ 101.092316][ T3365] ? __fdget+0x19c/0x220 [ 101.096591][ T3365] __x64_sys_recvmsg+0x20a/0x2e0 [ 101.101568][ T3365] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 101.107056][ T3365] ? sched_clock_cpu+0x6e/0x260 [ 101.111933][ T3365] ? debug_smp_processor_id+0x17/0x20 [ 101.117325][ T3365] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 101.123424][ T3365] x64_sys_call+0x75/0x9a0 [ 101.127896][ T3365] do_syscall_64+0x4c/0xa0 [ 101.132344][ T3365] ? clear_bhb_loop+0x30/0x80 [ 101.137044][ T3365] ? clear_bhb_loop+0x30/0x80 [ 101.141827][ T3365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.147738][ T3365] RIP: 0033:0x7fbf9679e159 [ 101.152173][ T3365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.171879][ T3365] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 101.180310][ T3365] RAX: ffffffffffffffda RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 101.188296][ T3365] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 101.196280][ T3365] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 101.204266][ T3365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.212252][ T3365] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 101.220262][ T3365] [ 101.355003][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.362907][ T1763] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.393246][ T1763] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.443058][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.451587][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.459968][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.467062][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.476190][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.485219][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.493564][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.500673][ T1765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.513050][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.522323][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.530748][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.539475][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.554840][ T1779] device team_slave_1 left promiscuous mode [ 101.561176][ T1779] bridge0: port 3(team_slave_1) entered disabled state [ 101.569098][ T1779] device bridge_slave_1 left promiscuous mode [ 101.576406][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.589780][ T1779] device bridge_slave_0 left promiscuous mode [ 101.596559][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.617157][ T1779] device veth1_macvtap left promiscuous mode [ 101.750134][ T28] audit: type=1400 audit(1789144602.188:152): avc: denied { create } for pid=3392 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.794859][ T3385] device syzkaller0 entered promiscuous mode [ 101.821604][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.831663][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.869741][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.884497][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.925014][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.939215][ T28] audit: type=1400 audit(1789144602.378:153): avc: denied { setattr } for pid=3410 comm="syz.2.775" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.954123][ T3409] FAULT_INJECTION: forcing a failure. [ 101.954123][ T3409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.987032][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.028821][ T3409] CPU: 1 PID: 3409 Comm: syz.4.774 Not tainted syzkaller #0 [ 102.032153][ T3284] device veth0_vlan entered promiscuous mode [ 102.036168][ T3409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.036181][ T3409] Call Trace: [ 102.036187][ T3409] [ 102.036194][ T3409] __dump_stack+0x21/0x24 [ 102.063047][ T3409] dump_stack_lvl+0x110/0x170 [ 102.067775][ T3409] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.072851][ T3409] ? debug_smp_processor_id+0x17/0x20 [ 102.078266][ T3409] ? try_charge_memcg+0x258/0x1650 [ 102.083457][ T3409] dump_stack+0x15/0x24 [ 102.087660][ T3409] should_fail_ex+0x3bf/0x510 [ 102.092372][ T3409] should_fail_alloc_page+0x61/0x90 [ 102.097637][ T3409] prepare_alloc_pages+0x131/0x570 [ 102.102804][ T3409] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 102.108057][ T3409] ? cgroup_rstat_updated+0xf0/0x360 [ 102.113379][ T3409] __alloc_pages+0x15b/0x610 [ 102.118001][ T3409] ? __cfi___alloc_pages+0x10/0x10 [ 102.121217][ T3284] device veth1_macvtap entered promiscuous mode [ 102.123154][ T3409] ? folio_add_lru+0x2d6/0x650 [ 102.134385][ T3409] ? __cfi_folio_add_lru+0x10/0x10 [ 102.139543][ T3409] __folio_alloc+0x12/0x40 [ 102.144002][ T3409] wp_page_copy+0x258/0x1490 [ 102.148637][ T3409] ? fault_dirty_shared_page+0x310/0x310 [ 102.154304][ T3409] ? __sanitizer_cov_trace_pc+0x5d/0x60 [ 102.159902][ T3409] ? vm_normal_page+0x1eb/0x200 [ 102.164798][ T3409] do_wp_page+0x9b5/0xf70 [ 102.169186][ T3409] handle_mm_fault+0x114f/0x26b0 [ 102.174159][ T3409] ? __cfi_handle_mm_fault+0x10/0x10 [ 102.179477][ T3409] ? down_read_trylock+0x27f/0x660 [ 102.184652][ T3409] ? lock_mm_and_find_vma+0x9e/0x320 [ 102.189981][ T3409] ? do_user_addr_fault+0x2eb/0x1030 [ 102.195309][ T3409] do_user_addr_fault+0x61e/0x1030 [ 102.200462][ T3409] exc_page_fault+0x51/0xb0 [ 102.205004][ T3409] asm_exc_page_fault+0x27/0x30 [ 102.209897][ T3409] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 102.216615][ T3409] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 102.236257][ T3409] RSP: 0018:ffffc900009e76a0 EFLAGS: 00050206 [ 102.242363][ T3409] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000095d0 [ 102.250371][ T3409] RDX: 00000000000101d0 RSI: ffff888127c46cc8 RDI: 0000200000007000 [ 102.258380][ T3409] RBP: ffffc900009e76d0 R08: ffff888127c50297 R09: 1ffff11024f8a052 [ 102.266566][ T3409] R10: dffffc0000000000 R11: ffffed1024f8a053 R12: 00007ffffffeee30 [ 102.274575][ T3409] R13: 0000000000010100 R14: 0000200000000400 R15: ffff888127c400c8 [ 102.282618][ T3409] ? copy_pipe_to_iter+0xf1/0x150 [ 102.287695][ T3409] ? copyout+0x82/0xa0 [ 102.291815][ T3409] _copy_to_iter+0x3ce/0xe60 [ 102.296458][ T3409] ? __cfi__copy_to_iter+0x10/0x10 [ 102.301604][ T3409] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 102.307789][ T3409] ? __check_object_size+0x45a/0x600 [ 102.313109][ T3409] simple_copy_to_iter+0x50/0x70 [ 102.318133][ T3409] __skb_datagram_iter+0xf1/0x730 [ 102.323287][ T3409] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 102.329134][ T3409] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 102.334808][ T3409] skb_copy_datagram_iter+0x40/0x150 [ 102.340131][ T3409] tipc_recvstream+0x703/0xe70 [ 102.344928][ T3409] ? __cfi_tipc_recvstream+0x10/0x10 [ 102.350238][ T3409] ____sys_recvmsg+0x2d6/0x5c0 [ 102.355029][ T3409] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 102.361205][ T3409] ? __sys_recvmsg_sock+0x50/0x50 [ 102.366270][ T3409] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 102.371754][ T3409] ? import_iovec+0x7c/0xb0 [ 102.376278][ T3409] ___sys_recvmsg+0x210/0x590 [ 102.380998][ T3409] ? irqentry_exit+0x37/0x40 [ 102.385625][ T3409] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 102.391446][ T3409] ? __sys_recvmsg+0x290/0x290 [ 102.396243][ T3409] ? __fget_files+0x2d1/0x330 [ 102.400942][ T3409] ? __fdget+0x19c/0x220 [ 102.405204][ T3409] __x64_sys_recvmsg+0x20a/0x2e0 [ 102.410168][ T3409] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 102.415656][ T3409] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 102.421750][ T3409] x64_sys_call+0x75/0x9a0 [ 102.426188][ T3409] do_syscall_64+0x4c/0xa0 [ 102.430629][ T3409] ? clear_bhb_loop+0x30/0x80 [ 102.435328][ T3409] ? clear_bhb_loop+0x30/0x80 [ 102.440032][ T3409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.445942][ T3409] RIP: 0033:0x7fd948d9e159 [ 102.450374][ T3409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.469995][ T3409] RSP: 002b:00007fd949c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 102.478426][ T3409] RAX: ffffffffffffffda RBX: 00007fd949025fa0 RCX: 00007fd948d9e159 [ 102.486433][ T3409] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 102.494455][ T3409] RBP: 00007fd949c24090 R08: 0000000000000000 R09: 0000000000000000 [ 102.502457][ T3409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.510459][ T3409] R13: 00007fd949026038 R14: 00007fd949025fa0 R15: 00007ffe2bda20b8 [ 102.518491][ T3409] [ 102.582449][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.591043][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.599641][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.607938][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.616500][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.625530][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.634412][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.840815][ T3446] device syzkaller0 entered promiscuous mode [ 103.217064][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.224197][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.232129][ T3459] device bridge_slave_0 entered promiscuous mode [ 103.239739][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.247020][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.254645][ T3459] device bridge_slave_1 entered promiscuous mode [ 103.432857][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.439998][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.447351][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.454414][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.468830][ T1779] device bridge_slave_1 left promiscuous mode [ 103.475200][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.495738][ T1779] device bridge_slave_0 left promiscuous mode [ 103.501931][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.510612][ T1779] device veth1_macvtap left promiscuous mode [ 103.522880][ T1779] device veth0_vlan left promiscuous mode [ 103.685159][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.693418][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.761599][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.769435][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.777137][ T3476] FAULT_INJECTION: forcing a failure. [ 103.777137][ T3476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.797472][ T3476] CPU: 0 PID: 3476 Comm: syz.2.791 Not tainted syzkaller #0 [ 103.804825][ T3476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.814911][ T3476] Call Trace: [ 103.816705][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.818258][ T3476] [ 103.818268][ T3476] __dump_stack+0x21/0x24 [ 103.833810][ T3476] dump_stack_lvl+0x110/0x170 [ 103.838536][ T3476] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.843692][ T3476] ? _raw_spin_unlock+0x4c/0x70 [ 103.848718][ T3476] ? switch_mm_irqs_off+0x730/0x960 [ 103.850811][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.853949][ T3476] dump_stack+0x15/0x24 [ 103.866107][ T3476] should_fail_ex+0x3bf/0x510 [ 103.870824][ T3476] should_fail_alloc_page+0x61/0x90 [ 103.871765][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.876059][ T3476] prepare_alloc_pages+0x131/0x570 [ 103.883122][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.888237][ T3476] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 103.896089][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.900758][ T3476] __alloc_pages+0x15b/0x610 [ 103.913419][ T3476] ? __cfi___alloc_pages+0x10/0x10 [ 103.918584][ T3476] ? irqentry_exit+0x37/0x40 [ 103.923215][ T3476] ? memset_erms+0xb/0x10 [ 103.927572][ T3476] __folio_alloc+0x12/0x40 [ 103.932032][ T3476] wp_page_copy+0x258/0x1490 [ 103.936694][ T3476] ? __kernel_text_address+0xd/0x30 [ 103.941938][ T3476] ? fault_dirty_shared_page+0x310/0x310 [ 103.942777][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.947602][ T3476] ? vm_normal_page+0x1eb/0x200 [ 103.947632][ T3476] do_wp_page+0x9b5/0xf70 [ 103.964812][ T3476] handle_mm_fault+0x114f/0x26b0 [ 103.969794][ T3476] ? __cfi_handle_mm_fault+0x10/0x10 [ 103.975107][ T3476] ? down_read_trylock+0x27f/0x660 [ 103.975830][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.980263][ T3476] ? lock_mm_and_find_vma+0x9e/0x320 [ 103.987508][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.992769][ T3476] ? do_user_addr_fault+0x2eb/0x1030 [ 104.005345][ T3476] do_user_addr_fault+0x61e/0x1030 [ 104.010512][ T3476] exc_page_fault+0x51/0xb0 [ 104.015054][ T3476] asm_exc_page_fault+0x27/0x30 [ 104.019970][ T3476] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 104.026599][ T3476] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 104.046247][ T3476] RSP: 0018:ffffc90000b576a0 EFLAGS: 00050206 [ 104.052349][ T3476] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000085d0 [ 104.060342][ T3476] RDX: 00000000000101d0 RSI: ffff888126c07cc8 RDI: 0000200000008000 [ 104.068330][ T3476] RBP: ffffc90000b576d0 R08: ffff888126c10297 R09: 1ffff11024d82052 [ 104.076325][ T3476] R10: dffffc0000000000 R11: ffffed1024d82053 R12: 00007ffffffeee30 [ 104.084317][ T3476] R13: 0000000000010100 R14: 0000200000000400 R15: ffff888126c000c8 [ 104.092311][ T3476] ? copy_pipe_to_iter+0xf1/0x150 [ 104.097376][ T3476] ? copyout+0x82/0xa0 [ 104.101496][ T3476] _copy_to_iter+0x3ce/0xe60 [ 104.106121][ T3476] ? __cfi__copy_to_iter+0x10/0x10 [ 104.111273][ T3476] ? schedule+0xd4/0x170 [ 104.115547][ T3476] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 104.121414][ T3476] ? __kasan_check_read+0x11/0x20 [ 104.126465][ T3476] ? __check_object_size+0x45a/0x600 [ 104.131802][ T3476] simple_copy_to_iter+0x50/0x70 [ 104.136769][ T3476] __skb_datagram_iter+0xf1/0x730 [ 104.141823][ T3476] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 104.147489][ T3476] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 104.153154][ T3476] skb_copy_datagram_iter+0x40/0x150 [ 104.158473][ T3476] tipc_recvstream+0x703/0xe70 [ 104.163278][ T3476] ? __cfi_tipc_recvstream+0x10/0x10 [ 104.168597][ T3476] ____sys_recvmsg+0x2d6/0x5c0 [ 104.173400][ T3476] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 104.179587][ T3476] ? __sys_recvmsg_sock+0x50/0x50 [ 104.184659][ T3476] ? __sanitizer_cov_trace_cmp8+0x1/0x80 [ 104.190329][ T3476] ? import_iovec+0x7c/0xb0 [ 104.194859][ T3476] ___sys_recvmsg+0x210/0x590 [ 104.199576][ T3476] ? __sys_recvmsg+0x290/0x290 [ 104.204367][ T3476] ? enqueue_hrtimer+0xcd/0x250 [ 104.209246][ T3476] ? __fget_files+0x2d1/0x330 [ 104.213950][ T3476] ? __fdget+0x19c/0x220 [ 104.218218][ T3476] __x64_sys_recvmsg+0x20a/0x2e0 [ 104.223188][ T3476] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 104.228676][ T3476] ? sched_clock_cpu+0x6e/0x260 [ 104.233555][ T3476] ? debug_smp_processor_id+0x17/0x20 [ 104.238980][ T3476] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 104.245084][ T3476] x64_sys_call+0x75/0x9a0 [ 104.249681][ T3476] do_syscall_64+0x4c/0xa0 [ 104.254136][ T3476] ? clear_bhb_loop+0x30/0x80 [ 104.258866][ T3476] ? clear_bhb_loop+0x30/0x80 [ 104.263575][ T3476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.269501][ T3476] RIP: 0033:0x7ffaa599e159 [ 104.273942][ T3476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.293566][ T3476] RSP: 002b:00007ffaa6956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 104.302008][ T3476] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 104.310006][ T3476] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 104.318009][ T3476] RBP: 00007ffaa6956090 R08: 0000000000000000 R09: 0000000000000000 [ 104.326007][ T3476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.334103][ T3476] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffce1d41648 [ 104.342106][ T3476] [ 104.366426][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.374664][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.408814][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.419950][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.449634][ T3459] device veth0_vlan entered promiscuous mode [ 104.498251][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.506951][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.515525][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.523450][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.737762][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.745518][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.856694][ T3459] device veth1_macvtap entered promiscuous mode [ 104.989547][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.000281][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.013303][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.013826][ T28] audit: type=1400 audit(1789144605.448:154): avc: denied { create } for pid=3500 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.026367][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.085389][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.105168][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.113582][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.339279][ T3509] tap0: tun_chr_ioctl cmd 1074025677 [ 105.344680][ T3509] tap0: linktype set to 804 [ 105.690103][ T3526] device syzkaller0 entered promiscuous mode [ 105.727833][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.735074][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.742710][ T3522] device bridge_slave_0 entered promiscuous mode [ 105.743226][ T3531] FAULT_INJECTION: forcing a failure. [ 105.743226][ T3531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.751084][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.770329][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.778235][ T3522] device bridge_slave_1 entered promiscuous mode [ 105.784941][ T3531] CPU: 1 PID: 3531 Comm: syz.3.806 Not tainted syzkaller #0 [ 105.792265][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.802344][ T3531] Call Trace: [ 105.805651][ T3531] [ 105.808612][ T3531] __dump_stack+0x21/0x24 [ 105.812987][ T3531] dump_stack_lvl+0x110/0x170 [ 105.817709][ T3531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 105.822807][ T3531] ? debug_smp_processor_id+0x17/0x20 [ 105.828220][ T3531] ? try_charge_memcg+0x258/0x1650 [ 105.833369][ T3531] dump_stack+0x15/0x24 [ 105.837597][ T3531] should_fail_ex+0x3bf/0x510 [ 105.842308][ T3531] should_fail_alloc_page+0x61/0x90 [ 105.847545][ T3531] prepare_alloc_pages+0x131/0x570 [ 105.852699][ T3531] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 105.857935][ T3531] ? cgroup_rstat_updated+0xf0/0x360 [ 105.863255][ T3531] __alloc_pages+0x15b/0x610 [ 105.867885][ T3531] ? __cfi___alloc_pages+0x10/0x10 [ 105.873043][ T3531] ? folio_add_lru+0x2d6/0x650 [ 105.877855][ T3531] ? __cfi_folio_add_lru+0x10/0x10 [ 105.883012][ T3531] __folio_alloc+0x12/0x40 [ 105.887490][ T3531] wp_page_copy+0x258/0x1490 [ 105.892118][ T3531] ? fault_dirty_shared_page+0x310/0x310 [ 105.897790][ T3531] ? vm_normal_page+0x1eb/0x200 [ 105.902681][ T3531] do_wp_page+0x9b5/0xf70 [ 105.907048][ T3531] handle_mm_fault+0x114f/0x26b0 [ 105.912028][ T3531] ? __cfi_handle_mm_fault+0x10/0x10 [ 105.917350][ T3531] ? down_read_trylock+0x27f/0x660 [ 105.922591][ T3531] ? lock_mm_and_find_vma+0x9e/0x320 [ 105.927909][ T3531] ? do_user_addr_fault+0x2eb/0x1030 [ 105.933232][ T3531] do_user_addr_fault+0x61e/0x1030 [ 105.938424][ T3531] exc_page_fault+0x51/0xb0 [ 105.942961][ T3531] asm_exc_page_fault+0x27/0x30 [ 105.947937][ T3531] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 105.954574][ T3531] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 105.974218][ T3531] RSP: 0018:ffffc90007b8f6a0 EFLAGS: 00050206 [ 105.980361][ T3531] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000075d0 [ 105.988369][ T3531] RDX: 00000000000101d0 RSI: ffff888125328cc8 RDI: 0000200000009000 [ 105.996369][ T3531] RBP: ffffc90007b8f6d0 R08: ffff888125330297 R09: 1ffff11024a66052 [ 106.004374][ T3531] R10: dffffc0000000000 R11: ffffed1024a66053 R12: 00007ffffffeee30 [ 106.012388][ T3531] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881253200c8 [ 106.020406][ T3531] ? copy_pipe_to_iter+0xf1/0x150 [ 106.025490][ T3531] ? copyout+0x82/0xa0 [ 106.029613][ T3531] _copy_to_iter+0x3ce/0xe60 [ 106.034251][ T3531] ? __cfi__copy_to_iter+0x10/0x10 [ 106.039379][ T3531] ? __kasan_check_read+0x11/0x20 [ 106.044410][ T3531] ? __check_object_size+0x45a/0x600 [ 106.049703][ T3531] simple_copy_to_iter+0x50/0x70 [ 106.054654][ T3531] __skb_datagram_iter+0xf1/0x730 [ 106.059710][ T3531] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 106.065181][ T3531] ? tsk_importance+0x150/0x150 [ 106.070040][ T3531] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 106.075726][ T3531] skb_copy_datagram_iter+0x40/0x150 [ 106.081056][ T3531] tipc_recvstream+0x703/0xe70 [ 106.085935][ T3531] ? __cfi_tipc_recvstream+0x10/0x10 [ 106.091254][ T3531] ____sys_recvmsg+0x2d6/0x5c0 [ 106.096116][ T3531] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 106.102282][ T3531] ? __sys_recvmsg_sock+0x50/0x50 [ 106.107340][ T3531] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 106.112814][ T3531] ? import_iovec+0x7c/0xb0 [ 106.117329][ T3531] ___sys_recvmsg+0x210/0x590 [ 106.122023][ T3531] ? __sys_recvmsg+0x290/0x290 [ 106.126824][ T3531] ? __fget_files+0x2d1/0x330 [ 106.131980][ T3531] ? __fdget+0x19c/0x220 [ 106.136225][ T3531] __x64_sys_recvmsg+0x20a/0x2e0 [ 106.141171][ T3531] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 106.146642][ T3531] ? sched_clock_cpu+0x6e/0x260 [ 106.151503][ T3531] ? debug_smp_processor_id+0x17/0x20 [ 106.156881][ T3531] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 106.162959][ T3531] x64_sys_call+0x75/0x9a0 [ 106.167392][ T3531] do_syscall_64+0x4c/0xa0 [ 106.171848][ T3531] ? clear_bhb_loop+0x30/0x80 [ 106.176545][ T3531] ? clear_bhb_loop+0x30/0x80 [ 106.181241][ T3531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.187140][ T3531] RIP: 0033:0x7fa93159e159 [ 106.191559][ T3531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.211167][ T3531] RSP: 002b:00007fa932398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 106.219585][ T3531] RAX: ffffffffffffffda RBX: 00007fa931825fa0 RCX: 00007fa93159e159 [ 106.227560][ T3531] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 106.235557][ T3531] RBP: 00007fa932398090 R08: 0000000000000000 R09: 0000000000000000 [ 106.243565][ T3531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.251542][ T3531] R13: 00007fa931826038 R14: 00007fa931825fa0 R15: 00007ffce41785f8 [ 106.259531][ T3531] [ 106.269748][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.277391][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.290202][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.298827][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.307506][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.314609][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.332362][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.345796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.354197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.362810][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.369931][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.399796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.408081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.439153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.460796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.469161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.477109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.487294][ T3522] device veth0_vlan entered promiscuous mode [ 106.552039][ T3522] device veth1_macvtap entered promiscuous mode [ 106.563721][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.618672][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.657584][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.356438][ T1779] device bridge_slave_1 left promiscuous mode [ 107.362695][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.370498][ T1779] device bridge_slave_0 left promiscuous mode [ 107.376875][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.385595][ T1779] device veth1_macvtap left promiscuous mode [ 107.391707][ T1779] device veth0_vlan left promiscuous mode [ 107.738866][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.755186][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.762828][ T3589] device bridge_slave_0 entered promiscuous mode [ 107.779133][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.786365][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.796467][ T3589] device bridge_slave_1 entered promiscuous mode [ 107.956169][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.964041][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.982967][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.033851][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.057018][ T1762] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.064233][ T1762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.081644][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.090247][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.107644][ T1762] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.114762][ T1762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.125955][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.145889][ T3615] device dummy0 entered promiscuous mode [ 108.176876][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.195215][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.211271][ T3589] device veth0_vlan entered promiscuous mode [ 108.281055][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.291557][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.299397][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.307445][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.316098][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.407241][ T3589] device veth1_macvtap entered promiscuous mode [ 108.551354][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.586581][ T1765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.786322][ T3632] FAULT_INJECTION: forcing a failure. [ 108.786322][ T3632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.841098][ T3632] CPU: 1 PID: 3632 Comm: syz.3.830 Not tainted syzkaller #0 [ 108.848463][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.858556][ T3632] Call Trace: [ 108.861861][ T3632] [ 108.864808][ T3632] __dump_stack+0x21/0x24 [ 108.869171][ T3632] dump_stack_lvl+0x110/0x170 [ 108.873870][ T3632] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.878913][ T3632] ? irqentry_exit+0x37/0x40 [ 108.883531][ T3632] dump_stack+0x15/0x24 [ 108.887733][ T3632] should_fail_ex+0x3bf/0x510 [ 108.892435][ T3632] should_fail_alloc_page+0x61/0x90 [ 108.897664][ T3632] prepare_alloc_pages+0x131/0x570 [ 108.902800][ T3632] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 108.908026][ T3632] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 108.913939][ T3632] __alloc_pages+0x15b/0x610 [ 108.918552][ T3632] ? __cfi___alloc_pages+0x10/0x10 [ 108.923690][ T3632] ? folio_add_lru+0x2d6/0x650 [ 108.928496][ T3632] ? __cfi_folio_add_lru+0x10/0x10 [ 108.933636][ T3632] __folio_alloc+0x12/0x40 [ 108.938079][ T3632] wp_page_copy+0x258/0x1490 [ 108.942687][ T3632] ? fault_dirty_shared_page+0x310/0x310 [ 108.948343][ T3632] ? vm_normal_page+0x1eb/0x200 [ 108.953222][ T3632] do_wp_page+0x9b5/0xf70 [ 108.957567][ T3632] handle_mm_fault+0x114f/0x26b0 [ 108.962522][ T3632] ? __cfi_handle_mm_fault+0x10/0x10 [ 108.967818][ T3632] ? down_read_trylock+0x27f/0x660 [ 108.972957][ T3632] ? lock_mm_and_find_vma+0x9e/0x320 [ 108.978264][ T3632] ? do_user_addr_fault+0x2eb/0x1030 [ 108.983569][ T3632] do_user_addr_fault+0x61e/0x1030 [ 108.988705][ T3632] exc_page_fault+0x51/0xb0 [ 108.993229][ T3632] asm_exc_page_fault+0x27/0x30 [ 108.998097][ T3632] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 109.004711][ T3632] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 109.024359][ T3632] RSP: 0018:ffffc90000ab76a0 EFLAGS: 00050206 [ 109.030445][ T3632] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000065d0 [ 109.038433][ T3632] RDX: 00000000000101d0 RSI: ffff8881253c9cc8 RDI: 000020000000a000 [ 109.046417][ T3632] RBP: ffffc90000ab76d0 R08: ffff8881253d0297 R09: 1ffff11024a7a052 [ 109.054402][ T3632] R10: dffffc0000000000 R11: ffffed1024a7a053 R12: 00007ffffffeee30 [ 109.062390][ T3632] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881253c00c8 [ 109.070379][ T3632] ? copy_pipe_to_iter+0xf1/0x150 [ 109.075431][ T3632] ? copyout+0x82/0xa0 [ 109.079527][ T3632] _copy_to_iter+0x3ce/0xe60 [ 109.084142][ T3632] ? __cfi__copy_to_iter+0x10/0x10 [ 109.089387][ T3632] ? check_stack_object+0x3b/0x150 [ 109.094523][ T3632] ? __kasan_check_read+0x11/0x20 [ 109.099567][ T3632] ? __check_object_size+0x45a/0x600 [ 109.104876][ T3632] simple_copy_to_iter+0x50/0x70 [ 109.109847][ T3632] __skb_datagram_iter+0xf1/0x730 [ 109.114891][ T3632] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 109.120377][ T3632] ? tsk_importance+0x150/0x150 [ 109.125251][ T3632] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 109.130907][ T3632] skb_copy_datagram_iter+0x40/0x150 [ 109.136215][ T3632] tipc_recvstream+0x703/0xe70 [ 109.141098][ T3632] ? __cfi_tipc_recvstream+0x10/0x10 [ 109.146408][ T3632] ____sys_recvmsg+0x2d6/0x5c0 [ 109.151197][ T3632] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 109.157370][ T3632] ? __sys_recvmsg_sock+0x50/0x50 [ 109.162420][ T3632] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 109.167997][ T3632] ? import_iovec+0x7c/0xb0 [ 109.172536][ T3632] ___sys_recvmsg+0x210/0x590 [ 109.177247][ T3632] ? __sys_recvmsg+0x290/0x290 [ 109.182044][ T3632] ? __fget_files+0x2d1/0x330 [ 109.186749][ T3632] ? __fdget+0x19c/0x220 [ 109.191015][ T3632] __x64_sys_recvmsg+0x20a/0x2e0 [ 109.195980][ T3632] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 109.201493][ T3632] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 109.207672][ T3632] x64_sys_call+0x75/0x9a0 [ 109.212119][ T3632] do_syscall_64+0x4c/0xa0 [ 109.216562][ T3632] ? clear_bhb_loop+0x30/0x80 [ 109.221257][ T3632] ? clear_bhb_loop+0x30/0x80 [ 109.226041][ T3632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.231956][ T3632] RIP: 0033:0x7fa93159e159 [ 109.236387][ T3632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.256008][ T3632] RSP: 002b:00007fa932398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 109.264464][ T3632] RAX: ffffffffffffffda RBX: 00007fa931825fa0 RCX: 00007fa93159e159 [ 109.272455][ T3632] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 109.280440][ T3632] RBP: 00007fa932398090 R08: 0000000000000000 R09: 0000000000000000 [ 109.288425][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.296412][ T3632] R13: 00007fa931826038 R14: 00007fa931825fa0 R15: 00007ffce41785f8 [ 109.304409][ T3632] [ 109.495940][ T1779] device bridge_slave_1 left promiscuous mode [ 109.502112][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.509740][ T1779] device bridge_slave_0 left promiscuous mode [ 109.516225][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.524107][ T1779] device veth1_macvtap left promiscuous mode [ 109.530214][ T1779] device veth0_vlan left promiscuous mode [ 110.012690][ T3646] device syzkaller0 entered promiscuous mode [ 110.186548][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.216277][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.227236][ T3657] device bridge_slave_0 entered promiscuous mode [ 110.240379][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.261246][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.278203][ T3657] device bridge_slave_1 entered promiscuous mode [ 110.621441][ T1779] device bridge_slave_1 left promiscuous mode [ 110.629955][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.641972][ T1779] device bridge_slave_0 left promiscuous mode [ 110.669359][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.720620][ T1779] device veth1_macvtap left promiscuous mode [ 110.750069][ T1779] device veth0_vlan left promiscuous mode [ 110.880380][ T3694] FAULT_INJECTION: forcing a failure. [ 110.880380][ T3694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 110.894597][ T3694] CPU: 1 PID: 3694 Comm: syz.2.845 Not tainted syzkaller #0 [ 110.901947][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.912377][ T3694] Call Trace: [ 110.915717][ T3694] [ 110.918669][ T3694] __dump_stack+0x21/0x24 [ 110.923029][ T3694] dump_stack_lvl+0x110/0x170 [ 110.927730][ T3694] ? __cfi_dump_stack_lvl+0x8/0x8 [ 110.932779][ T3694] dump_stack+0x15/0x24 [ 110.936964][ T3694] should_fail_ex+0x3bf/0x510 [ 110.941679][ T3694] should_fail_alloc_page+0x61/0x90 [ 110.946916][ T3694] prepare_alloc_pages+0x131/0x570 [ 110.952262][ T3694] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 110.957493][ T3694] ? irqentry_exit+0x37/0x40 [ 110.962107][ T3694] __alloc_pages+0x15b/0x610 [ 110.966726][ T3694] ? __cfi___alloc_pages+0x10/0x10 [ 110.971858][ T3694] ? folio_add_lru+0x2d6/0x650 [ 110.976656][ T3694] ? __cfi_folio_add_lru+0x10/0x10 [ 110.981793][ T3694] __folio_alloc+0x12/0x40 [ 110.986233][ T3694] wp_page_copy+0x258/0x1490 [ 110.990844][ T3694] ? irqentry_exit+0x37/0x40 [ 110.995457][ T3694] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 111.001655][ T3694] ? fault_dirty_shared_page+0x310/0x310 [ 111.007311][ T3694] ? vm_normal_page+0x1eb/0x200 [ 111.012188][ T3694] do_wp_page+0x9b5/0xf70 [ 111.016630][ T3694] handle_mm_fault+0x114f/0x26b0 [ 111.021592][ T3694] ? __cfi_handle_mm_fault+0x10/0x10 [ 111.026899][ T3694] ? down_read_trylock+0x27f/0x660 [ 111.032040][ T3694] ? lock_mm_and_find_vma+0x9e/0x320 [ 111.037345][ T3694] ? do_user_addr_fault+0x2eb/0x1030 [ 111.042683][ T3694] do_user_addr_fault+0x61e/0x1030 [ 111.047823][ T3694] exc_page_fault+0x51/0xb0 [ 111.052352][ T3694] asm_exc_page_fault+0x27/0x30 [ 111.057220][ T3694] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 111.063831][ T3694] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 111.083623][ T3694] RSP: 0018:ffffc90000d876a0 EFLAGS: 00050206 [ 111.089715][ T3694] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000055d0 [ 111.097700][ T3694] RDX: 00000000000101d0 RSI: ffff88812626acc8 RDI: 000020000000b000 [ 111.105697][ T3694] RBP: ffffc90000d876d0 R08: ffff888126270297 R09: 1ffff11024c4e052 [ 111.113687][ T3694] R10: dffffc0000000000 R11: ffffed1024c4e053 R12: 00007ffffffeee30 [ 111.121674][ T3694] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881262600c8 [ 111.129669][ T3694] ? copy_pipe_to_iter+0xf1/0x150 [ 111.134718][ T3694] ? copyout+0x82/0xa0 [ 111.138807][ T3694] _copy_to_iter+0x3ce/0xe60 [ 111.143426][ T3694] ? __cfi__copy_to_iter+0x10/0x10 [ 111.148558][ T3694] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 111.154644][ T3694] ? irqentry_exit+0x37/0x40 [ 111.159248][ T3694] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 111.165073][ T3694] ? __kasan_check_read+0x11/0x20 [ 111.170111][ T3694] ? __check_object_size+0x45a/0x600 [ 111.175409][ T3694] simple_copy_to_iter+0x50/0x70 [ 111.180365][ T3694] __skb_datagram_iter+0xf1/0x730 [ 111.185410][ T3694] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 111.190893][ T3694] ? tsk_importance+0x150/0x150 [ 111.195769][ T3694] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 111.201421][ T3694] skb_copy_datagram_iter+0x40/0x150 [ 111.206725][ T3694] tipc_recvstream+0x703/0xe70 [ 111.211524][ T3694] ? __cfi_tipc_recvstream+0x10/0x10 [ 111.216830][ T3694] ____sys_recvmsg+0x2d6/0x5c0 [ 111.221617][ T3694] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 111.227799][ T3694] ? __sys_recvmsg_sock+0x50/0x50 [ 111.232848][ T3694] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 111.238429][ T3694] ? import_iovec+0x7c/0xb0 [ 111.242979][ T3694] ___sys_recvmsg+0x210/0x590 [ 111.247682][ T3694] ? __sys_recvmsg+0x290/0x290 [ 111.253549][ T3694] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 111.259726][ T3694] __x64_sys_recvmsg+0x20a/0x2e0 [ 111.264787][ T3694] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 111.270391][ T3694] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 111.276488][ T3694] x64_sys_call+0x75/0x9a0 [ 111.280958][ T3694] do_syscall_64+0x4c/0xa0 [ 111.285487][ T3694] ? clear_bhb_loop+0x30/0x80 [ 111.290215][ T3694] ? clear_bhb_loop+0x30/0x80 [ 111.294912][ T3694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.301034][ T3694] RIP: 0033:0x7ffaa599e159 [ 111.305503][ T3694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.325573][ T3694] RSP: 002b:00007ffaa6956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 111.334286][ T3694] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 111.342288][ T3694] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 111.350302][ T3694] RBP: 00007ffaa6956090 R08: 0000000000000000 R09: 0000000000000000 [ 111.358306][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.366303][ T3694] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffce1d41648 [ 111.374314][ T3694] [ 111.413009][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.420126][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.427485][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.434551][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.452319][ T1763] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.469798][ T1763] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.607736][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.615407][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.721629][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.743205][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.757004][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.764122][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.772057][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.780711][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.789200][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.796297][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.812407][ T3709] @0Ù: renamed from bond_slave_1 [ 111.880482][ T3718] device syzkaller0 entered promiscuous mode [ 111.912431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.922194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.940965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.949411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.990676][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.045383][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.089195][ T3657] device veth0_vlan entered promiscuous mode [ 112.119245][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.129708][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.159544][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.175289][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.207362][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.225260][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.249801][ T3657] device veth1_macvtap entered promiscuous mode [ 112.276374][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.284201][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.293330][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.310875][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.328307][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.415971][ T3738] FAULT_INJECTION: forcing a failure. [ 112.415971][ T3738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.435294][ T3738] CPU: 1 PID: 3738 Comm: syz.3.858 Not tainted syzkaller #0 [ 112.442652][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.452740][ T3738] Call Trace: [ 112.456040][ T3738] [ 112.459000][ T3738] __dump_stack+0x21/0x24 [ 112.463358][ T3738] dump_stack_lvl+0x110/0x170 [ 112.468061][ T3738] ? __cfi_dump_stack_lvl+0x8/0x8 [ 112.473108][ T3738] dump_stack+0x15/0x24 [ 112.477398][ T3738] should_fail_ex+0x3bf/0x510 [ 112.482118][ T3738] should_fail_alloc_page+0x61/0x90 [ 112.487360][ T3738] prepare_alloc_pages+0x131/0x570 [ 112.492606][ T3738] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 112.497845][ T3738] ? cgroup_rstat_updated+0xf0/0x360 [ 112.503153][ T3738] __alloc_pages+0x15b/0x610 [ 112.507792][ T3738] ? __cfi___alloc_pages+0x10/0x10 [ 112.512927][ T3738] ? folio_add_lru+0x2d6/0x650 [ 112.517711][ T3738] ? __cfi_folio_add_lru+0x10/0x10 [ 112.522848][ T3738] __folio_alloc+0x12/0x40 [ 112.527313][ T3738] wp_page_copy+0x258/0x1490 [ 112.531924][ T3738] ? fault_dirty_shared_page+0x310/0x310 [ 112.537580][ T3738] ? vm_normal_page+0x1eb/0x200 [ 112.542452][ T3738] do_wp_page+0x9b5/0xf70 [ 112.546805][ T3738] handle_mm_fault+0x114f/0x26b0 [ 112.551770][ T3738] ? __cfi_handle_mm_fault+0x10/0x10 [ 112.557073][ T3738] ? down_read_trylock+0x27f/0x660 [ 112.562219][ T3738] ? lock_mm_and_find_vma+0x9e/0x320 [ 112.567520][ T3738] ? do_user_addr_fault+0x2eb/0x1030 [ 112.572915][ T3738] do_user_addr_fault+0x61e/0x1030 [ 112.578063][ T3738] exc_page_fault+0x51/0xb0 [ 112.582583][ T3738] asm_exc_page_fault+0x27/0x30 [ 112.587448][ T3738] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 112.594062][ T3738] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 112.613685][ T3738] RSP: 0018:ffffc90000d876a0 EFLAGS: 00050206 [ 112.619793][ T3738] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000045d0 [ 112.627779][ T3738] RDX: 00000000000101d0 RSI: ffff8881262ebcc8 RDI: 000020000000c000 [ 112.635767][ T3738] RBP: ffffc90000d876d0 R08: ffff8881262f0297 R09: 1ffff11024c5e052 [ 112.643753][ T3738] R10: dffffc0000000000 R11: ffffed1024c5e053 R12: 00007ffffffeee30 [ 112.651925][ T3738] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881262e00c8 [ 112.659918][ T3738] ? copy_pipe_to_iter+0xf1/0x150 [ 112.664972][ T3738] ? copyout+0x82/0xa0 [ 112.669084][ T3738] _copy_to_iter+0x3ce/0xe60 [ 112.673703][ T3738] ? __cfi__copy_to_iter+0x10/0x10 [ 112.678840][ T3738] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 112.684672][ T3738] ? __kasan_check_read+0x11/0x20 [ 112.689718][ T3738] ? __check_object_size+0x45a/0x600 [ 112.695019][ T3738] simple_copy_to_iter+0x50/0x70 [ 112.700073][ T3738] __skb_datagram_iter+0xf1/0x730 [ 112.705119][ T3738] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 112.710625][ T3738] ? tsk_importance+0x150/0x150 [ 112.715494][ T3738] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 112.721153][ T3738] skb_copy_datagram_iter+0x40/0x150 [ 112.726462][ T3738] tipc_recvstream+0x703/0xe70 [ 112.731254][ T3738] ? __cfi_tipc_recvstream+0x10/0x10 [ 112.736560][ T3738] ____sys_recvmsg+0x2d6/0x5c0 [ 112.741345][ T3738] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 112.747521][ T3738] ? __sys_recvmsg_sock+0x50/0x50 [ 112.752572][ T3738] ___sys_recvmsg+0x210/0x590 [ 112.757270][ T3738] ? __sys_recvmsg+0x290/0x290 [ 112.762087][ T3738] ? enqueue_hrtimer+0xcd/0x250 [ 112.767049][ T3738] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 112.773236][ T3738] __x64_sys_recvmsg+0x20a/0x2e0 [ 112.778197][ T3738] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 112.783689][ T3738] x64_sys_call+0x75/0x9a0 [ 112.788128][ T3738] do_syscall_64+0x4c/0xa0 [ 112.792564][ T3738] ? clear_bhb_loop+0x30/0x80 [ 112.797256][ T3738] ? clear_bhb_loop+0x30/0x80 [ 112.801952][ T3738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.807860][ T3738] RIP: 0033:0x7fa93159e159 [ 112.812292][ T3738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.831916][ T3738] RSP: 002b:00007fa932398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 112.840344][ T3738] RAX: ffffffffffffffda RBX: 00007fa931825fa0 RCX: 00007fa93159e159 [ 112.848333][ T3738] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 112.856341][ T3738] RBP: 00007fa932398090 R08: 0000000000000000 R09: 0000000000000000 [ 112.864354][ T3738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.872334][ T3738] R13: 00007fa931826038 R14: 00007fa931825fa0 R15: 00007ffce41785f8 [ 112.880333][ T3738] [ 113.887578][ T1779] device bridge_slave_1 left promiscuous mode [ 113.893802][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.957532][ T1779] device bridge_slave_0 left promiscuous mode [ 114.008848][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.080119][ T1779] device veth1_macvtap left promiscuous mode [ 114.120401][ T1779] device veth0_vlan left promiscuous mode [ 114.292110][ T3770] device syzkaller0 entered promiscuous mode [ 114.366114][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.373341][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.381332][ T3766] device bridge_slave_0 entered promiscuous mode [ 114.392932][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.400307][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.408277][ T3766] device bridge_slave_1 entered promiscuous mode [ 114.457037][ T3782] : renamed from bond_slave_1 [ 114.506669][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.513803][ T3766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.521199][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.528291][ T3766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.656792][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.668198][ T1777] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.678215][ T3784] FAULT_INJECTION: forcing a failure. [ 114.678215][ T3784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.918748][ T3784] CPU: 1 PID: 3784 Comm: syz.4.872 Not tainted syzkaller #0 [ 114.926109][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.936198][ T3784] Call Trace: [ 114.939503][ T3784] [ 114.942460][ T3784] __dump_stack+0x21/0x24 [ 114.946836][ T3784] dump_stack_lvl+0x110/0x170 [ 114.951589][ T3784] ? __cfi_dump_stack_lvl+0x8/0x8 [ 114.956658][ T3784] ? debug_smp_processor_id+0x17/0x20 [ 114.962059][ T3784] ? try_charge_memcg+0x258/0x1650 [ 114.967200][ T3784] dump_stack+0x15/0x24 [ 114.971377][ T3784] should_fail_ex+0x3bf/0x510 [ 114.976095][ T3784] should_fail_alloc_page+0x61/0x90 [ 114.981499][ T3784] prepare_alloc_pages+0x131/0x570 [ 114.986726][ T3784] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 114.991953][ T3784] ? cgroup_rstat_updated+0xf0/0x360 [ 114.997256][ T3784] __alloc_pages+0x15b/0x610 [ 115.001907][ T3784] ? __cfi___alloc_pages+0x10/0x10 [ 115.007065][ T3784] ? folio_add_lru+0x2d6/0x650 [ 115.011859][ T3784] ? __cfi_folio_add_lru+0x10/0x10 [ 115.017000][ T3784] __folio_alloc+0x12/0x40 [ 115.021443][ T3784] wp_page_copy+0x258/0x1490 [ 115.026057][ T3784] ? fault_dirty_shared_page+0x310/0x310 [ 115.031719][ T3784] ? vm_normal_page+0x1eb/0x200 [ 115.036601][ T3784] do_wp_page+0x9b5/0xf70 [ 115.040951][ T3784] handle_mm_fault+0x114f/0x26b0 [ 115.045967][ T3784] ? __cfi_handle_mm_fault+0x10/0x10 [ 115.051268][ T3784] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 115.057099][ T3784] ? lock_mm_and_find_vma+0x9e/0x320 [ 115.062410][ T3784] ? do_user_addr_fault+0x2eb/0x1030 [ 115.067738][ T3784] do_user_addr_fault+0x61e/0x1030 [ 115.072878][ T3784] exc_page_fault+0x51/0xb0 [ 115.077397][ T3784] asm_exc_page_fault+0x27/0x30 [ 115.082261][ T3784] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 115.088896][ T3784] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 115.108515][ T3784] RSP: 0018:ffffc900009e76a0 EFLAGS: 00050206 [ 115.114597][ T3784] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000035d0 [ 115.122584][ T3784] RDX: 00000000000101d0 RSI: ffff8881262eccc8 RDI: 000020000000d000 [ 115.130572][ T3784] RBP: ffffc900009e76d0 R08: ffff8881262f0297 R09: 1ffff11024c5e052 [ 115.138560][ T3784] R10: dffffc0000000000 R11: ffffed1024c5e053 R12: 00007ffffffeee30 [ 115.146541][ T3784] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881262e00c8 [ 115.154535][ T3784] ? copy_pipe_to_iter+0xf1/0x150 [ 115.159763][ T3784] ? copyout+0x82/0xa0 [ 115.163949][ T3784] _copy_to_iter+0x3ce/0xe60 [ 115.168566][ T3784] ? __cfi__copy_to_iter+0x10/0x10 [ 115.173705][ T3784] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 115.179528][ T3784] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 115.185701][ T3784] ? __kasan_check_read+0x11/0x20 [ 115.190746][ T3784] ? __check_object_size+0x45a/0x600 [ 115.196054][ T3784] simple_copy_to_iter+0x50/0x70 [ 115.201043][ T3784] __skb_datagram_iter+0xf1/0x730 [ 115.206108][ T3784] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 115.211601][ T3784] ? tsk_importance+0x150/0x150 [ 115.216514][ T3784] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 115.222270][ T3784] skb_copy_datagram_iter+0x40/0x150 [ 115.227586][ T3784] tipc_recvstream+0x703/0xe70 [ 115.232386][ T3784] ? __cfi_tipc_recvstream+0x10/0x10 [ 115.237701][ T3784] ____sys_recvmsg+0x2d6/0x5c0 [ 115.242492][ T3784] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 115.248666][ T3784] ? __sys_recvmsg_sock+0x50/0x50 [ 115.253718][ T3784] ? __sanitizer_cov_trace_pc+0x10/0x60 [ 115.259316][ T3784] ? import_iovec+0x7c/0xb0 [ 115.263838][ T3784] ___sys_recvmsg+0x210/0x590 [ 115.268541][ T3784] ? __sys_recvmsg+0x290/0x290 [ 115.273334][ T3784] ? enqueue_hrtimer+0xcd/0x250 [ 115.278206][ T3784] ? __fget_files+0x2d1/0x330 [ 115.282999][ T3784] ? __fdget+0x19c/0x220 [ 115.287263][ T3784] __x64_sys_recvmsg+0x20a/0x2e0 [ 115.292232][ T3784] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 115.297716][ T3784] ? sched_clock_cpu+0x6e/0x260 [ 115.302592][ T3784] ? debug_smp_processor_id+0x17/0x20 [ 115.307984][ T3784] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 115.314079][ T3784] x64_sys_call+0x75/0x9a0 [ 115.318522][ T3784] do_syscall_64+0x4c/0xa0 [ 115.322966][ T3784] ? clear_bhb_loop+0x30/0x80 [ 115.327668][ T3784] ? clear_bhb_loop+0x30/0x80 [ 115.332362][ T3784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.338267][ T3784] RIP: 0033:0x7fd948d9e159 [ 115.342700][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.362322][ T3784] RSP: 002b:00007fd949c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 115.370765][ T3784] RAX: ffffffffffffffda RBX: 00007fd949025fa0 RCX: 00007fd948d9e159 [ 115.378770][ T3784] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 115.386767][ T3784] RBP: 00007fd949c24090 R08: 0000000000000000 R09: 0000000000000000 [ 115.394760][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.402746][ T3784] R13: 00007fd949026038 R14: 00007fd949025fa0 R15: 00007ffe2bda20b8 [ 115.410743][ T3784] [ 115.438976][ T1777] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.458130][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.467553][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.476750][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.483853][ T1777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.533134][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.549708][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.562883][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.570009][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.653010][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.669849][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.695741][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.721525][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.764960][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.799413][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.837048][ T3766] device veth0_vlan entered promiscuous mode [ 115.877884][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.897682][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.921498][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.929458][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.944110][ T3766] device veth1_macvtap entered promiscuous mode [ 115.973356][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.985557][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.994067][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.002278][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.011203][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.031651][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.043490][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.146250][ T3827] device syzkaller0 entered promiscuous mode [ 117.145595][ T3835] FAULT_INJECTION: forcing a failure. [ 117.145595][ T3835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.215030][ T3835] CPU: 1 PID: 3835 Comm: syz.2.885 Not tainted syzkaller #0 [ 117.222389][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.232490][ T3835] Call Trace: [ 117.235803][ T3835] [ 117.238771][ T3835] __dump_stack+0x21/0x24 [ 117.243205][ T3835] dump_stack_lvl+0x110/0x170 [ 117.247924][ T3835] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.252994][ T3835] dump_stack+0x15/0x24 [ 117.257186][ T3835] should_fail_ex+0x3bf/0x510 [ 117.261899][ T3835] should_fail_alloc_page+0x61/0x90 [ 117.267138][ T3835] prepare_alloc_pages+0x131/0x570 [ 117.272299][ T3835] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 117.277534][ T3835] ? irqentry_exit+0x37/0x40 [ 117.282160][ T3835] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 117.288001][ T3835] __alloc_pages+0x15b/0x610 [ 117.292636][ T3835] ? __cfi___alloc_pages+0x10/0x10 [ 117.297792][ T3835] ? folio_add_lru+0x2d6/0x650 [ 117.302639][ T3835] ? __cfi_folio_add_lru+0x10/0x10 [ 117.307799][ T3835] __folio_alloc+0x12/0x40 [ 117.312255][ T3835] wp_page_copy+0x258/0x1490 [ 117.316888][ T3835] ? fault_dirty_shared_page+0x310/0x310 [ 117.322554][ T3835] ? vm_normal_page+0x1eb/0x200 [ 117.327470][ T3835] do_wp_page+0x9b5/0xf70 [ 117.331837][ T3835] handle_mm_fault+0x114f/0x26b0 [ 117.336807][ T3835] ? __cfi_handle_mm_fault+0x10/0x10 [ 117.342119][ T3835] ? down_read_trylock+0x27f/0x660 [ 117.347274][ T3835] ? lock_mm_and_find_vma+0x9e/0x320 [ 117.352700][ T3835] ? do_user_addr_fault+0x2eb/0x1030 [ 117.358015][ T3835] do_user_addr_fault+0x61e/0x1030 [ 117.363160][ T3835] exc_page_fault+0x51/0xb0 [ 117.367689][ T3835] asm_exc_page_fault+0x27/0x30 [ 117.372565][ T3835] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 117.379178][ T3835] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 117.398804][ T3835] RSP: 0018:ffffc900007cf6a0 EFLAGS: 00050206 [ 117.404889][ T3835] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000025d0 [ 117.412905][ T3835] RDX: 00000000000101d0 RSI: ffff8881242edcc8 RDI: 000020000000e000 [ 117.420896][ T3835] RBP: ffffc900007cf6d0 R08: ffff8881242f0297 R09: 1ffff1102485e052 [ 117.428897][ T3835] R10: dffffc0000000000 R11: ffffed102485e053 R12: 00007ffffffeee30 [ 117.436896][ T3835] R13: 0000000000010100 R14: 0000200000000400 R15: ffff8881242e00c8 [ 117.444896][ T3835] ? copy_pipe_to_iter+0xf1/0x150 [ 117.449960][ T3835] ? copyout+0x82/0xa0 [ 117.454054][ T3835] _copy_to_iter+0x3ce/0xe60 [ 117.458759][ T3835] ? __cfi__copy_to_iter+0x10/0x10 [ 117.463901][ T3835] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 117.469740][ T3835] ? __kasan_check_read+0x11/0x20 [ 117.474792][ T3835] ? __check_object_size+0x45a/0x600 [ 117.480108][ T3835] simple_copy_to_iter+0x50/0x70 [ 117.485080][ T3835] __skb_datagram_iter+0xf1/0x730 [ 117.490132][ T3835] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 117.495637][ T3835] ? tsk_importance+0x150/0x150 [ 117.500519][ T3835] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 117.506175][ T3835] skb_copy_datagram_iter+0x40/0x150 [ 117.511477][ T3835] tipc_recvstream+0x703/0xe70 [ 117.516281][ T3835] ? __cfi_tipc_recvstream+0x10/0x10 [ 117.521589][ T3835] ____sys_recvmsg+0x2d6/0x5c0 [ 117.526381][ T3835] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 117.532207][ T3835] ? __sys_recvmsg_sock+0x50/0x50 [ 117.537259][ T3835] ? import_iovec+0x7c/0xb0 [ 117.541779][ T3835] ___sys_recvmsg+0x210/0x590 [ 117.546481][ T3835] ? __sys_recvmsg+0x290/0x290 [ 117.551269][ T3835] ? __fget_files+0x2d1/0x330 [ 117.555963][ T3835] ? __fdget+0x19c/0x220 [ 117.560223][ T3835] __x64_sys_recvmsg+0x20a/0x2e0 [ 117.565189][ T3835] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 117.570674][ T3835] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 117.576784][ T3835] x64_sys_call+0x75/0x9a0 [ 117.581222][ T3835] do_syscall_64+0x4c/0xa0 [ 117.585660][ T3835] ? clear_bhb_loop+0x30/0x80 [ 117.590360][ T3835] ? clear_bhb_loop+0x30/0x80 [ 117.595119][ T3835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.601343][ T3835] RIP: 0033:0x7ffaa599e159 [ 117.605795][ T3835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.625421][ T3835] RSP: 002b:00007ffaa6956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 117.633946][ T3835] RAX: ffffffffffffffda RBX: 00007ffaa5c25fa0 RCX: 00007ffaa599e159 [ 117.641943][ T3835] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 117.649951][ T3835] RBP: 00007ffaa6956090 R08: 0000000000000000 R09: 0000000000000000 [ 117.657989][ T3835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.665985][ T3835] R13: 00007ffaa5c26038 R14: 00007ffaa5c25fa0 R15: 00007ffce1d41648 [ 117.673985][ T3835] [ 117.708669][ T1779] device bridge_slave_1 left promiscuous mode [ 117.714982][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.722616][ T1779] device bridge_slave_0 left promiscuous mode [ 117.739544][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.758980][ T1779] device veth1_macvtap left promiscuous mode [ 117.773212][ T1779] device veth0_vlan left promiscuous mode [ 117.964468][ T3866] device sit0 left promiscuous mode [ 117.986061][ T3865] device sit0 entered promiscuous mode [ 118.215597][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.222832][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.231074][ T3851] device bridge_slave_0 entered promiscuous mode [ 118.244616][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.251754][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.259659][ T3851] device bridge_slave_1 entered promiscuous mode [ 118.273136][ T3901] FAULT_INJECTION: forcing a failure. [ 118.273136][ T3901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.305098][ T3901] CPU: 1 PID: 3901 Comm: syz.4.904 Not tainted syzkaller #0 [ 118.312457][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.322543][ T3901] Call Trace: [ 118.325853][ T3901] [ 118.328842][ T3901] __dump_stack+0x21/0x24 [ 118.333222][ T3901] dump_stack_lvl+0x110/0x170 [ 118.337938][ T3901] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.343011][ T3901] ? debug_smp_processor_id+0x17/0x20 [ 118.348426][ T3901] ? try_charge_memcg+0x258/0x1650 [ 118.353583][ T3901] dump_stack+0x15/0x24 [ 118.357781][ T3901] should_fail_ex+0x3bf/0x510 [ 118.362505][ T3901] should_fail_alloc_page+0x61/0x90 [ 118.367747][ T3901] prepare_alloc_pages+0x131/0x570 [ 118.372910][ T3901] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 118.378149][ T3901] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.384344][ T3901] __alloc_pages+0x15b/0x610 [ 118.389067][ T3901] ? __cfi___alloc_pages+0x10/0x10 [ 118.394221][ T3901] ? folio_add_lru+0x2d6/0x650 [ 118.399031][ T3901] ? __cfi_folio_add_lru+0x10/0x10 [ 118.404194][ T3901] __folio_alloc+0x12/0x40 [ 118.408660][ T3901] wp_page_copy+0x258/0x1490 [ 118.413292][ T3901] ? fault_dirty_shared_page+0x310/0x310 [ 118.418997][ T3901] ? vm_normal_page+0x1eb/0x200 [ 118.423892][ T3901] do_wp_page+0x9b5/0xf70 [ 118.428262][ T3901] handle_mm_fault+0x114f/0x26b0 [ 118.433409][ T3901] ? __cfi_handle_mm_fault+0x10/0x10 [ 118.438720][ T3901] ? down_read_trylock+0x27f/0x660 [ 118.443889][ T3901] ? lock_mm_and_find_vma+0x9e/0x320 [ 118.449211][ T3901] ? do_user_addr_fault+0x2eb/0x1030 [ 118.454550][ T3901] do_user_addr_fault+0x61e/0x1030 [ 118.459722][ T3901] exc_page_fault+0x51/0xb0 [ 118.464267][ T3901] asm_exc_page_fault+0x27/0x30 [ 118.469151][ T3901] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 118.470264][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.475775][ T3901] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 118.475795][ T3901] RSP: 0018:ffffc90000d876a0 EFLAGS: 00050206 [ 118.475820][ T3901] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000015d0 [ 118.492965][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.502462][ T3901] RDX: 00000000000101d0 RSI: ffff888117e4ecc8 RDI: 000020000000f000 [ 118.502482][ T3901] RBP: ffffc90000d876d0 R08: ffff888117e50297 R09: 1ffff11022fca052 [ 118.502497][ T3901] R10: dffffc0000000000 R11: ffffed1022fca053 R12: 00007ffffffeee30 [ 118.526274][ T3897] device bridge_slave_0 entered promiscuous mode [ 118.531627][ T3901] R13: 0000000000010100 R14: 0000200000000400 R15: ffff888117e400c8 [ 118.531651][ T3901] ? copy_pipe_to_iter+0xf1/0x150 [ 118.555303][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.562047][ T3901] ? copyout+0x82/0xa0 [ 118.568024][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.574177][ T3901] _copy_to_iter+0x3ce/0xe60 [ 118.579907][ T3897] device bridge_slave_1 entered promiscuous mode [ 118.585296][ T3901] ? __cfi__copy_to_iter+0x10/0x10 [ 118.601485][ T3901] ? irqentry_exit+0x37/0x40 [ 118.606123][ T3901] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 118.612002][ T3901] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.618222][ T3901] ? __kasan_check_read+0x11/0x20 [ 118.623382][ T3901] ? __check_object_size+0x45a/0x600 [ 118.628706][ T3901] simple_copy_to_iter+0x50/0x70 [ 118.633694][ T3901] __skb_datagram_iter+0xf1/0x730 [ 118.638753][ T3901] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 118.644273][ T3901] ? tsk_importance+0x150/0x150 [ 118.649375][ T3901] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 118.655062][ T3901] skb_copy_datagram_iter+0x40/0x150 [ 118.660388][ T3901] tipc_recvstream+0x703/0xe70 [ 118.665211][ T3901] ? __cfi_tipc_recvstream+0x10/0x10 [ 118.670537][ T3901] ____sys_recvmsg+0x2d6/0x5c0 [ 118.675345][ T3901] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 118.681534][ T3901] ? __sys_recvmsg_sock+0x50/0x50 [ 118.686777][ T3901] ? __cfi___sanitizer_cov_trace_cmp8+0x10/0x10 [ 118.693077][ T3901] ? import_iovec+0x7c/0xb0 [ 118.697652][ T3901] ___sys_recvmsg+0x210/0x590 [ 118.702381][ T3901] ? __sys_recvmsg+0x290/0x290 [ 118.707194][ T3901] ? __fget_files+0x2d1/0x330 [ 118.711908][ T3901] ? __fdget+0x19c/0x220 [ 118.716182][ T3901] __x64_sys_recvmsg+0x20a/0x2e0 [ 118.721149][ T3901] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 118.726642][ T3901] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 118.732731][ T3901] x64_sys_call+0x75/0x9a0 [ 118.737180][ T3901] do_syscall_64+0x4c/0xa0 [ 118.741632][ T3901] ? clear_bhb_loop+0x30/0x80 [ 118.746331][ T3901] ? clear_bhb_loop+0x30/0x80 [ 118.751031][ T3901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.757023][ T3901] RIP: 0033:0x7fd948d9e159 [ 118.761493][ T3901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.781199][ T3901] RSP: 002b:00007fd949c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 118.789625][ T3901] RAX: ffffffffffffffda RBX: 00007fd949025fa0 RCX: 00007fd948d9e159 [ 118.797636][ T3901] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 118.805628][ T3901] RBP: 00007fd949c24090 R08: 0000000000000000 R09: 0000000000000000 [ 118.813644][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.821626][ T3901] R13: 00007fd949026038 R14: 00007fd949025fa0 R15: 00007ffe2bda20b8 [ 118.829621][ T3901] [ 118.935380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.943574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.964926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.973575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.981910][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.989010][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.996985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.005589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.013884][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.020974][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.028745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.109286][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.118974][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.132441][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.141237][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.265792][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.274428][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.293471][ T3851] device veth0_vlan entered promiscuous mode [ 119.316378][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.326208][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.348747][ T3938] device syzkaller0 entered promiscuous mode [ 119.363711][ T3851] device veth1_macvtap entered promiscuous mode [ 119.396263][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.406209][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.413833][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.421515][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.429269][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.437171][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.445639][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.453903][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.460988][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.468498][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.477200][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.485794][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.492867][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.500585][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.508851][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.517333][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.531090][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.539552][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.573789][ T3897] device veth0_vlan entered promiscuous mode [ 119.585762][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.597896][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.605877][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.613474][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.622662][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.631249][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.655278][ T3897] device veth1_macvtap entered promiscuous mode [ 119.671518][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.697635][ T1779] GPL: port 1(erspan0) entered disabled state [ 119.707620][ T1779] device erspan0 left promiscuous mode [ 119.713548][ T1779] GPL: port 1(erspan0) entered disabled state [ 119.721693][ T3954] FAULT_INJECTION: forcing a failure. [ 119.721693][ T3954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.739490][ T3954] CPU: 1 PID: 3954 Comm: syz.3.918 Not tainted syzkaller #0 [ 119.746878][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.757052][ T3954] Call Trace: [ 119.760342][ T3954] [ 119.763291][ T3954] __dump_stack+0x21/0x24 [ 119.767650][ T3954] dump_stack_lvl+0x110/0x170 [ 119.772369][ T3954] ? __cfi_dump_stack_lvl+0x8/0x8 [ 119.777413][ T3954] ? release_pages+0xc7e/0xce0 [ 119.782218][ T3954] dump_stack+0x15/0x24 [ 119.786429][ T3954] should_fail_ex+0x3bf/0x510 [ 119.791133][ T3954] should_fail_alloc_page+0x61/0x90 [ 119.796400][ T3954] prepare_alloc_pages+0x131/0x570 [ 119.801563][ T3954] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 119.806810][ T3954] ? folio_batch_move_lru+0x37a/0x470 [ 119.812368][ T3954] ? cgroup_rstat_updated+0xf0/0x360 [ 119.817669][ T3954] __alloc_pages+0x15b/0x610 [ 119.822321][ T3954] ? __cfi___alloc_pages+0x10/0x10 [ 119.827680][ T3954] ? folio_add_lru+0x2d6/0x650 [ 119.832521][ T3954] ? __cfi_folio_add_lru+0x10/0x10 [ 119.837664][ T3954] __folio_alloc+0x12/0x40 [ 119.842110][ T3954] wp_page_copy+0x258/0x1490 [ 119.846746][ T3954] ? fault_dirty_shared_page+0x310/0x310 [ 119.852424][ T3954] ? vm_normal_page+0x1eb/0x200 [ 119.857321][ T3954] do_wp_page+0x9b5/0xf70 [ 119.861671][ T3954] handle_mm_fault+0x114f/0x26b0 [ 119.866646][ T3954] ? __cfi_handle_mm_fault+0x10/0x10 [ 119.871939][ T3954] ? down_read_trylock+0x27f/0x660 [ 119.877337][ T3954] ? lock_mm_and_find_vma+0x9e/0x320 [ 119.882654][ T3954] ? do_user_addr_fault+0x2eb/0x1030 [ 119.887952][ T3954] do_user_addr_fault+0x61e/0x1030 [ 119.893089][ T3954] exc_page_fault+0x51/0xb0 [ 119.897646][ T3954] asm_exc_page_fault+0x27/0x30 [ 119.902630][ T3954] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 119.909532][ T3954] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 119.929177][ T3954] RSP: 0018:ffffc9000dd0f6a0 EFLAGS: 00050206 [ 119.935251][ T3954] RAX: ffffffff82672b01 RBX: 00000000000101d0 RCX: 00000000000005d0 [ 119.943313][ T3954] RDX: 00000000000101d0 RSI: ffff888117e4fcc8 RDI: 0000200000010000 [ 119.951294][ T3954] RBP: ffffc9000dd0f6d0 R08: ffff888117e50297 R09: 1ffff11022fca052 [ 119.959305][ T3954] R10: dffffc0000000000 R11: ffffed1022fca053 R12: 00007ffffffeee30 [ 119.967293][ T3954] R13: 0000000000010100 R14: 0000200000000400 R15: ffff888117e400c8 [ 119.975293][ T3954] ? copy_pipe_to_iter+0xf1/0x150 [ 119.980360][ T3954] ? copyout+0x82/0xa0 [ 119.984451][ T3954] _copy_to_iter+0x3ce/0xe60 [ 119.989060][ T3954] ? __cfi__copy_to_iter+0x10/0x10 [ 119.994222][ T3954] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 120.000393][ T3954] ? __check_object_size+0x45a/0x600 [ 120.005690][ T3954] simple_copy_to_iter+0x50/0x70 [ 120.010648][ T3954] __skb_datagram_iter+0xf1/0x730 [ 120.015792][ T3954] ? tipc_sk_anc_data_recv+0x500/0x6a0 [ 120.021272][ T3954] ? tsk_importance+0x150/0x150 [ 120.026157][ T3954] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 120.031807][ T3954] skb_copy_datagram_iter+0x40/0x150 [ 120.037126][ T3954] tipc_recvstream+0x703/0xe70 [ 120.042075][ T3954] ? __cfi_tipc_recvstream+0x10/0x10 [ 120.047504][ T3954] ____sys_recvmsg+0x2d6/0x5c0 [ 120.052318][ T3954] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 120.058523][ T3954] ? __sys_recvmsg_sock+0x50/0x50 [ 120.063684][ T3954] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 120.069538][ T3954] ? import_iovec+0x7c/0xb0 [ 120.074077][ T3954] ___sys_recvmsg+0x210/0x590 [ 120.079330][ T3954] ? __sys_recvmsg+0x290/0x290 [ 120.084213][ T3954] ? __fget_files+0x2d1/0x330 [ 120.088925][ T3954] ? __fdget+0x19c/0x220 [ 120.093190][ T3954] __x64_sys_recvmsg+0x20a/0x2e0 [ 120.098242][ T3954] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 120.103786][ T3954] x64_sys_call+0x75/0x9a0 [ 120.108255][ T3954] do_syscall_64+0x4c/0xa0 [ 120.112693][ T3954] ? clear_bhb_loop+0x30/0x80 [ 120.117420][ T3954] ? clear_bhb_loop+0x30/0x80 [ 120.122151][ T3954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.128055][ T3954] RIP: 0033:0x7fa93159e159 [ 120.132476][ T3954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.152090][ T3954] RSP: 002b:00007fa932398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.160521][ T3954] RAX: ffffffffffffffda RBX: 00007fa931825fa0 RCX: 00007fa93159e159 [ 120.168516][ T3954] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 120.176505][ T3954] RBP: 00007fa932398090 R08: 0000000000000000 R09: 0000000000000000 [ 120.184509][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.192493][ T3954] R13: 00007fa931826038 R14: 00007fa931825fa0 R15: 00007ffce41785f8 [ 120.200512][ T3954] [ 120.220393][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.229419][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.241866][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.264118][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.457159][ T1779] device veth0_vlan left promiscuous mode [ 121.170509][ T4012] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 121.180727][ T4012] device syzkaller0 entered promiscuous mode [ 121.238282][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.245458][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.252909][ T3984] device bridge_slave_0 entered promiscuous mode [ 121.260493][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.267612][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.275832][ T3984] device bridge_slave_1 entered promiscuous mode [ 121.410080][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.417495][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.425998][ T3986] device bridge_slave_0 entered promiscuous mode [ 121.434394][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.441736][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.449687][ T3986] device bridge_slave_1 entered promiscuous mode [ 121.593437][ T4037] FAULT_INJECTION: forcing a failure. [ 121.593437][ T4037] name failslab, interval 1, probability 0, space 0, times 1 [ 121.606796][ T4037] CPU: 0 PID: 4037 Comm: syz.1.933 Not tainted syzkaller #0 [ 121.614120][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.624325][ T4037] Call Trace: [ 121.627759][ T4037] [ 121.630729][ T4037] __dump_stack+0x21/0x24 [ 121.635201][ T4037] dump_stack_lvl+0x110/0x170 [ 121.639936][ T4037] ? __cfi_dump_stack_lvl+0x8/0x8 [ 121.645025][ T4037] dump_stack+0x15/0x24 [ 121.649229][ T4037] should_fail_ex+0x3bf/0x510 [ 121.654039][ T4037] __should_failslab+0xac/0xf0 [ 121.658819][ T4037] should_failslab+0x9/0x20 [ 121.663324][ T4037] kmem_cache_alloc_node+0x42/0x330 [ 121.668531][ T4037] ? __alloc_skb+0xe8/0x4a0 [ 121.673045][ T4037] __alloc_skb+0xe8/0x4a0 [ 121.677379][ T4037] tipc_msg_create+0x4c/0x4f0 [ 121.682060][ T4037] tipc_sk_send_ack+0x10e/0x650 [ 121.686922][ T4037] ? tsk_advance_rx_queue+0x114/0x250 [ 121.692321][ T4037] tipc_recvstream+0x7fc/0xe70 [ 121.697111][ T4037] ? __cfi_tipc_recvstream+0x10/0x10 [ 121.702398][ T4037] ____sys_recvmsg+0x2d6/0x5c0 [ 121.707170][ T4037] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 121.713338][ T4037] ? __sys_recvmsg_sock+0x50/0x50 [ 121.718373][ T4037] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 121.723853][ T4037] ? import_iovec+0x7c/0xb0 [ 121.728377][ T4037] ___sys_recvmsg+0x210/0x590 [ 121.733068][ T4037] ? __sys_recvmsg+0x290/0x290 [ 121.737848][ T4037] ? enqueue_hrtimer+0xcd/0x250 [ 121.742706][ T4037] ? __fget_files+0x2d1/0x330 [ 121.747397][ T4037] ? __fdget+0x19c/0x220 [ 121.753248][ T4037] __x64_sys_recvmsg+0x20a/0x2e0 [ 121.758313][ T4037] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 121.763805][ T4037] x64_sys_call+0x75/0x9a0 [ 121.768274][ T4037] do_syscall_64+0x4c/0xa0 [ 121.772732][ T4037] ? clear_bhb_loop+0x30/0x80 [ 121.777431][ T4037] ? clear_bhb_loop+0x30/0x80 [ 121.782132][ T4037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.788036][ T4037] RIP: 0033:0x7fbf9679e159 [ 121.792462][ T4037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.812199][ T4037] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 121.820622][ T4037] RAX: ffffffffffffffda RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 121.828609][ T4037] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 121.836596][ T4037] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 121.844601][ T4037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.852597][ T4037] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 121.860592][ T4037] [ 122.000986][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.010592][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.058926][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.067514][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.075892][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.082967][ T1777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.136765][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.153570][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.161440][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.170092][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.179328][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.186436][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.194372][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.203098][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.210242][ T1777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.217901][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.226262][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.233352][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.240875][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.250496][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.347473][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.383144][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.391779][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.411847][ T3986] device veth0_vlan entered promiscuous mode [ 122.441680][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.451068][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.459932][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.468631][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.477846][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.486779][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.500370][ T3984] device veth0_vlan entered promiscuous mode [ 122.510608][ T3986] device veth1_macvtap entered promiscuous mode [ 122.556322][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.573350][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.619680][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.646893][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.655402][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.663865][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.672488][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.684181][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.693191][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.702195][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.722789][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.731828][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.739855][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.802242][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.815747][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.876577][ T3984] device veth1_macvtap entered promiscuous mode [ 122.921490][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.947830][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.963248][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.004911][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.013257][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.029083][ T1779] device bridge_slave_1 left promiscuous mode [ 123.035356][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.042909][ T1779] device bridge_slave_0 left promiscuous mode [ 123.049417][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.060185][ T1779] device bridge_slave_1 left promiscuous mode [ 123.066680][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.074370][ T1779] device bridge_slave_0 left promiscuous mode [ 123.080891][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.091851][ T1779] device veth1_macvtap left promiscuous mode [ 123.098239][ T1779] device veth0_vlan left promiscuous mode [ 123.104577][ T1779] device veth1_macvtap left promiscuous mode [ 123.110890][ T1779] device veth0_vlan left promiscuous mode [ 123.779309][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.787754][ T4095] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.795472][ T4095] device bridge_slave_0 entered promiscuous mode [ 123.831813][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.845356][ T4095] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.853155][ T4095] device bridge_slave_1 entered promiscuous mode [ 123.866183][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.873558][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.881750][ T4099] device bridge_slave_0 entered promiscuous mode [ 123.899891][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.907140][ T4099] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.915123][ T4099] device bridge_slave_1 entered promiscuous mode [ 124.057615][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.064714][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.072073][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.079175][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.116430][ T4099] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.123705][ T4099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.131066][ T4099] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.138162][ T4099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.216164][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.223851][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.231772][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.240494][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.249315][ T4142] FAULT_INJECTION: forcing a failure. [ 124.249315][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.263229][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.263641][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.290898][ T4142] CPU: 1 PID: 4142 Comm: syz.1.961 Not tainted syzkaller #0 [ 124.298245][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.308334][ T4142] Call Trace: [ 124.311620][ T4142] [ 124.314558][ T4142] __dump_stack+0x21/0x24 [ 124.318928][ T4142] dump_stack_lvl+0x110/0x170 [ 124.323628][ T4142] ? __cfi_dump_stack_lvl+0x8/0x8 [ 124.328671][ T4142] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.334755][ T4142] dump_stack+0x15/0x24 [ 124.338932][ T4142] should_fail_ex+0x3bf/0x510 [ 124.343631][ T4142] should_fail+0xb/0x10 [ 124.347808][ T4142] should_fail_usercopy+0x1a/0x20 [ 124.352856][ T4142] copyout+0x20/0xa0 [ 124.356765][ T4142] _copy_to_iter+0x3ce/0xe60 [ 124.361378][ T4142] ? __cfi__copy_to_iter+0x10/0x10 [ 124.366521][ T4142] ? __check_object_size+0x72/0x600 [ 124.371804][ T4142] ? __kasan_check_read+0x11/0x20 [ 124.376858][ T4142] ? __check_object_size+0x45a/0x600 [ 124.382240][ T4142] simple_copy_to_iter+0x50/0x70 [ 124.387335][ T4142] __skb_datagram_iter+0xf1/0x730 [ 124.392432][ T4142] ? tsk_importance+0x150/0x150 [ 124.397314][ T4142] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 124.402968][ T4142] ? __cfi_woken_wake_function+0x10/0x10 [ 124.408619][ T4142] skb_copy_datagram_iter+0x40/0x150 [ 124.413951][ T4142] tipc_recvstream+0x703/0xe70 [ 124.419532][ T4142] ? __cfi_tipc_recvstream+0x10/0x10 [ 124.424907][ T4142] ____sys_recvmsg+0x2d6/0x5c0 [ 124.429722][ T4142] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 124.435924][ T4142] ? __sys_recvmsg_sock+0x50/0x50 [ 124.440993][ T4142] ? __sanitizer_cov_trace_cmp8+0x36/0x80 [ 124.446751][ T4142] ? import_iovec+0x7c/0xb0 [ 124.451284][ T4142] ___sys_recvmsg+0x210/0x590 [ 124.456019][ T4142] ? __sys_recvmsg+0x290/0x290 [ 124.460928][ T4142] ? enqueue_hrtimer+0xcd/0x250 [ 124.465792][ T4142] ? __fget_files+0x2d1/0x330 [ 124.470489][ T4142] ? __fdget+0x19c/0x220 [ 124.474750][ T4142] __x64_sys_recvmsg+0x20a/0x2e0 [ 124.479711][ T4142] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 124.485315][ T4142] ? sched_clock_cpu+0x6e/0x260 [ 124.490199][ T4142] ? debug_smp_processor_id+0x17/0x20 [ 124.495625][ T4142] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 124.501735][ T4142] x64_sys_call+0x75/0x9a0 [ 124.506189][ T4142] do_syscall_64+0x4c/0xa0 [ 124.510641][ T4142] ? clear_bhb_loop+0x30/0x80 [ 124.515357][ T4142] ? clear_bhb_loop+0x30/0x80 [ 124.520241][ T4142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.526164][ T4142] RIP: 0033:0x7fbf9679e159 [ 124.530599][ T4142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.550226][ T4142] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 124.558751][ T4142] RAX: ffffffffffffffda RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 124.566746][ T4142] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 124.574838][ T4142] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 124.582856][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.590855][ T4142] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 124.598873][ T4142] [ 124.626119][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.638597][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.647372][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.655917][ T1778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.721319][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.730860][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.739518][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.748660][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.789720][ T4158] device syzkaller0 entered promiscuous mode [ 124.806564][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.815398][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.823839][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.832551][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.875191][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.883443][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.891909][ T4095] device veth0_vlan entered promiscuous mode [ 124.901785][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.910145][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.920114][ T4099] device veth0_vlan entered promiscuous mode [ 124.939672][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.951545][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.987811][ T4095] device veth1_macvtap entered promiscuous mode [ 125.012446][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.023259][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.041155][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.053590][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.062331][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.087443][ T4099] device veth1_macvtap entered promiscuous mode [ 125.121388][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.136750][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.145941][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.153772][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.166853][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.176014][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.184485][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.193474][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.202012][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.210958][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.222013][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.283430][ T4170] device syzkaller0 entered promiscuous mode [ 125.576048][ T1781] device bridge_slave_1 left promiscuous mode [ 125.582256][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.605452][ T1781] device bridge_slave_0 left promiscuous mode [ 125.611699][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.626427][ T1781] device bridge_slave_1 left promiscuous mode [ 125.632623][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.652809][ T1781] device bridge_slave_0 left promiscuous mode [ 125.659044][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.667888][ T1781] device veth1_macvtap left promiscuous mode [ 125.674111][ T1781] device veth0_vlan left promiscuous mode [ 125.680337][ T1781] device veth1_macvtap left promiscuous mode [ 125.686640][ T1781] device veth0_vlan left promiscuous mode [ 125.899933][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.907132][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.914656][ T4190] device bridge_slave_0 entered promiscuous mode [ 125.921731][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.929017][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.936584][ T4190] device bridge_slave_1 entered promiscuous mode [ 125.986515][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.993603][ T4190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.000962][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.008036][ T4190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.030209][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.037995][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.045636][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.055710][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.063940][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.071057][ T1780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.083082][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.091507][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.098601][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.111916][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.121962][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.137194][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.149144][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.157497][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.165584][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.173960][ T4190] device veth0_vlan entered promiscuous mode [ 126.185551][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.196122][ T4190] device veth1_macvtap entered promiscuous mode [ 126.206334][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.217094][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.459882][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.467051][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.474442][ T4199] device bridge_slave_0 entered promiscuous mode [ 126.482032][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.489314][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.496940][ T4199] device bridge_slave_1 entered promiscuous mode [ 126.544469][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.551571][ T4199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.558918][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.566000][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.588388][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.596277][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.603577][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.614248][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.622625][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.629728][ T1780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.649554][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.657852][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.664939][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.686963][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.696385][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.711447][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.723310][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.732314][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.739881][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.756050][ T4199] device veth0_vlan entered promiscuous mode [ 126.767174][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.776625][ T4199] device veth1_macvtap entered promiscuous mode [ 126.786805][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.804460][ T1780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.873790][ T4209] device syzkaller0 entered promiscuous mode [ 126.914148][ T4208] FAULT_INJECTION: forcing a failure. [ 126.914148][ T4208] name failslab, interval 1, probability 0, space 0, times 0 [ 126.941631][ T4208] CPU: 1 PID: 4208 Comm: syz.1.976 Not tainted syzkaller #0 [ 126.948998][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.959088][ T4208] Call Trace: [ 126.962423][ T4208] [ 126.965383][ T4208] __dump_stack+0x21/0x24 [ 126.969760][ T4208] dump_stack_lvl+0x110/0x170 [ 126.974482][ T4208] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.979641][ T4208] ? is_bpf_text_address+0x177/0x190 [ 126.984977][ T4208] dump_stack+0x15/0x24 [ 126.989198][ T4208] should_fail_ex+0x3bf/0x510 [ 126.993914][ T4208] __should_failslab+0xac/0xf0 [ 126.998713][ T4208] should_failslab+0x9/0x20 [ 127.003252][ T4208] kmem_cache_alloc_node+0x42/0x330 [ 127.008494][ T4208] ? __alloc_skb+0xe8/0x4a0 [ 127.013037][ T4208] __alloc_skb+0xe8/0x4a0 [ 127.017399][ T4208] ? __kasan_check_read+0x11/0x20 [ 127.022570][ T4208] tipc_msg_create+0x4c/0x4f0 [ 127.027289][ T4208] __tipc_shutdown+0xdd2/0x14c0 [ 127.032189][ T4208] ? tipc_recvstream+0xe70/0xe70 [ 127.037174][ T4208] ? __cfi_woken_wake_function+0x10/0x10 [ 127.042842][ T4208] ? __cfi_locks_remove_file+0x10/0x10 [ 127.048340][ T4208] tipc_release+0xca/0x1640 [ 127.053079][ T4208] ? rwsem_write_trylock+0x136/0x300 [ 127.058421][ T4208] ? __cfi_tipc_release+0x10/0x10 [ 127.063534][ T4208] sock_close+0xc9/0x220 [ 127.067854][ T4208] ? __cfi_sock_close+0x10/0x10 [ 127.072737][ T4208] __fput+0x1fd/0x8f0 [ 127.076771][ T4208] ____fput+0x15/0x20 [ 127.080791][ T4208] task_work_run+0x1e1/0x250 [ 127.085422][ T4208] ? __cfi_task_work_run+0x10/0x10 [ 127.090576][ T4208] exit_to_user_mode_loop+0x9b/0xb0 [ 127.095813][ T4208] exit_to_user_mode_prepare+0x87/0xd0 [ 127.101307][ T4208] syscall_exit_to_user_mode+0x1a/0x30 [ 127.106815][ T4208] do_syscall_64+0x58/0xa0 [ 127.111289][ T4208] ? clear_bhb_loop+0x30/0x80 [ 127.116022][ T4208] ? clear_bhb_loop+0x30/0x80 [ 127.120739][ T4208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.126672][ T4208] RIP: 0033:0x7fbf9679e159 [ 127.131118][ T4208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.150847][ T4208] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 127.159337][ T4208] RAX: 00000000000101d0 RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 127.167342][ T4208] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 127.175373][ T4208] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 127.183556][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.191562][ T4208] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 127.199583][ T4208] [ 227.224842][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 227.231898][ C1] (detected by 1, t=10002 jiffies, g=15625, q=213 ncpus=2) [ 227.239206][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294959928-4294949926), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 227.252589][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g15625 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 227.263812][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 227.273796][ C1] rcu: RCU grace-period kthread stack dump: [ 227.279870][ C1] task:rcu_preempt state:R running task stack:28320 pid:14 ppid:2 flags:0x00004000 [ 227.290792][ C1] Call Trace: [ 227.294105][ C1] [ 227.297061][ C1] __schedule+0xcb3/0x1700 [ 227.301718][ C1] ? release_firmware_map_entry+0x190/0x190 [ 227.307657][ C1] ? __mod_timer+0x865/0xc00 [ 227.312380][ C1] ? __kasan_check_write+0x14/0x20 [ 227.317540][ C1] schedule+0xbd/0x170 [ 227.321662][ C1] schedule_timeout+0x159/0x340 [ 227.326550][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 227.331954][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 227.337024][ C1] ? __cfi_process_timeout+0x10/0x10 [ 227.342366][ C1] ? prepare_to_swait_event+0x30f/0x330 [ 227.347951][ C1] rcu_gp_fqs_loop+0x2ed/0x1100 [ 227.352847][ C1] ? rcu_gp_init+0xf30/0xf30 [ 227.357474][ C1] rcu_gp_kthread+0x99/0x390 [ 227.362227][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 227.367469][ C1] ? try_to_wake_up+0x622/0x1250 [ 227.372446][ C1] ? __kasan_check_read+0x11/0x20 [ 227.377499][ C1] ? __kthread_parkme+0x13a/0x180 [ 227.382547][ C1] kthread+0x281/0x320 [ 227.386648][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 227.391871][ C1] ? __cfi_kthread+0x10/0x10 [ 227.396487][ C1] ret_from_fork+0x1f/0x30 [ 227.400950][ C1] [ 227.403991][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 227.410327][ C1] Sending NMI from CPU 1 to CPUs 0: [ 227.415567][ C0] NMI backtrace for cpu 0 [ 227.415578][ C0] CPU: 0 PID: 4208 Comm: syz.1.976 Not tainted syzkaller #0 [ 227.415595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.415605][ C0] RIP: 0010:read_tsc+0x0/0x20 [ 227.415633][ C0] Code: ff 4c 89 ff e8 51 79 88 00 e9 cb fe ff ff e8 e7 9b cc 03 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 64 43 84 be <55> 48 89 e5 0f 01 f9 66 90 48 c1 e2 20 48 09 d0 5d c3 66 2e 0f 1f [ 227.415648][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000057 [ 227.415664][ C0] RAX: 1ffffffff0e16e80 RBX: ffffffff870b7400 RCX: ffff8881135b6540 [ 227.415677][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: ffffffff870b7400 [ 227.415689][ C0] RBP: ffffc90000007b30 R08: ffffc90000007957 R09: ffffc90000007940 [ 227.415702][ C0] R10: 0000000000000000 R11: ffffffff812e7b80 R12: dffffc0000000000 [ 227.415714][ C0] R13: 000000000000a53e R14: 0000000000000001 R15: 00000034be03610d [ 227.415726][ C0] FS: 00007fbf976956c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 227.415741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.415753][ C0] CR2: 0000000000003332 CR3: 0000000111fed000 CR4: 00000000003506b0 [ 227.415768][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.415778][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 227.415788][ C0] Call Trace: [ 227.415793][ C0] [ 227.415798][ C0] ? ktime_get+0xb1/0x170 [ 227.415816][ C0] perf_swevent_hrtimer+0x2e3/0x540 [ 227.415841][ C0] ? __cfi_raise_softirq+0x10/0x10 [ 227.415861][ C0] ? __cfi_perf_swevent_hrtimer+0x10/0x10 [ 227.415892][ C0] ? timerqueue_add+0x20e/0x230 [ 227.415917][ C0] ? timerqueue_del+0xd3/0x120 [ 227.415940][ C0] ? __cfi_perf_swevent_hrtimer+0x10/0x10 [ 227.415964][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 227.415993][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 227.416017][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 227.416040][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 227.416070][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 227.416096][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 227.416115][ C0] [ 227.416120][ C0] [ 227.416126][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 227.416146][ C0] RIP: 0010:tipc_sk_rcv+0x3ed/0x2c20 [ 227.416168][ C0] Code: fc ff df eb 05 e8 b3 f7 96 fc 48 8b bc 24 b0 00 00 00 e8 66 61 27 00 4c 8b b4 24 00 01 00 00 4c 89 f7 44 89 fe e8 33 28 00 00 <48> 85 c0 4c 8b 64 24 30 0f 84 5a 18 00 00 49 89 c5 48 89 44 24 20 [ 227.416183][ C0] RSP: 0018:ffffc900009c6a00 EFLAGS: 00000246 [ 227.416197][ C0] RAX: ffff888114f63700 RBX: dffffc0000000000 RCX: ffff8881135b6540 [ 227.416210][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881135b6540 [ 227.416222][ C0] RBP: ffffc900009c6c70 R08: ffff888114f63783 R09: 1ffff110229ec6f0 [ 227.416234][ C0] R10: dffffc0000000000 R11: ffffed10229ec6f1 R12: ffffc900009c6e20 [ 227.416246][ C0] R13: ffff888114f63780 R14: ffff88811ef78000 R15: 000000009dac4d53 [ 227.416265][ C0] ? kasan_set_track+0x60/0x70 [ 227.416285][ C0] ? kasan_save_free_info+0x2b/0x40 [ 227.416301][ C0] ? ____kasan_slab_free+0x132/0x180 [ 227.416329][ C0] ? __kasan_slab_free+0x11/0x20 [ 227.416349][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 227.416378][ C0] ? kmem_cache_free+0x12d/0x300 [ 227.416417][ C0] ? kfree_skb_reason+0xdc/0x230 [ 227.416438][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 227.416456][ C0] ? tipc_sk_rcv+0x1cde/0x2c20 [ 227.416476][ C0] ? tipc_sk_filter_rcv+0x19d7/0x3010 [ 227.416499][ C0] ? tipc_sk_rcv+0x7e7/0x2c20 [ 227.416521][ C0] ? do_syscall_64+0x58/0xa0 [ 227.416558][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.416591][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 227.416618][ C0] tipc_node_xmit+0x36f/0xd80 [ 227.416636][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 227.416659][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 227.416675][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 227.416697][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 227.416715][ C0] ? kfree_skb_reason+0xdc/0x230 [ 227.416736][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 227.416754][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 227.416775][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 227.416797][ C0] tipc_sk_rcv+0x1d57/0x2c20 [ 227.416821][ C0] ? is_bpf_text_address+0x177/0x190 [ 227.416848][ C0] ? arch_stack_walk+0xfc/0x150 [ 227.416874][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 227.416895][ C0] ? irqentry_exit+0x37/0x40 [ 227.416915][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 227.416962][ C0] ? tipc_node_xmit+0x14d/0xd80 [ 227.416984][ C0] tipc_node_xmit+0x36f/0xd80 [ 227.417014][ C0] ? kernel_text_address+0xa0/0xd0 [ 227.417056][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 227.417089][ C0] ? unwind_get_return_address+0x4d/0x90 [ 227.417128][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 227.417162][ C0] ? arch_stack_walk+0xfc/0x150 [ 227.417219][ C0] tipc_sk_filter_rcv+0x19d7/0x3010 [ 227.417263][ C0] ? __stack_depot_save+0x36/0x490 [ 227.417404][ C0] ? tipc_sk_publish+0x440/0x440 [ 227.417438][ C0] ? __kasan_check_write+0x14/0x20 [ 227.417457][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 227.417486][ C0] tipc_sk_rcv+0x7e7/0x2c20 [ 227.417520][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 227.417540][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 227.417563][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010 [ 227.417590][ C0] tipc_node_xmit+0x36f/0xd80 [ 227.417610][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 227.417628][ C0] ? irqentry_exit+0x37/0x40 [ 227.417648][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 227.417669][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 227.417714][ C0] tipc_node_distr_xmit+0x277/0x390 [ 227.417735][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 227.417756][ C0] ? tipc_msg_create+0x234/0x4f0 [ 227.417777][ C0] tipc_sk_backlog_rcv+0x174/0x220 [ 227.417802][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 227.417826][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 227.417855][ C0] __release_sock+0x154/0x380 [ 227.417883][ C0] release_sock+0x60/0x1c0 [ 227.417905][ C0] tipc_release+0xd1a/0x1640 [ 227.417929][ C0] ? rwsem_write_trylock+0x136/0x300 [ 227.417949][ C0] ? __cfi_tipc_release+0x10/0x10 [ 227.417974][ C0] sock_close+0xc9/0x220 [ 227.417991][ C0] ? __cfi_sock_close+0x10/0x10 [ 227.418009][ C0] __fput+0x1fd/0x8f0 [ 227.418035][ C0] ____fput+0x15/0x20 [ 227.418056][ C0] task_work_run+0x1e1/0x250 [ 227.418079][ C0] ? __cfi_task_work_run+0x10/0x10 [ 227.418103][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 227.418123][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 227.418144][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 227.418166][ C0] do_syscall_64+0x58/0xa0 [ 227.418191][ C0] ? clear_bhb_loop+0x30/0x80 [ 227.418210][ C0] ? clear_bhb_loop+0x30/0x80 [ 227.418230][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.418248][ C0] RIP: 0033:0x7fbf9679e159 [ 227.418281][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.418296][ C0] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 227.418315][ C0] RAX: 00000000000101d0 RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 227.418328][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 227.418340][ C0] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 227.418352][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.418363][ C0] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 227.418380][ C0] [ 375.246882][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.1.976:4208] [ 375.255128][ C0] Modules linked in: [ 375.259044][ C0] CPU: 0 PID: 4208 Comm: syz.1.976 Not tainted syzkaller #0 [ 375.266341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.276433][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 375.282537][ C0] Code: fb e8 23 00 00 00 48 8b 3d 9c 91 21 06 48 89 de e8 34 d3 44 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 10 04 91 7e 65 8b 15 11 04 91 7e [ 375.302144][ C0] RSP: 0018:ffffc900009c69f0 EFLAGS: 00000206 [ 375.308234][ C0] RAX: ffffffff84da8876 RBX: dffffc0000000000 RCX: 0000000000000000 [ 375.316307][ C0] RDX: ffff8881135b6540 RSI: 0000000000000005 RDI: 0000000000000001 [ 375.324284][ C0] RBP: ffffc900009c6c70 R08: ffff888114f63783 R09: 1ffff110229ec6f0 [ 375.332273][ C0] R10: dffffc0000000000 R11: ffffed10229ec6f1 R12: ffffc900009c6e20 [ 375.340275][ C0] R13: ffff888114f63780 R14: 0000000000000005 R15: ffff888114f63700 [ 375.348290][ C0] FS: 00007fbf976956c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 375.357237][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.363943][ C0] CR2: 0000000000003332 CR3: 0000000111fed000 CR4: 00000000003506b0 [ 375.371915][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.379890][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 375.387878][ C0] Call Trace: [ 375.391177][ C0] [ 375.394109][ C0] ? tipc_sk_rcv+0x1a64/0x2c20 [ 375.398882][ C0] ? kasan_set_track+0x60/0x70 [ 375.403657][ C0] ? kasan_save_free_info+0x2b/0x40 [ 375.408885][ C0] ? ____kasan_slab_free+0x132/0x180 [ 375.414223][ C0] ? __kasan_slab_free+0x11/0x20 [ 375.419186][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 375.424749][ C0] ? kmem_cache_free+0x12d/0x300 [ 375.429742][ C0] ? kfree_skb_reason+0xdc/0x230 [ 375.434700][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 375.439737][ C0] ? tipc_sk_rcv+0x1cde/0x2c20 [ 375.444519][ C0] ? tipc_sk_filter_rcv+0x19d7/0x3010 [ 375.449903][ C0] ? tipc_sk_rcv+0x7e7/0x2c20 [ 375.454616][ C0] ? do_syscall_64+0x58/0xa0 [ 375.459220][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.465917][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 375.470882][ C0] tipc_node_xmit+0x36f/0xd80 [ 375.475576][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 375.480890][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 375.486094][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 375.491754][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 375.496711][ C0] ? kfree_skb_reason+0xdc/0x230 [ 375.501674][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 375.507226][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 375.512291][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 375.517681][ C0] tipc_sk_rcv+0x1d57/0x2c20 [ 375.522285][ C0] ? is_bpf_text_address+0x177/0x190 [ 375.527581][ C0] ? arch_stack_walk+0xfc/0x150 [ 375.532450][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 375.537395][ C0] ? irqentry_exit+0x37/0x40 [ 375.542003][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 375.548165][ C0] ? tipc_node_xmit+0x14d/0xd80 [ 375.553025][ C0] tipc_node_xmit+0x36f/0xd80 [ 375.557713][ C0] ? kernel_text_address+0xa0/0xd0 [ 375.562933][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 375.568256][ C0] ? unwind_get_return_address+0x4d/0x90 [ 375.573921][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 375.580113][ C0] ? arch_stack_walk+0xfc/0x150 [ 375.584991][ C0] tipc_sk_filter_rcv+0x19d7/0x3010 [ 375.590212][ C0] ? __stack_depot_save+0x36/0x490 [ 375.595370][ C0] ? tipc_sk_publish+0x440/0x440 [ 375.600328][ C0] ? __kasan_check_write+0x14/0x20 [ 375.605444][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 375.610397][ C0] tipc_sk_rcv+0x7e7/0x2c20 [ 375.614924][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 375.619999][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 375.624973][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010 [ 375.630378][ C0] tipc_node_xmit+0x36f/0xd80 [ 375.635100][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 375.640315][ C0] ? irqentry_exit+0x37/0x40 [ 375.644917][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 375.650754][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 375.656930][ C0] tipc_node_distr_xmit+0x277/0x390 [ 375.662164][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 375.667892][ C0] ? tipc_msg_create+0x234/0x4f0 [ 375.672846][ C0] tipc_sk_backlog_rcv+0x174/0x220 [ 375.677986][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 375.683656][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 375.689149][ C0] __release_sock+0x154/0x380 [ 375.693869][ C0] release_sock+0x60/0x1c0 [ 375.698295][ C0] tipc_release+0xd1a/0x1640 [ 375.702907][ C0] ? rwsem_write_trylock+0x136/0x300 [ 375.708199][ C0] ? __cfi_tipc_release+0x10/0x10 [ 375.713240][ C0] sock_close+0xc9/0x220 [ 375.717490][ C0] ? __cfi_sock_close+0x10/0x10 [ 375.722349][ C0] __fput+0x1fd/0x8f0 [ 375.726347][ C0] ____fput+0x15/0x20 [ 375.730360][ C0] task_work_run+0x1e1/0x250 [ 375.734973][ C0] ? __cfi_task_work_run+0x10/0x10 [ 375.740128][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 375.745341][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 375.750810][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 375.756273][ C0] do_syscall_64+0x58/0xa0 [ 375.760702][ C0] ? clear_bhb_loop+0x30/0x80 [ 375.765471][ C0] ? clear_bhb_loop+0x30/0x80 [ 375.770168][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.776164][ C0] RIP: 0033:0x7fbf9679e159 [ 375.780586][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.800192][ C0] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 375.808619][ C0] RAX: 00000000000101d0 RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 375.816640][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 375.824628][ C0] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 375.832599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.840600][ C0] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 375.848588][ C0] [ 375.851755][ C0] Sending NMI from CPU 0 to CPUs 1: [ 375.856985][ C1] NMI backtrace for cpu 1 [ 375.856997][ C1] CPU: 1 PID: 4207 Comm: syz.1.976 Not tainted syzkaller #0 [ 375.857015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.857025][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x589/0xc40 [ 375.857052][ C1] Code: c0 0f 85 31 01 00 00 41 c6 45 00 00 41 0f b6 04 14 84 c0 0f 85 44 01 00 00 48 8d 43 01 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 5b 41 0f b6 04 16 84 c0 75 35 80 3b 00 75 eb 48 89 df [ 375.857068][ C1] RSP: 0018:ffffc90000997960 EFLAGS: 00000206 [ 375.857083][ C1] RAX: 0000000000000000 RBX: ffff888114f63798 RCX: ffffffff8501f339 [ 375.857096][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114f63798 [ 375.857109][ C1] RBP: ffffc90000997a50 R08: ffff888114f63798 R09: 1ffff110229ec6f3 [ 375.857122][ C1] R10: dffffc0000000000 R11: ffffed10229ec6f4 R12: 1ffff110229ec6f3 [ 375.857136][ C1] R13: 00000000ffffb15e R14: 1ffff110229ec6f3 R15: 0000000000080001 [ 375.857148][ C1] FS: 0000555567c1e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 375.857164][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.857176][ C1] CR2: 0000000000003332 CR3: 0000000111fed000 CR4: 00000000003506a0 [ 375.857192][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.857202][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 375.857214][ C1] Call Trace: [ 375.857220][ C1] [ 375.857229][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 375.857248][ C1] ? syscall_exit_to_user_mode+0x1a/0x30 [ 375.857270][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.857291][ C1] queued_spin_lock_slowpath+0x47/0x50 [ 375.857309][ C1] _raw_spin_lock_bh+0xe4/0xf0 [ 375.857334][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 375.857361][ C1] lock_sock_nested+0x90/0x290 [ 375.857380][ C1] ? __cfi_lock_sock_nested+0x10/0x10 [ 375.857398][ C1] ? __cfi_locks_remove_file+0x10/0x10 [ 375.857419][ C1] tipc_release+0xb3/0x1640 [ 375.857443][ C1] ? rwsem_write_trylock+0x136/0x300 [ 375.857460][ C1] ? __cfi_tipc_release+0x10/0x10 [ 375.857486][ C1] sock_close+0xc9/0x220 [ 375.857502][ C1] ? __cfi_sock_close+0x10/0x10 [ 375.857519][ C1] __fput+0x1fd/0x8f0 [ 375.857544][ C1] ____fput+0x15/0x20 [ 375.857564][ C1] task_work_run+0x1e1/0x250 [ 375.857587][ C1] ? __cfi_task_work_run+0x10/0x10 [ 375.857615][ C1] ? __cfi___close_range+0x10/0x10 [ 375.857634][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 375.857655][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 375.857675][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 375.857696][ C1] do_syscall_64+0x58/0xa0 [ 375.857720][ C1] ? clear_bhb_loop+0x30/0x80 [ 375.857739][ C1] ? clear_bhb_loop+0x30/0x80 [ 375.857758][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.857776][ C1] RIP: 0033:0x7fbf9679e159 [ 375.857791][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.857806][ C1] RSP: 002b:00007ffd2a040ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 375.857823][ C1] RAX: 0000000000000000 RBX: 00007fbf96a27da0 RCX: 00007fbf9679e159 [ 375.857834][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 375.857845][ C1] RBP: 00007fbf96a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 375.857856][ C1] R10: 00007fbf96a27cb0 R11: 0000000000000246 R12: 000000000001f2ab [ 375.857867][ C1] R13: 00007fbf96a2609c R14: 000000000001eff6 R15: 00007fbf96a26090 [ 375.857883][ C1] [ 375.857992][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 376.212032][ C0] CPU: 0 PID: 4208 Comm: syz.1.976 Tainted: G L syzkaller #0 [ 376.220816][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.230870][ C0] Call Trace: [ 376.234148][ C0] [ 376.236992][ C0] __dump_stack+0x21/0x24 [ 376.241342][ C0] dump_stack_lvl+0x110/0x170 [ 376.246026][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 376.251066][ C0] dump_stack+0x15/0x24 [ 376.255227][ C0] panic+0x280/0x698 [ 376.259133][ C0] ? __irq_work_queue_local+0x12a/0x190 [ 376.264689][ C0] ? __cfi_panic+0x8/0x8 [ 376.268967][ C0] watchdog_timer_fn+0x5c5/0x5d0 [ 376.273911][ C0] ? __cfi_watchdog_timer_fn+0x10/0x10 [ 376.279381][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 376.284608][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 376.289816][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 376.295901][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 376.300867][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 376.306856][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 376.312499][ C0] [ 376.315431][ C0] [ 376.318368][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.324459][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 376.330563][ C0] Code: fb e8 23 00 00 00 48 8b 3d 9c 91 21 06 48 89 de e8 34 d3 44 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 10 04 91 7e 65 8b 15 11 04 91 7e [ 376.350182][ C0] RSP: 0018:ffffc900009c69f0 EFLAGS: 00000206 [ 376.356266][ C0] RAX: ffffffff84da8876 RBX: dffffc0000000000 RCX: 0000000000000000 [ 376.364265][ C0] RDX: ffff8881135b6540 RSI: 0000000000000005 RDI: 0000000000000001 [ 376.372233][ C0] RBP: ffffc900009c6c70 R08: ffff888114f63783 R09: 1ffff110229ec6f0 [ 376.380202][ C0] R10: dffffc0000000000 R11: ffffed10229ec6f1 R12: ffffc900009c6e20 [ 376.388181][ C0] R13: ffff888114f63780 R14: 0000000000000005 R15: ffff888114f63700 [ 376.396167][ C0] ? tipc_sk_rcv+0x1a56/0x2c20 [ 376.400946][ C0] ? tipc_sk_rcv+0x1a64/0x2c20 [ 376.405715][ C0] ? kasan_set_track+0x60/0x70 [ 376.410486][ C0] ? kasan_save_free_info+0x2b/0x40 [ 376.415701][ C0] ? ____kasan_slab_free+0x132/0x180 [ 376.421008][ C0] ? __kasan_slab_free+0x11/0x20 [ 376.425954][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 376.431510][ C0] ? kmem_cache_free+0x12d/0x300 [ 376.436460][ C0] ? kfree_skb_reason+0xdc/0x230 [ 376.441408][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 376.446435][ C0] ? tipc_sk_rcv+0x1cde/0x2c20 [ 376.451250][ C0] ? tipc_sk_filter_rcv+0x19d7/0x3010 [ 376.456629][ C0] ? tipc_sk_rcv+0x7e7/0x2c20 [ 376.461318][ C0] ? do_syscall_64+0x58/0xa0 [ 376.465915][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.472010][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 376.476954][ C0] tipc_node_xmit+0x36f/0xd80 [ 376.481642][ C0] ? ____kasan_slab_free+0x13d/0x180 [ 376.486933][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 376.492157][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 376.497729][ C0] tipc_node_xmit_skb+0xf7/0x150 [ 376.502673][ C0] ? kfree_skb_reason+0xdc/0x230 [ 376.507617][ C0] ? __cfi_tipc_node_xmit_skb+0x10/0x10 [ 376.513170][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 376.518203][ C0] ? trace_tipc_sk_rej_msg+0x25/0x150 [ 376.523583][ C0] tipc_sk_rcv+0x1d57/0x2c20 [ 376.528185][ C0] ? is_bpf_text_address+0x177/0x190 [ 376.533485][ C0] ? arch_stack_walk+0xfc/0x150 [ 376.538345][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 376.543290][ C0] ? irqentry_exit+0x37/0x40 [ 376.547889][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.554051][ C0] ? tipc_node_xmit+0x14d/0xd80 [ 376.558909][ C0] tipc_node_xmit+0x36f/0xd80 [ 376.563593][ C0] ? kernel_text_address+0xa0/0xd0 [ 376.568709][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 376.573933][ C0] ? unwind_get_return_address+0x4d/0x90 [ 376.579570][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 376.585842][ C0] ? arch_stack_walk+0xfc/0x150 [ 376.590709][ C0] tipc_sk_filter_rcv+0x19d7/0x3010 [ 376.596089][ C0] ? __stack_depot_save+0x36/0x490 [ 376.601224][ C0] ? tipc_sk_publish+0x440/0x440 [ 376.606169][ C0] ? __kasan_check_write+0x14/0x20 [ 376.611283][ C0] ? _raw_spin_lock_bh+0x94/0xf0 [ 376.616227][ C0] tipc_sk_rcv+0x7e7/0x2c20 [ 376.620742][ C0] ? tipc_msg_reverse+0x6ef/0x940 [ 376.625791][ C0] ? __cfi_tipc_sk_rcv+0x10/0x10 [ 376.630742][ C0] ? tipc_sk_filter_rcv+0x2d9f/0x3010 [ 376.636161][ C0] tipc_node_xmit+0x36f/0xd80 [ 376.640848][ C0] ? __cfi_tipc_node_xmit+0x10/0x10 [ 376.646068][ C0] ? irqentry_exit+0x37/0x40 [ 376.650670][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 376.656478][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 376.662644][ C0] tipc_node_distr_xmit+0x277/0x390 [ 376.667845][ C0] ? __cfi_tipc_node_distr_xmit+0x10/0x10 [ 376.673573][ C0] ? tipc_msg_create+0x234/0x4f0 [ 376.678609][ C0] tipc_sk_backlog_rcv+0x174/0x220 [ 376.683733][ C0] ? __cfi_tipc_sk_backlog_rcv+0x10/0x10 [ 376.689376][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 376.694854][ C0] __release_sock+0x154/0x380 [ 376.699636][ C0] release_sock+0x60/0x1c0 [ 376.704060][ C0] tipc_release+0xd1a/0x1640 [ 376.708654][ C0] ? rwsem_write_trylock+0x136/0x300 [ 376.713948][ C0] ? __cfi_tipc_release+0x10/0x10 [ 376.718984][ C0] sock_close+0xc9/0x220 [ 376.723235][ C0] ? __cfi_sock_close+0x10/0x10 [ 376.728084][ C0] __fput+0x1fd/0x8f0 [ 376.732095][ C0] ____fput+0x15/0x20 [ 376.736083][ C0] task_work_run+0x1e1/0x250 [ 376.740687][ C0] ? __cfi_task_work_run+0x10/0x10 [ 376.745807][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 376.751026][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 376.756487][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 376.761978][ C0] do_syscall_64+0x58/0xa0 [ 376.766404][ C0] ? clear_bhb_loop+0x30/0x80 [ 376.771087][ C0] ? clear_bhb_loop+0x30/0x80 [ 376.775768][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.781667][ C0] RIP: 0033:0x7fbf9679e159 [ 376.786083][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.805807][ C0] RSP: 002b:00007fbf97695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 376.814231][ C0] RAX: 00000000000101d0 RBX: 00007fbf96a25fa0 RCX: 00007fbf9679e159 [ 376.822374][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 376.830351][ C0] RBP: 00007fbf97695090 R08: 0000000000000000 R09: 0000000000000000 [ 376.838321][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.846302][ C0] R13: 00007fbf96a26038 R14: 00007fbf96a25fa0 R15: 00007ffd2a040b88 [ 376.854287][ C0] [ 376.857875][ C0] Kernel Offset: disabled [ 376.862202][ C0] Rebooting in 86400 seconds..