last executing test programs: 9.324268986s ago: executing program 3 (id=1645): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001340)="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", 0xf3f}], 0x2, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 8.466372164s ago: executing program 3 (id=1655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040)=r2, 0x12) openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, r2, 0xf, 0xffffffffffffffff, 0x0) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) (async) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) (async) openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000040)=r2, 0x12) (async) openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(0x0, r2, 0xf, 0xffffffffffffffff, 0x0) (async) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.233051994s ago: executing program 2 (id=1690): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1}, 0x2060) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000ff0000f4b7050020dd063a24d65cf81b6795bdd0b4df4ecdf93173af56", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000812e1adec5458fd65d2f2047ec1fba000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r3, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r4, 0x8982, 0x20000000) 2.913272883s ago: executing program 2 (id=1693): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500000000000061a863f75a5481d93de5ffffff000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x41002600, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) 2.677182645s ago: executing program 4 (id=1696): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6c8b0d7c8126aee6d3def94cd964218564fb1d255bce6cef9bea8322326039744a98eead8c59bc75bb5b42123eef53ae4bc331b0ad09a8efc4175c484ad74df9158ff1882cdd83c97c03a35e91c30a0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000e10000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000ffffffffffffffeb0000004b110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r2, 0x32, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r5, r1, 0x3, 0x0, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.575562034s ago: executing program 1 (id=1697): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001340)="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", 0xf3f}], 0x2, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2.231886656s ago: executing program 4 (id=1698): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000080), &(0x7f0000000740)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2.228913506s ago: executing program 2 (id=1699): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001340)="27067bfcf0b9faa79a8561879c850be2c8462aa6e404492414b9f6113440cbafd234ddc922141c75edaf461acfa3706bc2695fd46415f587f7727e629e4a0c44986bc9d798d6393052e1f2e38430d66d6ca7806db626d9c6f0864ebc1492c32923bf2460a0158149cfb4ebd68b82c046c8a2986fc8eabfcefd085b8926529f125593b323428e50421ff32be2c286b12e73bf27205bb9119e045e2bf46d5e59159b767b43fa957b02c7e1c500e97c357cc10967d3c167a402a6b10de022d5da6cdcc116835ed196e7d5ef44ed0801780d2afac1baff2814dbd2cdfaa2fa064ec5ad5eb09daff41c74e9c94b721a28fbe61a04f71caf630bf41bc74f5ef7cd15570d9b5a9607fbb908979bc6c2dc9386d22d0e6be8bc105abb43077886a3dbbc1bdf210e1eac26e4da0bdd2c037b9d23a0a45899332a15cc70b2cc6bf9909b9292e62017c726915abb719ceed61c502c9628d1547d1a1b9bf0ab09656ab31ed4a8675ad5b8cd26be9fe7dd1992bb5cb1a7d74c09bf6bab63b399278c9fe4dc3ddb84c8ea800db2b8e15361d2704d3a5e279983f020717323ddad628d0f6185ebaac83b487f2b79b62b7e02a88e76f3db3543a5e9ca023a4f6997480b22fa182f92c6063c8bfc38bcdb3a99f9bd517e4fec0fb7854bbd47d474394f28d2ce64de86c0fd5a9e6964465c73dd37db275ab6b21326131527344ef815bdbce764257357548962ce690a891a8b368bf83f131cfefe06f0dca329771dc00894060e59151ed80084b58b7059bd3f93713cf8266f4099a3adb168887583d8891a17b025f700816ec24c7df42688fbb4a72e10c1b482b2fa28c9e51f1682c82f8a2b086931539ca3cd443715c336750c9001f0be019cee9200b9bd174ad258deef4dd3860b83dbb4162cd387205163e0425c4355480044e39c4e960239af54d2c371ba597ff692635b88f7aaa376bea046114038f3575148a8fea6053fa7b2cdbebd21391dfff568058ae083831f1e821f97a5bb5ff8345f750475bc06bae39622200ff091a47fc2dac8da0d8af4676432ea597f925245e81eb5577b034bba9ed2a539817052288f690eaaa33715d9dbbda56399a13460bc5d24350e0d30cb9817adce1a7ff8bf148a4fae3a114d0d04f69c08866640189abb83dea04b2b8a3a356b4246eb1c9e4a415ca585fd5f4c24fc353fab0c1104788b72b088e9414f4a139efb2618c11e0d902fc59f27ae1d8ef167be8f3b5e61088c895591d1073ded9334dcaddae0bdfdb0ade0a1f155b084e16beaf726b0dc75e841419ff7d21dcedad3f7d5e82e205cabc3dff1beab4b42a9dfc1e6f0a7c8e6e075a4929b4e7f230bf93014e05ab12701762464a42784cb5f7919d2e0f44bfe27713544371d46ab220473e296e3c11ee083b72e9e5a1bb6066f5a6e172b2770e24b3cfdeb3757f5739470442a5b8e8d684a2e0ea6824d622d489915b6b4f7125a6b48f90ccf5ee5fdb8be932c683b9d47595cf2e947c9c456682c1d068eaf4560489782af4b9c35d7c401e70c273e723824e824fcbe09c2165dc5f9f8ff42b25f6990f47d121d080b605ab303609b6747f47c3aa27477da4352b1172417c80fe934593dbce7b6b295ffc0d4ad145ee6bd17faae4f109aae2a8b5a4ced74836aae19355624cadfca9c9190e1f7a81e9ec166356728f287c4fdea94ac579a28492690e2f57386dad66eb149f23a8d4b952b188b67c8105b1024fbb831b0cfecb2e0be8e6f37fd05741933002556bca9612afaf856959bfe89076559bce3dbc75e6d7786f1def22ddf27c1c9da65a98e82f8d9f6df74a9d89d07b3cc639c7ca3368c0e4f6eb5584f0c1f4e82b615ab1cfd9c3aefcc192b527e7ca2741e8c60c8b1a2bc1663accddeece46558bec18650890d3a55217716afcf203144943a520f5c2890a0eb6fb65ddb6750de364b218eacc10a0cc80a57eedaae6ffafce8631cf88b7d03896a6d0d8e88116d3110e32b535e986e6b8acaecac4f9d862714c5ae1a6a9cb846dad94bd0196dd246688cbec4c6549e33b571efdbffdc3d9df3fb21aa1071ee1fa9783d9a63f910ad6d76a8b878eb2f09a49115cc3d2c4085509c95d71f81a95c6e06feee4401a893116ecd9c5fc06080c4e782e7df032a27d5323192a26c9af028b369d85cff3a42ea043772214d68449c2935d6bfe8a8ba812d906ff89d6c922ef3cde39737c8acbe4ea3a4adb072f4953a24ae86382163ab60aa436ed17e27ea5fd67482f0850a024e7fa83459ebb4bdc883e55c3fd46fe9e9f633d549384159ce0c236390766eefc8e077a7579f466dbd198a24006595eb4334e8170a041997693deb936d03266523016352e86fedd1343263f6b52e73bfbf288c9bf51b1db627ffc4715085924e5238e73f53c0b405e39b612ddf66cb45aa3e1e2d57491c46d27afb3c5a8f40fd8f63689e8dab9194205380ed151135c4368592edd229ecf15a43abccfe01ee9aaf8353ef1930f86d08b4287a9e4d960795d97cb69517854aa4b21e7870e521d0f4d0f3f8d8d4c2e3b07867c2f1ab92dc124d5d030443dccb7600a38808dbe347ccc2bc87830435a28a03f2df4f68787caa0083623b1faaf19bae3de2875d771f54c2d53e672714c2e8e9dedadcac69e5c9acec20ba4bc9a7eba7aaa625193919786bef0dcc29acea316b13d72ff412ea92ff6c85f7c5559fbdca39d9a6b77a410740d02307d61d44e9e7ba8e078b8f872dd4a320694b1cbaaf2017c94f73f0fa104936c7f117923465f620f5b5e5bfe45eaf6178df3e306b62bf03b10c16b2edd357ff283a1f537334ad296b375777a41988efe6a21615ffa1afdb915a462118f089e42a5b3db3b6de079348522516b448c9edefa7600ad2b8d8ce954de4b622c65a9fd155c9ccf63a80b2fab60dd91df19ee064e6f77d3a204adb60d39e190885cbc649320ee76de0433ed0c98e2c7fdca3e23d31e0723ba17848f487e37ae749476044c3bbe49173828e410caf33aa51e66442d85850c72cc046dd141e976d1d3cce3989ffe7f3dcc266934fdf9a67a9e7648c795e58a0b815024a9fdcb2608e37ac1cf8eb5b90c46c5171fb0962dbeb4bafa2a12fc07d1a5d6aaa14128ede06d608fd0b1d09e43e947c569dbe5ddaf0431f7f0032716041895ab16b24d487c4d557b81826acee84ede30417a101f521bc6f092d53b7bdb02041966e5ebc9aa57ddbd7568fe84a3104a590c0ce06e1417c24da4579f3dab6a278e3cde57369ec300840af5b65ee6e1906adfc192a6160e588f71a710f9f7136bc0c89f70a68815a3d6d10788b9e8ea138f17109624f8e17b898721f0041b18b0f3cd2b728db022f92fb6e294d7bf0caf3e7421deb10c0c5fdf65b4806884492fbfe262e7f277a44df3d169b3c003f93833788a7fbaabb7a3fd37d65ca5ef3804a6f6f32276729666fe790ae01e2a4aaf452b318585d61119ae73ba2ddf63f014ed8cf7229b69dc18a17cab5f1a966f83847577ef8588bf2f6c348d4c5f48ce93ba270d7d8d546df50eca9ac1ca3cc54608aa57d0f6786315b4e7e6dc669b8bdc78abb92e20936f2df76e04a97a0a46aae4922fee5ea6e499d4422724a986a49cef504b1c8162b774416f2d7ae59d1d6982ec98dcad1194da9e77fe0c6c7ae71ca12c4ae06feb8600ec2176ee5434d9ba1f464009b23f07040df8426772c4d6a329338932152d9724114d525d6de4945d46261e86b71a5f01f395b79fc0554be6040ccf840b16a609652bf283f4108f68cb10bff4c71c55ba8c53494d65d4b1bf457d5a1b0807581c372e164d3aaa1315114fd9bb2040b0ba4a0c803eaa35bec9e7c352effa2a4c2565da320345178cd425b87021d7a9d0203636f1a7d1e69acd64d66eeeb15945a2c80c22fc7a2b6f27d8b820b3e82bdaa6bca4b014dd5b8cf9f006658de9d9e324d543ad9fe8ad50a2fc2941e6dce55e59481a5a1c7b2fe0f15c35cb1dcebc17746a8622c57882de7a06cb3618bb95a4bf744486338efe22b8703529d148fa77005c10e2bcf4bb59276e2b3c5a428ba276a3b15ce2b95638f321052219b41a1cc47966f6d70a931f3fbf3623e7563cffe4d878ec9008c81c128a247d55158a1ad30cf95c1676a1f5a6c5c5af659a197f257b1c4cec8b077c50315a81568cdcb02c9b93ec03364fe840c656038f13e982e1a3591e1a68536b06d23cb2577b5349d0712c9157eda6d4fd3e09a203ec067a2b9b2a5aaa979e373cb698a072a97be7c3f1afeab1bbdb2ede35ef46198a790d32da9e58c8dba220161ecbea97368e82c91fc784de4f17fad215218bfb540af391a89f718cf3d8c24e2ff35bdd50b8fdffc5e37974a2dab36576d41540968deb83b8f7d2720e371698910438c37d198ab37a0f16506054343b62d8162059bc003bf842fd49587087c1c327496cfda1a9a9e4b85ad6ed00012d8540e370b0a8a3e106a09b906dbf2ffe8ffa42a55a0db14143f5e3c22d2631aeff12f11a76ba54b95b0af5c8816dce96c310b60f41201a5b46e1fa911164b18b967164439593e0ce24edfb5ec80ce301745f9828bcab1da43f05b67c0efca0b13cf0b37961ca553d7638bc61ad399ce8f9fd9dad2a820fef579dbe4ebb16f6f25d769d678f0f3674274afd50966d8a644b900a4e20e2953450f0eb9372fec73155e8870ae7e738ccc5aff62f040de1e29578018615a030696bea92c69480bcf7f6a015237730d93436c79b4b6b4da8183bd5c2d6a9dc20b38febf44cad7d6eef40c1c820ef47b047583a23e3abfd4e3431c8560ffa3cd0d57f95d2d5e6a92373eb150e16424c0af1b44ec4d5f6cdf16d53406eb22cd81d1e77297614133c2936c9c6130e3b0ecd2585ca2972b05fdeb1d428f44a14edbab0ca3db7ea73ea852cb20f7af89af396ce1ca3c4a3f75a57d290b89b186da2585a351bc4f5f1e73c92379846ee55ac8fe61d1b95cf442b0f3ae5aa45d8f38cad6226d24f330392d062bea96327b6a9a77afba47a49562777285ceecd2a443f2bd208034e23a07eae50ca5f1f1e37b3d4389d6f1b43f6ee05a96e184ff25e21c7b9f966f7e3d5e8fb1ffc478bfd8c9fdbcb93c6852a54dbcd63809712ceaf6ef4dad4118947168a1bee0781ef5d5fa70efb51d8b4dffecd938dbb2b68feaf6210d01eed0872fba6cf6355bdc3ba1afdde8974e112d6bea8f7436746e25edf404bc0d52dc377b0ba3378417890f540185bd60649ab745b39c4ca4af2898017c5b237349c1a99c6f48b4189fa494df61529a2f3c787106b0bac58440b6c68aa449d7b86777ab1a40877dd2374294bc111936f0ad0ac22a511e5bc9c8a4d90fc06fdd3ec00ddc2e575ca0e5de6c4bc835836086d1c9ad090c239a37364a8b447d0f4fe6ce6359bae17b30da9c12262be350d50c003621620838022a05277cbc95558034e53eb1a4097af329a2191a1bca35f3df2a5c8a51d72c1f51d89e4b67f8c7f3369421530414bde1ada2e0ea1cde5d32c25d1721fb4a0fe577e01d0104fe", 0xf3f}], 0x2, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2.126035136s ago: executing program 3 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.090478529s ago: executing program 4 (id=1701): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000080), &(0x7f0000000740)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (fail_nth: 2) 2.006431666s ago: executing program 3 (id=1703): syz_clone(0x40b04000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000000000000000000000000a5aa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000000000000000000000000a5aa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811000089a9969b01d0eee4d2f7b6d86cb16ba232630af2b524c72f5467e2f8410d6f22709c8b89abe9de2a8815df07f2a73b656f145906c539ba80b8b6f868dc459f99dbfbe4742ad664e62f4145a62cf28d99", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11b44d643f05be6b, 0xc, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6307e08102030000fe0ea66718330200975a65789ff57b00000000000000cade22000000000000ac9ccb"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.764897478s ago: executing program 0 (id=1705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x16) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x10000000, &(0x7f0000000180)="5ca44104bacbd4ed9a63193f03d96fcefefd4c56923e051251f71eefebe02d822d2c0d9349613bfa55ccc1f6", 0x2c, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)="1f81eef4ee181e80fb2a2d9e44a2ea6c3bb91cc12e751c9611191b10c80c12a93708fa0f91eafae5c809118816a8710c24cd41ce5529bb42ae7cb04953f3b41bc1da72c434430e0e8b310ccad3ce8da4e43133be39d1073241d1") syz_open_procfs$namespace(r3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) 1.764048998s ago: executing program 1 (id=1706): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff17}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.717566783s ago: executing program 3 (id=1707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x5, 0xa, 0x22, 0x0, 0x6, 0xe302, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x822, 0x8001, 0x1, 0x3, 0x800, 0x7, 0xfc68, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 1.349089316s ago: executing program 2 (id=1708): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1}, 0x2060) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000ff0000f4b7050020dd063a24d65cf81b6795bdd0b4df4ecdf93173af56", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000812e1adec5458fd65d2f2047ec1fba000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r3, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r4, 0x8982, 0x20000000) 1.31086818s ago: executing program 3 (id=1709): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6c8b0d7c8126aee6d3def94cd964218564fb1d255bce6cef9bea8322326039744a98eead8c59bc75bb5b42123eef53ae4bc331b0ad09a8efc4175c484ad74df9158ff1882cdd83c97c03a35e91c30a0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000e10000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000ffffffffffffffeb0000004b110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r2, 0x32, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r5, r1, 0x3, 0x0, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.31053282s ago: executing program 4 (id=1710): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500000000000061a863f75a5481d93de5ffffff000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x41002600, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) 1.20066945s ago: executing program 0 (id=1718): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1}, 0x2060) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000ff0000f4b7050020dd063a24d65cf81b6795bdd0b4df4ecdf93173af56", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000812e1adec5458fd65d2f2047ec1fba000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r3, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r4, 0x8982, 0x20000000) 1.172487483s ago: executing program 1 (id=1711): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000080), &(0x7f0000000740)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.111426368s ago: executing program 4 (id=1712): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000080), &(0x7f0000000740)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.09205501s ago: executing program 2 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.036331375s ago: executing program 0 (id=1714): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x8c500, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00ac"], 0xfe1b) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000181000000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb4, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t0\t\t\t') syz_clone(0x1000080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x70) 1.036083965s ago: executing program 1 (id=1715): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f3ffffffffffffff0000000000000000000080000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='FREEZING\x00', 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d879"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) 1.001063388s ago: executing program 0 (id=1716): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.000570348s ago: executing program 1 (id=1717): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001340)="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", 0xf3f}], 0x2, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 999.036378ms ago: executing program 4 (id=1719): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff17}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 883.888649ms ago: executing program 0 (id=1720): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001340)="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", 0xf3f}], 0x2, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 883.54522ms ago: executing program 2 (id=1721): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000080), &(0x7f0000000740)='%pK \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (fail_nth: 3) 19.589369ms ago: executing program 1 (id=1722): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x53}, [@ldst={0x7}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)="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", 0xfffffd10}], 0x1}, 0x800) 0s ago: executing program 0 (id=1723): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff17}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 1] do_syscall_64+0x3b/0xb0 [ 155.936295][ T3581] ? clear_bhb_loop+0x35/0x90 [ 155.940812][ T3581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.946536][ T3581] RIP: 0033:0x7f45971e2ff9 [ 155.950791][ T3581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.970228][ T3581] RSP: 002b:00007f4595e3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.978473][ T3581] RAX: ffffffffffffffda RBX: 00007f459739b058 RCX: 00007f45971e2ff9 [ 155.986285][ T3581] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000001 [ 155.994097][ T3581] RBP: 00007f4595e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.001910][ T3581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.009718][ T3581] R13: 0000000000000000 R14: 00007f459739b058 R15: 00007ffdfcc34fb8 [ 156.017536][ T3581] [ 157.106976][ T3618] FAULT_INJECTION: forcing a failure. [ 157.106976][ T3618] name failslab, interval 1, probability 0, space 0, times 0 [ 157.149007][ T3618] CPU: 1 PID: 3618 Comm: syz.4.987 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 157.158649][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.168543][ T3618] Call Trace: [ 157.171665][ T3618] [ 157.174441][ T3618] dump_stack_lvl+0x151/0x1c0 [ 157.178956][ T3618] ? io_uring_drop_tctx_refs+0x190/0x190 [ 157.184427][ T3618] dump_stack+0x15/0x20 [ 157.188415][ T3618] should_fail+0x3c6/0x510 [ 157.192670][ T3618] __should_failslab+0xa4/0xe0 [ 157.197269][ T3618] should_failslab+0x9/0x20 [ 157.201607][ T3618] slab_pre_alloc_hook+0x37/0xd0 [ 157.206379][ T3618] __kmalloc+0x6d/0x270 [ 157.210370][ T3618] ? kvmalloc_node+0x1f0/0x4d0 [ 157.214969][ T3618] ? kvmalloc_node+0x281/0x4d0 [ 157.219569][ T3618] kvmalloc_node+0x1f0/0x4d0 [ 157.223997][ T3618] ? vm_mmap+0xb0/0xb0 [ 157.227902][ T3618] ? refcount_dec_and_lock_irqsave+0x150/0x160 [ 157.233890][ T3618] map_lookup_elem+0x42f/0x620 [ 157.238491][ T3618] __sys_bpf+0x452/0x760 [ 157.242570][ T3618] ? fput_many+0x160/0x1b0 [ 157.246823][ T3618] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 157.252040][ T3618] ? debug_smp_processor_id+0x17/0x20 [ 157.257235][ T3618] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 157.263141][ T3618] __x64_sys_bpf+0x7c/0x90 [ 157.267392][ T3618] x64_sys_call+0x87f/0x9a0 [ 157.271733][ T3618] do_syscall_64+0x3b/0xb0 [ 157.275984][ T3618] ? clear_bhb_loop+0x35/0x90 [ 157.280499][ T3618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.286226][ T3618] RIP: 0033:0x7f45971e2ff9 [ 157.290483][ T3618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.309920][ T3618] RSP: 002b:00007f4595e3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.318164][ T3618] RAX: ffffffffffffffda RBX: 00007f459739b058 RCX: 00007f45971e2ff9 [ 157.325975][ T3618] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000001 [ 157.333787][ T3618] RBP: 00007f4595e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.341598][ T3618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.349409][ T3618] R13: 0000000000000001 R14: 00007f459739b058 R15: 00007ffdfcc34fb8 [ 157.357225][ T3618] [ 157.484236][ T3632] device sit0 left promiscuous mode [ 158.616863][ T3675] FAULT_INJECTION: forcing a failure. [ 158.616863][ T3675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.633425][ T3675] CPU: 1 PID: 3675 Comm: syz.0.1003 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 158.643142][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 158.653041][ T3675] Call Trace: [ 158.657546][ T3675] [ 158.660333][ T3675] dump_stack_lvl+0x151/0x1c0 [ 158.664838][ T3675] ? io_uring_drop_tctx_refs+0x190/0x190 [ 158.670307][ T3675] dump_stack+0x15/0x20 [ 158.674300][ T3675] should_fail+0x3c6/0x510 [ 158.678549][ T3675] should_fail_usercopy+0x1a/0x20 [ 158.683409][ T3675] _copy_to_user+0x20/0x90 [ 158.687662][ T3675] simple_read_from_buffer+0xc7/0x150 [ 158.692870][ T3675] proc_fail_nth_read+0x1a3/0x210 [ 158.697741][ T3675] ? proc_fault_inject_write+0x390/0x390 [ 158.703195][ T3675] ? fsnotify_perm+0x269/0x5b0 [ 158.707807][ T3675] ? security_file_permission+0x86/0xb0 [ 158.713179][ T3675] ? proc_fault_inject_write+0x390/0x390 [ 158.718647][ T3675] vfs_read+0x27d/0xd40 [ 158.722643][ T3675] ? kernel_read+0x1f0/0x1f0 [ 158.727067][ T3675] ? __kasan_check_write+0x14/0x20 [ 158.732012][ T3675] ? mutex_lock+0xb6/0x1e0 [ 158.736265][ T3675] ? wait_for_completion_killable_timeout+0x10/0x10 [ 158.742687][ T3675] ? __fdget_pos+0x2e7/0x3a0 [ 158.747111][ T3675] ? ksys_read+0x77/0x2c0 [ 158.751279][ T3675] ksys_read+0x199/0x2c0 [ 158.755360][ T3675] ? vfs_write+0x1110/0x1110 [ 158.759784][ T3675] ? __kasan_check_write+0x14/0x20 [ 158.764730][ T3675] ? switch_fpu_return+0x15f/0x2e0 [ 158.769679][ T3675] __x64_sys_read+0x7b/0x90 [ 158.774020][ T3675] x64_sys_call+0x28/0x9a0 [ 158.778272][ T3675] do_syscall_64+0x3b/0xb0 [ 158.782525][ T3675] ? clear_bhb_loop+0x35/0x90 [ 158.787051][ T3675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.792769][ T3675] RIP: 0033:0x7f3c0e55fa3c [ 158.797020][ T3675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 158.816458][ T3675] RSP: 002b:00007f3c0d198030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.824703][ T3675] RAX: ffffffffffffffda RBX: 00007f3c0e719130 RCX: 00007f3c0e55fa3c [ 158.832519][ T3675] RDX: 000000000000000f RSI: 00007f3c0d1980a0 RDI: 0000000000000008 [ 158.840417][ T3675] RBP: 00007f3c0d198090 R08: 0000000000000000 R09: 0000000000000000 [ 158.848227][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.856043][ T3675] R13: 0000000000000001 R14: 00007f3c0e719130 R15: 00007ffd4d262df8 [ 158.863856][ T3675] [ 160.284246][ T3742] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 160.361798][ T3742] dvmrp1: linktype set to 768 [ 161.054053][ T3761] bridge0: port 3(macsec0) entered disabled state [ 161.066972][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.081974][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.123012][ T3761] device bridge0 left promiscuous mode [ 161.251613][ T3762] bridge0: port 3(macsec0) entered blocking state [ 161.257897][ T3762] bridge0: port 3(macsec0) entered forwarding state [ 161.264421][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.271180][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.278262][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.285065][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.294772][ T3762] device bridge0 entered promiscuous mode [ 161.363023][ C1] eth0: bad gso: type: 1, size: 1408 [ 164.251720][ T3887] syz.1.1072[3887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.251960][ T3887] syz.1.1072[3887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.313998][ T3887] device wg2 entered promiscuous mode [ 165.528212][ T3944] device veth1_macvtap left promiscuous mode [ 165.603350][ T3944] bridge0: port 3(macsec0) entered disabled state [ 167.989811][ T4018] device pim6reg1 entered promiscuous mode [ 168.339176][ T30] audit: type=1400 audit(1728183587.150:153): avc: denied { create } for pid=4024 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.894376][ T4026] device pim6reg1 entered promiscuous mode [ 171.295025][ T4107] device pim6reg1 entered promiscuous mode [ 171.314949][ T4115] device veth0_vlan left promiscuous mode [ 171.390923][ T4115] device veth0_vlan entered promiscuous mode [ 171.574686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.582576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.589943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.001228][ T4154] FAULT_INJECTION: forcing a failure. [ 172.001228][ T4154] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.015125][ T4154] CPU: 1 PID: 4154 Comm: syz.0.1158 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 172.024833][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 172.034735][ T4154] Call Trace: [ 172.037849][ T4154] [ 172.040627][ T4154] dump_stack_lvl+0x151/0x1c0 [ 172.045140][ T4154] ? io_uring_drop_tctx_refs+0x190/0x190 [ 172.050870][ T4154] ? 0xffffffffa0002fb0 [ 172.054865][ T4154] ? is_bpf_text_address+0x172/0x190 [ 172.059989][ T4154] ? stack_trace_save+0x1c0/0x1c0 [ 172.064845][ T4154] dump_stack+0x15/0x20 [ 172.068836][ T4154] should_fail+0x3c6/0x510 [ 172.073088][ T4154] should_fail_alloc_page+0x5a/0x80 [ 172.078120][ T4154] prepare_alloc_pages+0x15c/0x700 [ 172.083068][ T4154] ? __alloc_pages_bulk+0xe40/0xe40 [ 172.088102][ T4154] __alloc_pages+0x18c/0x8f0 [ 172.092527][ T4154] ? prep_new_page+0x110/0x110 [ 172.097131][ T4154] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 172.102596][ T4154] ? shmem_swapin_page+0x1680/0x1680 [ 172.107721][ T4154] ? xas_start+0x333/0x3f0 [ 172.111969][ T4154] ? xas_load+0x2a9/0x2d0 [ 172.116137][ T4154] ? pagecache_get_page+0xdc2/0xeb0 [ 172.121177][ T4154] ? page_cache_prev_miss+0x410/0x410 [ 172.126379][ T4154] shmem_getpage_gfp+0x1388/0x23c0 [ 172.131335][ T4154] ? shmem_getpage+0xa0/0xa0 [ 172.135754][ T4154] ? fault_in_safe_writeable+0x240/0x240 [ 172.141220][ T4154] ? ktime_get_coarse_real_ts64+0x117/0x130 [ 172.146946][ T4154] shmem_write_begin+0xca/0x1b0 [ 172.151634][ T4154] generic_perform_write+0x2bc/0x5a0 [ 172.156756][ T4154] ? grab_cache_page_write_begin+0xa0/0xa0 [ 172.162393][ T4154] ? file_remove_privs+0x610/0x610 [ 172.167344][ T4154] ? rwsem_write_trylock+0x153/0x340 [ 172.172463][ T4154] ? rwsem_mark_wake+0x770/0x770 [ 172.177329][ T4154] __generic_file_write_iter+0x25b/0x4b0 [ 172.182792][ T4154] generic_file_write_iter+0xaf/0x1c0 [ 172.188086][ T4154] vfs_write+0xd5d/0x1110 [ 172.192251][ T4154] ? putname+0xfa/0x150 [ 172.196253][ T4154] ? file_end_write+0x1c0/0x1c0 [ 172.200929][ T4154] ? mutex_lock+0xb6/0x1e0 [ 172.205182][ T4154] ? wait_for_completion_killable_timeout+0x10/0x10 [ 172.211608][ T4154] ? __fdget_pos+0x2e7/0x3a0 [ 172.216128][ T4154] ? ksys_write+0x77/0x2c0 [ 172.220380][ T4154] ksys_write+0x199/0x2c0 [ 172.224548][ T4154] ? __ia32_sys_read+0x90/0x90 [ 172.229325][ T4154] ? debug_smp_processor_id+0x17/0x20 [ 172.234614][ T4154] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 172.240544][ T4154] __x64_sys_write+0x7b/0x90 [ 172.244942][ T4154] x64_sys_call+0x2f/0x9a0 [ 172.249205][ T4154] do_syscall_64+0x3b/0xb0 [ 172.253447][ T4154] ? clear_bhb_loop+0x35/0x90 [ 172.257970][ T4154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.263689][ T4154] RIP: 0033:0x7f3c0e560ff9 [ 172.267944][ T4154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.287382][ T4154] RSP: 002b:00007f3c0d1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.295624][ T4154] RAX: ffffffffffffffda RBX: 00007f3c0e718f80 RCX: 00007f3c0e560ff9 [ 172.303436][ T4154] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 172.311246][ T4154] RBP: 00007f3c0d1da090 R08: 0000000000000000 R09: 0000000000000000 [ 172.319059][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.326872][ T4154] R13: 0000000000000000 R14: 00007f3c0e718f80 R15: 00007ffd4d262df8 [ 172.334686][ T4154] [ 172.957994][ T4183] FAULT_INJECTION: forcing a failure. [ 172.957994][ T4183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.970909][ T4183] CPU: 1 PID: 4183 Comm: syz.2.1169 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 172.980562][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 172.990463][ T4183] Call Trace: [ 172.993581][ T4183] [ 172.996359][ T4183] dump_stack_lvl+0x151/0x1c0 [ 173.000870][ T4183] ? io_uring_drop_tctx_refs+0x190/0x190 [ 173.006341][ T4183] ? __kasan_check_read+0x11/0x20 [ 173.011199][ T4183] dump_stack+0x15/0x20 [ 173.015189][ T4183] should_fail+0x3c6/0x510 [ 173.019444][ T4183] should_fail_usercopy+0x1a/0x20 [ 173.024305][ T4183] copy_page_from_iter_atomic+0x423/0x10e0 [ 173.029950][ T4183] ? pipe_zero+0x4e0/0x4e0 [ 173.034201][ T4183] ? ktime_get_coarse_real_ts64+0x117/0x130 [ 173.039933][ T4183] generic_perform_write+0x337/0x5a0 [ 173.045141][ T4183] ? grab_cache_page_write_begin+0xa0/0xa0 [ 173.050773][ T4183] ? file_remove_privs+0x610/0x610 [ 173.055724][ T4183] ? rwsem_write_trylock+0x153/0x340 [ 173.060844][ T4183] ? rwsem_mark_wake+0x770/0x770 [ 173.065615][ T4183] __generic_file_write_iter+0x25b/0x4b0 [ 173.071083][ T4183] generic_file_write_iter+0xaf/0x1c0 [ 173.076293][ T4183] vfs_write+0xd5d/0x1110 [ 173.080456][ T4183] ? file_end_write+0x1c0/0x1c0 [ 173.085144][ T4183] ? mutex_lock+0xb6/0x1e0 [ 173.089397][ T4183] ? wait_for_completion_killable_timeout+0x10/0x10 [ 173.095824][ T4183] ? __fdget_pos+0x2e7/0x3a0 [ 173.100242][ T4183] ? ksys_write+0x77/0x2c0 [ 173.104497][ T4183] ksys_write+0x199/0x2c0 [ 173.108663][ T4183] ? __ia32_sys_read+0x90/0x90 [ 173.113268][ T4183] ? debug_smp_processor_id+0x17/0x20 [ 173.118485][ T4183] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 173.124372][ T4183] __x64_sys_write+0x7b/0x90 [ 173.128799][ T4183] x64_sys_call+0x2f/0x9a0 [ 173.133049][ T4183] do_syscall_64+0x3b/0xb0 [ 173.137306][ T4183] ? clear_bhb_loop+0x35/0x90 [ 173.141817][ T4183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.147544][ T4183] RIP: 0033:0x7efe61c13ff9 [ 173.151799][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.171244][ T4183] RSP: 002b:00007efe6088d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.179484][ T4183] RAX: ffffffffffffffda RBX: 00007efe61dcbf80 RCX: 00007efe61c13ff9 [ 173.187297][ T4183] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 173.195107][ T4183] RBP: 00007efe6088d090 R08: 0000000000000000 R09: 0000000000000000 [ 173.202917][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.210728][ T4183] R13: 0000000000000000 R14: 00007efe61dcbf80 R15: 00007fff8cf26838 [ 173.218630][ T4183] [ 174.392178][ T4231] FAULT_INJECTION: forcing a failure. [ 174.392178][ T4231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.429770][ T4231] CPU: 0 PID: 4231 Comm: syz.0.1187 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 174.439490][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.449386][ T4231] Call Trace: [ 174.452509][ T4231] [ 174.455285][ T4231] dump_stack_lvl+0x151/0x1c0 [ 174.459800][ T4231] ? io_uring_drop_tctx_refs+0x190/0x190 [ 174.465265][ T4231] ? 0xffffffffa00140ec [ 174.469260][ T4231] ? is_bpf_text_address+0x172/0x190 [ 174.474379][ T4231] dump_stack+0x15/0x20 [ 174.478372][ T4231] should_fail+0x3c6/0x510 [ 174.482622][ T4231] should_fail_alloc_page+0x5a/0x80 [ 174.487659][ T4231] prepare_alloc_pages+0x15c/0x700 [ 174.492608][ T4231] ? __alloc_pages_bulk+0xe40/0xe40 [ 174.497640][ T4231] __alloc_pages+0x18c/0x8f0 [ 174.502067][ T4231] ? prep_new_page+0x110/0x110 [ 174.506671][ T4231] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 174.512139][ T4231] ? shmem_swapin_page+0x1680/0x1680 [ 174.517259][ T4231] ? xas_start+0x2bd/0x3f0 [ 174.521507][ T4231] ? xas_load+0x2a9/0x2d0 [ 174.525675][ T4231] ? pagecache_get_page+0xdc2/0xeb0 [ 174.530711][ T4231] ? page_cache_prev_miss+0x410/0x410 [ 174.535916][ T4231] shmem_getpage_gfp+0x1388/0x23c0 [ 174.540868][ T4231] ? shmem_getpage+0xa0/0xa0 [ 174.545289][ T4231] ? fault_in_safe_writeable+0x240/0x240 [ 174.550756][ T4231] shmem_write_begin+0xca/0x1b0 [ 174.555443][ T4231] generic_perform_write+0x2bc/0x5a0 [ 174.560566][ T4231] ? grab_cache_page_write_begin+0xa0/0xa0 [ 174.566205][ T4231] ? file_remove_privs+0x610/0x610 [ 174.571150][ T4231] ? rwsem_write_trylock+0x153/0x340 [ 174.576273][ T4231] ? rwsem_mark_wake+0x770/0x770 [ 174.581046][ T4231] __generic_file_write_iter+0x25b/0x4b0 [ 174.586513][ T4231] generic_file_write_iter+0xaf/0x1c0 [ 174.591722][ T4231] vfs_write+0xd5d/0x1110 [ 174.595887][ T4231] ? putname+0xfa/0x150 [ 174.599880][ T4231] ? file_end_write+0x1c0/0x1c0 [ 174.604566][ T4231] ? mutex_lock+0xb6/0x1e0 [ 174.608819][ T4231] ? wait_for_completion_killable_timeout+0x10/0x10 [ 174.615243][ T4231] ? __fdget_pos+0x2e7/0x3a0 [ 174.619668][ T4231] ? ksys_write+0x77/0x2c0 [ 174.623921][ T4231] ksys_write+0x199/0x2c0 [ 174.628088][ T4231] ? __ia32_sys_read+0x90/0x90 [ 174.632687][ T4231] ? debug_smp_processor_id+0x17/0x20 [ 174.637894][ T4231] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 174.643800][ T4231] __x64_sys_write+0x7b/0x90 [ 174.648221][ T4231] x64_sys_call+0x2f/0x9a0 [ 174.652475][ T4231] do_syscall_64+0x3b/0xb0 [ 174.656838][ T4231] ? clear_bhb_loop+0x35/0x90 [ 174.661347][ T4231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.667075][ T4231] RIP: 0033:0x7f3c0e560ff9 [ 174.671328][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.690765][ T4231] RSP: 002b:00007f3c0d1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.699009][ T4231] RAX: ffffffffffffffda RBX: 00007f3c0e718f80 RCX: 00007f3c0e560ff9 [ 174.706822][ T4231] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 174.714633][ T4231] RBP: 00007f3c0d1da090 R08: 0000000000000000 R09: 0000000000000000 [ 174.722444][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.730255][ T4231] R13: 0000000000000000 R14: 00007f3c0e718f80 R15: 00007ffd4d262df8 [ 174.738076][ T4231] [ 177.380629][ T4295] FAULT_INJECTION: forcing a failure. [ 177.380629][ T4295] name failslab, interval 1, probability 0, space 0, times 0 [ 177.393062][ T4295] CPU: 0 PID: 4295 Comm: syz.3.1203 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 177.402763][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.412654][ T4295] Call Trace: [ 177.415795][ T4295] [ 177.418555][ T4295] dump_stack_lvl+0x151/0x1c0 [ 177.423075][ T4295] ? io_uring_drop_tctx_refs+0x190/0x190 [ 177.428536][ T4295] ? __alloc_pages+0x27e/0x8f0 [ 177.433138][ T4295] dump_stack+0x15/0x20 [ 177.437130][ T4295] should_fail+0x3c6/0x510 [ 177.441383][ T4295] __should_failslab+0xa4/0xe0 [ 177.445980][ T4295] ? xas_create+0x5ce/0x15d0 [ 177.450405][ T4295] should_failslab+0x9/0x20 [ 177.454747][ T4295] slab_pre_alloc_hook+0x37/0xd0 [ 177.459521][ T4295] ? xas_create+0x5ce/0x15d0 [ 177.463945][ T4295] kmem_cache_alloc+0x44/0x200 [ 177.468549][ T4295] xas_create+0x5ce/0x15d0 [ 177.472802][ T4295] xas_create_range+0x1fc/0x720 [ 177.477485][ T4295] ? xas_start+0x2bd/0x3f0 [ 177.481744][ T4295] shmem_add_to_page_cache+0x7fc/0xe90 [ 177.487045][ T4295] ? put_page+0xc0/0xc0 [ 177.491028][ T4295] shmem_getpage_gfp+0x1559/0x23c0 [ 177.495982][ T4295] ? shmem_getpage+0xa0/0xa0 [ 177.500398][ T4295] ? fault_in_safe_writeable+0x240/0x240 [ 177.505869][ T4295] shmem_write_begin+0xca/0x1b0 [ 177.510559][ T4295] generic_perform_write+0x2bc/0x5a0 [ 177.515681][ T4295] ? grab_cache_page_write_begin+0xa0/0xa0 [ 177.521313][ T4295] ? file_remove_privs+0x610/0x610 [ 177.526262][ T4295] ? rwsem_write_trylock+0x153/0x340 [ 177.531384][ T4295] ? rwsem_mark_wake+0x770/0x770 [ 177.536158][ T4295] __generic_file_write_iter+0x25b/0x4b0 [ 177.541629][ T4295] generic_file_write_iter+0xaf/0x1c0 [ 177.546832][ T4295] vfs_write+0xd5d/0x1110 [ 177.551000][ T4295] ? putname+0xfa/0x150 [ 177.555024][ T4295] ? file_end_write+0x1c0/0x1c0 [ 177.559678][ T4295] ? mutex_lock+0xb6/0x1e0 [ 177.563930][ T4295] ? wait_for_completion_killable_timeout+0x10/0x10 [ 177.570357][ T4295] ? __fdget_pos+0x2e7/0x3a0 [ 177.574779][ T4295] ? ksys_write+0x77/0x2c0 [ 177.579033][ T4295] ksys_write+0x199/0x2c0 [ 177.583199][ T4295] ? __ia32_sys_read+0x90/0x90 [ 177.587800][ T4295] ? debug_smp_processor_id+0x17/0x20 [ 177.593005][ T4295] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 177.598909][ T4295] __x64_sys_write+0x7b/0x90 [ 177.603334][ T4295] x64_sys_call+0x2f/0x9a0 [ 177.607587][ T4295] do_syscall_64+0x3b/0xb0 [ 177.611839][ T4295] ? clear_bhb_loop+0x35/0x90 [ 177.616352][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.622083][ T4295] RIP: 0033:0x7f883c20bff9 [ 177.626334][ T4295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.645777][ T4295] RSP: 002b:00007f883ae85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.654022][ T4295] RAX: ffffffffffffffda RBX: 00007f883c3c3f80 RCX: 00007f883c20bff9 [ 177.661829][ T4295] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 177.669736][ T4295] RBP: 00007f883ae85090 R08: 0000000000000000 R09: 0000000000000000 [ 177.677539][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.685354][ T4295] R13: 0000000000000000 R14: 00007f883c3c3f80 R15: 00007fffe6a9e8a8 [ 177.693176][ T4295] [ 179.730227][ T4311] device pim6reg1 entered promiscuous mode [ 182.911419][ T4353] FAULT_INJECTION: forcing a failure. [ 182.911419][ T4353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.924329][ T4353] CPU: 0 PID: 4353 Comm: syz.1.1218 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 182.933985][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 182.943885][ T4353] Call Trace: [ 182.947002][ T4353] [ 182.949782][ T4353] dump_stack_lvl+0x151/0x1c0 [ 182.954293][ T4353] ? io_uring_drop_tctx_refs+0x190/0x190 [ 182.959763][ T4353] ? __kasan_check_read+0x11/0x20 [ 182.964620][ T4353] dump_stack+0x15/0x20 [ 182.968614][ T4353] should_fail+0x3c6/0x510 [ 182.972868][ T4353] should_fail_usercopy+0x1a/0x20 [ 182.977724][ T4353] copy_page_from_iter_atomic+0x423/0x10e0 [ 182.983373][ T4353] ? pipe_zero+0x4e0/0x4e0 [ 182.987627][ T4353] generic_perform_write+0x337/0x5a0 [ 182.992748][ T4353] ? grab_cache_page_write_begin+0xa0/0xa0 [ 182.998383][ T4353] ? file_remove_privs+0x610/0x610 [ 183.003330][ T4353] ? rwsem_write_trylock+0x153/0x340 [ 183.008455][ T4353] ? rwsem_mark_wake+0x770/0x770 [ 183.013227][ T4353] __generic_file_write_iter+0x25b/0x4b0 [ 183.018705][ T4353] generic_file_write_iter+0xaf/0x1c0 [ 183.023902][ T4353] vfs_write+0xd5d/0x1110 [ 183.028063][ T4353] ? putname+0xfa/0x150 [ 183.032092][ T4353] ? file_end_write+0x1c0/0x1c0 [ 183.036831][ T4353] ? mutex_lock+0xb6/0x1e0 [ 183.041085][ T4353] ? wait_for_completion_killable_timeout+0x10/0x10 [ 183.047516][ T4353] ? __fdget_pos+0x2e7/0x3a0 [ 183.051933][ T4353] ? ksys_write+0x77/0x2c0 [ 183.056185][ T4353] ksys_write+0x199/0x2c0 [ 183.060353][ T4353] ? __ia32_sys_read+0x90/0x90 [ 183.064952][ T4353] ? debug_smp_processor_id+0x17/0x20 [ 183.070161][ T4353] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 183.076061][ T4353] __x64_sys_write+0x7b/0x90 [ 183.080491][ T4353] x64_sys_call+0x2f/0x9a0 [ 183.084742][ T4353] do_syscall_64+0x3b/0xb0 [ 183.088992][ T4353] ? clear_bhb_loop+0x35/0x90 [ 183.093513][ T4353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.099242][ T4353] RIP: 0033:0x7f42e143cff9 [ 183.103506][ T4353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.122930][ T4353] RSP: 002b:00007f42e00b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.131174][ T4353] RAX: ffffffffffffffda RBX: 00007f42e15f4f80 RCX: 00007f42e143cff9 [ 183.138982][ T4353] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 183.146881][ T4353] RBP: 00007f42e00b6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.154697][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.162505][ T4353] R13: 0000000000000000 R14: 00007f42e15f4f80 R15: 00007fff669e6e28 [ 183.170322][ T4353] [ 183.262114][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.269367][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.276617][ T4329] device bridge_slave_0 entered promiscuous mode [ 183.287105][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.294005][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.301452][ T4329] device bridge_slave_1 entered promiscuous mode [ 183.974084][ T4397] FAULT_INJECTION: forcing a failure. [ 183.974084][ T4397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.109504][ T4397] CPU: 1 PID: 4397 Comm: syz.1.1230 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 184.119314][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 184.129207][ T4397] Call Trace: [ 184.132330][ T4397] [ 184.135109][ T4397] dump_stack_lvl+0x151/0x1c0 [ 184.139642][ T4397] ? io_uring_drop_tctx_refs+0x190/0x190 [ 184.145086][ T4397] ? __stack_depot_save+0x34/0x470 [ 184.150035][ T4397] dump_stack+0x15/0x20 [ 184.154029][ T4397] should_fail+0x3c6/0x510 [ 184.158281][ T4397] should_fail_alloc_page+0x5a/0x80 [ 184.163316][ T4397] prepare_alloc_pages+0x15c/0x700 [ 184.168262][ T4397] ? __alloc_pages_bulk+0xe40/0xe40 [ 184.173296][ T4397] __alloc_pages+0x18c/0x8f0 [ 184.177722][ T4397] ? prep_new_page+0x110/0x110 [ 184.182324][ T4397] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 184.187791][ T4397] ? shmem_swapin_page+0x1680/0x1680 [ 184.192913][ T4397] ? xas_start+0x32c/0x3f0 [ 184.197161][ T4397] ? xas_load+0x2b7/0x2d0 [ 184.201333][ T4397] ? pagecache_get_page+0xdc2/0xeb0 [ 184.206366][ T4397] ? page_cache_prev_miss+0x410/0x410 [ 184.211572][ T4397] shmem_getpage_gfp+0x1388/0x23c0 [ 184.216524][ T4397] ? shmem_getpage+0xa0/0xa0 [ 184.220943][ T4397] ? fault_in_safe_writeable+0x240/0x240 [ 184.226414][ T4397] shmem_write_begin+0xca/0x1b0 [ 184.231099][ T4397] generic_perform_write+0x2bc/0x5a0 [ 184.236219][ T4397] ? grab_cache_page_write_begin+0xa0/0xa0 [ 184.241859][ T4397] ? file_remove_privs+0x610/0x610 [ 184.246807][ T4397] ? rwsem_write_trylock+0x153/0x340 [ 184.251931][ T4397] ? rwsem_mark_wake+0x770/0x770 [ 184.256701][ T4397] __generic_file_write_iter+0x25b/0x4b0 [ 184.262175][ T4397] generic_file_write_iter+0xaf/0x1c0 [ 184.267377][ T4397] vfs_write+0xd5d/0x1110 [ 184.271542][ T4397] ? putname+0xfa/0x150 [ 184.275537][ T4397] ? file_end_write+0x1c0/0x1c0 [ 184.280224][ T4397] ? mutex_lock+0xb6/0x1e0 [ 184.284475][ T4397] ? wait_for_completion_killable_timeout+0x10/0x10 [ 184.290901][ T4397] ? __fdget_pos+0x2e7/0x3a0 [ 184.295353][ T4397] ? ksys_write+0x77/0x2c0 [ 184.299576][ T4397] ksys_write+0x199/0x2c0 [ 184.303828][ T4397] ? __ia32_sys_read+0x90/0x90 [ 184.308434][ T4397] ? debug_smp_processor_id+0x17/0x20 [ 184.313637][ T4397] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 184.319540][ T4397] __x64_sys_write+0x7b/0x90 [ 184.323966][ T4397] x64_sys_call+0x2f/0x9a0 [ 184.328215][ T4397] do_syscall_64+0x3b/0xb0 [ 184.332469][ T4397] ? clear_bhb_loop+0x35/0x90 [ 184.336984][ T4397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.342713][ T4397] RIP: 0033:0x7f42e143cff9 [ 184.346966][ T4397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.366591][ T4397] RSP: 002b:00007f42e00b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.374828][ T4397] RAX: ffffffffffffffda RBX: 00007f42e15f4f80 RCX: 00007f42e143cff9 [ 184.382645][ T4397] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 184.390445][ T4397] RBP: 00007f42e00b6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.398258][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.406067][ T4397] R13: 0000000000000000 R14: 00007f42e15f4f80 R15: 00007fff669e6e28 [ 184.413885][ T4397] [ 185.383647][ T4411] syz.1.1235 uses obsolete (PF_INET,SOCK_PACKET) [ 185.488801][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.497768][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.809673][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.854711][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.991702][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.998585][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.145141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.314915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.378915][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.385784][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.393310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.401238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.409357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.417306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.625625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.659366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.691848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.779306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.838681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.158809][ T4329] device veth0_vlan entered promiscuous mode [ 187.176706][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.192849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.203458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.866796][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.874921][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.972469][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.323034][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.375029][ T4412] device bridge_slave_0 entered promiscuous mode [ 188.647977][ T4329] device veth1_macvtap entered promiscuous mode [ 188.690167][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.697018][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.704591][ T4412] device bridge_slave_1 entered promiscuous mode [ 188.977465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.985733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.233163][ T319] device macsec0 left promiscuous mode [ 189.238804][ T319] bridge0: port 3(macsec0) entered disabled state [ 189.443423][ T319] device bridge_slave_1 left promiscuous mode [ 189.452071][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.638917][ T319] device bridge_slave_0 left promiscuous mode [ 189.656302][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.912005][ T319] device veth1_macvtap left promiscuous mode [ 189.917850][ T319] device veth0_vlan left promiscuous mode [ 190.251058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.259323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.268786][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.275624][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.309661][ T4445] FAULT_INJECTION: forcing a failure. [ 190.309661][ T4445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.322533][ T4445] CPU: 0 PID: 4445 Comm: syz.1.1241 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 190.332225][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 190.342122][ T4445] Call Trace: [ 190.345246][ T4445] [ 190.348109][ T4445] dump_stack_lvl+0x151/0x1c0 [ 190.352621][ T4445] ? io_uring_drop_tctx_refs+0x190/0x190 [ 190.358090][ T4445] ? __kasan_check_read+0x11/0x20 [ 190.362950][ T4445] dump_stack+0x15/0x20 [ 190.366941][ T4445] should_fail+0x3c6/0x510 [ 190.371195][ T4445] should_fail_usercopy+0x1a/0x20 [ 190.376058][ T4445] copy_page_from_iter_atomic+0x423/0x10e0 [ 190.381702][ T4445] ? pipe_zero+0x4e0/0x4e0 [ 190.385955][ T4445] generic_perform_write+0x337/0x5a0 [ 190.391163][ T4445] ? grab_cache_page_write_begin+0xa0/0xa0 [ 190.396799][ T4445] ? file_remove_privs+0x610/0x610 [ 190.401746][ T4445] ? rwsem_write_trylock+0x153/0x340 [ 190.406867][ T4445] ? rwsem_mark_wake+0x770/0x770 [ 190.411641][ T4445] __generic_file_write_iter+0x25b/0x4b0 [ 190.417109][ T4445] generic_file_write_iter+0xaf/0x1c0 [ 190.422317][ T4445] vfs_write+0xd5d/0x1110 [ 190.426484][ T4445] ? putname+0xfa/0x150 [ 190.430474][ T4445] ? file_end_write+0x1c0/0x1c0 [ 190.435162][ T4445] ? mutex_lock+0xb6/0x1e0 [ 190.439413][ T4445] ? wait_for_completion_killable_timeout+0x10/0x10 [ 190.445839][ T4445] ? __fdget_pos+0x2e7/0x3a0 [ 190.450265][ T4445] ? ksys_write+0x77/0x2c0 [ 190.454513][ T4445] ksys_write+0x199/0x2c0 [ 190.458684][ T4445] ? __ia32_sys_read+0x90/0x90 [ 190.463281][ T4445] ? debug_smp_processor_id+0x17/0x20 [ 190.468492][ T4445] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 190.474478][ T4445] __x64_sys_write+0x7b/0x90 [ 190.478911][ T4445] x64_sys_call+0x2f/0x9a0 [ 190.483155][ T4445] do_syscall_64+0x3b/0xb0 [ 190.487410][ T4445] ? clear_bhb_loop+0x35/0x90 [ 190.491922][ T4445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.497656][ T4445] RIP: 0033:0x7f42e143cff9 [ 190.501912][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.521432][ T4445] RSP: 002b:00007f42e00b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.529677][ T4445] RAX: ffffffffffffffda RBX: 00007f42e15f4f80 RCX: 00007f42e143cff9 [ 190.537487][ T4445] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 190.545297][ T4445] RBP: 00007f42e00b6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.553111][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.560920][ T4445] R13: 0000000000000000 R14: 00007f42e15f4f80 R15: 00007fff669e6e28 [ 190.568739][ T4445] [ 190.574464][ T4415] device bridge_slave_0 entered promiscuous mode [ 190.581456][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.588289][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.595760][ T4415] device bridge_slave_1 entered promiscuous mode [ 193.331971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.351323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.365083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.378863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.386949][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.393800][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.401191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.274867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.282956][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.289805][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.297317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.305531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.313687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.321774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.329964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.916778][ T4415] device veth0_vlan entered promiscuous mode [ 194.946208][ T4415] device veth1_macvtap entered promiscuous mode [ 194.975977][ T4412] device veth0_vlan entered promiscuous mode [ 194.988917][ T4412] device veth1_macvtap entered promiscuous mode [ 195.030735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.038220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.045824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.054347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.064981][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.071846][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.079725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.087911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.096290][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.103154][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.110979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.118967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.126841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.135064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.143161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.151678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.160332][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.168036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.176472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.184757][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.193283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.201075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.209996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.218607][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.226543][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.234692][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.243173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.251656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.261132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.269712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.277916][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.286405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.312043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.319683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.326933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.336474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.343973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.351781][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.360289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.369038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.377057][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.284408][ T4494] FAULT_INJECTION: forcing a failure. [ 196.284408][ T4494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.297609][ T4494] CPU: 0 PID: 4494 Comm: syz.2.1252 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 196.307311][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 196.317204][ T4494] Call Trace: [ 196.320327][ T4494] [ 196.323106][ T4494] dump_stack_lvl+0x151/0x1c0 [ 196.327617][ T4494] ? io_uring_drop_tctx_refs+0x190/0x190 [ 196.333084][ T4494] ? __stack_depot_save+0x34/0x470 [ 196.338032][ T4494] dump_stack+0x15/0x20 [ 196.342025][ T4494] should_fail+0x3c6/0x510 [ 196.346280][ T4494] should_fail_alloc_page+0x5a/0x80 [ 196.351483][ T4494] prepare_alloc_pages+0x15c/0x700 [ 196.356435][ T4494] ? __alloc_pages_bulk+0xe40/0xe40 [ 196.361467][ T4494] __alloc_pages+0x18c/0x8f0 [ 196.365891][ T4494] ? prep_new_page+0x110/0x110 [ 196.370495][ T4494] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 196.375962][ T4494] ? shmem_swapin_page+0x1680/0x1680 [ 196.381084][ T4494] ? xas_start+0x32c/0x3f0 [ 196.385335][ T4494] ? xas_load+0x2b7/0x2d0 [ 196.389501][ T4494] ? pagecache_get_page+0xdc2/0xeb0 [ 196.394535][ T4494] ? page_cache_prev_miss+0x410/0x410 [ 196.399744][ T4494] shmem_getpage_gfp+0x1388/0x23c0 [ 196.404694][ T4494] ? shmem_getpage+0xa0/0xa0 [ 196.409119][ T4494] ? fault_in_safe_writeable+0x240/0x240 [ 196.414845][ T4494] shmem_write_begin+0xca/0x1b0 [ 196.419530][ T4494] generic_perform_write+0x2bc/0x5a0 [ 196.424652][ T4494] ? grab_cache_page_write_begin+0xa0/0xa0 [ 196.430292][ T4494] ? file_remove_privs+0x610/0x610 [ 196.435236][ T4494] ? rwsem_write_trylock+0x153/0x340 [ 196.440360][ T4494] ? rwsem_mark_wake+0x770/0x770 [ 196.445134][ T4494] __generic_file_write_iter+0x25b/0x4b0 [ 196.450600][ T4494] generic_file_write_iter+0xaf/0x1c0 [ 196.455808][ T4494] vfs_write+0xd5d/0x1110 [ 196.459973][ T4494] ? putname+0xfa/0x150 [ 196.463967][ T4494] ? file_end_write+0x1c0/0x1c0 [ 196.468664][ T4494] ? mutex_lock+0xb6/0x1e0 [ 196.472909][ T4494] ? wait_for_completion_killable_timeout+0x10/0x10 [ 196.479330][ T4494] ? __fdget_pos+0x2e7/0x3a0 [ 196.483764][ T4494] ? ksys_write+0x77/0x2c0 [ 196.488009][ T4494] ksys_write+0x199/0x2c0 [ 196.492174][ T4494] ? __ia32_sys_read+0x90/0x90 [ 196.496774][ T4494] ? debug_smp_processor_id+0x17/0x20 [ 196.501979][ T4494] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 196.507881][ T4494] __x64_sys_write+0x7b/0x90 [ 196.512311][ T4494] x64_sys_call+0x2f/0x9a0 [ 196.516562][ T4494] do_syscall_64+0x3b/0xb0 [ 196.520812][ T4494] ? clear_bhb_loop+0x35/0x90 [ 196.525329][ T4494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.531055][ T4494] RIP: 0033:0x7f8d7e78cff9 [ 196.535311][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.554749][ T4494] RSP: 002b:00007f8d7d406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.562993][ T4494] RAX: ffffffffffffffda RBX: 00007f8d7e944f80 RCX: 00007f8d7e78cff9 [ 196.570807][ T4494] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 196.578619][ T4494] RBP: 00007f8d7d406090 R08: 0000000000000000 R09: 0000000000000000 [ 196.586437][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.594247][ T4494] R13: 0000000000000000 R14: 00007f8d7e944f80 R15: 00007ffeab604d18 [ 196.602145][ T4494] [ 270.387830][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.394747][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.402107][ T4561] device bridge_slave_0 entered promiscuous mode [ 270.421457][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.431591][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.438936][ T4564] device bridge_slave_0 entered promiscuous mode [ 270.445474][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.452798][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.460302][ T4561] device bridge_slave_1 entered promiscuous mode [ 270.466612][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.473660][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.480937][ T4563] device bridge_slave_0 entered promiscuous mode [ 270.487462][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.494662][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.501946][ T4562] device bridge_slave_0 entered promiscuous mode [ 270.508598][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.515425][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.523013][ T4564] device bridge_slave_1 entered promiscuous mode [ 270.539097][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.545956][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.553705][ T4563] device bridge_slave_1 entered promiscuous mode [ 270.560252][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.567076][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.574617][ T4562] device bridge_slave_1 entered promiscuous mode [ 270.785155][ T4561] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.792016][ T4561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.799123][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.805889][ T4561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.818034][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.824892][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.832005][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.838792][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.854977][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.861867][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.868959][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.875719][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.902171][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.909042][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.916140][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.922942][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.980369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.987869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.995766][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.003225][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.014953][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.022455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.031252][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.038886][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.046112][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.053657][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.110019][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.117630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.131898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.140793][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.147799][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.156109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.164506][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.171358][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.178927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.186751][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.194839][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.203189][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.210036][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.217565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.226061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.234059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.242254][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.249098][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.256469][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.264502][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.271345][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.278904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.287064][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.293907][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.301354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.309508][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.316330][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.323810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.331787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.358042][ T4564] device veth0_vlan entered promiscuous mode [ 271.385332][ T319] bridge0: port 3(macsec0) entered disabled state [ 271.392035][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.399833][ T319] device bridge_slave_0 left promiscuous mode [ 271.405758][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.414586][ T319] device veth0_vlan left promiscuous mode [ 271.580982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.589717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.597829][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.606305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.614903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.622156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.629641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.641990][ T4561] device veth0_vlan entered promiscuous mode [ 271.654910][ T4561] device veth1_macvtap entered promiscuous mode [ 271.696037][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.704130][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.712194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.721038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.729157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.736624][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.744121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.757463][ T4564] device veth1_macvtap entered promiscuous mode [ 271.765880][ T4563] device veth0_vlan entered promiscuous mode [ 271.779153][ T4563] device veth1_macvtap entered promiscuous mode [ 271.796524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.804513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.812562][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.820636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.828828][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.836172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.844004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.851815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.859970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.867836][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.875494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.883731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.892052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.900411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.909745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.917042][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.955312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.978760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.987066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.000242][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.008538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.016744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.028766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.036512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.053565][ T4562] device veth0_vlan entered promiscuous mode [ 272.062083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.070069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.077403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.090440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.108863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.117115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.133399][ T4562] device veth1_macvtap entered promiscuous mode [ 272.151594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.160267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.168988][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.224425][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.232911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.241297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.249555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.420174][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.543072][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.619585][ T4583] device bridge_slave_0 entered promiscuous mode [ 273.048542][ T4583] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.055491][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.128147][ T4583] device bridge_slave_1 entered promiscuous mode [ 273.148316][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.155330][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.218280][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.226427][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.248279][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.258279][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.349813][ T4605] device bridge0 entered promiscuous mode [ 273.835420][ T4631] device veth0_vlan left promiscuous mode [ 274.005649][ T4631] device veth0_vlan entered promiscuous mode [ 274.308740][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.316803][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.330470][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.632525][ T4636] device veth0_vlan left promiscuous mode [ 274.639018][ T4636] device veth0_vlan entered promiscuous mode [ 274.794529][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.811130][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.820047][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.828198][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.837186][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.844045][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.892737][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.980856][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.991775][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.998652][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.006167][ T4646] device veth1_macvtap left promiscuous mode [ 275.012496][ T4646] device macsec0 entered promiscuous mode [ 275.106676][ T4647] device veth1_macvtap entered promiscuous mode [ 275.613313][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.639045][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.739025][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.750785][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.758806][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.838732][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.860517][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.006682][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.027313][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.072299][ T4583] device veth0_vlan entered promiscuous mode [ 276.101301][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.116871][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.168671][ T4583] device veth1_macvtap entered promiscuous mode [ 276.246569][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.258757][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.272088][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.279998][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.288078][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.309843][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.486361][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.961373][ T4677] device veth0_vlan left promiscuous mode [ 277.089497][ T4677] device veth0_vlan entered promiscuous mode [ 277.254353][ T4684] device veth0_vlan left promiscuous mode [ 277.269606][ T4684] device veth0_vlan entered promiscuous mode [ 277.313734][ T8] device macsec0 left promiscuous mode [ 277.369528][ T8] bridge0: port 3(macsec0) entered disabled state [ 277.429383][ T8] device bridge_slave_1 left promiscuous mode [ 277.435348][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.506581][ T8] device bridge_slave_0 left promiscuous mode [ 277.513075][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.563986][ T8] device bridge_slave_1 left promiscuous mode [ 277.577376][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.619125][ T8] device bridge_slave_0 left promiscuous mode [ 277.625223][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.633476][ T8] device bridge_slave_1 left promiscuous mode [ 277.639498][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.646820][ T8] device bridge_slave_0 left promiscuous mode [ 277.652843][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.660383][ T8] device bridge_slave_1 left promiscuous mode [ 277.666282][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.673913][ T8] device bridge_slave_0 left promiscuous mode [ 277.679922][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.688856][ T8] device veth1_macvtap left promiscuous mode [ 277.694678][ T8] device veth0_vlan left promiscuous mode [ 277.700597][ T8] device veth1_macvtap left promiscuous mode [ 277.706392][ T8] device veth0_vlan left promiscuous mode [ 277.712271][ T8] device veth1_macvtap left promiscuous mode [ 277.718364][ T8] device veth0_vlan left promiscuous mode [ 277.724051][ T8] device veth1_macvtap left promiscuous mode [ 277.729902][ T8] device veth0_vlan left promiscuous mode [ 277.735507][ T8] device veth1_macvtap left promiscuous mode [ 277.741264][ T8] device veth0_vlan left promiscuous mode [ 278.401206][ T4701] device veth1_macvtap left promiscuous mode [ 278.409771][ T4701] device macsec0 entered promiscuous mode [ 278.518606][ T4701] device veth1_macvtap entered promiscuous mode [ 278.924904][ T4719] device veth0_vlan left promiscuous mode [ 279.030161][ T4719] device veth0_vlan entered promiscuous mode [ 280.417462][ T4740] device veth0_vlan left promiscuous mode [ 280.553861][ T4740] device veth0_vlan entered promiscuous mode [ 280.571091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.589556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.596910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.818100][ T4759] device veth1_macvtap left promiscuous mode [ 280.900372][ T4759] device macsec0 entered promiscuous mode [ 281.062349][ T4760] device veth1_macvtap entered promiscuous mode [ 281.646849][ T4772] FAULT_INJECTION: forcing a failure. [ 281.646849][ T4772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.952872][ T4772] CPU: 0 PID: 4772 Comm: syz.1.1323 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 281.962608][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 281.972494][ T4772] Call Trace: [ 281.975617][ T4772] [ 281.978400][ T4772] dump_stack_lvl+0x151/0x1c0 [ 281.982993][ T4772] ? io_uring_drop_tctx_refs+0x190/0x190 [ 281.989503][ T4772] dump_stack+0x15/0x20 [ 281.993586][ T4772] should_fail+0x3c6/0x510 [ 281.997836][ T4772] should_fail_alloc_page+0x5a/0x80 [ 282.002867][ T4772] prepare_alloc_pages+0x15c/0x700 [ 282.007828][ T4772] ? __alloc_pages_bulk+0xe40/0xe40 [ 282.012856][ T4772] __alloc_pages+0x18c/0x8f0 [ 282.017276][ T4772] ? prep_new_page+0x110/0x110 [ 282.021881][ T4772] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 282.027347][ T4772] ? shmem_swapin_page+0x1680/0x1680 [ 282.032468][ T4772] ? xas_start+0x32c/0x3f0 [ 282.036719][ T4772] ? xas_load+0x2b7/0x2d0 [ 282.040888][ T4772] ? pagecache_get_page+0xdc2/0xeb0 [ 282.045927][ T4772] ? page_cache_prev_miss+0x410/0x410 [ 282.051129][ T4772] shmem_getpage_gfp+0x1388/0x23c0 [ 282.056076][ T4772] ? shmem_getpage+0xa0/0xa0 [ 282.060499][ T4772] ? fault_in_safe_writeable+0x240/0x240 [ 282.065968][ T4772] shmem_write_begin+0xca/0x1b0 [ 282.070653][ T4772] generic_perform_write+0x2bc/0x5a0 [ 282.075780][ T4772] ? grab_cache_page_write_begin+0xa0/0xa0 [ 282.081413][ T4772] ? file_remove_privs+0x610/0x610 [ 282.086360][ T4772] ? rwsem_write_trylock+0x153/0x340 [ 282.091488][ T4772] ? rwsem_mark_wake+0x770/0x770 [ 282.096257][ T4772] __generic_file_write_iter+0x25b/0x4b0 [ 282.101724][ T4772] generic_file_write_iter+0xaf/0x1c0 [ 282.106930][ T4772] vfs_write+0xd5d/0x1110 [ 282.111109][ T4772] ? putname+0xfa/0x150 [ 282.115091][ T4772] ? file_end_write+0x1c0/0x1c0 [ 282.119776][ T4772] ? mutex_lock+0xb6/0x1e0 [ 282.124029][ T4772] ? wait_for_completion_killable_timeout+0x10/0x10 [ 282.130455][ T4772] ? __fdget_pos+0x2e7/0x3a0 [ 282.134877][ T4772] ? ksys_write+0x77/0x2c0 [ 282.139130][ T4772] ksys_write+0x199/0x2c0 [ 282.143298][ T4772] ? __ia32_sys_read+0x90/0x90 [ 282.147896][ T4772] ? debug_smp_processor_id+0x17/0x20 [ 282.153104][ T4772] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 282.159006][ T4772] __x64_sys_write+0x7b/0x90 [ 282.163432][ T4772] x64_sys_call+0x2f/0x9a0 [ 282.167687][ T4772] do_syscall_64+0x3b/0xb0 [ 282.171938][ T4772] ? clear_bhb_loop+0x35/0x90 [ 282.176449][ T4772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.182180][ T4772] RIP: 0033:0x7f7f311bbff9 [ 282.186432][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.205873][ T4772] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.214121][ T4772] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 282.221934][ T4772] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 282.229749][ T4772] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 282.237556][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.245362][ T4772] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 282.253265][ T4772] [ 283.499550][ T4801] device veth0_vlan left promiscuous mode [ 283.816377][ T4801] device veth0_vlan entered promiscuous mode [ 284.596827][ T4817] FAULT_INJECTION: forcing a failure. [ 284.596827][ T4817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.878317][ T4817] CPU: 1 PID: 4817 Comm: syz.1.1336 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 284.888130][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 284.898107][ T4817] Call Trace: [ 284.901317][ T4817] [ 284.904093][ T4817] dump_stack_lvl+0x151/0x1c0 [ 284.908608][ T4817] ? io_uring_drop_tctx_refs+0x190/0x190 [ 284.914075][ T4817] ? ioctl_has_perm+0x3f5/0x560 [ 284.918762][ T4817] dump_stack+0x15/0x20 [ 284.922752][ T4817] should_fail+0x3c6/0x510 [ 284.927012][ T4817] should_fail_usercopy+0x1a/0x20 [ 284.931869][ T4817] _copy_from_user+0x20/0xd0 [ 284.936308][ T4817] __tun_chr_ioctl+0x26e/0x2290 [ 284.940986][ T4817] ? tun_flow_create+0x320/0x320 [ 284.945755][ T4817] ? __fget_files+0x31e/0x380 [ 284.950273][ T4817] tun_chr_ioctl+0x2a/0x40 [ 284.954519][ T4817] ? tun_chr_poll+0x6d0/0x6d0 [ 284.959032][ T4817] __se_sys_ioctl+0x114/0x190 [ 284.963544][ T4817] __x64_sys_ioctl+0x7b/0x90 [ 284.967983][ T4817] x64_sys_call+0x98/0x9a0 [ 284.972221][ T4817] do_syscall_64+0x3b/0xb0 [ 284.976477][ T4817] ? clear_bhb_loop+0x35/0x90 [ 284.980998][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.986723][ T4817] RIP: 0033:0x7f7f311bbff9 [ 284.990971][ T4817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.010411][ T4817] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.018655][ T4817] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 285.026466][ T4817] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 285.034278][ T4817] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 285.042088][ T4817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.049900][ T4817] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 285.057717][ T4817] [ 285.077756][ T4815] device veth0_vlan left promiscuous mode [ 285.093759][ T4815] device veth0_vlan entered promiscuous mode [ 285.128449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.164547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.208656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.656245][ T4829] device lo entered promiscuous mode [ 287.139267][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.802221][ T4861] FAULT_INJECTION: forcing a failure. [ 287.802221][ T4861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.939031][ T4861] CPU: 1 PID: 4861 Comm: syz.1.1348 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 287.948756][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.958646][ T4861] Call Trace: [ 287.961767][ T4861] [ 287.964546][ T4861] dump_stack_lvl+0x151/0x1c0 [ 287.969062][ T4861] ? io_uring_drop_tctx_refs+0x190/0x190 [ 287.974531][ T4861] dump_stack+0x15/0x20 [ 287.978520][ T4861] should_fail+0x3c6/0x510 [ 287.983034][ T4861] should_fail_alloc_page+0x5a/0x80 [ 287.988067][ T4861] prepare_alloc_pages+0x15c/0x700 [ 287.993018][ T4861] ? __alloc_pages_bulk+0xe40/0xe40 [ 287.998051][ T4861] __alloc_pages+0x18c/0x8f0 [ 288.002473][ T4861] ? prep_new_page+0x110/0x110 [ 288.007079][ T4861] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 288.012547][ T4861] ? shmem_swapin_page+0x1680/0x1680 [ 288.017667][ T4861] ? xas_start+0x32c/0x3f0 [ 288.021920][ T4861] ? xas_load+0x2b7/0x2d0 [ 288.026083][ T4861] ? pagecache_get_page+0xdc2/0xeb0 [ 288.031116][ T4861] ? page_cache_prev_miss+0x410/0x410 [ 288.036323][ T4861] shmem_getpage_gfp+0x1388/0x23c0 [ 288.041273][ T4861] ? shmem_getpage+0xa0/0xa0 [ 288.045695][ T4861] ? fault_in_safe_writeable+0x240/0x240 [ 288.051163][ T4861] shmem_write_begin+0xca/0x1b0 [ 288.055850][ T4861] generic_perform_write+0x2bc/0x5a0 [ 288.060972][ T4861] ? grab_cache_page_write_begin+0xa0/0xa0 [ 288.066611][ T4861] ? file_remove_privs+0x610/0x610 [ 288.071558][ T4861] ? rwsem_write_trylock+0x153/0x340 [ 288.076766][ T4861] ? rwsem_mark_wake+0x770/0x770 [ 288.081538][ T4861] __generic_file_write_iter+0x25b/0x4b0 [ 288.087095][ T4861] generic_file_write_iter+0xaf/0x1c0 [ 288.092300][ T4861] vfs_write+0xd5d/0x1110 [ 288.096469][ T4861] ? putname+0xfa/0x150 [ 288.100462][ T4861] ? file_end_write+0x1c0/0x1c0 [ 288.105146][ T4861] ? mutex_lock+0xb6/0x1e0 [ 288.109399][ T4861] ? wait_for_completion_killable_timeout+0x10/0x10 [ 288.115823][ T4861] ? __fdget_pos+0x2e7/0x3a0 [ 288.120248][ T4861] ? ksys_write+0x77/0x2c0 [ 288.124500][ T4861] ksys_write+0x199/0x2c0 [ 288.128669][ T4861] ? __ia32_sys_read+0x90/0x90 [ 288.133266][ T4861] ? debug_smp_processor_id+0x17/0x20 [ 288.138473][ T4861] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 288.144376][ T4861] __x64_sys_write+0x7b/0x90 [ 288.148803][ T4861] x64_sys_call+0x2f/0x9a0 [ 288.153062][ T4861] do_syscall_64+0x3b/0xb0 [ 288.157311][ T4861] ? clear_bhb_loop+0x35/0x90 [ 288.161822][ T4861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.167548][ T4861] RIP: 0033:0x7f7f311bbff9 [ 288.171803][ T4861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.191242][ T4861] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.199489][ T4861] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 288.207301][ T4861] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 288.215116][ T4861] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 288.222921][ T4861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.230732][ T4861] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 288.238636][ T4861] [ 288.865196][ T4882] device pim6reg1 entered promiscuous mode [ 289.037075][ T4897] device lo entered promiscuous mode [ 289.703631][ T4917] FAULT_INJECTION: forcing a failure. [ 289.703631][ T4917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.716515][ T4917] CPU: 0 PID: 4917 Comm: syz.1.1366 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 289.726199][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.736096][ T4917] Call Trace: [ 289.739215][ T4917] [ 289.741997][ T4917] dump_stack_lvl+0x151/0x1c0 [ 289.746509][ T4917] ? io_uring_drop_tctx_refs+0x190/0x190 [ 289.751978][ T4917] ? __kasan_check_read+0x11/0x20 [ 289.756843][ T4917] dump_stack+0x15/0x20 [ 289.760828][ T4917] should_fail+0x3c6/0x510 [ 289.765080][ T4917] should_fail_usercopy+0x1a/0x20 [ 289.769949][ T4917] copy_page_from_iter_atomic+0x423/0x10e0 [ 289.775586][ T4917] ? pipe_zero+0x4e0/0x4e0 [ 289.779845][ T4917] generic_perform_write+0x337/0x5a0 [ 289.784961][ T4917] ? grab_cache_page_write_begin+0xa0/0xa0 [ 289.790601][ T4917] ? file_remove_privs+0x610/0x610 [ 289.795545][ T4917] ? rwsem_write_trylock+0x153/0x340 [ 289.800667][ T4917] ? rwsem_mark_wake+0x770/0x770 [ 289.805526][ T4917] __generic_file_write_iter+0x25b/0x4b0 [ 289.810997][ T4917] generic_file_write_iter+0xaf/0x1c0 [ 289.816202][ T4917] vfs_write+0xd5d/0x1110 [ 289.820366][ T4917] ? putname+0xfa/0x150 [ 289.824365][ T4917] ? file_end_write+0x1c0/0x1c0 [ 289.829045][ T4917] ? mutex_lock+0xb6/0x1e0 [ 289.833302][ T4917] ? wait_for_completion_killable_timeout+0x10/0x10 [ 289.839726][ T4917] ? __fdget_pos+0x2e7/0x3a0 [ 289.844151][ T4917] ? ksys_write+0x77/0x2c0 [ 289.848404][ T4917] ksys_write+0x199/0x2c0 [ 289.852568][ T4917] ? __ia32_sys_read+0x90/0x90 [ 289.857168][ T4917] ? debug_smp_processor_id+0x17/0x20 [ 289.862377][ T4917] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 289.868277][ T4917] __x64_sys_write+0x7b/0x90 [ 289.872711][ T4917] x64_sys_call+0x2f/0x9a0 [ 289.876955][ T4917] do_syscall_64+0x3b/0xb0 [ 289.881206][ T4917] ? clear_bhb_loop+0x35/0x90 [ 289.885719][ T4917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.891448][ T4917] RIP: 0033:0x7f7f311bbff9 [ 289.895703][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.915145][ T4917] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.923388][ T4917] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 289.931198][ T4917] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000008 [ 289.939013][ T4917] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 289.946821][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.954631][ T4917] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 289.962451][ T4917] [ 290.283915][ T4903] device syzkaller0 entered promiscuous mode [ 291.351659][ T4944] bridge0: port 3(veth0_to_batadv) entered blocking state [ 291.366739][ T4944] bridge0: port 3(veth0_to_batadv) entered disabled state [ 291.422700][ T4944] device veth0_to_batadv entered promiscuous mode [ 291.443707][ T4944] bridge0: port 3(veth0_to_batadv) entered blocking state [ 291.451648][ T4944] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 291.603863][ T4946] device veth0_to_batadv left promiscuous mode [ 291.610607][ T4946] bridge0: port 3(veth0_to_batadv) entered disabled state [ 292.257888][ T4979] syz.0.1385[4979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.257960][ T4979] syz.0.1385[4979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.556292][ C1] eth0: bad gso: type: 1, size: 1408 [ 294.640469][ T5058] FAULT_INJECTION: forcing a failure. [ 294.640469][ T5058] name failslab, interval 1, probability 0, space 0, times 0 [ 294.874073][ T5058] CPU: 0 PID: 5058 Comm: syz.1.1411 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 294.883950][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.893788][ T5058] Call Trace: [ 294.896907][ T5058] [ 294.899684][ T5058] dump_stack_lvl+0x151/0x1c0 [ 294.904201][ T5058] ? io_uring_drop_tctx_refs+0x190/0x190 [ 294.909667][ T5058] ? __sys_socketpair+0x313/0x6e0 [ 294.914526][ T5058] ? x64_sys_call+0x19b/0x9a0 [ 294.919043][ T5058] ? do_syscall_64+0x3b/0xb0 [ 294.923464][ T5058] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.929365][ T5058] dump_stack+0x15/0x20 [ 294.933357][ T5058] should_fail+0x3c6/0x510 [ 294.937609][ T5058] __should_failslab+0xa4/0xe0 [ 294.942209][ T5058] ? sk_prot_alloc+0x5f/0x330 [ 294.946722][ T5058] should_failslab+0x9/0x20 [ 294.951061][ T5058] slab_pre_alloc_hook+0x37/0xd0 [ 294.955839][ T5058] ? sk_prot_alloc+0x5f/0x330 [ 294.960359][ T5058] kmem_cache_alloc+0x44/0x200 [ 294.964951][ T5058] sk_prot_alloc+0x5f/0x330 [ 294.969377][ T5058] sk_alloc+0x38/0x430 [ 294.973283][ T5058] ? security_inode_alloc+0x29/0x120 [ 294.978491][ T5058] tipc_sk_create+0x103/0x1950 [ 294.983089][ T5058] ? _raw_spin_lock+0xa4/0x1b0 [ 294.987686][ T5058] ? _raw_spin_trylock_bh+0x190/0x190 [ 294.992897][ T5058] ? security_inode_alloc+0xc0/0x120 [ 294.998015][ T5058] ? inode_init_always+0x784/0x9d0 [ 295.002964][ T5058] __sock_create+0x3a6/0x760 [ 295.007402][ T5058] __sys_socketpair+0x313/0x6e0 [ 295.012165][ T5058] ? __ia32_sys_socket+0x90/0x90 [ 295.016948][ T5058] ? __ia32_sys_read+0x90/0x90 [ 295.021540][ T5058] ? debug_smp_processor_id+0x17/0x20 [ 295.026743][ T5058] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 295.032647][ T5058] __x64_sys_socketpair+0x9b/0xb0 [ 295.037517][ T5058] x64_sys_call+0x19b/0x9a0 [ 295.041845][ T5058] do_syscall_64+0x3b/0xb0 [ 295.046099][ T5058] ? clear_bhb_loop+0x35/0x90 [ 295.050612][ T5058] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.056347][ T5058] RIP: 0033:0x7f7f311bbff9 [ 295.060594][ T5058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.080034][ T5058] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 295.088453][ T5058] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 295.096263][ T5058] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 295.104078][ T5058] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 295.111885][ T5058] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 295.119696][ T5058] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 295.127515][ T5058] [ 295.357458][ T30] audit: type=1400 audit(1728183714.190:154): avc: denied { create } for pid=5096 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 295.954682][ T5111] FAULT_INJECTION: forcing a failure. [ 295.954682][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 296.065279][ T5111] CPU: 0 PID: 5111 Comm: syz.1.1427 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 296.075003][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 296.084897][ T5111] Call Trace: [ 296.088035][ T5111] [ 296.090805][ T5111] dump_stack_lvl+0x151/0x1c0 [ 296.095312][ T5111] ? io_uring_drop_tctx_refs+0x190/0x190 [ 296.100865][ T5111] dump_stack+0x15/0x20 [ 296.104864][ T5111] should_fail+0x3c6/0x510 [ 296.109120][ T5111] __should_failslab+0xa4/0xe0 [ 296.113706][ T5111] should_failslab+0x9/0x20 [ 296.118050][ T5111] slab_pre_alloc_hook+0x37/0xd0 [ 296.122821][ T5111] kmem_cache_alloc_trace+0x48/0x210 [ 296.127937][ T5111] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 296.133496][ T5111] selinux_sk_alloc_security+0x7d/0x1a0 [ 296.138875][ T5111] security_sk_alloc+0x72/0xb0 [ 296.143473][ T5111] sk_prot_alloc+0x114/0x330 [ 296.147900][ T5111] sk_alloc+0x38/0x430 [ 296.151807][ T5111] ? security_inode_alloc+0x29/0x120 [ 296.156929][ T5111] tipc_sk_create+0x103/0x1950 [ 296.161643][ T5111] ? _raw_spin_lock+0xa4/0x1b0 [ 296.166240][ T5111] ? _raw_spin_trylock_bh+0x190/0x190 [ 296.171446][ T5111] ? security_inode_alloc+0xc0/0x120 [ 296.176570][ T5111] ? inode_init_always+0x784/0x9d0 [ 296.181519][ T5111] __sock_create+0x3a6/0x760 [ 296.185945][ T5111] __sys_socketpair+0x313/0x6e0 [ 296.190633][ T5111] ? __ia32_sys_socket+0x90/0x90 [ 296.195488][ T5111] ? __ia32_sys_read+0x90/0x90 [ 296.200093][ T5111] ? debug_smp_processor_id+0x17/0x20 [ 296.205296][ T5111] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 296.211199][ T5111] __x64_sys_socketpair+0x9b/0xb0 [ 296.216060][ T5111] x64_sys_call+0x19b/0x9a0 [ 296.220398][ T5111] do_syscall_64+0x3b/0xb0 [ 296.224651][ T5111] ? clear_bhb_loop+0x35/0x90 [ 296.229164][ T5111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.234893][ T5111] RIP: 0033:0x7f7f311bbff9 [ 296.239147][ T5111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.258588][ T5111] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 296.266830][ T5111] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 296.274643][ T5111] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 296.282455][ T5111] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 296.290265][ T5111] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 296.298075][ T5111] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 296.305895][ T5111] [ 296.765073][ T5129] device syzkaller0 entered promiscuous mode [ 297.901254][ T5165] FAULT_INJECTION: forcing a failure. [ 297.901254][ T5165] name failslab, interval 1, probability 0, space 0, times 0 [ 298.022984][ T5165] CPU: 1 PID: 5165 Comm: syz.1.1445 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 298.023031][ T5169] device sit0 entered promiscuous mode [ 298.032708][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.032724][ T5165] Call Trace: [ 298.032729][ T5165] [ 298.032735][ T5165] dump_stack_lvl+0x151/0x1c0 [ 298.032760][ T5165] ? io_uring_drop_tctx_refs+0x190/0x190 [ 298.032777][ T5165] ? debug_smp_processor_id+0x17/0x20 [ 298.032792][ T5165] ? get_nohz_timer_target+0x79/0x750 [ 298.032812][ T5165] dump_stack+0x15/0x20 [ 298.032828][ T5165] should_fail+0x3c6/0x510 [ 298.032847][ T5165] __should_failslab+0xa4/0xe0 [ 298.032866][ T5165] ? __d_alloc+0x2d/0x6c0 [ 298.032883][ T5165] should_failslab+0x9/0x20 [ 298.032899][ T5165] slab_pre_alloc_hook+0x37/0xd0 [ 298.032917][ T5165] ? __d_alloc+0x2d/0x6c0 [ 298.032938][ T5165] kmem_cache_alloc+0x44/0x200 [ 298.032956][ T5165] __d_alloc+0x2d/0x6c0 [ 298.032973][ T5165] d_alloc_pseudo+0x1d/0x70 [ 298.032990][ T5165] alloc_file_pseudo+0x131/0x2f0 [ 298.033009][ T5165] ? alloc_empty_file_noaccount+0x80/0x80 [ 298.033027][ T5165] ? tipc_sk_finish_conn+0x5a7/0x850 [ 298.033047][ T5165] sock_alloc_file+0xbb/0x260 [ 298.033065][ T5165] __sys_socketpair+0x405/0x6e0 [ 298.033082][ T5165] ? __ia32_sys_socket+0x90/0x90 [ 298.033099][ T5165] ? __ia32_sys_read+0x90/0x90 [ 298.033116][ T5165] ? debug_smp_processor_id+0x17/0x20 [ 298.033132][ T5165] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 298.033152][ T5165] __x64_sys_socketpair+0x9b/0xb0 [ 298.033169][ T5165] x64_sys_call+0x19b/0x9a0 [ 298.033185][ T5165] do_syscall_64+0x3b/0xb0 [ 298.033199][ T5165] ? clear_bhb_loop+0x35/0x90 [ 298.033215][ T5165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.033231][ T5165] RIP: 0033:0x7f7f311bbff9 [ 298.033247][ T5165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.033261][ T5165] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 298.033280][ T5165] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 298.033293][ T5165] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 298.033304][ T5165] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 298.033315][ T5165] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 298.033326][ T5165] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 298.033344][ T5165] [ 298.643984][ T5178] device sit0 entered promiscuous mode [ 298.655070][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.671569][ C1] eth0: bad gso: type: 1, size: 1408 [ 300.306879][ T5216] FAULT_INJECTION: forcing a failure. [ 300.306879][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 300.436979][ T5216] CPU: 0 PID: 5216 Comm: syz.4.1459 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 300.446711][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 300.456683][ T5216] Call Trace: [ 300.459808][ T5216] [ 300.462592][ T5216] dump_stack_lvl+0x151/0x1c0 [ 300.467102][ T5216] ? io_uring_drop_tctx_refs+0x190/0x190 [ 300.472569][ T5216] dump_stack+0x15/0x20 [ 300.476560][ T5216] should_fail+0x3c6/0x510 [ 300.480818][ T5216] __should_failslab+0xa4/0xe0 [ 300.485413][ T5216] ? __alloc_file+0x29/0x2a0 [ 300.489839][ T5216] should_failslab+0x9/0x20 [ 300.494185][ T5216] slab_pre_alloc_hook+0x37/0xd0 [ 300.498951][ T5216] ? __alloc_file+0x29/0x2a0 [ 300.503377][ T5216] kmem_cache_alloc+0x44/0x200 [ 300.507978][ T5216] ? _raw_spin_trylock_bh+0x190/0x190 [ 300.513186][ T5216] __alloc_file+0x29/0x2a0 [ 300.517441][ T5216] alloc_empty_file+0x95/0x180 [ 300.522038][ T5216] alloc_file+0x5a/0x4e0 [ 300.526119][ T5216] alloc_file_pseudo+0x259/0x2f0 [ 300.530980][ T5216] ? alloc_empty_file_noaccount+0x80/0x80 [ 300.536532][ T5216] ? tipc_sk_finish_conn+0x5a7/0x850 [ 300.541656][ T5216] sock_alloc_file+0xbb/0x260 [ 300.546178][ T5216] __sys_socketpair+0x405/0x6e0 [ 300.550940][ T5216] ? __ia32_sys_socket+0x90/0x90 [ 300.555712][ T5216] ? __ia32_sys_read+0x90/0x90 [ 300.560314][ T5216] ? debug_smp_processor_id+0x17/0x20 [ 300.565518][ T5216] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 300.571423][ T5216] __x64_sys_socketpair+0x9b/0xb0 [ 300.576284][ T5216] x64_sys_call+0x19b/0x9a0 [ 300.580622][ T5216] do_syscall_64+0x3b/0xb0 [ 300.584874][ T5216] ? clear_bhb_loop+0x35/0x90 [ 300.589390][ T5216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.595118][ T5216] RIP: 0033:0x7f9b90faeff9 [ 300.599370][ T5216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.618810][ T5216] RSP: 002b:00007f9b8fc28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 300.627052][ T5216] RAX: ffffffffffffffda RBX: 00007f9b91166f80 RCX: 00007f9b90faeff9 [ 300.634864][ T5216] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 300.642676][ T5216] RBP: 00007f9b8fc28090 R08: 0000000000000000 R09: 0000000000000000 [ 300.650487][ T5216] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000002 [ 300.658302][ T5216] R13: 0000000000000000 R14: 00007f9b91166f80 R15: 00007ffc1d73a288 [ 300.666119][ T5216] [ 301.767355][ T5260] device pim6reg1 entered promiscuous mode [ 302.071971][ T5265] sock: sock_set_timeout: `syz.2.1473' (pid 5265) tries to set negative timeout [ 302.144942][ T5268] device syzkaller0 entered promiscuous mode [ 302.203589][ T5272] FAULT_INJECTION: forcing a failure. [ 302.203589][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 302.275884][ T5272] CPU: 1 PID: 5272 Comm: syz.1.1475 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 302.285607][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.295501][ T5272] Call Trace: [ 302.298621][ T5272] [ 302.301410][ T5272] dump_stack_lvl+0x151/0x1c0 [ 302.305912][ T5272] ? io_uring_drop_tctx_refs+0x190/0x190 [ 302.311470][ T5272] dump_stack+0x15/0x20 [ 302.315545][ T5272] should_fail+0x3c6/0x510 [ 302.319799][ T5272] __should_failslab+0xa4/0xe0 [ 302.324400][ T5272] ? security_file_alloc+0x29/0x120 [ 302.329433][ T5272] should_failslab+0x9/0x20 [ 302.333773][ T5272] slab_pre_alloc_hook+0x37/0xd0 [ 302.338549][ T5272] ? security_file_alloc+0x29/0x120 [ 302.343578][ T5272] kmem_cache_alloc+0x44/0x200 [ 302.348178][ T5272] security_file_alloc+0x29/0x120 [ 302.353040][ T5272] __alloc_file+0xb2/0x2a0 [ 302.357290][ T5272] alloc_empty_file+0x95/0x180 [ 302.361911][ T5272] alloc_file+0x5a/0x4e0 [ 302.365969][ T5272] alloc_file_pseudo+0x259/0x2f0 [ 302.370743][ T5272] ? alloc_empty_file_noaccount+0x80/0x80 [ 302.376297][ T5272] ? tipc_sk_finish_conn+0x5a7/0x850 [ 302.381426][ T5272] sock_alloc_file+0xbb/0x260 [ 302.385935][ T5272] __sys_socketpair+0x405/0x6e0 [ 302.390619][ T5272] ? __ia32_sys_socket+0x90/0x90 [ 302.395403][ T5272] ? __ia32_sys_read+0x90/0x90 [ 302.399999][ T5272] ? debug_smp_processor_id+0x17/0x20 [ 302.405198][ T5272] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 302.411108][ T5272] __x64_sys_socketpair+0x9b/0xb0 [ 302.416050][ T5272] x64_sys_call+0x19b/0x9a0 [ 302.420390][ T5272] do_syscall_64+0x3b/0xb0 [ 302.424642][ T5272] ? clear_bhb_loop+0x35/0x90 [ 302.429156][ T5272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.434884][ T5272] RIP: 0033:0x7f7f311bbff9 [ 302.439150][ T5272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.458667][ T5272] RSP: 002b:00007f7f2fe35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 302.466907][ T5272] RAX: ffffffffffffffda RBX: 00007f7f31373f80 RCX: 00007f7f311bbff9 [ 302.474806][ T5272] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 302.482646][ T5272] RBP: 00007f7f2fe35090 R08: 0000000000000000 R09: 0000000000000000 [ 302.490426][ T5272] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000002 [ 302.498237][ T5272] R13: 0000000000000000 R14: 00007f7f31373f80 R15: 00007ffd26b94288 [ 302.506404][ T5272] [ 302.697802][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.704787][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.728654][ T5290] device bridge0 left promiscuous mode [ 303.695777][ T30] audit: type=1400 audit(1728183722.530:155): avc: denied { create } for pid=5312 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.815933][ T30] audit: type=1400 audit(1728183722.640:156): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.853261][ T30] audit: type=1400 audit(1728183722.640:157): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.889829][ T30] audit: type=1400 audit(1728183722.640:158): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.400238][ T5350] FAULT_INJECTION: forcing a failure. [ 304.400238][ T5350] name failslab, interval 1, probability 0, space 0, times 0 [ 304.460053][ T5350] CPU: 1 PID: 5350 Comm: syz.4.1498 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 304.469781][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 304.479669][ T5350] Call Trace: [ 304.482792][ T5350] [ 304.485571][ T5350] dump_stack_lvl+0x151/0x1c0 [ 304.490172][ T5350] ? io_uring_drop_tctx_refs+0x190/0x190 [ 304.495643][ T5350] dump_stack+0x15/0x20 [ 304.499631][ T5350] should_fail+0x3c6/0x510 [ 304.503883][ T5350] __should_failslab+0xa4/0xe0 [ 304.508483][ T5350] ? __alloc_file+0x29/0x2a0 [ 304.512907][ T5350] should_failslab+0x9/0x20 [ 304.517245][ T5350] slab_pre_alloc_hook+0x37/0xd0 [ 304.522020][ T5350] ? __alloc_file+0x29/0x2a0 [ 304.526445][ T5350] kmem_cache_alloc+0x44/0x200 [ 304.531046][ T5350] ? _raw_spin_trylock_bh+0x190/0x190 [ 304.536342][ T5350] __alloc_file+0x29/0x2a0 [ 304.540595][ T5350] alloc_empty_file+0x95/0x180 [ 304.545193][ T5350] alloc_file+0x5a/0x4e0 [ 304.549272][ T5350] alloc_file_pseudo+0x259/0x2f0 [ 304.554059][ T5350] ? alloc_empty_file_noaccount+0x80/0x80 [ 304.559711][ T5350] ? tipc_sk_finish_conn+0x5a7/0x850 [ 304.564810][ T5350] sock_alloc_file+0xbb/0x260 [ 304.569322][ T5350] __sys_socketpair+0x4c3/0x6e0 [ 304.574011][ T5350] ? __ia32_sys_socket+0x90/0x90 [ 304.578792][ T5350] ? __ia32_sys_read+0x90/0x90 [ 304.583382][ T5350] ? debug_smp_processor_id+0x17/0x20 [ 304.588673][ T5350] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 304.594578][ T5350] __x64_sys_socketpair+0x9b/0xb0 [ 304.599439][ T5350] x64_sys_call+0x19b/0x9a0 [ 304.603776][ T5350] do_syscall_64+0x3b/0xb0 [ 304.608030][ T5350] ? clear_bhb_loop+0x35/0x90 [ 304.612543][ T5350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.618271][ T5350] RIP: 0033:0x7f9b90faeff9 [ 304.622529][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.641972][ T5350] RSP: 002b:00007f9b8fc28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 304.650212][ T5350] RAX: ffffffffffffffda RBX: 00007f9b91166f80 RCX: 00007f9b90faeff9 [ 304.658021][ T5350] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 304.665833][ T5350] RBP: 00007f9b8fc28090 R08: 0000000000000000 R09: 0000000000000000 [ 304.673643][ T5350] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000002 [ 304.681467][ T5350] R13: 0000000000000000 R14: 00007f9b91166f80 R15: 00007ffc1d73a288 [ 304.689281][ T5350] [ 305.286879][ T5384] cgroup: fork rejected by pids controller in /syz2 [ 305.608690][ T5440] FAULT_INJECTION: forcing a failure. [ 305.608690][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 305.629420][ T5440] CPU: 1 PID: 5440 Comm: syz.4.1518 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 305.639233][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.649220][ T5440] Call Trace: [ 305.652531][ T5440] [ 305.655303][ T5440] dump_stack_lvl+0x151/0x1c0 [ 305.659813][ T5440] ? io_uring_drop_tctx_refs+0x190/0x190 [ 305.665283][ T5440] dump_stack+0x15/0x20 [ 305.669272][ T5440] should_fail+0x3c6/0x510 [ 305.673526][ T5440] __should_failslab+0xa4/0xe0 [ 305.678123][ T5440] ? security_file_alloc+0x29/0x120 [ 305.683157][ T5440] should_failslab+0x9/0x20 [ 305.687497][ T5440] slab_pre_alloc_hook+0x37/0xd0 [ 305.692357][ T5440] ? security_file_alloc+0x29/0x120 [ 305.697391][ T5440] kmem_cache_alloc+0x44/0x200 [ 305.702169][ T5440] security_file_alloc+0x29/0x120 [ 305.707026][ T5440] __alloc_file+0xb2/0x2a0 [ 305.711280][ T5440] alloc_empty_file+0x95/0x180 [ 305.715878][ T5440] alloc_file+0x5a/0x4e0 [ 305.719960][ T5440] alloc_file_pseudo+0x259/0x2f0 [ 305.724733][ T5440] ? alloc_empty_file_noaccount+0x80/0x80 [ 305.730284][ T5440] ? tipc_sk_finish_conn+0x5a7/0x850 [ 305.735407][ T5440] sock_alloc_file+0xbb/0x260 [ 305.739920][ T5440] __sys_socketpair+0x4c3/0x6e0 [ 305.744607][ T5440] ? __ia32_sys_socket+0x90/0x90 [ 305.749375][ T5440] ? __ia32_sys_read+0x90/0x90 [ 305.753979][ T5440] ? debug_smp_processor_id+0x17/0x20 [ 305.759186][ T5440] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 305.765090][ T5440] __x64_sys_socketpair+0x9b/0xb0 [ 305.769949][ T5440] x64_sys_call+0x19b/0x9a0 [ 305.774288][ T5440] do_syscall_64+0x3b/0xb0 [ 305.778543][ T5440] ? clear_bhb_loop+0x35/0x90 [ 305.783054][ T5440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.788784][ T5440] RIP: 0033:0x7f9b90faeff9 [ 305.793038][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.812477][ T5440] RSP: 002b:00007f9b8fc28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 305.820725][ T5440] RAX: ffffffffffffffda RBX: 00007f9b91166f80 RCX: 00007f9b90faeff9 [ 305.828711][ T5440] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 305.836605][ T5440] RBP: 00007f9b8fc28090 R08: 0000000000000000 R09: 0000000000000000 [ 305.844423][ T5440] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000002 [ 305.852228][ T5440] R13: 0000000000000000 R14: 00007f9b91166f80 R15: 00007ffc1d73a288 [ 305.860047][ T5440] [ 305.864412][ T5445] device veth0_vlan left promiscuous mode [ 305.874409][ T5445] device veth0_vlan entered promiscuous mode [ 305.881562][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.891515][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.899155][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.907354][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.910842][ T5476] device pim6reg1 entered promiscuous mode [ 307.050885][ T5483] FAULT_INJECTION: forcing a failure. [ 307.050885][ T5483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.065521][ T5483] CPU: 1 PID: 5483 Comm: syz.2.1530 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 307.075237][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 307.085133][ T5483] Call Trace: [ 307.088254][ T5483] [ 307.091034][ T5483] dump_stack_lvl+0x151/0x1c0 [ 307.095547][ T5483] ? io_uring_drop_tctx_refs+0x190/0x190 [ 307.101020][ T5483] dump_stack+0x15/0x20 [ 307.105007][ T5483] should_fail+0x3c6/0x510 [ 307.109260][ T5483] should_fail_usercopy+0x1a/0x20 [ 307.114120][ T5483] _copy_to_user+0x20/0x90 [ 307.118372][ T5483] simple_read_from_buffer+0xc7/0x150 [ 307.123578][ T5483] proc_fail_nth_read+0x1a3/0x210 [ 307.128440][ T5483] ? proc_fault_inject_write+0x390/0x390 [ 307.133905][ T5483] ? fsnotify_perm+0x269/0x5b0 [ 307.138508][ T5483] ? security_file_permission+0x86/0xb0 [ 307.143885][ T5483] ? proc_fault_inject_write+0x390/0x390 [ 307.149356][ T5483] vfs_read+0x27d/0xd40 [ 307.153351][ T5483] ? kernel_read+0x1f0/0x1f0 [ 307.157774][ T5483] ? __kasan_check_write+0x14/0x20 [ 307.162723][ T5483] ? mutex_lock+0xb6/0x1e0 [ 307.166973][ T5483] ? wait_for_completion_killable_timeout+0x10/0x10 [ 307.173400][ T5483] ? __fdget_pos+0x2e7/0x3a0 [ 307.177820][ T5483] ? ksys_read+0x77/0x2c0 [ 307.181989][ T5483] ksys_read+0x199/0x2c0 [ 307.186072][ T5483] ? vfs_write+0x1110/0x1110 [ 307.190497][ T5483] ? debug_smp_processor_id+0x17/0x20 [ 307.195704][ T5483] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 307.201604][ T5483] __x64_sys_read+0x7b/0x90 [ 307.205945][ T5483] x64_sys_call+0x28/0x9a0 [ 307.210197][ T5483] do_syscall_64+0x3b/0xb0 [ 307.214449][ T5483] ? clear_bhb_loop+0x35/0x90 [ 307.218974][ T5483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.224689][ T5483] RIP: 0033:0x7f8b37306a3c [ 307.228944][ T5483] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 307.248385][ T5483] RSP: 002b:00007f8b35f81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.256631][ T5483] RAX: ffffffffffffffda RBX: 00007f8b374bff80 RCX: 00007f8b37306a3c [ 307.264439][ T5483] RDX: 000000000000000f RSI: 00007f8b35f810a0 RDI: 0000000000000006 [ 307.272251][ T5483] RBP: 00007f8b35f81090 R08: 0000000000000000 R09: 0000000000000000 [ 307.280064][ T5483] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000002 [ 307.287872][ T5483] R13: 0000000000000000 R14: 00007f8b374bff80 R15: 00007ffc6a551b78 [ 307.295695][ T5483] [ 307.310857][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.338861][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.447787][ T5495] device syzkaller0 entered promiscuous mode [ 308.741047][ C1] eth0: bad gso: type: 1, size: 1408 [ 308.746474][ C1] eth0: bad gso: type: 1, size: 1408 [ 309.765922][ T5576] syz.2.1563[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.766000][ T5576] syz.2.1563[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.320231][ T5596] bond_slave_1: mtu less than device minimum [ 310.426864][ T5600] device veth0_vlan left promiscuous mode [ 310.652020][ T5600] device veth0_vlan entered promiscuous mode [ 311.003286][ T5611] device sit0 entered promiscuous mode [ 311.933182][ T5643] device veth1_macvtap left promiscuous mode [ 311.939128][ T5643] device macsec0 entered promiscuous mode [ 312.104511][ T5654] device pim6reg1 entered promiscuous mode [ 313.166727][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.184499][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.193219][ T5698] device bridge_slave_0 entered promiscuous mode [ 313.224058][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.230997][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.238481][ T5698] device bridge_slave_1 entered promiscuous mode [ 313.704704][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.712074][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.720877][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.729178][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.737326][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.744199][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.751783][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.781978][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.790304][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.798476][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.805308][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.836292][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.844243][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.861716][ T5698] device veth0_vlan entered promiscuous mode [ 313.867991][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.876173][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.884196][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.891534][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.907597][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.916784][ T5698] device veth1_macvtap entered promiscuous mode [ 313.926316][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.937038][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.015285][ T5727] device veth0_vlan left promiscuous mode [ 314.027203][ T5727] device veth0_vlan entered promiscuous mode [ 315.558957][ T5773] tun0: tun_chr_ioctl cmd 1074025675 [ 315.564084][ T5773] tun0: persist disabled [ 317.448163][ T5818] Â: renamed from pim6reg1 [ 318.343276][ T5873] device pim6reg1 entered promiscuous mode [ 318.412346][ T5878] device pim6reg1 entered promiscuous mode [ 318.503291][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.385358][ C1] eth0: bad gso: type: 1, size: 1408 [ 321.018242][ C0] sched: RT throttling activated [ 322.375669][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.382553][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.421037][ T5955] device bridge0 entered promiscuous mode [ 322.460779][ C1] eth0: bad gso: type: 1, size: 1408 [ 322.479341][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.033727][ T5989] FAULT_INJECTION: forcing a failure. [ 323.033727][ T5989] name failslab, interval 1, probability 0, space 0, times 0 [ 323.070445][ T5989] CPU: 0 PID: 5989 Comm: syz.0.1685 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 323.080257][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 323.090151][ T5989] Call Trace: [ 323.093449][ T5989] [ 323.096226][ T5989] dump_stack_lvl+0x151/0x1c0 [ 323.100742][ T5989] ? io_uring_drop_tctx_refs+0x190/0x190 [ 323.106210][ T5989] ? avc_denied+0x1b0/0x1b0 [ 323.110548][ T5989] dump_stack+0x15/0x20 [ 323.114536][ T5989] should_fail+0x3c6/0x510 [ 323.118790][ T5989] __should_failslab+0xa4/0xe0 [ 323.123388][ T5989] ? __alloc_skb+0xbe/0x550 [ 323.127729][ T5989] should_failslab+0x9/0x20 [ 323.132073][ T5989] slab_pre_alloc_hook+0x37/0xd0 [ 323.136840][ T5989] ? __alloc_skb+0xbe/0x550 [ 323.141180][ T5989] kmem_cache_alloc+0x44/0x200 [ 323.145782][ T5989] __alloc_skb+0xbe/0x550 [ 323.149947][ T5989] alloc_skb_with_frags+0xa6/0x680 [ 323.154906][ T5989] ? 0xffffffffa0014000 [ 323.158891][ T5989] ? is_bpf_text_address+0x172/0x190 [ 323.164008][ T5989] sock_alloc_send_pskb+0x915/0xa50 [ 323.169047][ T5989] ? sock_kzfree_s+0x60/0x60 [ 323.173468][ T5989] ? stack_trace_save+0x113/0x1c0 [ 323.178331][ T5989] ? stack_trace_snprint+0xf0/0xf0 [ 323.183276][ T5989] tun_get_user+0xf1b/0x3aa0 [ 323.187703][ T5989] ? __x64_sys_openat+0x1c0/0x290 [ 323.192569][ T5989] ? x64_sys_call+0x6bf/0x9a0 [ 323.197076][ T5989] ? _kstrtoull+0x3a0/0x4a0 [ 323.201420][ T5989] ? tun_do_read+0x2010/0x2010 [ 323.206011][ T5989] ? kstrtouint_from_user+0x20a/0x2a0 [ 323.211221][ T5989] ? kstrtol_from_user+0x310/0x310 [ 323.216178][ T5989] ? avc_policy_seqno+0x1b/0x70 [ 323.220858][ T5989] ? selinux_file_permission+0x2c4/0x570 [ 323.226324][ T5989] tun_chr_write_iter+0x1e1/0x2e0 [ 323.231188][ T5989] vfs_write+0xd5d/0x1110 [ 323.235349][ T5989] ? __traceiter_kmem_cache_free+0x32/0x50 [ 323.240994][ T5989] ? file_end_write+0x1c0/0x1c0 [ 323.245682][ T5989] ? __fdget_pos+0x209/0x3a0 [ 323.250105][ T5989] ? ksys_write+0x77/0x2c0 [ 323.254364][ T5989] ksys_write+0x199/0x2c0 [ 323.258532][ T5989] ? __ia32_sys_read+0x90/0x90 [ 323.263123][ T5989] ? debug_smp_processor_id+0x17/0x20 [ 323.268329][ T5989] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 323.274239][ T5989] __x64_sys_write+0x7b/0x90 [ 323.278665][ T5989] x64_sys_call+0x2f/0x9a0 [ 323.282909][ T5989] do_syscall_64+0x3b/0xb0 [ 323.287164][ T5989] ? clear_bhb_loop+0x35/0x90 [ 323.291678][ T5989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.297405][ T5989] RIP: 0033:0x7f202892dff9 [ 323.301663][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.302934][ T30] audit: type=1400 audit(1728183742.140:159): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.321184][ T5989] RSP: 002b:00007f20275a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.321204][ T5989] RAX: ffffffffffffffda RBX: 00007f2028ae5f80 RCX: 00007f202892dff9 [ 323.321215][ T5989] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 323.321225][ T5989] RBP: 00007f20275a7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.321234][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.321243][ T5989] R13: 0000000000000000 R14: 00007f2028ae5f80 R15: 00007ffd9ae41788 [ 323.321262][ T5989] [ 323.343332][ T30] audit: type=1400 audit(1728183742.140:160): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.416873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.424488][ T30] audit: type=1400 audit(1728183742.140:161): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.992470][ T6004] device syzkaller0 entered promiscuous mode [ 324.301677][ T6021] device veth1_macvtap left promiscuous mode [ 324.350969][ T6021] device macsec0 left promiscuous mode [ 324.609300][ T6024] device syzkaller0 entered promiscuous mode [ 324.909967][ T6040] FAULT_INJECTION: forcing a failure. [ 324.909967][ T6040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.135334][ T6040] CPU: 0 PID: 6040 Comm: syz.4.1701 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 325.145233][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.155129][ T6040] Call Trace: [ 325.158250][ T6040] [ 325.161027][ T6040] dump_stack_lvl+0x151/0x1c0 [ 325.165540][ T6040] ? io_uring_drop_tctx_refs+0x190/0x190 [ 325.171096][ T6040] ? stack_trace_save+0x113/0x1c0 [ 325.175966][ T6040] dump_stack+0x15/0x20 [ 325.179949][ T6040] should_fail+0x3c6/0x510 [ 325.184201][ T6040] should_fail_alloc_page+0x5a/0x80 [ 325.189241][ T6040] prepare_alloc_pages+0x15c/0x700 [ 325.194184][ T6040] ? __alloc_pages_bulk+0xe40/0xe40 [ 325.199218][ T6040] ? x64_sys_call+0x2f/0x9a0 [ 325.203641][ T6040] ? do_syscall_64+0x3b/0xb0 [ 325.208064][ T6040] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.213972][ T6040] __alloc_pages+0x18c/0x8f0 [ 325.218397][ T6040] ? prep_new_page+0x110/0x110 [ 325.223000][ T6040] kmalloc_order+0x4a/0x160 [ 325.227339][ T6040] kmalloc_order_trace+0x1a/0xb0 [ 325.232107][ T6040] ? alloc_skb_with_frags+0xa6/0x680 [ 325.237230][ T6040] __kmalloc_track_caller+0x19b/0x260 [ 325.242439][ T6040] ? kmem_cache_alloc+0xf5/0x200 [ 325.247212][ T6040] ? alloc_skb_with_frags+0xa6/0x680 [ 325.252333][ T6040] __alloc_skb+0x10c/0x550 [ 325.256585][ T6040] alloc_skb_with_frags+0xa6/0x680 [ 325.261531][ T6040] ? 0xffffffffa0014000 [ 325.265522][ T6040] ? is_bpf_text_address+0x172/0x190 [ 325.270644][ T6040] sock_alloc_send_pskb+0x915/0xa50 [ 325.275682][ T6040] ? sock_kzfree_s+0x60/0x60 [ 325.280105][ T6040] ? stack_trace_save+0x113/0x1c0 [ 325.284965][ T6040] ? stack_trace_snprint+0xf0/0xf0 [ 325.289911][ T6040] tun_get_user+0xf1b/0x3aa0 [ 325.294336][ T6040] ? __x64_sys_openat+0x1c0/0x290 [ 325.299201][ T6040] ? x64_sys_call+0x6bf/0x9a0 [ 325.303710][ T6040] ? _kstrtoull+0x3a0/0x4a0 [ 325.308048][ T6040] ? tun_do_read+0x2010/0x2010 [ 325.312647][ T6040] ? kstrtouint_from_user+0x20a/0x2a0 [ 325.317855][ T6040] ? kstrtol_from_user+0x310/0x310 [ 325.322803][ T6040] ? debug_smp_processor_id+0x17/0x20 [ 325.328008][ T6040] ? htab_lru_percpu_map_lookup_elem+0x293/0x390 [ 325.334174][ T6040] ? avc_policy_seqno+0x1b/0x70 [ 325.338860][ T6040] ? selinux_file_permission+0x2c4/0x570 [ 325.344329][ T6040] tun_chr_write_iter+0x1e1/0x2e0 [ 325.349188][ T6040] vfs_write+0xd5d/0x1110 [ 325.353354][ T6040] ? file_end_write+0x1c0/0x1c0 [ 325.358042][ T6040] ? __fdget_pos+0x209/0x3a0 [ 325.362465][ T6040] ? ksys_write+0x77/0x2c0 [ 325.366719][ T6040] ksys_write+0x199/0x2c0 [ 325.370886][ T6040] ? __ia32_sys_read+0x90/0x90 [ 325.375485][ T6040] ? debug_smp_processor_id+0x17/0x20 [ 325.380693][ T6040] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 325.386596][ T6040] __x64_sys_write+0x7b/0x90 [ 325.391022][ T6040] x64_sys_call+0x2f/0x9a0 [ 325.395272][ T6040] do_syscall_64+0x3b/0xb0 [ 325.399526][ T6040] ? clear_bhb_loop+0x35/0x90 [ 325.404038][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.409767][ T6040] RIP: 0033:0x7f9b90faeff9 [ 325.414021][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.433464][ T6040] RSP: 002b:00007f9b8fc28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.441712][ T6040] RAX: ffffffffffffffda RBX: 00007f9b91166f80 RCX: 00007f9b90faeff9 [ 325.449519][ T6040] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 325.457330][ T6040] RBP: 00007f9b8fc28090 R08: 0000000000000000 R09: 0000000000000000 [ 325.465141][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.472951][ T6040] R13: 0000000000000000 R14: 00007f9b91166f80 R15: 00007ffc1d73a288 [ 325.480777][ T6040] [ 326.923256][ T6099] FAULT_INJECTION: forcing a failure. [ 326.923256][ T6099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.008198][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 426.014973][ C0] (detected by 0, t=10002 jiffies, g=24437, q=876) [ 426.021402][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9901 (4294979819-4294969918), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 426.034499][ C0] rcu: rcu_preempt kthread starved for 9902 jiffies! g24437 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 426.045437][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 426.055241][ C0] rcu: RCU grace-period kthread stack dump: [ 426.060971][ C0] task:rcu_preempt state:R running task stack:27912 pid: 14 ppid: 2 flags:0x00004000 [ 426.071561][ C0] Call Trace: [ 426.074684][ C0] [ 426.077464][ C0] __schedule+0xccc/0x1590 [ 426.081716][ C0] ? release_firmware_map_entry+0x190/0x190 [ 426.087440][ C0] ? del_timer_sync+0x1bc/0x230 [ 426.092130][ C0] ? __kasan_check_write+0x14/0x20 [ 426.097078][ C0] schedule+0x11f/0x1e0 [ 426.101073][ C0] schedule_timeout+0x18c/0x370 [ 426.105757][ C0] ? __kasan_check_write+0x14/0x20 [ 426.110704][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 426.115996][ C0] ? console_conditional_schedule+0x30/0x30 [ 426.121724][ C0] ? update_process_times+0x200/0x200 [ 426.126933][ C0] ? prepare_to_swait_event+0x308/0x320 [ 426.132316][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 426.136923][ C0] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 426.142901][ C0] ? rcu_gp_init+0xc30/0xc30 [ 426.147329][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 426.152362][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 426.156791][ C0] rcu_gp_kthread+0xa4/0x350 [ 426.161213][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 426.165900][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 426.170417][ C0] ? __kasan_check_read+0x11/0x20 [ 426.175281][ C0] ? __kthread_parkme+0xb2/0x200 [ 426.180048][ C0] kthread+0x421/0x510 [ 426.183954][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 426.188468][ C0] ? kthread_blkcg+0xd0/0xd0 [ 426.192897][ C0] ret_from_fork+0x1f/0x30 [ 426.197149][ C0] [ 426.200020][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 426.206353][ C0] NMI backtrace for cpu 0 [ 426.210513][ C0] CPU: 0 PID: 6098 Comm: syz.0.1723 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 426.220233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.230216][ C0] Call Trace: [ 426.233341][ C0] [ 426.236029][ C0] dump_stack_lvl+0x151/0x1c0 [ 426.240542][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 426.246011][ C0] dump_stack+0x15/0x20 [ 426.250000][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 426.254775][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 426.260763][ C0] ? panic+0x760/0x760 [ 426.264671][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 426.270572][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 426.276388][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 426.282289][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 426.288017][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 426.294094][ C0] print_other_cpu_stall+0x112d/0x1340 [ 426.299388][ C0] ? hrtimer_forward+0x1a6/0x2c0 [ 426.304160][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 426.308932][ C0] ? perf_swevent_hrtimer+0x4b8/0x560 [ 426.314143][ C0] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 426.320219][ C0] rcu_sched_clock_irq+0xaec/0x12f0 [ 426.325252][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 426.331239][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 426.336273][ C0] update_process_times+0x198/0x200 [ 426.341308][ C0] tick_sched_timer+0x188/0x240 [ 426.345994][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 426.351376][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 426.356414][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 426.361353][ C0] ? clockevents_program_event+0x236/0x300 [ 426.367005][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 426.372898][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 426.377682][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 426.383403][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 426.388870][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 426.394683][ C0] RIP: 0010:wg_noise_keypair_get+0x0/0x310 [ 426.400334][ C0] Code: 16 bc 01 00 e9 bc fe ff ff e8 dc 68 6e fe 4c 89 f7 be 03 00 00 00 e8 cf a5 63 ff e9 6d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 [ 426.419766][ C0] RSP: 0018:ffffc90000007098 EFLAGS: 00000246 [ 426.425669][ C0] RAX: 1ffff11024933011 RBX: ffff888124998088 RCX: ffffffff874d5f03 [ 426.433477][ C0] RDX: 0000000000000100 RSI: 0000000000000201 RDI: ffff8881283cc000 [ 426.441291][ C0] RBP: ffffc90000007210 R08: dffffc0000000000 R09: 0000000000000003 [ 426.449106][ C0] R10: fffff52000000e04 R11: dffffc0000000001 R12: ffffc90000007170 [ 426.456915][ C0] R13: dffffc0000000000 R14: ffff888124998000 R15: 1ffff1102493300f [ 426.464801][ C0] ? wg_packet_send_staged_packets+0x370/0x14c0 [ 426.470798][ C0] ? sysvec_irq_work+0x52/0xb0 [ 426.475400][ C0] ? wg_packet_send_keepalive+0x1d0/0x1d0 [ 426.480953][ C0] ? _raw_spin_lock_bh+0xc0/0x1b0 [ 426.485816][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 426.490849][ C0] ? call_rcu+0xd90/0x1310 [ 426.495101][ C0] wg_xmit+0xa8f/0xcf0 [ 426.499010][ C0] ? wg_stop+0x5d0/0x5d0 [ 426.503084][ C0] ? netif_skb_features+0x7fc/0xb70 [ 426.508123][ C0] dev_hard_start_xmit+0x228/0x620 [ 426.513069][ C0] __dev_queue_xmit+0x18b4/0x2e70 [ 426.517930][ C0] ? irqtime_account_irq+0xdc/0x3c0 [ 426.522967][ C0] ? dev_queue_xmit+0x20/0x20 [ 426.527474][ C0] ? __irq_exit_rcu+0x5e/0xf0 [ 426.532162][ C0] ? irqentry_exit+0x30/0x40 [ 426.536585][ C0] ? sysvec_irq_work+0x52/0xb0 [ 426.541185][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 426.546133][ C0] ? sk_mc_loop+0x71/0x220 [ 426.550385][ C0] ? neigh_connected_output+0x40e/0x450 [ 426.555771][ C0] dev_queue_xmit+0x17/0x20 [ 426.560195][ C0] neigh_connected_output+0x417/0x450 [ 426.565407][ C0] ip6_finish_output2+0xf95/0x16e0 [ 426.570353][ C0] ? __ip6_finish_output+0x7c0/0x7c0 [ 426.575471][ C0] ? asm_sysvec_irq_work+0x1b/0x20 [ 426.580418][ C0] ? nf_hook_slow+0xd1/0x200 [ 426.584844][ C0] __ip6_finish_output+0x60f/0x7c0 [ 426.589793][ C0] ip6_finish_output+0x31/0x210 [ 426.594478][ C0] ? ip6_output+0x47b/0x4c0 [ 426.598823][ C0] ip6_output+0x1f7/0x4c0 [ 426.602991][ C0] ? ac6_seq_show+0xf0/0xf0 [ 426.607323][ C0] ? ip6_output+0x4c0/0x4c0 [ 426.611661][ C0] ? nf_hook_slow+0xd1/0x200 [ 426.616088][ C0] ? ndisc_send_skb+0xc44/0xc90 [ 426.620778][ C0] ndisc_send_skb+0x73e/0xc90 [ 426.625294][ C0] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 426.630061][ C0] ? ndisc_error_report+0xc0/0xc0 [ 426.634921][ C0] ? __kasan_kmalloc+0x9/0x10 [ 426.639443][ C0] ? __kasan_check_write+0x14/0x20 [ 426.644379][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 426.649158][ C0] ? skb_put+0x11e/0x210 [ 426.653236][ C0] ndisc_send_rs+0x532/0x6a0 [ 426.657663][ C0] ? ipv6_get_lladdr+0x1b4/0x1f0 [ 426.662435][ C0] addrconf_rs_timer+0x2d1/0x600 [ 426.667218][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 426.673112][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 426.678059][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 426.683438][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 426.689338][ C0] call_timer_fn+0x3b/0x2d0 [ 426.693682][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 426.699582][ C0] __run_timers+0x72a/0xa10 [ 426.703922][ C0] ? __kasan_check_write+0x14/0x20 [ 426.708875][ C0] ? calc_index+0x280/0x280 [ 426.713213][ C0] run_timer_softirq+0x69/0xf0 [ 426.717808][ C0] handle_softirqs+0x25e/0x5c0 [ 426.722411][ C0] __irq_exit_rcu+0x52/0xf0 [ 426.726745][ C0] irq_exit_rcu+0x9/0x10 [ 426.730913][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 426.736382][ C0] [ 426.739157][ C0] [ 426.741943][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 426.747753][ C0] RIP: 0010:kasan_check_range+0x82/0x2a0 [ 426.753216][ C0] Code: 00 00 00 00 fc ff df 4f 8d 34 1a 4d 89 f5 4d 29 cd 49 83 fd 10 7f 26 4d 85 ed 0f 84 44 01 00 00 49 f7 d2 4d 01 e2 41 80 39 00 <0f> 85 d2 01 00 00 49 ff c1 49 ff c2 75 ee e9 27 01 00 00 45 89 cf [ 426.772658][ C0] RSP: 0018:ffffc90000bdfba8 EFLAGS: 00000246 [ 426.778560][ C0] RAX: 1ffff110250a0801 RBX: 000000000001ffff RCX: ffffffff8154dd88 [ 426.786370][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881185cea78 [ 426.794187][ C0] RBP: ffffc90000bdfbd0 R08: dffffc0000000000 R09: ffffed10230b9d4f [ 426.801995][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff110230b9d4f [ 426.809804][ C0] R13: 0000000000000001 R14: ffffed10230b9d50 R15: 0000000000000000 [ 426.817626][ C0] ? up_read+0x28/0x220 [ 426.821612][ C0] __kasan_check_write+0x14/0x20 [ 426.826386][ C0] up_read+0x28/0x220 [ 426.830203][ C0] bad_area+0x5d/0x90 [ 426.834023][ C0] exc_page_fault+0x57c/0x7f0 [ 426.838541][ C0] asm_exc_page_fault+0x27/0x30 [ 426.843221][ C0] RIP: 0010:strncpy_from_user+0xfb/0x2d0 [ 426.848692][ C0] Code: 00 4c 89 ee e8 96 34 eb fe 49 83 fd 07 0f 86 9b 00 00 00 4c 89 65 c0 48 c7 45 b8 f8 ff ff ff 45 31 f6 4c 89 7d d0 48 8b 45 c8 <4e> 8b 24 30 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 04 4d 89 e7 49 [ 426.868131][ C0] RSP: 0018:ffffc90000bdfe40 EFLAGS: 00050246 [ 426.874034][ C0] RAX: 0000000000000000 RBX: 00007ffffffff000 RCX: ffff888128503b40 [ 426.881844][ C0] RDX: ffffc9000535e000 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 426.889652][ C0] RBP: ffffc90000bdfe88 R08: ffffffff8285336a R09: fffff94000957201 [ 426.897464][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000fe0 [ 426.905274][ C0] R13: 0000000000000fe0 R14: 0000000000000000 R15: ffff88812ae41120 [ 426.913098][ C0] ? strncpy_from_user+0xda/0x2d0 [ 426.917952][ C0] getname_flags+0xf2/0x520 [ 426.922287][ C0] ? switch_fpu_return+0x15f/0x2e0 [ 426.927240][ C0] __x64_sys_mkdirat+0x7c/0xa0 [ 426.931835][ C0] x64_sys_call+0x6c6/0x9a0 [ 426.936266][ C0] do_syscall_64+0x3b/0xb0 [ 426.940516][ C0] ? clear_bhb_loop+0x35/0x90 [ 426.945028][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 426.950756][ C0] RIP: 0033:0x7f202892dff9 [ 426.955011][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.974447][ C0] RSP: 002b:00007f20275a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 426.982694][ C0] RAX: ffffffffffffffda RBX: 00007f2028ae5f80 RCX: 00007f202892dff9 [ 426.990503][ C0] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffffff [ 426.998315][ C0] RBP: 00007f20289a0296 R08: 0000000000000000 R09: 0000000000000000 [ 427.006253][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.014060][ C0] R13: 0000000000000000 R14: 00007f2028ae5f80 R15: 00007ffd9ae41788 [ 427.021968][ C0] [ 427.074125][ T6099] CPU: 0 PID: 6099 Comm: syz.2.1721 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 427.083846][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 427.093740][ T6099] Call Trace: [ 427.096863][ T6099] [ 427.099642][ T6099] dump_stack_lvl+0x151/0x1c0 [ 427.104152][ T6099] ? io_uring_drop_tctx_refs+0x190/0x190 [ 427.109620][ T6099] ? __kasan_check_write+0x14/0x20 [ 427.114566][ T6099] ? __alloc_skb+0x355/0x550 [ 427.118993][ T6099] dump_stack+0x15/0x20 [ 427.122986][ T6099] should_fail+0x3c6/0x510 [ 427.127242][ T6099] should_fail_usercopy+0x1a/0x20 [ 427.132100][ T6099] _copy_from_iter+0x22f/0xdc0 [ 427.136702][ T6099] ? copy_mc_pipe_to_iter+0x760/0x760 [ 427.141914][ T6099] ? __check_object_size+0x2ec/0x3d0 [ 427.147032][ T6099] skb_copy_datagram_from_iter+0x100/0x6d0 [ 427.152674][ T6099] tun_get_user+0x112d/0x3aa0 [ 427.157182][ T6099] ? __x64_sys_openat+0x1c0/0x290 [ 427.162044][ T6099] ? x64_sys_call+0x6bf/0x9a0 [ 427.166559][ T6099] ? _kstrtoull+0x3a0/0x4a0 [ 427.170900][ T6099] ? tun_do_read+0x2010/0x2010 [ 427.175495][ T6099] ? kstrtouint_from_user+0x20a/0x2a0 [ 427.180704][ T6099] ? kstrtol_from_user+0x310/0x310 [ 427.185652][ T6099] ? avc_policy_seqno+0x1b/0x70 [ 427.190338][ T6099] ? selinux_file_permission+0x2c4/0x570 [ 427.195805][ T6099] tun_chr_write_iter+0x1e1/0x2e0 [ 427.200665][ T6099] vfs_write+0xd5d/0x1110 [ 427.204836][ T6099] ? __traceiter_kmem_cache_free+0x32/0x50 [ 427.210473][ T6099] ? file_end_write+0x1c0/0x1c0 [ 427.215162][ T6099] ? __fdget_pos+0x209/0x3a0 [ 427.219599][ T6099] ? ksys_write+0x77/0x2c0 [ 427.223924][ T6099] ksys_write+0x199/0x2c0 [ 427.228094][ T6099] ? __ia32_sys_read+0x90/0x90 [ 427.232692][ T6099] ? debug_smp_processor_id+0x17/0x20 [ 427.237898][ T6099] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 427.243802][ T6099] __x64_sys_write+0x7b/0x90 [ 427.248227][ T6099] x64_sys_call+0x2f/0x9a0 [ 427.252479][ T6099] do_syscall_64+0x3b/0xb0 [ 427.256729][ T6099] ? clear_bhb_loop+0x35/0x90 [ 427.261251][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 427.266975][ T6099] RIP: 0033:0x7f8b37307ff9 [ 427.271226][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.290666][ T6099] RSP: 002b:00007f8b35f81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.298923][ T6099] RAX: ffffffffffffffda RBX: 00007f8b374bff80 RCX: 00007f8b37307ff9 [ 427.306721][ T6099] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 427.314537][ T6099] RBP: 00007f8b35f81090 R08: 0000000000000000 R09: 0000000000000000 [ 427.322345][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.330157][ T6099] R13: 0000000000000000 R14: 00007f8b374bff80 R15: 00007ffc6a551b78 [ 427.337975][ T6099] [ 441.066614][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz.4.1719:6086] [ 441.074686][ C1] Modules linked in: [ 441.078417][ C1] CPU: 1 PID: 6086 Comm: syz.4.1719 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 441.088133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.098030][ C1] RIP: 0010:update_stack_state+0x36b/0x460 [ 441.103671][ C1] Code: 6b b0 7d 00 48 8b 45 c0 49 89 06 48 8b 4d 90 42 80 3c 39 00 48 8b 5d c8 4c 8b 75 b8 74 0c 48 89 df e8 49 b0 7d 00 48 8b 45 c0 <48> c7 03 00 00 00 00 48 83 c0 08 48 89 c3 eb 08 48 8b 5d 88 48 83 [ 441.123634][ C1] RSP: 0000:ffffc900001d03f0 EFLAGS: 00000246 [ 441.129534][ C1] RAX: ffffc900001d0950 RBX: ffffc900001d0598 RCX: 1ffff9200003a0b3 [ 441.137346][ C1] RDX: 1ffff9200003a0aa RSI: ffffc900001d0950 RDI: ffffc900001d0598 [ 441.145157][ C1] RBP: ffffc900001d04a8 R08: ffffc900001d0628 R09: 0000000000000002 [ 441.152968][ C1] R10: ffffc900001d0630 R11: dffffc0000000001 R12: 1ffff9200003a0b0 [ 441.160777][ C1] R13: 0000000000000000 R14: ffffc900001d0568 R15: dffffc0000000000 [ 441.168589][ C1] FS: 00007f9b8fc286c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 441.177357][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.183779][ C1] CR2: 0000000000000004 CR3: 0000000121bac000 CR4: 00000000003506a0 [ 441.191593][ C1] DR0: 0000000020000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.199402][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 441.207212][ C1] Call Trace: [ 441.210339][ C1] [ 441.213031][ C1] ? show_regs+0x58/0x60 [ 441.217108][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 441.222056][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 441.227264][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 441.232473][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 441.237415][ C1] ? clockevents_program_event+0x236/0x300 [ 441.243058][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 441.248961][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 441.253919][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 441.259811][ C1] ? sysvec_apic_timer_interrupt+0x44/0xc0 [ 441.265452][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.271444][ C1] ? update_stack_state+0x36b/0x460 [ 441.276479][ C1] unwind_next_frame+0x3cb/0x700 [ 441.281252][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 441.286106][ C1] arch_stack_walk+0x10d/0x140 [ 441.290710][ C1] ? kmem_cache_alloc_trace+0x115/0x210 [ 441.296089][ C1] stack_trace_save+0x113/0x1c0 [ 441.300773][ C1] ? sysvec_irq_work+0x52/0xb0 [ 441.305761][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 441.310760][ C1] ____kasan_kmalloc+0xdb/0x110 [ 441.315441][ C1] ? ____kasan_kmalloc+0xdb/0x110 [ 441.320302][ C1] ? __kasan_kmalloc+0x9/0x10 [ 441.324815][ C1] ? kmem_cache_alloc_trace+0x115/0x210 [ 441.330217][ C1] __kasan_kmalloc+0x9/0x10 [ 441.334535][ C1] kmem_cache_alloc_trace+0x115/0x210 [ 441.339762][ C1] ? dst_cow_metrics_generic+0x55/0x1c0 [ 441.345126][ C1] dst_cow_metrics_generic+0x55/0x1c0 [ 441.350334][ C1] icmp6_dst_alloc+0x385/0x560 [ 441.354937][ C1] ndisc_send_skb+0x27f/0xc90 [ 441.359451][ C1] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 441.364223][ C1] ? __kasan_kmalloc+0x9/0x10 [ 441.368735][ C1] ? __kasan_check_write+0x14/0x20 [ 441.373678][ C1] ? skb_set_owner_w+0x24b/0x3c0 [ 441.378454][ C1] ? ndisc_send_rs+0x457/0x6a0 [ 441.383054][ C1] ? memcpy+0x56/0x70 [ 441.386872][ C1] ndisc_send_rs+0x532/0x6a0 [ 441.391301][ C1] addrconf_rs_timer+0x2d1/0x600 [ 441.396073][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.401974][ C1] ? __run_timers+0x6ff/0xa10 [ 441.406483][ C1] ? call_timer_fn+0x2e/0x2d0 [ 441.411000][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.416908][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.422804][ C1] call_timer_fn+0x3b/0x2d0 [ 441.427144][ C1] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.433045][ C1] __run_timers+0x72a/0xa10 [ 441.437385][ C1] ? debug_smp_processor_id+0x17/0x20 [ 441.442596][ C1] ? calc_index+0x280/0x280 [ 441.446932][ C1] ? run_timer_softirq+0xe/0xf0 [ 441.451622][ C1] run_timer_softirq+0x69/0xf0 [ 441.456224][ C1] handle_softirqs+0x25e/0x5c0 [ 441.460822][ C1] __irq_exit_rcu+0x52/0xf0 [ 441.465155][ C1] irq_exit_rcu+0x9/0x10 [ 441.469234][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 441.474703][ C1] [ 441.477478][ C1] [ 441.480258][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.486071][ C1] RIP: 0010:preempt_schedule_irq+0xc2/0x140 [ 441.491802][ C1] Code: 4c 89 e7 e8 60 a9 cd fc f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 34 4c 67 fc fb bf 01 00 00 00 e9 e3 ff ff fa bf 01 00 00 00 e8 be 4d 67 fc 65 48 8b 1d e6 60 [ 441.511245][ C1] RSP: 0000:ffffc90000bcfd40 EFLAGS: 00000246 [ 441.517143][ C1] RAX: 1ffff11025553646 RBX: 1ffff92000179fac RCX: ffffffff84e6de00 [ 441.524955][ C1] RDX: 1ffff110255534f5 RSI: 0000000000000000 RDI: 0000000000000001 [ 441.532766][ C1] RBP: ffffc90000bcfdc8 R08: ffffffff874ce040 R09: ffffffff874ce048 [ 441.540578][ C1] R10: ffffffff874ce058 R11: ffffffff874ce050 R12: ffffc90000bcfd60 [ 441.548391][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000179fa8 [ 441.556203][ C1] ? _raw_write_unlock_irqrestore+0x60/0x70 [ 441.561930][ C1] ? __cond_resched+0x20/0x20 [ 441.566439][ C1] ? try_to_wake_up+0x697/0x1160 [ 441.571219][ C1] irqentry_exit_cond_resched+0x2a/0x30 [ 441.576607][ C1] irqentry_exit+0x30/0x40 [ 441.580856][ C1] sysvec_apic_timer_interrupt+0x55/0xc0 [ 441.586318][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.592133][ C1] RIP: 0010:exit_to_user_mode_loop+0x46/0xe0 [ 441.597953][ C1] Code: 30 f9 56 00 e8 bb a3 f7 00 fa e8 c5 79 81 03 65 48 8b 05 3d 38 a3 7e 48 8b 18 f7 c3 0e 30 02 00 0f 84 87 00 00 00 fb f6 c3 08 <74> 05 e8 a3 d0 85 03 f7 c3 00 10 00 00 74 08 4c 89 f7 e8 d3 e2 37 [ 441.617390][ C1] RSP: 0000:ffffc90000bcfec0 EFLAGS: 00000202 [ 441.623287][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88812aa9a780 [ 441.631100][ C1] RDX: 1ffff110255534f5 RSI: 0000000000000008 RDI: ffffc90000bcff58 [ 441.639005][ C1] RBP: ffffc90000bcfed0 R08: ffffffff874ce040 R09: ffffffff874ce048 [ 441.646813][ C1] R10: ffffffff874ce058 R11: ffffffff874ce050 R12: ffffc90000bcff58 [ 441.654623][ C1] R13: 0000000000000000 R14: ffffc90000bcff58 R15: ffff88812aa9a780 [ 441.662449][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 441.667740][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 441.673025][ C1] irqentry_exit+0x12/0x40 [ 441.677277][ C1] common_interrupt+0x65/0xd0 [ 441.681788][ C1] asm_common_interrupt+0x27/0x40 [ 441.686648][ C1] RIP: 0033:0x7f9b90faeff9 [ 441.690901][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.710342][ C1] RSP: 002b:00007f9b8fc280e8 EFLAGS: 00000246 [ 441.716241][ C1] RAX: 0000000000000001 RBX: 00007f9b91166f88 RCX: 00007f9b90faeff9 [ 441.724059][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b91166f8c [ 441.731863][ C1] RBP: 00007f9b91166f80 R08: 00007ffc1d7d10b0 R09: 0000000000000000 [ 441.739676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b91166f8c [ 441.747486][ C1] R13: 0000000000000000 R14: 00007ffc1d73a1a0 R15: 00007ffc1d73a288 [ 441.755308][ C1] [ 441.758162][ C1] Sending NMI from CPU 1 to CPUs 0: [ 441.763213][ C0] NMI backtrace for cpu 0 [ 441.763223][ C0] CPU: 0 PID: 6098 Comm: syz.0.1723 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 441.763239][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 441.763247][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 441.763271][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 5a 01 52 01 5d c3 0f 1f 84 00 00 00 00 [ 441.763283][ C0] RSP: 0018:ffffc90000007458 EFLAGS: 00000046 [ 441.763297][ C0] RAX: 0000000000000098 RBX: ffffffff862609d8 RCX: 0000000000000838 [ 441.763307][ C0] RDX: 0000000000000000 RSI: 0000000000000098 RDI: 0000000000000838 [ 441.763316][ C0] RBP: ffffc90000007458 R08: ffffffff8163cd9b R09: ffffffff8163cc8d [ 441.763327][ C0] R10: 0000000000000002 R11: ffff888128503b40 R12: 0000000000000020 [ 441.763337][ C0] R13: dffffc0000000000 R14: 0000000000000098 R15: dffffc0000000000 [ 441.763347][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 441.763360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.763371][ C0] CR2: 0000555556dea4a8 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 441.763385][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.763393][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 441.763402][ C0] Call Trace: [ 441.763407][ C0] [ 441.763413][ C0] ? show_regs+0x58/0x60 [ 441.763429][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 441.763448][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 441.763467][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763483][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763500][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 441.763515][ C0] ? nmi_handle+0xa8/0x280 [ 441.763545][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763561][ C0] ? default_do_nmi+0x69/0x160 [ 441.763576][ C0] ? exc_nmi+0xad/0x100 [ 441.763589][ C0] ? end_repeat_nmi+0x16/0x31 [ 441.763604][ C0] ? clockevents_program_event+0x7d/0x300 [ 441.763627][ C0] ? clockevents_program_event+0x18b/0x300 [ 441.763643][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763663][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763681][ C0] ? native_apic_msr_write+0x39/0x50 [ 441.763697][ C0] [ 441.763701][ C0] [ 441.763705][ C0] lapic_next_event+0x5f/0x70 [ 441.763720][ C0] clockevents_program_event+0x1c1/0x300 [ 441.763735][ C0] tick_program_event+0x9f/0x120 [ 441.763752][ C0] hrtimer_interrupt+0x625/0xaa0 [ 441.763778][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 441.763793][ C0] sysvec_apic_timer_interrupt+0x44/0xc0 [ 441.763808][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.763822][ C0] RIP: 0010:ip6t_do_table+0x47e/0x1850 [ 441.763840][ C0] Code: 03 42 0f b6 04 28 84 c0 0f 85 97 0e 00 00 0f b7 03 48 89 84 24 90 00 00 00 49 8d 5c 07 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 c8 02 4d fd 4c 8b 64 24 10 4d 8d 6c 24 20 4c 8b [ 441.763852][ C0] RSP: 0018:ffffc90000007720 EFLAGS: 00000246 [ 441.763863][ C0] RAX: 1ffff110235b7a03 RBX: ffff88811adbd018 RCX: ffff888128503b40 [ 441.763874][ C0] RDX: 0000000000000100 RSI: ffff88810f360008 RDI: ffff88811d046018 [ 441.763884][ C0] RBP: ffffc90000007918 R08: ffffffff8465b13b R09: ffffc90000007870 [ 441.763895][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 3e00000000000000 [ 441.763905][ C0] R13: dffffc0000000000 R14: ffff88811d046040 R15: ffff88811adbd000 [ 441.763918][ C0] ? ip6t_do_table+0x2cb/0x1850 [ 441.763942][ C0] ? ip6t_alloc_initial_table+0x630/0x630 [ 441.763961][ C0] ? ip6t_alloc_initial_table+0x630/0x630 [ 441.763978][ C0] ip6table_mangle_hook+0x20d/0x790 [ 441.763997][ C0] ? ip6table_mangle_table_init+0x70/0x70 [ 441.764013][ C0] nf_hook_slow+0xbe/0x200 [ 441.764030][ C0] ndisc_send_skb+0xc31/0xc90 [ 441.764050][ C0] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 441.764066][ C0] ? ndisc_error_report+0xc0/0xc0 [ 441.764082][ C0] ? __kasan_kmalloc+0x9/0x10 [ 441.764098][ C0] ? __kasan_check_write+0x14/0x20 [ 441.764113][ C0] ? skb_set_owner_w+0x24b/0x3c0 [ 441.764126][ C0] ? ndisc_send_rs+0x457/0x6a0 [ 441.764142][ C0] ? memcpy+0x56/0x70 [ 441.764157][ C0] ndisc_send_rs+0x532/0x6a0 [ 441.764174][ C0] addrconf_rs_timer+0x2d1/0x600 [ 441.764192][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.764210][ C0] ? __run_timers+0x6ff/0xa10 [ 441.764223][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.764240][ C0] call_timer_fn+0x3b/0x2d0 [ 441.764252][ C0] ? addrconf_disable_policy_idev+0x350/0x350 [ 441.764269][ C0] __run_timers+0x72a/0xa10 [ 441.764282][ C0] ? debug_smp_processor_id+0x17/0x20 [ 441.764300][ C0] ? calc_index+0x280/0x280 [ 441.764314][ C0] ? run_timer_softirq+0xe/0xf0 [ 441.764328][ C0] run_timer_softirq+0x69/0xf0 [ 441.764342][ C0] handle_softirqs+0x25e/0x5c0 [ 441.764360][ C0] __irq_exit_rcu+0x52/0xf0 [ 441.764374][ C0] irq_exit_rcu+0x9/0x10 [ 441.764388][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 441.764403][ C0] [ 441.764407][ C0] [ 441.764412][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.764426][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 441.764443][ C0] Code: b0 09 92 7e 65 8b 15 b1 09 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 <83> fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 3c [ 441.764455][ C0] RSP: 0018:ffffc90000bdf470 EFLAGS: 00000246 [ 441.764466][ C0] RAX: ffffffff81a6e52c RBX: 0000000000000000 RCX: ffff888128503b40 [ 441.764476][ C0] RDX: 0000000000000000 RSI: 00007f2027c1e000 RDI: ffff88812a29d250 [ 441.764486][ C0] RBP: ffffc90000bdf470 R08: ffffffff81a72c83 R09: ffffed10250a0769 [ 441.764497][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 8000000121f6a007 [ 441.764507][ C0] R13: 8000000121f6a007 R14: 00007f2027c1e000 R15: ffff88812a29d250 [ 441.764519][ C0] ? unmap_page_range+0xb13/0x1ed0 [ 441.764534][ C0] ? vm_normal_page+0x1c/0x1f0 [ 441.764549][ C0] vm_normal_page+0x1c/0x1f0 [ 441.764563][ C0] unmap_page_range+0xb37/0x1ed0 [ 441.764585][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 441.764601][ C0] ? uprobe_munmap+0x1f/0x450 [ 441.764615][ C0] ? uprobe_munmap+0x27/0x450 [ 441.764627][ C0] ? uprobe_munmap+0x18d/0x450 [ 441.764641][ C0] unmap_vmas+0x389/0x560 [ 441.764656][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 441.764673][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 441.764691][ C0] exit_mmap+0x3e4/0x940 [ 441.764707][ C0] ? exit_aio+0x25e/0x3c0 [ 441.764721][ C0] ? vm_brk+0x30/0x30 [ 441.764735][ C0] ? mutex_unlock+0xb2/0x260 [ 441.764753][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 441.764767][ C0] __mmput+0x95/0x310 [ 441.764788][ C0] mmput+0x5b/0x170 [ 441.764802][ C0] do_exit+0xb9c/0x2ca0 [ 441.764816][ C0] ? irqentry_exit_cond_resched+0x2a/0x30 [ 441.764831][ C0] ? irqentry_exit+0x30/0x40 [ 441.764847][ C0] ? put_task_struct+0x80/0x80 [ 441.764862][ C0] ? memset+0x35/0x40 [ 441.764876][ C0] ? __kasan_check_write+0x14/0x20 [ 441.764890][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 441.764906][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 441.764923][ C0] do_group_exit+0x141/0x310 [ 441.764939][ C0] get_signal+0x7a3/0x1630 [ 441.764958][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 441.764974][ C0] ? filename_create+0x10a/0x530 [ 441.764989][ C0] ? getname_flags+0x258/0x520 [ 441.765004][ C0] ? debug_smp_processor_id+0x17/0x20 [ 441.765018][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 441.765033][ C0] ? kern_path_create+0x1a0/0x1a0 [ 441.765048][ C0] ? kmem_cache_free+0x116/0x2e0 [ 441.765064][ C0] ? get_sigframe_size+0x10/0x10 [ 441.765081][ C0] ? vfs_mkdir+0x610/0x610 [ 441.765097][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 441.765112][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 441.765127][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 441.765142][ C0] do_syscall_64+0x47/0xb0 [ 441.765154][ C0] ? clear_bhb_loop+0x35/0x90 [ 441.765167][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.765180][ C0] RIP: 0033:0x7f202892dff9 [ 441.765191][ C0] Code: Unable to access opcode bytes at RIP 0x7f202892dfcf. [ 441.765198][ C0] RSP: 002b:00007f20275a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 441.765212][ C0] RAX: fffffffffffffff2 RBX: 00007f2028ae5f80 RCX: 00007f202892dff9 [ 441.765222][ C0] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffffff [ 441.765232][ C0] RBP: 00007f20289a0296 R08: 0000000000000000 R09: 0000000000000000 [ 441.765240][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.765249][ C0] R13: 0000000000000000 R14: 00007f2028ae5f80 R15: 00007ffd9ae41788 [ 441.765262][ C0] SYZFAIL: failed to send rpc fd=3 want=176 sent=0 n=-1 (errno 32: Broken pipe)