last executing test programs: 5.836361149s ago: executing program 4 (id=2809): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x81}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.632037421s ago: executing program 4 (id=2839): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000036ee5f5f"], 0x48) 3.580712221s ago: executing program 4 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x55) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000300000000000001"], 0xfdef) 3.432041072s ago: executing program 4 (id=2843): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800d, 0x2000}, 0x50) 3.431765792s ago: executing program 4 (id=2844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3.311933862s ago: executing program 4 (id=2847): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000900), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb010018000000000000008b0000008b00000004000000060000000200000f030000000400000007000000ff7f0000020000000000000006000000c2f013020000000000000205000000010000000000eca012f1f52bceb4b0000b04000000050000000000000c040000000d0000000000000c030000000e00000000000002000000000a00000000000001000000007b007201070000000000000b0400000006000000000000020500000000002e00006159a6df0df95c28670a82de470a1ce9151d5a44"], 0x0, 0xa8, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.273321473s ago: executing program 0 (id=2848): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, 0x0) 2.718247396s ago: executing program 0 (id=2853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 2.639882746s ago: executing program 0 (id=2854): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffff, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 2.233600468s ago: executing program 0 (id=2858): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000065fadec0d091342400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES8=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00000000000000000082f9b74302424457700000"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 1.70091378s ago: executing program 0 (id=2863): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 956.704085ms ago: executing program 0 (id=2869): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000260080000000000095000000000000004ba1ffff0000000000000234ec4a8f2ec0be9057e23b2219958eae2d5c8810e34549990926224e5b070000000000000000000000309f80a14ad7ba29f2a8ebd6bb618b4b37471e1660607256cdbfeb069ac36835bc91253710c6afb03ca95f377a17120ece396cbacd5ea16931a3289514e0fc34909c28a3dd475f94aa05f2f67479f4c11730a3ff05d490f4831679d62dd9ad13919af3779cd6cac290859d5674181b95f4ea381fa35e80a65c757c95c7ff1d917ea3b7e7b394d97970a58ac13798c094ee25a40538c96d756db12133f860864fc40f79b07550e71bf24017ff9af2be1222f5fd084c94bcc68dc994d00b9bda7423052cc163ba51ff750e7aecacdb0ca65a8b79f8bb2747f8dbba8e383561112a114d10c66a275b53bf71a473138b1b26b71e816bf7b84040f7f8b4ac235d3d45c208b69bf9f070a4273216eb0e5036ed27dfb5e5b64f7136fc0abad0830f73ded608cd7dd46e612e3d5d8f9bd10111f1cb246a9038", @ANYBLOB="49864c2a60c855a00c3c0854fa27cbfed5dc32ab19c5631c7d7c5e059f47a0984cf98759a5465c4130480582dfaa218fc69db456d420096b032dbb282331d7f733907a712ec0264cdf04cccefb7bef0138f7af67a38e5b1d1dae2c6b8fcd", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1700000000000000008400000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00{\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0) 726.835246ms ago: executing program 2 (id=2873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x5a9}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="00000000000900000000000000f9ffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x44) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 566.849827ms ago: executing program 2 (id=2874): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 532.590967ms ago: executing program 2 (id=2877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000e9ff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fef2000e40000200875a65969ff57b00ff020000000011000000000000000001"], 0xfdef) 522.805927ms ago: executing program 1 (id=2878): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@typedef={0x7}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x80, 0x18}]}, @struct={0xa, 0x1, 0x0, 0x4, 0x1, 0xc, [{0xf, 0x3, 0xc91}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xa}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x1d, 0x3}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x5, [{0x7, 0x5, 0x1}, {0x4, 0x1, 0x9}, {0x5, 0x5, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/80, 0xbf, 0x50, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1d, 0xfffffffb, 0x9, 0x8000, 0x2000, 0xffffffffffffffff, 0x6, '\x00', r0, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pi6 \x00'}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3d7, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}]}, &(0x7f00000003c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r2, r2, r2], &(0x7f0000000480)=[{0x2, 0x3, 0x7, 0xa}, {0x1, 0x3, 0xd}, {0x3, 0x4, 0x10, 0x5}, {0x2, 0x1, 0xb, 0x3}], 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x8}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xe, 0xdba3}, {0x0, 0x2}, {0x8, 0x5}, {0xa, 0x8}, {0xa, 0x7}, {0x0, 0x3}, {0x0, 0x9}]}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x8, 0x6}, {0xc, 0x9}, {0xd, 0xfff}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000640)=""/127, 0x94, 0x7f, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x9, 0x1, 0x4, 0x280, r2, 0x0, '\x00', r0, r5, 0x4, 0x5, 0x3, 0x6, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x8, &(0x7f0000000780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f00000007c0)='GPL\x00', 0xfffffff9, 0x1000, &(0x7f0000000800)=""/4096, 0x40f00, 0x20, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000001800)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001840)={0x1, 0xe, 0xf93a, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001880)=[{0x4, 0x1, 0x10, 0xc}, {0x3, 0x3, 0xc, 0x6}, {0x1, 0x5, 0x2, 0x4}, {0x0, 0x1, 0x7, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x10, 0x2}], 0x10, 0x100, @void, @value}, 0x94) r6 = perf_event_open$cgroup(&(0x7f0000001a00)={0x6, 0x80, 0x1, 0x9, 0x76, 0x6, 0x0, 0x6, 0x200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000019c0), 0x2}, 0x4002, 0xfff, 0x1000, 0x5, 0x5, 0x8, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000001a80)='\xe4^((\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000001ac0)='nmi_noise\x00', r4, 0x0, 0x1000}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x2, &(0x7f0000001b40)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001bc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001c00)={0x1, 0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001c40)=[{0x1, 0x1, 0x8, 0x5}, {0x2, 0x4, 0x5, 0xc}], 0x10, 0x7c5, @void, @value}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001d40)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000001d80)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001e00)={r10, r6, 0x0, 0x1, &(0x7f0000001dc0)='\x00'}, 0x30) mkdirat$cgroup(r9, &(0x7f0000001e40)='syz1\x00', 0x1ff) write$cgroup_subtree(r9, &(0x7f0000001e80)={[{0x6, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'cpu'}, {0x2b, 'memory'}, {0x1ddb97f4d4535963, 'pids'}, {0x2b, 'cpuset'}, {0x2d, 'hugetlb'}, {0x2b, 'devices'}]}, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)) unlink(&(0x7f0000001f40)='./file0\x00') r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x8, '\x00', r0, r1, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002200)={r9, 0x58, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002580)={r4, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000002300)=[0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000002380)=[{}], 0x8, 0x10, &(0x7f00000023c0), &(0x7f0000002400), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000002440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x15, 0x12, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@alu={0x4, 0x1, 0x5, 0x5, 0xa, 0xc, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000020c0)='syzkaller\x00', 0x2, 0x6b, &(0x7f0000002100)=""/107, 0x41100, 0x2, '\x00', r12, @fallback=0x3, r9, 0x8, &(0x7f0000002240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002280)={0x0, 0xc, 0xdfd2, 0x9}, 0x10, r13, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000025c0)=[{0x3, 0x5, 0x7, 0xa}, {0x5, 0x5, 0x5, 0xb}, {0x3, 0x1, 0xa}, {0x3, 0x2, 0x4, 0x6}, {0x4, 0x2, 0xb, 0xa}, {0x1, 0x3, 0xe, 0x8}], 0x10, 0x5, @void, @value}, 0x94) syz_clone(0x28000000, &(0x7f0000002700)="48dfa62b0badeedce27b40377751ae2e566b377fcf96070222033a21481cbf67ddbc8bed75c0430295b981464df6cfa1a8f1c32de787c563bd4d8c00c044248112addd15fadcfecc", 0x48, &(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002800)="118b5b255dc59bfc09f7cf7dc31d7e35b86e6c75404e643dc9f165724ad17541e7c83ffc6e2c013a477a10f492f2c9f064b1e62a91e1fb432438ce985d712512131d76b7993eed4be3796d143628d3dd0d1a0efbfaf923f701e44357f8ab246ad3457210a6c19e17c6b7db80d7041ba3d791a10e7e4acc8e2136641b0ee2e1c7e2c4f0d9ffd0d0fac6ad4a443951463a58c0918f321623ba4e710596cca93c94eb058f83cafd16ea3d499a371705f7cdc9658ba5641e3fde8895b579e33d02b4d714e628") write$cgroup_subtree(r9, &(0x7f0000002900)={[{0x2b, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'rlimit'}, {0x2d, 'io'}]}, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002940)) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000002980)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r7, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000029c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000002a00)=[0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0], 0x0, 0xed, &(0x7f0000002a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10) 484.864247ms ago: executing program 1 (id=2879): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="13400000010000000000000000000000000000000000000000000000484073a20728b0ea8849ce85e60bf90376858953a3c1cd68762f"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) 484.690297ms ago: executing program 2 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18, 0x0, @void, @value, @void, @value}, 0x48) 350.689348ms ago: executing program 3 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) 299.924928ms ago: executing program 2 (id=2882): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100020, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) gettid() (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x8, 0xc000, 0x2059, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x180, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000343563221a730f95097246942b59b27145e275383f15293298bf", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030007000000008500000083000000bf0900000000000055090100000000009500000500000000bf91000000000000b7020000000000008500000084000000b7000000000000009550857f0a45c504e795e71b25540c9ca4282b4a7ecfb9"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 298.001148ms ago: executing program 3 (id=2883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r1, r7}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0100c3201000"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb4, 0x7ff}, 0x0, 0x0, 0x0, 0x6, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 240.031979ms ago: executing program 2 (id=2884): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000065fadec0d091342400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES8=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00000000000000000082f9b74302424457700000"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 235.872039ms ago: executing program 3 (id=2885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74c30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4001, 0xc8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000ff0000000000000000ac1414aa"], 0xfdef) 174.617729ms ago: executing program 3 (id=2886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 174.075629ms ago: executing program 3 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000700007b8af8ff0000e5ff68a200000000000007020000f8ffffffb703000000000000b78500000057000000952234f7cfad5d4137a520f7d6cc3c8e13d81b58efe45214faf4565e77458bfd37747dc29a03effaffa5c294744c8bc734e288499e504c17c16100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c00000003000000010000000400000020000000", @ANYRES32=r0, @ANYBLOB="030000000000000000000000000000000000000076be464455f7b00fbbb7a99c7580868fc42e1e8c042d543c9ecac739ad73ec86eb1fcdc8ff305e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="09000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x3, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xda, &(0x7f0000000300)=""/218, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xa, 0x9, 0x8000}, 0x10, 0x0, r1, 0x0, &(0x7f00000006c0)=[r0, r6, r7, r0, r0, r0, r0], 0x0, 0x10, 0xfff, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x5, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000bc0)='GPL\x00', 0x2e13, 0xbd, &(0x7f0000000c00)=""/189, 0x41100, 0xa, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000cc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xa, 0x1, 0x1}, 0x10, 0x1608f, r3, 0x6, &(0x7f0000000d40)=[r7], &(0x7f0000000d80)=[{0x0, 0x3, 0x4, 0x2}, {0x1, 0x5, 0x0, 0xc}, {0x2, 0x3, 0x1, 0xb}, {0x2, 0x1, 0x4, 0x3}, {0x1, 0x5, 0x5, 0x9}, {0x0, 0x5, 0xf, 0x6}], 0x10, 0x32, @void, @value}, 0x94) openat$cgroup_int(r8, &(0x7f0000000ec0)='io.latency\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0], 0x0, 0xc4, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000013c0)='ext4_ext_convert_to_initialized_enter\x00', r11}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 150.761439ms ago: executing program 1 (id=2888): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 150.370419ms ago: executing program 1 (id=2889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 130.375589ms ago: executing program 3 (id=2890): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000e60d5000000a39403fb1e2dda6c000000000000004500000000d6a9dc8cc8f6603295cdef557ea4fecc651e2e78094ed1f343154287cba704a74c6c178d76a0bf3c6ba702beb6f23165ad5e3c202ce86e1f099abc77779ad748915801c09aad805adb57221dde4941d67e5aa53d4a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='/dev/net/tun\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='hrtimer_init\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x2000000c) 130.146219ms ago: executing program 1 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000b00)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x60380000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 1 (id=2892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400003c05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="29398bc7c79524090000000000190000f90000010000007270e1d41c977864e4b7972794e34a771d302cbc37407c1c985a013599cc467a63cac5c18d302b3e54138ebc3a8f007ac77f47deb2082ea17e8cdc45da7403d4ac92e4c619e629f0b475514780f1b7a82ec587671f3bc2ce5b7fe3e94af740e599b73ff7403f5a1e21459f1d8bc8f29d4893004bc31bc07c698dcbda4fd7b6e33280f1cb59dde04c5b646874916db5fc9492e07e403a3d8a89101e2c88b4c4b44f8b5de08e1949a6841cf134a290", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb4a4075260c558f3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000020000000200"/28], 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003ab410eb9bf76a740000000000000000000000004b0200000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r10}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): [ T30] audit: type=1400 audit(1732639835.524:70): avc: denied { setattr } for pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.384088][ T30] audit: type=1400 audit(1732639835.524:71): avc: denied { mounton } for pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.409111][ T30] audit: type=1400 audit(1732639835.524:72): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.416352][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.440767][ T30] audit: type=1400 audit(1732639835.604:73): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.465984][ T30] audit: type=1400 audit(1732639835.604:74): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.474118][ T285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.491714][ T30] audit: type=1400 audit(1732639835.634:75): avc: denied { read } for pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.989431][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.996283][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.003832][ T295] device bridge_slave_0 entered promiscuous mode [ 27.011510][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.018392][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.025558][ T295] device bridge_slave_1 entered promiscuous mode [ 27.096735][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.103953][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.116110][ T296] device bridge_slave_0 entered promiscuous mode [ 27.124556][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.131582][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.139660][ T296] device bridge_slave_1 entered promiscuous mode [ 27.151896][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.159006][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.166740][ T297] device bridge_slave_0 entered promiscuous mode [ 27.178385][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.185502][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.193153][ T297] device bridge_slave_1 entered promiscuous mode [ 27.258144][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.265085][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.272360][ T298] device bridge_slave_0 entered promiscuous mode [ 27.282469][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.289841][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.297944][ T298] device bridge_slave_1 entered promiscuous mode [ 27.351535][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.358406][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.365642][ T299] device bridge_slave_0 entered promiscuous mode [ 27.384808][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.391774][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.398993][ T299] device bridge_slave_1 entered promiscuous mode [ 27.459240][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.466105][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.473414][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.480158][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.532721][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.539588][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.546662][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.553494][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.571023][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.578707][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.586041][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.592875][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.606767][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.613661][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.620786][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.627728][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.652820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.662167][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.669303][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.676313][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.683662][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690944][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.698377][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.705550][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.713653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.720912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.740441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.748086][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.756019][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.762889][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.771171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.779570][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.787061][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.817818][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.826611][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.835107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.844115][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.852339][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.860494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.868628][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.875657][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.882972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.891211][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.898239][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.905521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.913748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.921652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.929485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.939454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.947895][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.954867][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.972254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.980651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.988964][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.999266][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.018807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.027705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.042440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.049891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.066028][ T295] device veth0_vlan entered promiscuous mode [ 28.074994][ T297] device veth0_vlan entered promiscuous mode [ 28.081605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.090133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.098146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.106159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.114815][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.123021][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.131671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.139759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.147816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.155652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.164351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.172186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.179687][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.187463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.202265][ T295] device veth1_macvtap entered promiscuous mode [ 28.212049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.220924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.230224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.241070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.249428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.258211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.267055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.274899][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.283342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.291504][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.298432][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.305768][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.316196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.324444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.333909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.342400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.350765][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.357630][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.369171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.377278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.391539][ T296] device veth0_vlan entered promiscuous mode [ 28.397795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.405509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.417986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.425309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.432667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.442255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.450849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.458964][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.470442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.478672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.487512][ T297] device veth1_macvtap entered promiscuous mode [ 28.504029][ T298] device veth0_vlan entered promiscuous mode [ 28.510100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.517872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.525849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.534270][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.542182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.550173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.557491][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.583360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.598159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.606799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.617928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.625976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.634231][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.642222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.652225][ T296] device veth1_macvtap entered promiscuous mode [ 28.661210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.669621][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.719175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.728474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.736423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.747777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.755536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.766507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.775185][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.784355][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.804661][ T298] device veth1_macvtap entered promiscuous mode [ 28.828036][ T299] device veth0_vlan entered promiscuous mode [ 28.848201][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.856871][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.868648][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.877888][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.895299][ T299] device veth1_macvtap entered promiscuous mode [ 28.943273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.957156][ C1] hrtimer: interrupt took 28434 ns [ 28.979416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.988233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.999731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.050712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.250148][ T343] device veth0_vlan left promiscuous mode [ 29.305611][ T343] device veth0_vlan entered promiscuous mode [ 31.510649][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 31.510663][ T30] audit: type=1400 audit(1732639840.674:111): avc: denied { write } for pid=380 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.883468][ T30] audit: type=1400 audit(1732639840.714:112): avc: denied { setopt } for pid=380 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.062756][ T30] audit: type=1400 audit(1732639840.864:113): avc: denied { create } for pid=378 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.377762][ T30] audit: type=1400 audit(1732639841.544:114): avc: denied { ioctl } for pid=398 comm="syz.0.23" path="/dev/ppp" dev="devtmpfs" ino=150 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.814504][ T30] audit: type=1400 audit(1732639842.974:115): avc: denied { write } for pid=417 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.859504][ T418] €Â0: renamed from pim6reg1 [ 34.693134][ T30] audit: type=1400 audit(1732639843.834:116): avc: denied { cpu } for pid=436 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.340483][ T30] audit: type=1400 audit(1732639844.504:117): avc: denied { create } for pid=441 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 36.233916][ T30] audit: type=1400 audit(1732639845.394:118): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.854251][ T30] audit: type=1400 audit(1732639848.014:119): avc: denied { write } for pid=484 comm="syz.0.50" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.499017][ T30] audit: type=1400 audit(1732639848.664:120): avc: denied { create } for pid=513 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.483242][ T30] audit: type=1400 audit(1732639849.644:121): avc: denied { create } for pid=558 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.645713][ T663] device veth0_vlan left promiscuous mode [ 42.652003][ T663] device veth0_vlan entered promiscuous mode [ 43.272831][ T30] audit: type=1400 audit(1732639852.434:122): avc: denied { create } for pid=700 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.970134][ T775] Â: renamed from pim6reg1 [ 44.772327][ T30] audit: type=1400 audit(1732639853.934:123): avc: denied { create } for pid=800 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.973721][ T845] device syzkaller0 entered promiscuous mode [ 46.050504][ T850] device syzkaller0 entered promiscuous mode [ 46.060217][ T30] audit: type=1400 audit(1732639855.224:124): avc: denied { relabelfrom } for pid=847 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.103093][ T853] device pim6reg1 entered promiscuous mode [ 46.164833][ T30] audit: type=1400 audit(1732639855.244:125): avc: denied { relabelto } for pid=847 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.315055][ T890] FAULT_INJECTION: forcing a failure. [ 47.315055][ T890] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.367465][ T890] CPU: 0 PID: 890 Comm: syz.3.199 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 47.377115][ T890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.387005][ T890] Call Trace: [ 47.390122][ T890] [ 47.392983][ T890] dump_stack_lvl+0x151/0x1c0 [ 47.397502][ T890] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.402976][ T890] ? __kasan_check_write+0x14/0x20 [ 47.407922][ T890] dump_stack+0x15/0x20 [ 47.411907][ T890] should_fail+0x3c6/0x510 [ 47.416161][ T890] should_fail_usercopy+0x1a/0x20 [ 47.421021][ T890] _copy_from_user+0x20/0xd0 [ 47.425453][ T890] sock_do_ioctl+0x229/0x5a0 [ 47.429964][ T890] ? sock_show_fdinfo+0xa0/0xa0 [ 47.434680][ T890] ? selinux_file_ioctl+0x3cc/0x540 [ 47.439688][ T890] sock_ioctl+0x455/0x740 [ 47.443847][ T890] ? sock_poll+0x400/0x400 [ 47.448109][ T890] ? __fget_files+0x31e/0x380 [ 47.452621][ T890] ? security_file_ioctl+0x84/0xb0 [ 47.457562][ T890] ? sock_poll+0x400/0x400 [ 47.461814][ T890] __se_sys_ioctl+0x114/0x190 [ 47.466330][ T890] __x64_sys_ioctl+0x7b/0x90 [ 47.470846][ T890] x64_sys_call+0x98/0x9a0 [ 47.475100][ T890] do_syscall_64+0x3b/0xb0 [ 47.479356][ T890] ? clear_bhb_loop+0x35/0x90 [ 47.483862][ T890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.489596][ T890] RIP: 0033:0x7f8168370919 [ 47.493840][ T890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.513317][ T890] RSP: 002b:00007f81669e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.521653][ T890] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f8168370919 [ 47.529597][ T890] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 47.537412][ T890] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 47.545224][ T890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.553031][ T890] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 47.560851][ T890] [ 47.655807][ T891] device sit0 entered promiscuous mode [ 47.702765][ T30] audit: type=1400 audit(1732639856.864:126): avc: denied { read } for pid=889 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.875926][ T30] audit: type=1400 audit(1732639857.034:127): avc: denied { create } for pid=900 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.383280][ T928] device veth1_macvtap left promiscuous mode [ 49.043186][ T30] audit: type=1400 audit(1732639858.204:128): avc: denied { create } for pid=951 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.960692][ T1013] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 51.543818][ T1028] device pim6reg1 entered promiscuous mode [ 51.945932][ T30] audit: type=1400 audit(1732639861.104:129): avc: denied { create } for pid=1032 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.116936][ T1075] device sit0 left promiscuous mode [ 56.509041][ T1200] syz.3.320 (1200) used greatest stack depth: 21080 bytes left [ 58.838946][ T1351] tap0: tun_chr_ioctl cmd 1074025681 [ 59.413175][ T1378] device pim6reg1 entered promiscuous mode [ 61.140381][ T1416] device syzkaller0 entered promiscuous mode [ 61.626784][ T1441] device pim6reg1 entered promiscuous mode [ 63.302779][ T1484] FAULT_INJECTION: forcing a failure. [ 63.302779][ T1484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.337397][ T1484] CPU: 0 PID: 1484 Comm: syz.0.427 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 63.348990][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.359849][ T1484] Call Trace: [ 63.363391][ T1484] [ 63.369189][ T1484] dump_stack_lvl+0x151/0x1c0 [ 63.374696][ T1484] ? io_uring_drop_tctx_refs+0x190/0x190 [ 63.380285][ T1484] dump_stack+0x15/0x20 [ 63.384345][ T1484] should_fail+0x3c6/0x510 [ 63.392903][ T1484] should_fail_usercopy+0x1a/0x20 [ 63.399765][ T1484] _copy_to_user+0x20/0x90 [ 63.404128][ T1484] simple_read_from_buffer+0xc7/0x150 [ 63.410819][ T1484] proc_fail_nth_read+0x1a3/0x210 [ 63.415855][ T1484] ? proc_fault_inject_write+0x390/0x390 [ 63.421898][ T1484] ? fsnotify_perm+0x269/0x5b0 [ 63.427400][ T1484] ? security_file_permission+0x86/0xb0 [ 63.434331][ T1484] ? proc_fault_inject_write+0x390/0x390 [ 63.441877][ T1484] vfs_read+0x27d/0xd40 [ 63.447762][ T1484] ? sock_show_fdinfo+0xa0/0xa0 [ 63.454101][ T1484] ? kernel_read+0x1f0/0x1f0 [ 63.459665][ T1484] ? __kasan_check_write+0x14/0x20 [ 63.465451][ T1484] ? mutex_lock+0xb6/0x1e0 [ 63.470614][ T1484] ? wait_for_completion_killable_timeout+0x10/0x10 [ 63.478926][ T1484] ? __fdget_pos+0x2e7/0x3a0 [ 63.484409][ T1484] ? ksys_read+0x77/0x2c0 [ 63.489609][ T1484] ksys_read+0x199/0x2c0 [ 63.494212][ T1484] ? vfs_write+0x1110/0x1110 [ 63.499812][ T1484] ? debug_smp_processor_id+0x17/0x20 [ 63.505660][ T1484] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 63.511901][ T1484] __x64_sys_read+0x7b/0x90 [ 63.517741][ T1484] x64_sys_call+0x28/0x9a0 [ 63.522850][ T1484] do_syscall_64+0x3b/0xb0 [ 63.527438][ T1484] ? clear_bhb_loop+0x35/0x90 [ 63.532308][ T1484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.538556][ T1484] RIP: 0033:0x7f7d56df635c [ 63.543068][ T1484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 63.563463][ T1484] RSP: 002b:00007f7d55470030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.572294][ T1484] RAX: ffffffffffffffda RBX: 00007f7d56faefa0 RCX: 00007f7d56df635c [ 63.580763][ T1484] RDX: 000000000000000f RSI: 00007f7d554700a0 RDI: 0000000000000009 [ 63.589004][ T1484] RBP: 00007f7d55470090 R08: 0000000000000000 R09: 0000000000000000 [ 63.596830][ T1484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.604894][ T1484] R13: 0000000000000000 R14: 00007f7d56faefa0 R15: 00007fffccf1f158 [ 63.613150][ T1484] [ 63.753045][ T1492] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.761814][ T1492] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.896954][ T1504] FAULT_INJECTION: forcing a failure. [ 63.896954][ T1504] name failslab, interval 1, probability 0, space 0, times 1 [ 63.926201][ T1504] CPU: 0 PID: 1504 Comm: syz.2.435 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 63.937767][ T1504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.948117][ T1504] Call Trace: [ 63.951429][ T1504] [ 63.954353][ T1504] dump_stack_lvl+0x151/0x1c0 [ 63.959625][ T1504] ? io_uring_drop_tctx_refs+0x190/0x190 [ 63.965506][ T1504] dump_stack+0x15/0x20 [ 63.969610][ T1504] should_fail+0x3c6/0x510 [ 63.974412][ T1504] __should_failslab+0xa4/0xe0 [ 63.979112][ T1504] ? vm_area_dup+0x26/0x230 [ 63.983678][ T1504] should_failslab+0x9/0x20 [ 63.989353][ T1504] slab_pre_alloc_hook+0x37/0xd0 [ 63.994317][ T1504] ? vm_area_dup+0x26/0x230 [ 63.998657][ T1504] kmem_cache_alloc+0x44/0x200 [ 64.003645][ T1504] vm_area_dup+0x26/0x230 [ 64.009303][ T1504] copy_mm+0x9a1/0x13e0 [ 64.015362][ T1504] ? copy_signal+0x610/0x610 [ 64.020127][ T1504] ? __init_rwsem+0xfe/0x1d0 [ 64.026537][ T1504] ? copy_signal+0x4e3/0x610 [ 64.032201][ T1504] copy_process+0x1149/0x3290 [ 64.036835][ T1504] ? __kasan_check_write+0x14/0x20 [ 64.042458][ T1504] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 64.047800][ T1504] ? vfs_write+0x94d/0x1110 [ 64.052495][ T1504] kernel_clone+0x21e/0x9e0 [ 64.057052][ T1504] ? __kasan_check_write+0x14/0x20 [ 64.063226][ T1504] ? create_io_thread+0x1e0/0x1e0 [ 64.069000][ T1504] __x64_sys_clone+0x23f/0x290 [ 64.073729][ T1504] ? __do_sys_vfork+0x130/0x130 [ 64.079606][ T1504] ? debug_smp_processor_id+0x17/0x20 [ 64.085081][ T1504] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 64.091398][ T1504] ? exit_to_user_mode_prepare+0x39/0xa0 [ 64.096863][ T1504] x64_sys_call+0x1b0/0x9a0 [ 64.101488][ T1504] do_syscall_64+0x3b/0xb0 [ 64.106074][ T1504] ? clear_bhb_loop+0x35/0x90 [ 64.110880][ T1504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.116783][ T1504] RIP: 0033:0x7fe7d97ab919 [ 64.121227][ T1504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.142235][ T1504] RSP: 002b:00007fe7d7e23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 64.151012][ T1504] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 64.159227][ T1504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.167713][ T1504] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 64.175969][ T1504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.184156][ T1504] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 64.192541][ T1504] [ 65.638472][ T1592] device sit0 entered promiscuous mode [ 66.458232][ T1585] device veth0_vlan left promiscuous mode [ 66.483595][ T1585] device veth0_vlan entered promiscuous mode [ 66.823856][ T30] audit: type=1400 audit(1732639875.984:130): avc: denied { create } for pid=1652 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.325833][ T1677] device sit0 left promiscuous mode [ 68.813648][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.832818][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.095681][ T30] audit: type=1400 audit(1732639880.254:131): avc: denied { create } for pid=1788 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.604927][ T30] audit: type=1400 audit(1732639881.764:132): avc: denied { create } for pid=1825 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.245950][ T1835] device syzkaller0 entered promiscuous mode [ 73.302650][ T30] audit: type=1400 audit(1732639882.464:133): avc: denied { create } for pid=1838 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.569092][ T30] audit: type=1400 audit(1732639882.504:134): avc: denied { write } for pid=1838 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.694917][ T30] audit: type=1400 audit(1732639882.504:135): avc: denied { setopt } for pid=1838 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.974570][ T30] audit: type=1400 audit(1732639884.134:136): avc: denied { create } for pid=1862 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.340735][ T1967] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.358533][ T1967] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.386130][ T1977] syz.3.611[1977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.386198][ T1977] syz.3.611[1977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.424303][ T1976] syz.3.611[1976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.450682][ T1976] syz.3.611[1976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.540911][ T1979] device sit0 entered promiscuous mode [ 80.196487][ T1996] device sit0 left promiscuous mode [ 81.187203][ T30] audit: type=1400 audit(1732639890.344:137): avc: denied { read } for pid=2009 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.704202][ T30] audit: type=1400 audit(1732639890.864:138): avc: denied { create } for pid=2032 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.865501][ T2117] syz.4.658[2117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.865570][ T2117] syz.4.658[2117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.444219][ T2188] device veth0_vlan left promiscuous mode [ 86.616439][ T2188] device veth0_vlan entered promiscuous mode [ 86.738998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.811607][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.912614][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.120998][ T2204] device syzkaller0 entered promiscuous mode [ 90.819168][ T2291] syz.1.713[2291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.819243][ T2291] syz.1.713[2291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.037580][ T2343] syz.2.730[2343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.172789][ T2343] syz.2.730[2343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.360138][ T2343] device sit0 entered promiscuous mode [ 94.790921][ T2392] device pim6reg1 entered promiscuous mode [ 95.928394][ T2427] FAULT_INJECTION: forcing a failure. [ 95.928394][ T2427] name failslab, interval 1, probability 0, space 0, times 0 [ 95.952430][ T30] audit: type=1400 audit(1732639905.114:139): avc: denied { create } for pid=2428 comm="syz.4.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.047487][ T2427] CPU: 1 PID: 2427 Comm: syz.0.762 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 96.057509][ T2427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.067549][ T2427] Call Trace: [ 96.070670][ T2427] [ 96.073454][ T2427] dump_stack_lvl+0x151/0x1c0 [ 96.078047][ T2427] ? io_uring_drop_tctx_refs+0x190/0x190 [ 96.083663][ T2427] dump_stack+0x15/0x20 [ 96.087606][ T2427] should_fail+0x3c6/0x510 [ 96.091848][ T2427] __should_failslab+0xa4/0xe0 [ 96.096621][ T2427] ? vm_area_dup+0x26/0x230 [ 96.100957][ T2427] should_failslab+0x9/0x20 [ 96.105297][ T2427] slab_pre_alloc_hook+0x37/0xd0 [ 96.110655][ T2427] ? vm_area_dup+0x26/0x230 [ 96.115147][ T2427] kmem_cache_alloc+0x44/0x200 [ 96.120463][ T2427] vm_area_dup+0x26/0x230 [ 96.124693][ T2427] copy_mm+0x9a1/0x13e0 [ 96.129437][ T2427] ? copy_signal+0x610/0x610 [ 96.134018][ T2427] ? __init_rwsem+0xfe/0x1d0 [ 96.139004][ T2427] ? copy_signal+0x4e3/0x610 [ 96.143726][ T2427] copy_process+0x1149/0x3290 [ 96.148907][ T2427] ? __kasan_check_write+0x14/0x20 [ 96.154136][ T2427] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 96.159336][ T2427] ? vfs_write+0x94d/0x1110 [ 96.163760][ T2427] kernel_clone+0x21e/0x9e0 [ 96.168295][ T2427] ? __kasan_check_write+0x14/0x20 [ 96.173437][ T2427] ? create_io_thread+0x1e0/0x1e0 [ 96.178715][ T2427] __x64_sys_clone+0x23f/0x290 [ 96.184617][ T2427] ? __do_sys_vfork+0x130/0x130 [ 96.190160][ T2427] ? debug_smp_processor_id+0x17/0x20 [ 96.196957][ T2427] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 96.206072][ T2427] ? exit_to_user_mode_prepare+0x39/0xa0 [ 96.213378][ T2427] x64_sys_call+0x1b0/0x9a0 [ 96.219356][ T2427] do_syscall_64+0x3b/0xb0 [ 96.224356][ T2427] ? clear_bhb_loop+0x35/0x90 [ 96.230050][ T2427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.236393][ T2427] RIP: 0033:0x7f7d56df7919 [ 96.240995][ T2427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.261818][ T2427] RSP: 002b:00007f7d5546ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 96.270455][ T2427] RAX: ffffffffffffffda RBX: 00007f7d56faefa0 RCX: 00007f7d56df7919 [ 96.278704][ T2427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.286696][ T2427] RBP: 00007f7d55470090 R08: 0000000000000000 R09: 0000000000000000 [ 96.294672][ T2427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.303276][ T2427] R13: 0000000000000000 R14: 00007f7d56faefa0 R15: 00007fffccf1f158 [ 96.312326][ T2427] [ 98.514962][ T2513] device sit0 left promiscuous mode [ 98.883392][ T2509] device sit0 entered promiscuous mode [ 99.951284][ T2534] device sit0 left promiscuous mode [ 100.959003][ T2557] geneve1: tun_chr_ioctl cmd 1074025672 [ 101.014695][ T2557] geneve1: ignored: set checksum enabled [ 102.444700][ T2577] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.339470][ T30] audit: type=1400 audit(1732639913.504:140): avc: denied { ioctl } for pid=2629 comm="syz.2.834" path="socket:[22917]" dev="sockfs" ino=22917 ioctlcmd=0x54da scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.257601][ T2662] device pim6reg1 entered promiscuous mode [ 106.409796][ T2706] device sit0 entered promiscuous mode [ 106.442759][ T2708] FAULT_INJECTION: forcing a failure. [ 106.442759][ T2708] name failslab, interval 1, probability 0, space 0, times 0 [ 106.611794][ T2708] CPU: 1 PID: 2708 Comm: syz.0.862 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 106.622053][ T2708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.633613][ T2708] Call Trace: [ 106.636914][ T2708] [ 106.640473][ T2708] dump_stack_lvl+0x151/0x1c0 [ 106.645246][ T2708] ? io_uring_drop_tctx_refs+0x190/0x190 [ 106.651663][ T2708] dump_stack+0x15/0x20 [ 106.655813][ T2708] should_fail+0x3c6/0x510 [ 106.660165][ T2708] __should_failslab+0xa4/0xe0 [ 106.664764][ T2708] ? vm_area_dup+0x26/0x230 [ 106.669104][ T2708] should_failslab+0x9/0x20 [ 106.673434][ T2708] slab_pre_alloc_hook+0x37/0xd0 [ 106.678302][ T2708] ? vm_area_dup+0x26/0x230 [ 106.682784][ T2708] kmem_cache_alloc+0x44/0x200 [ 106.687368][ T2708] vm_area_dup+0x26/0x230 [ 106.691622][ T2708] copy_mm+0x9a1/0x13e0 [ 106.695617][ T2708] ? copy_signal+0x610/0x610 [ 106.700045][ T2708] ? __init_rwsem+0xfe/0x1d0 [ 106.704470][ T2708] ? copy_signal+0x4e3/0x610 [ 106.708903][ T2708] copy_process+0x1149/0x3290 [ 106.713593][ T2708] ? __kasan_check_write+0x14/0x20 [ 106.718542][ T2708] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 106.723481][ T2708] ? vfs_write+0x94d/0x1110 [ 106.727912][ T2708] kernel_clone+0x21e/0x9e0 [ 106.732271][ T2708] ? __kasan_check_write+0x14/0x20 [ 106.737323][ T2708] ? create_io_thread+0x1e0/0x1e0 [ 106.742196][ T2708] __x64_sys_clone+0x23f/0x290 [ 106.746780][ T2708] ? __do_sys_vfork+0x130/0x130 [ 106.751555][ T2708] ? debug_smp_processor_id+0x17/0x20 [ 106.757889][ T2708] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 106.763900][ T2708] ? exit_to_user_mode_prepare+0x39/0xa0 [ 106.769435][ T2708] x64_sys_call+0x1b0/0x9a0 [ 106.773865][ T2708] do_syscall_64+0x3b/0xb0 [ 106.778138][ T2708] ? clear_bhb_loop+0x35/0x90 [ 106.782625][ T2708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.788357][ T2708] RIP: 0033:0x7f7d56df7919 [ 106.792609][ T2708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.812313][ T2708] RSP: 002b:00007f7d5546ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 106.820659][ T2708] RAX: ffffffffffffffda RBX: 00007f7d56faefa0 RCX: 00007f7d56df7919 [ 106.828577][ T2708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.836368][ T2708] RBP: 00007f7d55470090 R08: 0000000000000000 R09: 0000000000000000 [ 106.844178][ T2708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.852002][ T2708] R13: 0000000000000000 R14: 00007f7d56faefa0 R15: 00007fffccf1f158 [ 106.860141][ T2708] [ 107.378403][ T2726] device syzkaller0 entered promiscuous mode [ 111.472468][ T30] audit: type=1400 audit(1732639920.634:141): avc: denied { append } for pid=2837 comm="syz.4.907" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.866469][ T30] audit: type=1400 audit(1732639922.024:142): avc: denied { create } for pid=2890 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.550226][ T2959] device sit0 left promiscuous mode [ 114.831854][ T2977] device veth0_vlan left promiscuous mode [ 114.840678][ T2977] device veth0_vlan entered promiscuous mode [ 114.966783][ T30] audit: type=1400 audit(1732639924.124:143): avc: denied { create } for pid=2994 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.985070][ T3033] device pim6reg1 entered promiscuous mode [ 120.116353][ T3166] FAULT_INJECTION: forcing a failure. [ 120.116353][ T3166] name failslab, interval 1, probability 0, space 0, times 0 [ 120.182498][ T3166] CPU: 1 PID: 3166 Comm: syz.2.1029 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 120.192858][ T3166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.202847][ T3166] Call Trace: [ 120.206057][ T3166] [ 120.208835][ T3166] dump_stack_lvl+0x151/0x1c0 [ 120.213534][ T3166] ? io_uring_drop_tctx_refs+0x190/0x190 [ 120.219086][ T3166] dump_stack+0x15/0x20 [ 120.223159][ T3166] should_fail+0x3c6/0x510 [ 120.227449][ T3166] __should_failslab+0xa4/0xe0 [ 120.232019][ T3166] ? anon_vma_clone+0x9a/0x500 [ 120.236798][ T3166] should_failslab+0x9/0x20 [ 120.241415][ T3166] slab_pre_alloc_hook+0x37/0xd0 [ 120.246181][ T3166] ? anon_vma_clone+0x9a/0x500 [ 120.251234][ T3166] kmem_cache_alloc+0x44/0x200 [ 120.256530][ T3166] anon_vma_clone+0x9a/0x500 [ 120.261124][ T3166] anon_vma_fork+0x91/0x4e0 [ 120.266950][ T3166] ? anon_vma_name+0x43/0x70 [ 120.271353][ T3166] ? vm_area_dup+0x17a/0x230 [ 120.275863][ T3166] copy_mm+0xa3a/0x13e0 [ 120.279860][ T3166] ? copy_signal+0x610/0x610 [ 120.284296][ T3166] ? __init_rwsem+0xfe/0x1d0 [ 120.288974][ T3166] ? copy_signal+0x4e3/0x610 [ 120.293547][ T3166] copy_process+0x1149/0x3290 [ 120.298023][ T3166] ? __kasan_check_write+0x14/0x20 [ 120.303036][ T3166] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 120.308003][ T3166] ? vfs_write+0x94d/0x1110 [ 120.312363][ T3166] kernel_clone+0x21e/0x9e0 [ 120.316677][ T3166] ? __kasan_check_write+0x14/0x20 [ 120.321693][ T3166] ? create_io_thread+0x1e0/0x1e0 [ 120.327004][ T3166] __x64_sys_clone+0x23f/0x290 [ 120.331692][ T3166] ? __do_sys_vfork+0x130/0x130 [ 120.336758][ T3166] ? debug_smp_processor_id+0x17/0x20 [ 120.342267][ T3166] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 120.348164][ T3166] ? exit_to_user_mode_prepare+0x39/0xa0 [ 120.353891][ T3166] x64_sys_call+0x1b0/0x9a0 [ 120.358238][ T3166] do_syscall_64+0x3b/0xb0 [ 120.362572][ T3166] ? clear_bhb_loop+0x35/0x90 [ 120.367106][ T3166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.373120][ T3166] RIP: 0033:0x7fe7d97ab919 [ 120.377436][ T3166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.397152][ T3166] RSP: 002b:00007fe7d7e23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 120.405560][ T3166] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 120.413365][ T3166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.421186][ T3166] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 120.428986][ T3166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.436803][ T3166] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 120.444621][ T3166] [ 120.474062][ T30] audit: type=1400 audit(1732639929.634:144): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.587300][ T30] audit: type=1400 audit(1732639929.634:145): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.658054][ T3212] device pim6reg1 entered promiscuous mode [ 122.125230][ T3229] FAULT_INJECTION: forcing a failure. [ 122.125230][ T3229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.178923][ T3229] CPU: 1 PID: 3229 Comm: syz.3.1052 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 122.190272][ T3229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.202107][ T3229] Call Trace: [ 122.205906][ T3229] [ 122.208779][ T3229] dump_stack_lvl+0x151/0x1c0 [ 122.213829][ T3229] ? io_uring_drop_tctx_refs+0x190/0x190 [ 122.219837][ T3229] ? dump_stack+0x9/0x20 [ 122.224163][ T3229] dump_stack+0x15/0x20 [ 122.228393][ T3229] should_fail+0x3c6/0x510 [ 122.232998][ T3229] should_fail_usercopy+0x1a/0x20 [ 122.238296][ T3229] _copy_from_user+0x20/0xd0 [ 122.243248][ T3229] __sys_bpf+0x1e9/0x760 [ 122.248338][ T3229] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 122.254101][ T3229] ? __kasan_check_write+0x14/0x20 [ 122.259390][ T3229] ? switch_fpu_return+0x15f/0x2e0 [ 122.264417][ T3229] __x64_sys_bpf+0x7c/0x90 [ 122.268943][ T3229] x64_sys_call+0x87f/0x9a0 [ 122.273575][ T3229] do_syscall_64+0x3b/0xb0 [ 122.278051][ T3229] ? clear_bhb_loop+0x35/0x90 [ 122.282884][ T3229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.289889][ T3229] RIP: 0033:0x7f8168370919 [ 122.294588][ T3229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.317002][ T3229] RSP: 002b:00007f81669e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.325730][ T3229] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f8168370919 [ 122.334053][ T3229] RDX: 0000000000000080 RSI: 0000000020003480 RDI: 0000000000000005 [ 122.342647][ T3229] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 122.350629][ T3229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.358422][ T3229] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 122.366240][ T3229] [ 124.708325][ T3320] device pim6reg1 entered promiscuous mode [ 125.318849][ T3363] bridge0: port 3(veth0_to_batadv) entered blocking state [ 125.361882][ T3363] bridge0: port 3(veth0_to_batadv) entered disabled state [ 125.398823][ T3363] device veth0_to_batadv entered promiscuous mode [ 125.407574][ T3363] bridge0: port 3(veth0_to_batadv) entered blocking state [ 125.414609][ T3363] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 125.428966][ T3372] device veth0_to_batadv left promiscuous mode [ 125.439790][ T3372] bridge0: port 3(veth0_to_batadv) entered disabled state [ 126.788970][ T3443] device pim6reg1 entered promiscuous mode [ 127.265647][ T30] audit: type=1400 audit(1732639936.424:146): avc: denied { ioctl } for pid=3457 comm="syz.2.1142" path="pid:[4026532460]" dev="nsfs" ino=4026532460 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.576920][ T3536] device syzkaller0 entered promiscuous mode [ 134.409103][ T3616] device pim6reg1 entered promiscuous mode [ 134.416278][ T101] udevd[101]: worker [531] terminated by signal 33 (Unknown signal 33) [ 134.454189][ T101] udevd[101]: worker [531] failed while handling '/devices/virtual/block/loop2' [ 134.492910][ T3627] device syzkaller0 entered promiscuous mode [ 135.033222][ T3639] device pim6reg1 entered promiscuous mode [ 137.007089][ C1] sched: RT throttling activated [ 138.160211][ T3659] €Â0: renamed from pim6reg1 [ 138.498023][ T3684] syz.3.1224[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.498086][ T3684] syz.3.1224[3684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.613118][ T3693] device pim6reg1 entered promiscuous mode [ 138.645950][ T3692] device pim6reg1 entered promiscuous mode [ 141.595221][ T3802] FAULT_INJECTION: forcing a failure. [ 141.595221][ T3802] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 141.874550][ T3802] CPU: 1 PID: 3802 Comm: syz.2.1264 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 141.884293][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.894190][ T3802] Call Trace: [ 141.897307][ T3802] [ 141.900087][ T3802] dump_stack_lvl+0x151/0x1c0 [ 141.904619][ T3802] ? io_uring_drop_tctx_refs+0x190/0x190 [ 141.910157][ T3802] ? __this_cpu_preempt_check+0x13/0x20 [ 141.915536][ T3802] ? trace_call_bpf+0x3f8/0x470 [ 141.920229][ T3802] dump_stack+0x15/0x20 [ 141.924222][ T3802] should_fail+0x3c6/0x510 [ 141.928468][ T3802] should_fail_alloc_page+0x5a/0x80 [ 141.933510][ T3802] prepare_alloc_pages+0x15c/0x700 [ 141.938455][ T3802] ? __alloc_pages_bulk+0xe40/0xe40 [ 141.943484][ T3802] ? perf_trace_mm_page_alloc+0xff/0x140 [ 141.948954][ T3802] __alloc_pages+0x18c/0x8f0 [ 141.953400][ T3802] ? prep_new_page+0x110/0x110 [ 141.957978][ T3802] ? __mod_node_page_state+0xac/0xf0 [ 141.963108][ T3802] pte_alloc_one+0x73/0x1b0 [ 141.967453][ T3802] ? pfn_modify_allowed+0x2f0/0x2f0 [ 141.972474][ T3802] ? arch_stack_walk+0xf3/0x140 [ 141.977162][ T3802] __pte_alloc+0x86/0x350 [ 141.981327][ T3802] ? free_pgtables+0x280/0x280 [ 141.985927][ T3802] ? _raw_spin_lock+0xa4/0x1b0 [ 141.990539][ T3802] ? __kasan_check_write+0x14/0x20 [ 141.995474][ T3802] copy_page_range+0x28a8/0x2f90 [ 142.000249][ T3802] ? __kasan_slab_alloc+0xb1/0xe0 [ 142.005162][ T3802] ? pfn_valid+0x1e0/0x1e0 [ 142.009368][ T3802] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 142.014917][ T3802] ? __rb_insert_augmented+0x5de/0x610 [ 142.020215][ T3802] copy_mm+0xc7e/0x13e0 [ 142.024207][ T3802] ? copy_signal+0x610/0x610 [ 142.028627][ T3802] ? __init_rwsem+0xfe/0x1d0 [ 142.033175][ T3802] ? copy_signal+0x4e3/0x610 [ 142.037569][ T3802] copy_process+0x1149/0x3290 [ 142.042087][ T3802] ? __kasan_check_write+0x14/0x20 [ 142.047035][ T3802] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 142.051977][ T3802] ? vfs_write+0x94d/0x1110 [ 142.056318][ T3802] kernel_clone+0x21e/0x9e0 [ 142.060668][ T3802] ? __kasan_check_write+0x14/0x20 [ 142.065616][ T3802] ? create_io_thread+0x1e0/0x1e0 [ 142.070562][ T3802] __x64_sys_clone+0x23f/0x290 [ 142.075152][ T3802] ? __do_sys_vfork+0x130/0x130 [ 142.079838][ T3802] ? debug_smp_processor_id+0x17/0x20 [ 142.085104][ T3802] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 142.090949][ T3802] ? exit_to_user_mode_prepare+0x39/0xa0 [ 142.096416][ T3802] x64_sys_call+0x1b0/0x9a0 [ 142.100755][ T3802] do_syscall_64+0x3b/0xb0 [ 142.105009][ T3802] ? clear_bhb_loop+0x35/0x90 [ 142.109522][ T3802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.115248][ T3802] RIP: 0033:0x7fe7d97ab919 [ 142.119503][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.138945][ T3802] RSP: 002b:00007fe7d7e23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 142.147189][ T3802] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 142.155001][ T3802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.162812][ T3802] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 142.170625][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.178435][ T3802] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 142.186254][ T3802] [ 142.535371][ T3845] device syzkaller0 entered promiscuous mode [ 142.743912][ T3869] FAULT_INJECTION: forcing a failure. [ 142.743912][ T3869] name failslab, interval 1, probability 0, space 0, times 0 [ 142.911646][ T3869] CPU: 1 PID: 3869 Comm: syz.3.1286 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 142.921388][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.931470][ T3869] Call Trace: [ 142.934604][ T3869] [ 142.937382][ T3869] dump_stack_lvl+0x151/0x1c0 [ 142.941892][ T3869] ? io_uring_drop_tctx_refs+0x190/0x190 [ 142.947361][ T3869] dump_stack+0x15/0x20 [ 142.951355][ T3869] should_fail+0x3c6/0x510 [ 142.955610][ T3869] __should_failslab+0xa4/0xe0 [ 142.960219][ T3869] should_failslab+0x9/0x20 [ 142.964547][ T3869] slab_pre_alloc_hook+0x37/0xd0 [ 142.969407][ T3869] kmem_cache_alloc_trace+0x48/0x210 [ 142.974530][ T3869] ? __get_vm_area_node+0x117/0x360 [ 142.979568][ T3869] ? __kasan_slab_free+0x11/0x20 [ 142.984340][ T3869] __get_vm_area_node+0x117/0x360 [ 142.989200][ T3869] __vmalloc_node_range+0xe2/0x8d0 [ 142.994144][ T3869] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 142.999520][ T3869] ? selinux_capset+0xf0/0xf0 [ 143.004213][ T3869] ? kstrtouint_from_user+0x20a/0x2a0 [ 143.009459][ T3869] ? kstrtol_from_user+0x310/0x310 [ 143.014407][ T3869] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 143.019796][ T3869] __vmalloc+0x7a/0x90 [ 143.023689][ T3869] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 143.029070][ T3869] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 143.034280][ T3869] ? bpf_prog_alloc+0x15/0x1e0 [ 143.038880][ T3869] bpf_prog_alloc+0x1f/0x1e0 [ 143.043306][ T3869] bpf_prog_load+0x800/0x1b50 [ 143.047820][ T3869] ? map_freeze+0x370/0x370 [ 143.052159][ T3869] ? selinux_bpf+0xcb/0x100 [ 143.056496][ T3869] ? security_bpf+0x82/0xb0 [ 143.060837][ T3869] __sys_bpf+0x4bc/0x760 [ 143.064913][ T3869] ? fput_many+0x160/0x1b0 [ 143.069172][ T3869] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 143.074379][ T3869] ? debug_smp_processor_id+0x17/0x20 [ 143.079585][ T3869] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 143.085486][ T3869] __x64_sys_bpf+0x7c/0x90 [ 143.089737][ T3869] x64_sys_call+0x87f/0x9a0 [ 143.094078][ T3869] do_syscall_64+0x3b/0xb0 [ 143.098327][ T3869] ? clear_bhb_loop+0x35/0x90 [ 143.102846][ T3869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.108571][ T3869] RIP: 0033:0x7f8168370919 [ 143.112827][ T3869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.132267][ T3869] RSP: 002b:00007f81669c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.140512][ T3869] RAX: ffffffffffffffda RBX: 00007f8168528080 RCX: 00007f8168370919 [ 143.148323][ T3869] RDX: 0000000000000080 RSI: 0000000020003480 RDI: 0000000000000005 [ 143.156136][ T3869] RBP: 00007f81669c8090 R08: 0000000000000000 R09: 0000000000000000 [ 143.163946][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.171758][ T3869] R13: 0000000000000001 R14: 00007f8168528080 R15: 00007ffd65d55a38 [ 143.179574][ T3869] [ 143.479259][ T3869] syz.3.1286: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 143.904663][ T3869] CPU: 0 PID: 3869 Comm: syz.3.1286 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 143.914395][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.924295][ T3869] Call Trace: [ 143.927414][ T3869] [ 143.930193][ T3869] dump_stack_lvl+0x151/0x1c0 [ 143.934706][ T3869] ? io_uring_drop_tctx_refs+0x190/0x190 [ 143.940176][ T3869] ? pr_cont_kernfs_name+0xf0/0x100 [ 143.945211][ T3869] dump_stack+0x15/0x20 [ 143.949205][ T3869] warn_alloc+0x21a/0x390 [ 143.953371][ T3869] ? zone_watermark_ok_safe+0x270/0x270 [ 143.958805][ T3869] ? irqentry_exit+0x30/0x40 [ 143.963177][ T3869] ? sysvec_reschedule_ipi+0x8c/0x160 [ 143.968383][ T3869] ? __vmalloc_node_range+0x2ab/0x8d0 [ 143.973595][ T3869] __vmalloc_node_range+0x2c1/0x8d0 [ 143.978624][ T3869] ? selinux_capset+0xf0/0xf0 [ 143.983139][ T3869] ? kstrtouint_from_user+0x20a/0x2a0 [ 143.988345][ T3869] ? kstrtol_from_user+0x310/0x310 [ 143.993294][ T3869] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 143.998673][ T3869] __vmalloc+0x7a/0x90 [ 144.002844][ T3869] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 144.008223][ T3869] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 144.013508][ T3869] ? bpf_prog_alloc+0x15/0x1e0 [ 144.018109][ T3869] bpf_prog_alloc+0x1f/0x1e0 [ 144.022532][ T3869] bpf_prog_load+0x800/0x1b50 [ 144.027050][ T3869] ? map_freeze+0x370/0x370 [ 144.031501][ T3869] ? selinux_bpf+0xcb/0x100 [ 144.035811][ T3869] ? security_bpf+0x82/0xb0 [ 144.040278][ T3869] __sys_bpf+0x4bc/0x760 [ 144.044366][ T3869] ? fput_many+0x160/0x1b0 [ 144.048714][ T3869] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 144.053918][ T3869] ? debug_smp_processor_id+0x17/0x20 [ 144.059124][ T3869] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 144.065032][ T3869] __x64_sys_bpf+0x7c/0x90 [ 144.069278][ T3869] x64_sys_call+0x87f/0x9a0 [ 144.073719][ T3869] do_syscall_64+0x3b/0xb0 [ 144.077958][ T3869] ? clear_bhb_loop+0x35/0x90 [ 144.082478][ T3869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.088297][ T3869] RIP: 0033:0x7f8168370919 [ 144.092539][ T3869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.111986][ T3869] RSP: 002b:00007f81669c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.120231][ T3869] RAX: ffffffffffffffda RBX: 00007f8168528080 RCX: 00007f8168370919 [ 144.128176][ T3869] RDX: 0000000000000080 RSI: 0000000020003480 RDI: 0000000000000005 [ 144.135981][ T3869] RBP: 00007f81669c8090 R08: 0000000000000000 R09: 0000000000000000 [ 144.143984][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.151869][ T3869] R13: 0000000000000001 R14: 00007f8168528080 R15: 00007ffd65d55a38 [ 144.159768][ T3869] [ 144.411172][ T3869] Mem-Info: [ 144.414360][ T3869] active_anon:89 inactive_anon:6082 isolated_anon:0 [ 144.414360][ T3869] active_file:15810 inactive_file:5549 isolated_file:0 [ 144.414360][ T3869] unevictable:0 dirty:103 writeback:0 [ 144.414360][ T3869] slab_reclaimable:7981 slab_unreclaimable:74253 [ 144.414360][ T3869] mapped:28337 shmem:269 pagetables:580 bounce:0 [ 144.414360][ T3869] kernel_misc_reclaimable:0 [ 144.414360][ T3869] free:1541238 free_pcp:26775 free_cma:0 [ 144.598215][ T3869] Node 0 active_anon:356kB inactive_anon:24228kB active_file:63240kB inactive_file:22196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113348kB dirty:412kB writeback:0kB shmem:876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4188kB pagetables:2320kB all_unreclaimable? no [ 144.729109][ T3869] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978964kB mlocked:0kB bounce:0kB free_pcp:4288kB local_pcp:0kB free_cma:0kB [ 145.011148][ T3869] lowmem_reserve[]: 0 3941 3941 [ 145.019318][ T3869] Normal free:3186984kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:360kB inactive_anon:24184kB active_file:63244kB inactive_file:22196kB unevictable:0kB writepending:440kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:103168kB local_pcp:50392kB free_cma:0kB [ 145.114131][ T3869] lowmem_reserve[]: 0 0 0 [ 145.119943][ T3869] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 145.136277][ T3869] Normal: 2146*4kB (UME) 1065*8kB (UME) 469*16kB (UME) 487*32kB (UME) 111*64kB (UME) 88*128kB (UME) 28*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 758*4096kB (M) = 3188928kB [ 145.217843][ T3869] 21577 total pagecache pages [ 145.271000][ T3869] 0 pages in swap cache [ 145.275046][ T3869] Swap cache stats: add 0, delete 0, find 0/0 [ 145.290894][ T3869] Free swap = 124996kB [ 145.295083][ T3869] Total swap = 124996kB [ 145.304224][ T3869] 2097051 pages RAM [ 145.316425][ T3869] 0 pages HighMem/MovableOnly [ 145.322971][ T3869] 343414 pages reserved [ 145.329972][ T3869] 0 pages cma reserved [ 146.098296][ T3952] device syzkaller0 entered promiscuous mode [ 153.477221][ T4142] FAULT_INJECTION: forcing a failure. [ 153.477221][ T4142] name failslab, interval 1, probability 0, space 0, times 0 [ 153.574545][ T4142] CPU: 0 PID: 4142 Comm: syz.3.1380 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 153.584286][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.594187][ T4142] Call Trace: [ 153.597320][ T4142] [ 153.600079][ T4142] dump_stack_lvl+0x151/0x1c0 [ 153.604603][ T4142] ? io_uring_drop_tctx_refs+0x190/0x190 [ 153.610063][ T4142] dump_stack+0x15/0x20 [ 153.614058][ T4142] should_fail+0x3c6/0x510 [ 153.618311][ T4142] __should_failslab+0xa4/0xe0 [ 153.622906][ T4142] ? vm_area_dup+0x26/0x230 [ 153.627245][ T4142] should_failslab+0x9/0x20 [ 153.631587][ T4142] slab_pre_alloc_hook+0x37/0xd0 [ 153.636360][ T4142] ? vm_area_dup+0x26/0x230 [ 153.640833][ T4142] kmem_cache_alloc+0x44/0x200 [ 153.645390][ T4142] vm_area_dup+0x26/0x230 [ 153.649552][ T4142] copy_mm+0x9a1/0x13e0 [ 153.653547][ T4142] ? copy_signal+0x610/0x610 [ 153.657967][ T4142] ? __init_rwsem+0xfe/0x1d0 [ 153.662399][ T4142] ? copy_signal+0x4e3/0x610 [ 153.666947][ T4142] copy_process+0x1149/0x3290 [ 153.671460][ T4142] ? __kasan_check_write+0x14/0x20 [ 153.676424][ T4142] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 153.681353][ T4142] ? vfs_write+0x94d/0x1110 [ 153.685697][ T4142] kernel_clone+0x21e/0x9e0 [ 153.690032][ T4142] ? __kasan_check_write+0x14/0x20 [ 153.694990][ T4142] ? create_io_thread+0x1e0/0x1e0 [ 153.699849][ T4142] __x64_sys_clone+0x23f/0x290 [ 153.704444][ T4142] ? __do_sys_vfork+0x130/0x130 [ 153.709139][ T4142] ? debug_smp_processor_id+0x17/0x20 [ 153.714334][ T4142] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 153.720236][ T4142] ? exit_to_user_mode_prepare+0x39/0xa0 [ 153.725708][ T4142] x64_sys_call+0x1b0/0x9a0 [ 153.730046][ T4142] do_syscall_64+0x3b/0xb0 [ 153.734298][ T4142] ? clear_bhb_loop+0x35/0x90 [ 153.738807][ T4142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.744539][ T4142] RIP: 0033:0x7f8168370919 [ 153.748790][ T4142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.768467][ T4142] RSP: 002b:00007f81669e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.776706][ T4142] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f8168370919 [ 153.784607][ T4142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.792521][ T4142] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 153.800426][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.808229][ T4142] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 153.816140][ T4142] [ 154.815906][ T4190] device syzkaller0 entered promiscuous mode [ 156.557140][ T4228] device pim6reg1 entered promiscuous mode [ 161.267465][ T4398] device pim6reg1 entered promiscuous mode [ 162.027057][ T4448] device syzkaller0 entered promiscuous mode [ 164.553117][ T4551] FAULT_INJECTION: forcing a failure. [ 164.553117][ T4551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.623311][ T4551] CPU: 0 PID: 4551 Comm: syz.1.1530 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 164.633149][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.643043][ T4551] Call Trace: [ 164.646163][ T4551] [ 164.648940][ T4551] dump_stack_lvl+0x151/0x1c0 [ 164.653458][ T4551] ? io_uring_drop_tctx_refs+0x190/0x190 [ 164.658922][ T4551] ? __this_cpu_preempt_check+0x13/0x20 [ 164.664305][ T4551] ? trace_call_bpf+0x3f8/0x470 [ 164.668993][ T4551] dump_stack+0x15/0x20 [ 164.672983][ T4551] should_fail+0x3c6/0x510 [ 164.677322][ T4551] should_fail_alloc_page+0x5a/0x80 [ 164.682357][ T4551] prepare_alloc_pages+0x15c/0x700 [ 164.687310][ T4551] ? __alloc_pages_bulk+0xe40/0xe40 [ 164.692338][ T4551] __alloc_pages+0x18c/0x8f0 [ 164.696765][ T4551] ? prep_new_page+0x110/0x110 [ 164.701367][ T4551] ? 0xffffffffa0028000 [ 164.705356][ T4551] ? is_bpf_text_address+0x172/0x190 [ 164.710482][ T4551] pte_alloc_one+0x73/0x1b0 [ 164.714993][ T4551] ? pfn_modify_allowed+0x2f0/0x2f0 [ 164.720038][ T4551] ? arch_stack_walk+0xf3/0x140 [ 164.724720][ T4551] __pte_alloc+0x86/0x350 [ 164.728882][ T4551] ? free_pgtables+0x280/0x280 [ 164.733481][ T4551] ? _raw_spin_lock+0xa4/0x1b0 [ 164.738078][ T4551] ? __kasan_check_write+0x14/0x20 [ 164.743037][ T4551] copy_page_range+0x28a8/0x2f90 [ 164.747801][ T4551] ? __kasan_slab_alloc+0xb1/0xe0 [ 164.752669][ T4551] ? pfn_valid+0x1e0/0x1e0 [ 164.756918][ T4551] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 164.762469][ T4551] ? __rb_insert_augmented+0x5de/0x610 [ 164.767770][ T4551] copy_mm+0xc7e/0x13e0 [ 164.771761][ T4551] ? copy_signal+0x610/0x610 [ 164.776185][ T4551] ? __init_rwsem+0xfe/0x1d0 [ 164.780775][ T4551] ? copy_signal+0x4e3/0x610 [ 164.785193][ T4551] copy_process+0x1149/0x3290 [ 164.789717][ T4551] ? __kasan_check_write+0x14/0x20 [ 164.794655][ T4551] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 164.799604][ T4551] ? vfs_write+0x94d/0x1110 [ 164.803941][ T4551] kernel_clone+0x21e/0x9e0 [ 164.808280][ T4551] ? __kasan_check_write+0x14/0x20 [ 164.813227][ T4551] ? create_io_thread+0x1e0/0x1e0 [ 164.818193][ T4551] __x64_sys_clone+0x23f/0x290 [ 164.822787][ T4551] ? __do_sys_vfork+0x130/0x130 [ 164.827463][ T4551] ? debug_smp_processor_id+0x17/0x20 [ 164.832669][ T4551] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 164.838614][ T4551] ? exit_to_user_mode_prepare+0x39/0xa0 [ 164.844081][ T4551] x64_sys_call+0x1b0/0x9a0 [ 164.848377][ T4551] do_syscall_64+0x3b/0xb0 [ 164.852630][ T4551] ? clear_bhb_loop+0x35/0x90 [ 164.857143][ T4551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.862872][ T4551] RIP: 0033:0x7f14212b8919 [ 164.867215][ T4551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.886657][ T4551] RSP: 002b:00007f141f930fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 164.894897][ T4551] RAX: ffffffffffffffda RBX: 00007f142146ffa0 RCX: 00007f14212b8919 [ 164.902712][ T4551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.910617][ T4551] RBP: 00007f141f931090 R08: 0000000000000000 R09: 0000000000000000 [ 164.918428][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.926245][ T4551] R13: 0000000000000000 R14: 00007f142146ffa0 R15: 00007ffea9e89eb8 [ 164.934059][ T4551] [ 165.534065][ T30] audit: type=1400 audit(1732639974.694:147): avc: denied { write } for pid=4577 comm="syz.4.1541" name="cgroup.subtree_control" dev="cgroup2" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.607437][ T30] audit: type=1400 audit(1732639974.734:148): avc: denied { open } for pid=4577 comm="syz.4.1541" path="" dev="cgroup2" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.662310][ T4612] FAULT_INJECTION: forcing a failure. [ 165.662310][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 165.693342][ T4612] CPU: 0 PID: 4612 Comm: syz.3.1553 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 165.703075][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.713054][ T4612] Call Trace: [ 165.716176][ T4612] [ 165.718957][ T4612] dump_stack_lvl+0x151/0x1c0 [ 165.723472][ T4612] ? io_uring_drop_tctx_refs+0x190/0x190 [ 165.728936][ T4612] ? slab_post_alloc_hook+0x53/0x2c0 [ 165.734058][ T4612] ? new_inode_pseudo+0x93/0x220 [ 165.738844][ T4612] ? proc_pid_make_inode+0x27/0x1d0 [ 165.743863][ T4612] ? proc_pident_instantiate+0x7a/0x2e0 [ 165.749243][ T4612] ? proc_pident_lookup+0x1c4/0x260 [ 165.754281][ T4612] ? path_openat+0x1194/0x2f40 [ 165.758880][ T4612] dump_stack+0x15/0x20 [ 165.762875][ T4612] should_fail+0x3c6/0x510 [ 165.767125][ T4612] __should_failslab+0xa4/0xe0 [ 165.771727][ T4612] ? __alloc_skb+0xbe/0x550 [ 165.776066][ T4612] should_failslab+0x9/0x20 [ 165.780405][ T4612] slab_pre_alloc_hook+0x37/0xd0 [ 165.785180][ T4612] ? __alloc_skb+0xbe/0x550 [ 165.789520][ T4612] kmem_cache_alloc+0x44/0x200 [ 165.794148][ T4612] __alloc_skb+0xbe/0x550 [ 165.798364][ T4612] tipc_msg_build+0x149/0x1230 [ 165.802896][ T4612] ? memcpy+0x56/0x70 [ 165.806721][ T4612] ? tipc_msg_fragment+0x760/0x760 [ 165.811662][ T4612] __tipc_sendstream+0x9c2/0x1310 [ 165.816565][ T4612] ? tsk_advance_rx_queue+0x260/0x260 [ 165.821732][ T4612] ? sock_init_data+0xc0/0xc0 [ 165.826238][ T4612] ? wait_woken+0x170/0x170 [ 165.830584][ T4612] ? kmem_cache_free+0x116/0x2e0 [ 165.835346][ T4612] ? kasan_set_track+0x5d/0x70 [ 165.839946][ T4612] ? kasan_set_track+0x4b/0x70 [ 165.844549][ T4612] tipc_sendstream+0x55/0x70 [ 165.848978][ T4612] ? tipc_getsockopt+0x790/0x790 [ 165.853748][ T4612] ____sys_sendmsg+0x59e/0x8f0 [ 165.858350][ T4612] ? __sys_sendmsg_sock+0x40/0x40 [ 165.863209][ T4612] ? import_iovec+0xe5/0x120 [ 165.867635][ T4612] ___sys_sendmsg+0x252/0x2e0 [ 165.872150][ T4612] ? __sys_sendmsg+0x260/0x260 [ 165.876757][ T4612] ? __fdget+0x1bc/0x240 [ 165.880827][ T4612] __se_sys_sendmsg+0x19a/0x260 [ 165.885514][ T4612] ? __x64_sys_sendmsg+0x90/0x90 [ 165.890287][ T4612] ? ksys_write+0x260/0x2c0 [ 165.894638][ T4612] ? debug_smp_processor_id+0x17/0x20 [ 165.899835][ T4612] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 165.905741][ T4612] __x64_sys_sendmsg+0x7b/0x90 [ 165.910345][ T4612] x64_sys_call+0x16a/0x9a0 [ 165.914678][ T4612] do_syscall_64+0x3b/0xb0 [ 165.918934][ T4612] ? clear_bhb_loop+0x35/0x90 [ 165.923443][ T4612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.929173][ T4612] RIP: 0033:0x7f8168370919 [ 165.933434][ T4612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.952876][ T4612] RSP: 002b:00007f81669e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.961113][ T4612] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f8168370919 [ 165.968924][ T4612] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 165.976744][ T4612] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 165.984556][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.992357][ T4612] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 166.000321][ T4612] [ 166.922584][ T4655] device macsec0 entered promiscuous mode [ 168.458285][ T4737] Â: renamed from pim6reg1 [ 168.544951][ T4740] syz.4.1605 uses obsolete (PF_INET,SOCK_PACKET) [ 168.861579][ T4758] device pim6reg1 entered promiscuous mode [ 169.973009][ T30] audit: type=1400 audit(1732639979.134:149): avc: denied { create } for pid=4810 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 169.996389][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.019418][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.329896][ T4883] FAULT_INJECTION: forcing a failure. [ 171.329896][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 171.357953][ T4883] CPU: 0 PID: 4883 Comm: syz.2.1658 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 171.367691][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.377582][ T4883] Call Trace: [ 171.380698][ T4883] [ 171.383483][ T4883] dump_stack_lvl+0x151/0x1c0 [ 171.387990][ T4883] ? io_uring_drop_tctx_refs+0x190/0x190 [ 171.393462][ T4883] dump_stack+0x15/0x20 [ 171.397447][ T4883] should_fail+0x3c6/0x510 [ 171.401703][ T4883] __should_failslab+0xa4/0xe0 [ 171.406316][ T4883] ? vm_area_dup+0x26/0x230 [ 171.410642][ T4883] should_failslab+0x9/0x20 [ 171.414980][ T4883] slab_pre_alloc_hook+0x37/0xd0 [ 171.419756][ T4883] ? vm_area_dup+0x26/0x230 [ 171.424101][ T4883] kmem_cache_alloc+0x44/0x200 [ 171.428695][ T4883] vm_area_dup+0x26/0x230 [ 171.432862][ T4883] copy_mm+0x9a1/0x13e0 [ 171.436855][ T4883] ? copy_signal+0x610/0x610 [ 171.441371][ T4883] ? __init_rwsem+0xfe/0x1d0 [ 171.445881][ T4883] ? copy_signal+0x4e3/0x610 [ 171.450308][ T4883] copy_process+0x1149/0x3290 [ 171.454820][ T4883] ? __kasan_check_write+0x14/0x20 [ 171.459769][ T4883] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 171.464719][ T4883] ? vfs_write+0x94d/0x1110 [ 171.469056][ T4883] kernel_clone+0x21e/0x9e0 [ 171.473393][ T4883] ? __kasan_check_write+0x14/0x20 [ 171.478340][ T4883] ? create_io_thread+0x1e0/0x1e0 [ 171.483203][ T4883] __x64_sys_clone+0x23f/0x290 [ 171.487802][ T4883] ? __do_sys_vfork+0x130/0x130 [ 171.492507][ T4883] ? debug_smp_processor_id+0x17/0x20 [ 171.497703][ T4883] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.503687][ T4883] ? exit_to_user_mode_prepare+0x39/0xa0 [ 171.509153][ T4883] x64_sys_call+0x1b0/0x9a0 [ 171.513492][ T4883] do_syscall_64+0x3b/0xb0 [ 171.517744][ T4883] ? clear_bhb_loop+0x35/0x90 [ 171.522258][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.527986][ T4883] RIP: 0033:0x7fe7d97ab919 [ 171.532242][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.551693][ T4883] RSP: 002b:00007fe7d7e23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 171.560014][ T4883] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 171.567824][ T4883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.575636][ T4883] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 171.583449][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.591267][ T4883] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 171.599184][ T4883] [ 171.958876][ T4911] FAULT_INJECTION: forcing a failure. [ 171.958876][ T4911] name failslab, interval 1, probability 0, space 0, times 0 [ 171.991077][ T4911] CPU: 1 PID: 4911 Comm: syz.4.1671 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 172.000898][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.010883][ T4911] Call Trace: [ 172.014010][ T4911] [ 172.016781][ T4911] dump_stack_lvl+0x151/0x1c0 [ 172.021293][ T4911] ? io_uring_drop_tctx_refs+0x190/0x190 [ 172.026763][ T4911] dump_stack+0x15/0x20 [ 172.030754][ T4911] should_fail+0x3c6/0x510 [ 172.035007][ T4911] __should_failslab+0xa4/0xe0 [ 172.039608][ T4911] should_failslab+0x9/0x20 [ 172.043947][ T4911] slab_pre_alloc_hook+0x37/0xd0 [ 172.048721][ T4911] ? tipc_msg_build+0x149/0x1230 [ 172.053494][ T4911] __kmalloc_track_caller+0x6c/0x260 [ 172.058616][ T4911] ? tipc_msg_build+0x149/0x1230 [ 172.063390][ T4911] ? tipc_msg_build+0x149/0x1230 [ 172.068162][ T4911] __alloc_skb+0x10c/0x550 [ 172.072416][ T4911] tipc_msg_build+0x149/0x1230 [ 172.077030][ T4911] ? memcpy+0x56/0x70 [ 172.080835][ T4911] ? tipc_msg_fragment+0x760/0x760 [ 172.085784][ T4911] __tipc_sendstream+0x9c2/0x1310 [ 172.090648][ T4911] ? tsk_advance_rx_queue+0x260/0x260 [ 172.095848][ T4911] ? sock_init_data+0xc0/0xc0 [ 172.100363][ T4911] ? wait_woken+0x170/0x170 [ 172.104704][ T4911] ? kmem_cache_free+0x116/0x2e0 [ 172.109475][ T4911] ? kasan_set_track+0x5d/0x70 [ 172.114074][ T4911] ? kasan_set_track+0x4b/0x70 [ 172.118678][ T4911] tipc_sendstream+0x55/0x70 [ 172.123099][ T4911] ? tipc_getsockopt+0x790/0x790 [ 172.127875][ T4911] ____sys_sendmsg+0x59e/0x8f0 [ 172.132478][ T4911] ? __sys_sendmsg_sock+0x40/0x40 [ 172.137336][ T4911] ? import_iovec+0xe5/0x120 [ 172.141764][ T4911] ___sys_sendmsg+0x252/0x2e0 [ 172.146280][ T4911] ? __sys_sendmsg+0x260/0x260 [ 172.150882][ T4911] ? __fdget+0x1bc/0x240 [ 172.154961][ T4911] __se_sys_sendmsg+0x19a/0x260 [ 172.159644][ T4911] ? __x64_sys_sendmsg+0x90/0x90 [ 172.164416][ T4911] ? ksys_write+0x260/0x2c0 [ 172.168756][ T4911] ? debug_smp_processor_id+0x17/0x20 [ 172.173963][ T4911] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 172.179872][ T4911] __x64_sys_sendmsg+0x7b/0x90 [ 172.184471][ T4911] x64_sys_call+0x16a/0x9a0 [ 172.188804][ T4911] do_syscall_64+0x3b/0xb0 [ 172.193060][ T4911] ? clear_bhb_loop+0x35/0x90 [ 172.197573][ T4911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.203301][ T4911] RIP: 0033:0x7ff024b7d919 [ 172.207556][ T4911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.226998][ T4911] RSP: 002b:00007ff0231f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.235238][ T4911] RAX: ffffffffffffffda RBX: 00007ff024d34fa0 RCX: 00007ff024b7d919 [ 172.243052][ T4911] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 172.250866][ T4911] RBP: 00007ff0231f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.258674][ T4911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.266486][ T4911] R13: 0000000000000000 R14: 00007ff024d34fa0 R15: 00007ffde9b9cef8 [ 172.274303][ T4911] [ 172.717428][ T4955] tun0: tun_chr_ioctl cmd 1074025677 [ 172.728281][ T4955] tun0: linktype set to 821 [ 173.013929][ T4984] device syzkaller0 entered promiscuous mode [ 173.119214][ T4989] FAULT_INJECTION: forcing a failure. [ 173.119214][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 173.131883][ T4989] CPU: 0 PID: 4989 Comm: syz.2.1701 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 173.141941][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.151841][ T4989] Call Trace: [ 173.155078][ T4989] [ 173.157825][ T4989] dump_stack_lvl+0x151/0x1c0 [ 173.162340][ T4989] ? io_uring_drop_tctx_refs+0x190/0x190 [ 173.167811][ T4989] dump_stack+0x15/0x20 [ 173.171798][ T4989] should_fail+0x3c6/0x510 [ 173.176052][ T4989] __should_failslab+0xa4/0xe0 [ 173.180738][ T4989] should_failslab+0x9/0x20 [ 173.185077][ T4989] slab_pre_alloc_hook+0x37/0xd0 [ 173.189853][ T4989] kmem_cache_alloc_trace+0x48/0x210 [ 173.194977][ T4989] ? slhc_init+0x77/0x7a0 [ 173.199139][ T4989] slhc_init+0x77/0x7a0 [ 173.203137][ T4989] ppp_ioctl+0x13de/0x19a0 [ 173.207384][ T4989] ? __mutex_lock_slowpath+0x10/0x10 [ 173.212505][ T4989] ? ppp_poll+0x250/0x250 [ 173.216671][ T4989] ? __fget_files+0x31e/0x380 [ 173.221184][ T4989] ? security_file_ioctl+0x84/0xb0 [ 173.226129][ T4989] ? ppp_poll+0x250/0x250 [ 173.230322][ T4989] __se_sys_ioctl+0x114/0x190 [ 173.234821][ T4989] __x64_sys_ioctl+0x7b/0x90 [ 173.239242][ T4989] x64_sys_call+0x98/0x9a0 [ 173.243489][ T4989] do_syscall_64+0x3b/0xb0 [ 173.247744][ T4989] ? clear_bhb_loop+0x35/0x90 [ 173.252258][ T4989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.257983][ T4989] RIP: 0033:0x7fe7d97ab919 [ 173.262241][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.281683][ T4989] RSP: 002b:00007fe7d7e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.289931][ T4989] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 173.297737][ T4989] RDX: 000000002000000c RSI: 0000000040047451 RDI: 0000000000000006 [ 173.305557][ T4989] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 173.313372][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.321180][ T4989] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 173.329199][ T4989] [ 174.448043][ T5056] bond_slave_1: mtu less than device minimum [ 176.038354][ T5197] syz.3.1776[5197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.038431][ T5197] syz.3.1776[5197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.323466][ T5215] FAULT_INJECTION: forcing a failure. [ 176.323466][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 176.382615][ T5215] CPU: 0 PID: 5215 Comm: syz.4.1784 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 176.392347][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.402241][ T5215] Call Trace: [ 176.405364][ T5215] [ 176.408150][ T5215] dump_stack_lvl+0x151/0x1c0 [ 176.412656][ T5215] ? io_uring_drop_tctx_refs+0x190/0x190 [ 176.418126][ T5215] ? avc_denied+0x1b0/0x1b0 [ 176.422463][ T5215] ? cmp_ex_search+0x79/0xa0 [ 176.426901][ T5215] dump_stack+0x15/0x20 [ 176.430880][ T5215] should_fail+0x3c6/0x510 [ 176.435136][ T5215] __should_failslab+0xa4/0xe0 [ 176.439741][ T5215] ? __alloc_skb+0xbe/0x550 [ 176.444081][ T5215] should_failslab+0x9/0x20 [ 176.448412][ T5215] slab_pre_alloc_hook+0x37/0xd0 [ 176.453187][ T5215] ? __alloc_skb+0xbe/0x550 [ 176.457530][ T5215] kmem_cache_alloc+0x44/0x200 [ 176.462131][ T5215] __alloc_skb+0xbe/0x550 [ 176.466294][ T5215] alloc_skb_with_frags+0xa6/0x680 [ 176.471243][ T5215] ? kernelmode_fixup_or_oops+0x83/0xd0 [ 176.476634][ T5215] sock_alloc_send_pskb+0x915/0xa50 [ 176.481668][ T5215] ? sock_kzfree_s+0x60/0x60 [ 176.486087][ T5215] tun_get_user+0xf1b/0x3aa0 [ 176.490512][ T5215] ? strncpy_from_user+0x1f0/0x2d0 [ 176.495465][ T5215] ? _kstrtoull+0x3a0/0x4a0 [ 176.499826][ T5215] ? tun_do_read+0x2010/0x2010 [ 176.504395][ T5215] ? kstrtouint_from_user+0x20a/0x2a0 [ 176.509607][ T5215] ? kstrtol_from_user+0x310/0x310 [ 176.514553][ T5215] ? bpf_probe_read_compat_str+0x15c/0x180 [ 176.520198][ T5215] ? avc_policy_seqno+0x1b/0x70 [ 176.524878][ T5215] ? selinux_file_permission+0x2c4/0x570 [ 176.530350][ T5215] tun_chr_write_iter+0x1e1/0x2e0 [ 176.535211][ T5215] vfs_write+0xd5d/0x1110 [ 176.539373][ T5215] ? __traceiter_kmem_cache_free+0x32/0x50 [ 176.545018][ T5215] ? file_end_write+0x1c0/0x1c0 [ 176.549709][ T5215] ? __fdget_pos+0x209/0x3a0 [ 176.554131][ T5215] ? ksys_write+0x77/0x2c0 [ 176.558386][ T5215] ksys_write+0x199/0x2c0 [ 176.562552][ T5215] ? __ia32_sys_read+0x90/0x90 [ 176.567151][ T5215] ? debug_smp_processor_id+0x17/0x20 [ 176.572357][ T5215] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 176.578259][ T5215] __x64_sys_write+0x7b/0x90 [ 176.582684][ T5215] x64_sys_call+0x2f/0x9a0 [ 176.586937][ T5215] do_syscall_64+0x3b/0xb0 [ 176.591191][ T5215] ? clear_bhb_loop+0x35/0x90 [ 176.595716][ T5215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.601441][ T5215] RIP: 0033:0x7ff024b7d919 [ 176.605690][ T5215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.625131][ T5215] RSP: 002b:00007ff0231f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.633377][ T5215] RAX: ffffffffffffffda RBX: 00007ff024d34fa0 RCX: 00007ff024b7d919 [ 176.641186][ T5215] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 176.649084][ T5215] RBP: 00007ff0231f6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.656895][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.664707][ T5215] R13: 0000000000000000 R14: 00007ff024d34fa0 R15: 00007ffde9b9cef8 [ 176.672526][ T5215] [ 177.142605][ T5247] syz.3.1794[5247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.142680][ T5247] syz.3.1794[5247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.698679][ T5253] device pim6reg1 entered promiscuous mode [ 179.214545][ T5288] syz.4.1803[5288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.214620][ T5288] syz.4.1803[5288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.231520][ T30] audit: type=1400 audit(1732639988.394:150): avc: denied { tracepoint } for pid=5281 comm="syz.4.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 179.917911][ T5352] FAULT_INJECTION: forcing a failure. [ 179.917911][ T5352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.931052][ T5352] CPU: 0 PID: 5352 Comm: syz.2.1826 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 179.932231][ T30] audit: type=1400 audit(1732639989.094:151): avc: denied { create } for pid=5347 comm="syz.0.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.940792][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.940806][ T5352] Call Trace: [ 179.940811][ T5352] [ 179.940818][ T5352] dump_stack_lvl+0x151/0x1c0 [ 179.940844][ T5352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 179.940858][ T5352] ? arch_stack_walk+0xf3/0x140 [ 179.940876][ T5352] dump_stack+0x15/0x20 [ 179.940889][ T5352] should_fail+0x3c6/0x510 [ 179.940904][ T5352] should_fail_alloc_page+0x5a/0x80 [ 180.003808][ T5352] prepare_alloc_pages+0x15c/0x700 [ 180.008801][ T5352] ? __stack_depot_save+0x34/0x470 [ 180.013699][ T5352] ? __alloc_pages_bulk+0xe40/0xe40 [ 180.018744][ T5352] ? ____kasan_kmalloc+0xed/0x110 [ 180.023594][ T5352] ? ____kasan_kmalloc+0xdb/0x110 [ 180.028455][ T5352] ? __kasan_kmalloc+0x9/0x10 [ 180.032981][ T5352] ? kmem_cache_alloc_trace+0x115/0x210 [ 180.038353][ T5352] ? slhc_init+0x77/0x7a0 [ 180.042521][ T5352] __alloc_pages+0x18c/0x8f0 [ 180.046944][ T5352] ? prep_new_page+0x110/0x110 [ 180.051551][ T5352] kmalloc_order+0x4a/0x160 [ 180.055889][ T5352] kmalloc_order_trace+0x1a/0xb0 [ 180.060663][ T5352] __kmalloc+0x19c/0x270 [ 180.064737][ T5352] ? slhc_init+0x77/0x7a0 [ 180.068903][ T5352] slhc_init+0xb6/0x7a0 [ 180.072897][ T5352] ppp_ioctl+0x13de/0x19a0 [ 180.077287][ T5352] ? __mutex_lock_slowpath+0x10/0x10 [ 180.082405][ T5352] ? ppp_poll+0x250/0x250 [ 180.086571][ T5352] ? __fget_files+0x31e/0x380 [ 180.091087][ T5352] ? security_file_ioctl+0x84/0xb0 [ 180.096031][ T5352] ? ppp_poll+0x250/0x250 [ 180.100198][ T5352] __se_sys_ioctl+0x114/0x190 [ 180.104714][ T5352] __x64_sys_ioctl+0x7b/0x90 [ 180.109137][ T5352] x64_sys_call+0x98/0x9a0 [ 180.113393][ T5352] do_syscall_64+0x3b/0xb0 [ 180.117639][ T5352] ? clear_bhb_loop+0x35/0x90 [ 180.122239][ T5352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.127982][ T5352] RIP: 0033:0x7fe7d97ab919 [ 180.132221][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.151667][ T5352] RSP: 002b:00007fe7d7e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.159905][ T5352] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 180.167720][ T5352] RDX: 000000002000000c RSI: 0000000040047451 RDI: 0000000000000006 [ 180.175526][ T5352] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 180.183340][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.191154][ T5352] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 180.198970][ T5352] [ 180.247224][ T5356] device sit0 entered promiscuous mode [ 182.429022][ T5437] device veth0_vlan left promiscuous mode [ 182.466393][ T5437] device veth0_vlan entered promiscuous mode [ 182.497504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.505656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.537475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.643140][ T5451] syz.2.1860[5451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.643209][ T5451] syz.2.1860[5451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.992668][ T5460] device pim6reg1 entered promiscuous mode [ 183.884081][ T5485] device sit0 left promiscuous mode [ 184.477160][ T5502] device veth1_macvtap entered promiscuous mode [ 184.543080][ T5502] device macsec0 entered promiscuous mode [ 184.579873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.930456][ T5562] FAULT_INJECTION: forcing a failure. [ 185.930456][ T5562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.968906][ T5562] CPU: 0 PID: 5562 Comm: syz.1.1896 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 185.978770][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.988681][ T5562] Call Trace: [ 185.991778][ T5562] [ 185.994560][ T5562] dump_stack_lvl+0x151/0x1c0 [ 185.999071][ T5562] ? io_uring_drop_tctx_refs+0x190/0x190 [ 186.004555][ T5562] ? stack_trace_save+0x113/0x1c0 [ 186.009492][ T5562] dump_stack+0x15/0x20 [ 186.013478][ T5562] should_fail+0x3c6/0x510 [ 186.017733][ T5562] should_fail_alloc_page+0x5a/0x80 [ 186.022768][ T5562] prepare_alloc_pages+0x15c/0x700 [ 186.027804][ T5562] ? __alloc_pages_bulk+0xe40/0xe40 [ 186.032836][ T5562] ? x64_sys_call+0x2f/0x9a0 [ 186.037261][ T5562] ? do_syscall_64+0x3b/0xb0 [ 186.041688][ T5562] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.047592][ T5562] __alloc_pages+0x18c/0x8f0 [ 186.052018][ T5562] ? prep_new_page+0x110/0x110 [ 186.056620][ T5562] kmalloc_order+0x4a/0x160 [ 186.060961][ T5562] kmalloc_order_trace+0x1a/0xb0 [ 186.065733][ T5562] ? alloc_skb_with_frags+0xa6/0x680 [ 186.070940][ T5562] __kmalloc_track_caller+0x19b/0x260 [ 186.076144][ T5562] ? kmem_cache_alloc+0xf5/0x200 [ 186.080919][ T5562] ? alloc_skb_with_frags+0xa6/0x680 [ 186.086044][ T5562] __alloc_skb+0x10c/0x550 [ 186.090341][ T5562] alloc_skb_with_frags+0xa6/0x680 [ 186.095249][ T5562] ? kernelmode_fixup_or_oops+0x83/0xd0 [ 186.100637][ T5562] sock_alloc_send_pskb+0x915/0xa50 [ 186.105674][ T5562] ? sock_kzfree_s+0x60/0x60 [ 186.110094][ T5562] tun_get_user+0xf1b/0x3aa0 [ 186.114517][ T5562] ? strncpy_from_user+0x1f0/0x2d0 [ 186.119552][ T5562] ? _kstrtoull+0x3a0/0x4a0 [ 186.123889][ T5562] ? tun_do_read+0x2010/0x2010 [ 186.128483][ T5562] ? kstrtouint_from_user+0x20a/0x2a0 [ 186.133698][ T5562] ? kstrtol_from_user+0x310/0x310 [ 186.138651][ T5562] ? bpf_probe_read_compat_str+0x15c/0x180 [ 186.144386][ T5562] ? avc_policy_seqno+0x1b/0x70 [ 186.149051][ T5562] ? selinux_file_permission+0x2c4/0x570 [ 186.154522][ T5562] tun_chr_write_iter+0x1e1/0x2e0 [ 186.159390][ T5562] vfs_write+0xd5d/0x1110 [ 186.163547][ T5562] ? __traceiter_kmem_cache_free+0x32/0x50 [ 186.169200][ T5562] ? file_end_write+0x1c0/0x1c0 [ 186.173882][ T5562] ? __fdget_pos+0x209/0x3a0 [ 186.178313][ T5562] ? ksys_write+0x77/0x2c0 [ 186.182560][ T5562] ksys_write+0x199/0x2c0 [ 186.186727][ T5562] ? __ia32_sys_read+0x90/0x90 [ 186.191324][ T5562] ? debug_smp_processor_id+0x17/0x20 [ 186.196531][ T5562] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 186.202434][ T5562] __x64_sys_write+0x7b/0x90 [ 186.206859][ T5562] x64_sys_call+0x2f/0x9a0 [ 186.211110][ T5562] do_syscall_64+0x3b/0xb0 [ 186.215361][ T5562] ? clear_bhb_loop+0x35/0x90 [ 186.219879][ T5562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.225619][ T5562] RIP: 0033:0x7f14212b8919 [ 186.229877][ T5562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.249466][ T5562] RSP: 002b:00007f141f931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.257634][ T5562] RAX: ffffffffffffffda RBX: 00007f142146ffa0 RCX: 00007f14212b8919 [ 186.265451][ T5562] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 186.273259][ T5562] RBP: 00007f141f931090 R08: 0000000000000000 R09: 0000000000000000 [ 186.281067][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.288882][ T5562] R13: 0000000000000000 R14: 00007f142146ffa0 R15: 00007ffea9e89eb8 [ 186.296698][ T5562] [ 186.845106][ T5581] FAULT_INJECTION: forcing a failure. [ 186.845106][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 186.867898][ T5581] CPU: 1 PID: 5581 Comm: syz.1.1905 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 186.877619][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.887529][ T5581] Call Trace: [ 186.890640][ T5581] [ 186.893422][ T5581] dump_stack_lvl+0x151/0x1c0 [ 186.897929][ T5581] ? io_uring_drop_tctx_refs+0x190/0x190 [ 186.903410][ T5581] dump_stack+0x15/0x20 [ 186.907390][ T5581] should_fail+0x3c6/0x510 [ 186.911645][ T5581] __should_failslab+0xa4/0xe0 [ 186.916247][ T5581] ? anon_vma_fork+0x1df/0x4e0 [ 186.920856][ T5581] should_failslab+0x9/0x20 [ 186.925197][ T5581] slab_pre_alloc_hook+0x37/0xd0 [ 186.929965][ T5581] ? anon_vma_fork+0x1df/0x4e0 [ 186.934557][ T5581] kmem_cache_alloc+0x44/0x200 [ 186.939163][ T5581] anon_vma_fork+0x1df/0x4e0 [ 186.943583][ T5581] copy_mm+0xa3a/0x13e0 [ 186.947580][ T5581] ? copy_signal+0x610/0x610 [ 186.952001][ T5581] ? __init_rwsem+0xfe/0x1d0 [ 186.956438][ T5581] ? copy_signal+0x4e3/0x610 [ 186.960856][ T5581] copy_process+0x1149/0x3290 [ 186.965371][ T5581] ? __kasan_check_write+0x14/0x20 [ 186.970321][ T5581] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 186.975262][ T5581] ? vfs_write+0x94d/0x1110 [ 186.979608][ T5581] kernel_clone+0x21e/0x9e0 [ 186.983942][ T5581] ? __kasan_check_write+0x14/0x20 [ 186.988891][ T5581] ? create_io_thread+0x1e0/0x1e0 [ 186.993754][ T5581] __x64_sys_clone+0x23f/0x290 [ 186.998351][ T5581] ? __do_sys_vfork+0x130/0x130 [ 187.003039][ T5581] ? debug_smp_processor_id+0x17/0x20 [ 187.008246][ T5581] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 187.014759][ T5581] ? exit_to_user_mode_prepare+0x39/0xa0 [ 187.020313][ T5581] x64_sys_call+0x1b0/0x9a0 [ 187.024651][ T5581] do_syscall_64+0x3b/0xb0 [ 187.028901][ T5581] ? clear_bhb_loop+0x35/0x90 [ 187.033416][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.039142][ T5581] RIP: 0033:0x7f14212b8919 [ 187.043492][ T5581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.062925][ T5581] RSP: 002b:00007f141f930fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 187.071176][ T5581] RAX: ffffffffffffffda RBX: 00007f142146ffa0 RCX: 00007f14212b8919 [ 187.078984][ T5581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.086793][ T5581] RBP: 00007f141f931090 R08: 0000000000000000 R09: 0000000000000000 [ 187.094610][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.102418][ T5581] R13: 0000000000000000 R14: 00007f142146ffa0 R15: 00007ffea9e89eb8 [ 187.110236][ T5581] [ 187.200333][ T5584] device syzkaller0 entered promiscuous mode [ 187.551671][ T5591] tun0: tun_chr_ioctl cmd 1074025675 [ 187.556951][ T5591] tun0: persist disabled [ 188.676702][ T5637] ------------[ cut here ]------------ [ 188.685678][ T5637] trace type BPF program uses run-time allocation [ 188.705550][ T5637] WARNING: CPU: 1 PID: 5637 at kernel/bpf/verifier.c:11698 check_map_prog_compatibility+0x6f1/0x890 [ 188.719195][ T5637] Modules linked in: [ 188.723017][ T5637] CPU: 1 PID: 5637 Comm: syz.2.1921 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 188.761517][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.840620][ T5637] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 188.849119][ T5637] Code: db e9 f9 fc ff ff e8 be 33 ed ff 31 db e9 ed fc ff ff e8 b2 33 ed ff c6 05 6e 55 a3 05 01 48 c7 c7 80 ed 87 85 e8 df 7a be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 188.868865][ T5637] RSP: 0018:ffffc90000cdf328 EFLAGS: 00010246 [ 188.874912][ T5637] RAX: 88383fe6f73ee500 RBX: 0000000000000001 RCX: 0000000000080000 [ 188.883039][ T5637] RDX: ffffc90002710000 RSI: 0000000000000989 RDI: 000000000000098a [ 188.891697][ T5637] RBP: ffffc90000cdf370 R08: ffffffff81579f45 R09: ffffed103ee265e8 [ 188.916956][ T5637] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000005 [ 188.925167][ T5637] R13: ffff8881161f2000 R14: ffffc900001ab000 R15: dffffc0000000000 [ 188.933253][ T5637] FS: 00007fe7d7e246c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 188.942716][ T5637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.949845][ T5637] CR2: 00007ff024d36bac CR3: 0000000172c02000 CR4: 00000000003506b0 [ 188.967331][ T5637] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.978670][ T5674] syz.4.1935[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.978741][ T5674] syz.4.1935[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.990373][ T5637] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 189.022705][ T5637] Call Trace: [ 189.026254][ T5637] [ 189.034226][ T5637] ? show_regs+0x58/0x60 [ 189.044204][ T5637] ? __warn+0x160/0x2f0 [ 189.052832][ T5637] ? check_map_prog_compatibility+0x6f1/0x890 [ 189.059335][ T5637] ? report_bug+0x3d9/0x5b0 [ 189.064020][ T5637] ? check_map_prog_compatibility+0x6f1/0x890 [ 189.070695][ T5637] ? handle_bug+0x41/0x70 [ 189.075028][ T5637] ? exc_invalid_op+0x1b/0x50 [ 189.090293][ T5637] ? asm_exc_invalid_op+0x1b/0x20 [ 189.100653][ T5637] ? __wake_up_klogd+0xd5/0x110 [ 189.131133][ T5637] ? check_map_prog_compatibility+0x6f1/0x890 [ 189.192233][ T5637] ? check_map_prog_compatibility+0x6f1/0x890 [ 189.248640][ T5637] resolve_pseudo_ldimm64+0x682/0x1240 [ 189.294568][ T5637] ? check_attach_btf_id+0xef0/0xef0 [ 189.326520][ T5637] ? __mark_reg_known+0x1b0/0x1b0 [ 189.346953][ T5637] ? security_capable+0x87/0xb0 [ 189.372505][ T5637] bpf_check+0x3174/0x12bf0 [ 189.380614][ T5637] ? 0xffffffffa00025fc [ 189.387026][ T5637] ? is_bpf_text_address+0x172/0x190 [ 189.399671][ T5637] ? stack_trace_save+0x1c0/0x1c0 [ 189.407396][ T5637] ? __kernel_text_address+0x9b/0x110 [ 189.412607][ T5637] ? unwind_get_return_address+0x4d/0x90 [ 189.432329][ T5637] ? bpf_get_btf_vmlinux+0x60/0x60 [ 189.437551][ T5637] ? arch_stack_walk+0xf3/0x140 [ 189.442353][ T5637] ? stack_trace_save+0x113/0x1c0 [ 189.447492][ T5637] ? stack_trace_snprint+0xf0/0xf0 [ 189.452540][ T5637] ? stack_trace_snprint+0xf0/0xf0 [ 189.458008][ T5637] ? __stack_depot_save+0x34/0x470 [ 189.463052][ T5637] ? ____kasan_kmalloc+0xed/0x110 [ 189.468181][ T5637] ? ____kasan_kmalloc+0xdb/0x110 [ 189.473022][ T5637] ? __kasan_kmalloc+0x9/0x10 [ 189.477957][ T5637] ? kmem_cache_alloc_trace+0x115/0x210 [ 189.483446][ T5637] ? selinux_bpf_prog_alloc+0x51/0x140 [ 189.489004][ T5637] ? security_bpf_prog_alloc+0x62/0x90 [ 189.494399][ T5637] ? bpf_prog_load+0x9ee/0x1b50 [ 189.499350][ T5637] ? __sys_bpf+0x4bc/0x760 [ 189.503597][ T5637] ? __x64_sys_bpf+0x7c/0x90 [ 189.508401][ T5637] ? x64_sys_call+0x87f/0x9a0 [ 189.512901][ T5637] ? do_syscall_64+0x3b/0xb0 [ 189.517611][ T5637] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.523631][ T5637] ? __kasan_kmalloc+0x9/0x10 [ 189.528410][ T5637] ? memset+0x35/0x40 [ 189.532229][ T5637] ? bpf_obj_name_cpy+0x196/0x1e0 [ 189.537440][ T5637] bpf_prog_load+0x12ac/0x1b50 [ 189.542035][ T5637] ? map_freeze+0x370/0x370 [ 189.546384][ T5637] ? selinux_bpf+0xcb/0x100 [ 189.551200][ T5637] ? security_bpf+0x82/0xb0 [ 189.555530][ T5637] __sys_bpf+0x4bc/0x760 [ 189.559901][ T5637] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 189.565219][ T5637] ? __kasan_check_write+0x14/0x20 [ 189.570421][ T5637] ? switch_fpu_return+0x15f/0x2e0 [ 189.575476][ T5637] __x64_sys_bpf+0x7c/0x90 [ 189.585297][ T5637] x64_sys_call+0x87f/0x9a0 [ 189.589971][ T5637] do_syscall_64+0x3b/0xb0 [ 189.594209][ T5637] ? clear_bhb_loop+0x35/0x90 [ 189.599028][ T5637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.605073][ T5637] RIP: 0033:0x7fe7d97ab919 [ 189.610964][ T5637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.632160][ T5637] RSP: 002b:00007fe7d7e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.640765][ T5637] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 189.648827][ T5637] RDX: 0000000000000080 RSI: 0000000020000580 RDI: 0000000000000005 [ 189.656707][ T5637] RBP: 00007fe7d981e97e R08: 0000000000000000 R09: 0000000000000000 [ 189.664754][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.674242][ T5637] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 189.682389][ T5637] [ 189.685338][ T5637] ---[ end trace 5a20923058e90e44 ]--- [ 189.926986][ T5700] device pim6reg1 entered promiscuous mode [ 189.971091][ T5704] syz.0.1948[5704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.971174][ T5704] syz.0.1948[5704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.349861][ T5718] FAULT_INJECTION: forcing a failure. [ 190.349861][ T5718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.399997][ T5718] CPU: 0 PID: 5718 Comm: syz.0.1954 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 190.411122][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.421018][ T5718] Call Trace: [ 190.424143][ T5718] [ 190.426921][ T5718] dump_stack_lvl+0x151/0x1c0 [ 190.431518][ T5718] ? io_uring_drop_tctx_refs+0x190/0x190 [ 190.436986][ T5718] ? bpf_get_stack+0x31/0x40 [ 190.441412][ T5718] dump_stack+0x15/0x20 [ 190.445401][ T5718] should_fail+0x3c6/0x510 [ 190.449659][ T5718] should_fail_alloc_page+0x5a/0x80 [ 190.454689][ T5718] prepare_alloc_pages+0x15c/0x700 [ 190.459640][ T5718] ? __alloc_pages_bulk+0xe40/0xe40 [ 190.464685][ T5718] __alloc_pages+0x18c/0x8f0 [ 190.469108][ T5718] ? prep_new_page+0x110/0x110 [ 190.473698][ T5718] ? __this_cpu_preempt_check+0x13/0x20 [ 190.479080][ T5718] ? __mod_node_page_state+0xac/0xf0 [ 190.484202][ T5718] kmalloc_order+0x4a/0x160 [ 190.488542][ T5718] kmalloc_order_trace+0x1a/0xb0 [ 190.493314][ T5718] __kmalloc+0x19c/0x270 [ 190.497398][ T5718] ? slhc_init+0x77/0x7a0 [ 190.501565][ T5718] slhc_init+0x16c/0x7a0 [ 190.505639][ T5718] ppp_ioctl+0x13de/0x19a0 [ 190.509980][ T5718] ? __mutex_lock_slowpath+0x10/0x10 [ 190.515104][ T5718] ? ppp_poll+0x250/0x250 [ 190.519265][ T5718] ? __fget_files+0x31e/0x380 [ 190.523797][ T5718] ? security_file_ioctl+0x84/0xb0 [ 190.528729][ T5718] ? ppp_poll+0x250/0x250 [ 190.532891][ T5718] __se_sys_ioctl+0x114/0x190 [ 190.537408][ T5718] __x64_sys_ioctl+0x7b/0x90 [ 190.541839][ T5718] x64_sys_call+0x98/0x9a0 [ 190.546095][ T5718] do_syscall_64+0x3b/0xb0 [ 190.550349][ T5718] ? clear_bhb_loop+0x35/0x90 [ 190.554854][ T5718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.560580][ T5718] RIP: 0033:0x7f7d56df7919 [ 190.564834][ T5718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.584280][ T5718] RSP: 002b:00007f7d55470038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.592529][ T5718] RAX: ffffffffffffffda RBX: 00007f7d56faefa0 RCX: 00007f7d56df7919 [ 190.600332][ T5718] RDX: 000000002000000c RSI: 0000000040047451 RDI: 0000000000000006 [ 190.608143][ T5718] RBP: 00007f7d55470090 R08: 0000000000000000 R09: 0000000000000000 [ 190.615955][ T5718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.623770][ T5718] R13: 0000000000000000 R14: 00007f7d56faefa0 R15: 00007fffccf1f158 [ 190.631585][ T5718] [ 190.975595][ T5728] device wg2 entered promiscuous mode [ 191.156167][ T5744] syz.4.1964[5744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.156244][ T5744] syz.4.1964[5744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.982929][ T5769] tap0: tun_chr_ioctl cmd 1074025677 [ 192.142690][ T5769] tap0: linktype set to 805 [ 192.325824][ T5787] device pim6reg1 entered promiscuous mode [ 201.778942][ T6048] ÿÿÿÿÿÿ: renamed from vlan1 [ 201.877495][ T6064] device pim6reg1 entered promiscuous mode [ 203.384662][ T6138] FAULT_INJECTION: forcing a failure. [ 203.384662][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.407590][ T6138] CPU: 1 PID: 6138 Comm: syz.2.2106 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 203.418882][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.429040][ T6138] Call Trace: [ 203.432162][ T6138] [ 203.434942][ T6138] dump_stack_lvl+0x151/0x1c0 [ 203.439453][ T6138] ? io_uring_drop_tctx_refs+0x190/0x190 [ 203.444922][ T6138] dump_stack+0x15/0x20 [ 203.449006][ T6138] should_fail+0x3c6/0x510 [ 203.453255][ T6138] should_fail_usercopy+0x1a/0x20 [ 203.458112][ T6138] _copy_from_user+0x20/0xd0 [ 203.462550][ T6138] __sys_bpf+0x1e9/0x760 [ 203.466704][ T6138] ? fput_many+0x160/0x1b0 [ 203.470956][ T6138] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 203.476179][ T6138] ? debug_smp_processor_id+0x17/0x20 [ 203.481378][ T6138] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 203.487278][ T6138] __x64_sys_bpf+0x7c/0x90 [ 203.491530][ T6138] x64_sys_call+0x87f/0x9a0 [ 203.495865][ T6138] do_syscall_64+0x3b/0xb0 [ 203.500119][ T6138] ? clear_bhb_loop+0x35/0x90 [ 203.504637][ T6138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.510369][ T6138] RIP: 0033:0x7fe7d97ab919 [ 203.514616][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.534057][ T6138] RSP: 002b:00007fe7d7e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.542302][ T6138] RAX: ffffffffffffffda RBX: 00007fe7d9962fa0 RCX: 00007fe7d97ab919 [ 203.550115][ T6138] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 203.557923][ T6138] RBP: 00007fe7d7e24090 R08: 0000000000000000 R09: 0000000000000000 [ 203.565737][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.573548][ T6138] R13: 0000000000000000 R14: 00007fe7d9962fa0 R15: 00007ffe0fb11998 [ 203.581369][ T6138] [ 210.077333][ T6272] FAULT_INJECTION: forcing a failure. [ 210.077333][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 210.090008][ T6272] CPU: 0 PID: 6272 Comm: syz.0.2157 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 210.101108][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.111008][ T6272] Call Trace: [ 210.114135][ T6272] [ 210.116907][ T6272] dump_stack_lvl+0x151/0x1c0 [ 210.121422][ T6272] ? io_uring_drop_tctx_refs+0x190/0x190 [ 210.126897][ T6272] ? debug_smp_processor_id+0x17/0x20 [ 210.132096][ T6272] ? kasan_quarantine_put+0x34/0x1a0 [ 210.137217][ T6272] ? kmem_cache_free+0x116/0x2e0 [ 210.141995][ T6272] dump_stack+0x15/0x20 [ 210.145983][ T6272] should_fail+0x3c6/0x510 [ 210.150237][ T6272] __should_failslab+0xa4/0xe0 [ 210.154839][ T6272] ? __sigqueue_alloc+0x130/0x200 [ 210.159694][ T6272] should_failslab+0x9/0x20 [ 210.164127][ T6272] slab_pre_alloc_hook+0x37/0xd0 [ 210.168897][ T6272] ? __sigqueue_alloc+0x130/0x200 [ 210.173762][ T6272] kmem_cache_alloc+0x44/0x200 [ 210.178365][ T6272] __sigqueue_alloc+0x130/0x200 [ 210.183042][ T6272] __send_signal+0x1fd/0xcb0 [ 210.187470][ T6272] send_signal+0x43a/0x590 [ 210.191720][ T6272] ? memcpy+0x56/0x70 [ 210.195540][ T6272] do_send_sig_info+0xde/0x230 [ 210.200139][ T6272] group_send_sig_info+0x113/0x460 [ 210.205271][ T6272] ? __lock_task_sighand+0x100/0x100 [ 210.210349][ T6272] ? arch_do_signal_or_restart+0x132a/0x1680 [ 210.216166][ T6272] bpf_send_signal_common+0x2d8/0x420 [ 210.221377][ T6272] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 210.227625][ T6272] bpf_send_signal+0x19/0x20 [ 210.232045][ T6272] bpf_prog_7ba5217f62dcd359+0x38/0xc94 [ 210.237429][ T6272] bpf_trace_run2+0xec/0x210 [ 210.241853][ T6272] ? bpf_trace_run1+0x1c0/0x1c0 [ 210.246542][ T6272] __bpf_trace_sys_enter+0x62/0x70 [ 210.251579][ T6272] syscall_enter_from_user_mode+0x197/0x1b0 [ 210.257304][ T6272] do_syscall_64+0x1e/0xb0 [ 210.261557][ T6272] ? clear_bhb_loop+0x35/0x90 [ 210.266070][ T6272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.271802][ T6272] RIP: 0033:0x7f7d56d93289 [ 210.276053][ T6272] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 210.295691][ T6272] RSP: 002b:00007f7d5544ea80 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 210.303911][ T6272] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7d56d93289 [ 210.311723][ T6272] RDX: 00007f7d5544ea80 RSI: 00007f7d5544ebb0 RDI: 0000000000000011 [ 210.319534][ T6272] RBP: 00007f7d5544f090 R08: 0000000000000000 R09: 00007f7d5544edf6 [ 210.327347][ T6272] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000004d [ 210.335165][ T6272] R13: 0000000000000001 R14: 00007f7d56faf080 R15: 00007fffccf1f158 [ 210.342980][ T6272] [ 221.037278][ T6394] device syzkaller0 entered promiscuous mode [ 223.533000][ T6494] device syzkaller0 entered promiscuous mode [ 223.854863][ T6499] device sit0 entered promiscuous mode [ 224.939150][ T6535] bond_slave_1: mtu less than device minimum [ 225.029418][ T6537] FAULT_INJECTION: forcing a failure. [ 225.029418][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 225.397939][ T6537] CPU: 0 PID: 6537 Comm: syz.3.2256 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 225.409062][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.418961][ T6537] Call Trace: [ 225.422079][ T6537] [ 225.424855][ T6537] dump_stack_lvl+0x151/0x1c0 [ 225.429369][ T6537] ? io_uring_drop_tctx_refs+0x190/0x190 [ 225.434842][ T6537] ? avc_has_perm_noaudit+0x2dd/0x430 [ 225.440049][ T6537] dump_stack+0x15/0x20 [ 225.444037][ T6537] should_fail+0x3c6/0x510 [ 225.448293][ T6537] __should_failslab+0xa4/0xe0 [ 225.452900][ T6537] should_failslab+0x9/0x20 [ 225.457236][ T6537] slab_pre_alloc_hook+0x37/0xd0 [ 225.462005][ T6537] kmem_cache_alloc_trace+0x48/0x210 [ 225.467124][ T6537] ? find_css_set+0x9d7/0x1580 [ 225.471727][ T6537] find_css_set+0x9d7/0x1580 [ 225.476155][ T6537] ? cgroup_migrate_prepare_dst+0x910/0x910 [ 225.481884][ T6537] ? __kasan_check_write+0x14/0x20 [ 225.486834][ T6537] cgroup_migrate_prepare_dst+0xc5/0x910 [ 225.492300][ T6537] cgroup_attach_task+0x2cd/0x580 [ 225.497159][ T6537] ? cgroup_migrate_execute+0x1090/0x1090 [ 225.502713][ T6537] ? cgroup_attach_permissions+0x2cc/0x970 [ 225.508353][ T6537] ? __kasan_check_write+0x14/0x20 [ 225.513299][ T6537] ? revert_creds+0xc0/0x150 [ 225.517732][ T6537] __cgroup_procs_write+0x31a/0x3f0 [ 225.522761][ T6537] ? __cgroup_procs_start+0x780/0x780 [ 225.527967][ T6537] ? __kasan_check_write+0x14/0x20 [ 225.532914][ T6537] ? cgroup_threads_start+0x30/0x30 [ 225.537950][ T6537] cgroup_threads_write+0x26/0x50 [ 225.542813][ T6537] ? cgroup_threads_start+0x30/0x30 [ 225.547844][ T6537] cgroup_file_write+0x290/0x590 [ 225.552633][ T6537] ? cgroup_seqfile_stop+0xc0/0xc0 [ 225.557564][ T6537] ? wait_for_completion_killable_timeout+0x10/0x10 [ 225.563990][ T6537] ? __kasan_check_write+0x14/0x20 [ 225.568931][ T6537] ? kernfs_get_active+0x9e/0xf0 [ 225.573729][ T6537] kernfs_fop_write_iter+0x2c4/0x410 [ 225.578831][ T6537] ? cgroup_seqfile_stop+0xc0/0xc0 [ 225.583776][ T6537] vfs_write+0xd5d/0x1110 [ 225.587944][ T6537] ? file_end_write+0x1c0/0x1c0 [ 225.592631][ T6537] ? mutex_lock+0xb6/0x1e0 [ 225.596882][ T6537] ? wait_for_completion_killable_timeout+0x10/0x10 [ 225.603312][ T6537] ? __fdget_pos+0x2e7/0x3a0 [ 225.607732][ T6537] ? ksys_write+0x77/0x2c0 [ 225.611986][ T6537] ksys_write+0x199/0x2c0 [ 225.616152][ T6537] ? __ia32_sys_read+0x90/0x90 [ 225.620752][ T6537] ? debug_smp_processor_id+0x17/0x20 [ 225.625957][ T6537] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 225.631874][ T6537] __x64_sys_write+0x7b/0x90 [ 225.636286][ T6537] x64_sys_call+0x2f/0x9a0 [ 225.640546][ T6537] do_syscall_64+0x3b/0xb0 [ 225.644802][ T6537] ? clear_bhb_loop+0x35/0x90 [ 225.649306][ T6537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.655041][ T6537] RIP: 0033:0x7f8168370919 [ 225.659288][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.678731][ T6537] RSP: 002b:00007f81669e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.686975][ T6537] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f8168370919 [ 225.694789][ T6537] RDX: 0000000000000012 RSI: 0000000020000c40 RDI: 0000000000000006 [ 225.702599][ T6537] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 225.710411][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.718221][ T6537] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 225.726038][ T6537] [ 226.018504][ T6555] device syzkaller0 entered promiscuous mode [ 228.605386][ T6695] device syzkaller0 entered promiscuous mode [ 229.174338][ T6753] syz.0.2341[6753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.174417][ T6753] syz.0.2341[6753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.569720][ T6789] device syzkaller0 entered promiscuous mode [ 233.169491][ T6904] device pim6reg1 entered promiscuous mode [ 233.386332][ T6912] FAULT_INJECTION: forcing a failure. [ 233.386332][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.400779][ T6912] CPU: 0 PID: 6912 Comm: syz.1.2397 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 233.411888][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.421782][ T6912] Call Trace: [ 233.424903][ T6912] [ 233.427679][ T6912] dump_stack_lvl+0x151/0x1c0 [ 233.432198][ T6912] ? io_uring_drop_tctx_refs+0x190/0x190 [ 233.437666][ T6912] ? __kasan_check_write+0x14/0x20 [ 233.442628][ T6912] dump_stack+0x15/0x20 [ 233.446607][ T6912] should_fail+0x3c6/0x510 [ 233.450857][ T6912] should_fail_usercopy+0x1a/0x20 [ 233.455719][ T6912] _copy_from_user+0x20/0xd0 [ 233.460144][ T6912] sock_do_ioctl+0x229/0x5a0 [ 233.464571][ T6912] ? sock_show_fdinfo+0xa0/0xa0 [ 233.469270][ T6912] ? selinux_file_ioctl+0x3cc/0x540 [ 233.474640][ T6912] sock_ioctl+0x455/0x740 [ 233.478804][ T6912] ? sock_poll+0x400/0x400 [ 233.483055][ T6912] ? __fget_files+0x31e/0x380 [ 233.487574][ T6912] ? security_file_ioctl+0x84/0xb0 [ 233.492523][ T6912] ? sock_poll+0x400/0x400 [ 233.496780][ T6912] __se_sys_ioctl+0x114/0x190 [ 233.501302][ T6912] __x64_sys_ioctl+0x7b/0x90 [ 233.505712][ T6912] x64_sys_call+0x98/0x9a0 [ 233.509964][ T6912] do_syscall_64+0x3b/0xb0 [ 233.514220][ T6912] ? clear_bhb_loop+0x35/0x90 [ 233.518728][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.524459][ T6912] RIP: 0033:0x7f14212b8919 [ 233.528713][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.548153][ T6912] RSP: 002b:00007f141f931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.556398][ T6912] RAX: ffffffffffffffda RBX: 00007f142146ffa0 RCX: 00007f14212b8919 [ 233.564208][ T6912] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 233.572021][ T6912] RBP: 00007f141f931090 R08: 0000000000000000 R09: 0000000000000000 [ 233.579841][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.587645][ T6912] R13: 0000000000000000 R14: 00007f142146ffa0 R15: 00007ffea9e89eb8 [ 233.595465][ T6912] [ 233.775449][ T30] audit: type=1400 audit(1732640042.934:152): avc: denied { create } for pid=6941 comm="syz.2.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 234.382728][ T6989] device sit0 entered promiscuous mode [ 234.939418][ T6978] device wg2 entered promiscuous mode [ 235.023215][ T7017] device pim6reg1 entered promiscuous mode [ 235.112546][ T30] audit: type=1400 audit(1732640044.274:153): avc: denied { create } for pid=7018 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.377694][ T7038] ip6_vti0: mtu greater than device maximum [ 240.965922][ T7191] device syzkaller0 entered promiscuous mode [ 242.335070][ T7234] FAULT_INJECTION: forcing a failure. [ 242.335070][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.488267][ T7234] CPU: 0 PID: 7234 Comm: syz.3.2511 Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 242.499392][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.509288][ T7234] Call Trace: [ 242.512409][ T7234] [ 242.515188][ T7234] dump_stack_lvl+0x151/0x1c0 [ 242.519710][ T7234] ? io_uring_drop_tctx_refs+0x190/0x190 [ 242.525170][ T7234] dump_stack+0x15/0x20 [ 242.529165][ T7234] should_fail+0x3c6/0x510 [ 242.533419][ T7234] should_fail_usercopy+0x1a/0x20 [ 242.538294][ T7234] _copy_to_user+0x20/0x90 [ 242.542532][ T7234] simple_read_from_buffer+0xc7/0x150 [ 242.547739][ T7234] proc_fail_nth_read+0x1a3/0x210 [ 242.552597][ T7234] ? proc_fault_inject_write+0x390/0x390 [ 242.558062][ T7234] ? fsnotify_perm+0x269/0x5b0 [ 242.562662][ T7234] ? security_file_permission+0x86/0xb0 [ 242.568041][ T7234] ? proc_fault_inject_write+0x390/0x390 [ 242.573514][ T7234] vfs_read+0x27d/0xd40 [ 242.577507][ T7234] ? sock_show_fdinfo+0xa0/0xa0 [ 242.582196][ T7234] ? kernel_read+0x1f0/0x1f0 [ 242.586618][ T7234] ? __kasan_check_write+0x14/0x20 [ 242.591564][ T7234] ? mutex_lock+0xb6/0x1e0 [ 242.595820][ T7234] ? wait_for_completion_killable_timeout+0x10/0x10 [ 242.602247][ T7234] ? __fdget_pos+0x2e7/0x3a0 [ 242.606667][ T7234] ? ksys_read+0x77/0x2c0 [ 242.610835][ T7234] ksys_read+0x199/0x2c0 [ 242.614914][ T7234] ? vfs_write+0x1110/0x1110 [ 242.619339][ T7234] ? debug_smp_processor_id+0x17/0x20 [ 242.624548][ T7234] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 242.630450][ T7234] __x64_sys_read+0x7b/0x90 [ 242.634789][ T7234] x64_sys_call+0x28/0x9a0 [ 242.639042][ T7234] do_syscall_64+0x3b/0xb0 [ 242.643293][ T7234] ? clear_bhb_loop+0x35/0x90 [ 242.647809][ T7234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.653536][ T7234] RIP: 0033:0x7f816836f35c [ 242.657789][ T7234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 242.677232][ T7234] RSP: 002b:00007f81669e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.685474][ T7234] RAX: ffffffffffffffda RBX: 00007f8168527fa0 RCX: 00007f816836f35c [ 242.693287][ T7234] RDX: 000000000000000f RSI: 00007f81669e90a0 RDI: 000000000000000a [ 242.701099][ T7234] RBP: 00007f81669e9090 R08: 0000000000000000 R09: 0000000000000000 [ 242.708912][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.716725][ T7234] R13: 0000000000000000 R14: 00007f8168527fa0 R15: 00007ffd65d55a38 [ 242.724540][ T7234] [ 243.998807][ T7287] device pim6reg1 entered promiscuous mode [ 244.038040][ T7271] ÿÿÿÿÿÿ: renamed from vlan1 [ 245.283382][ T7362] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 245.419062][ T7374] syz.0.2572[7374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.419134][ T7374] syz.0.2572[7374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.007576][ T7397] ÿÿÿÿÿÿ: renamed from vlan1 [ 246.399795][ T7404] syz.2.2583[7404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.399868][ T7404] syz.2.2583[7404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.513673][ T7442] syz.2.2598[7442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.817689][ T7442] syz.2.2598[7442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.318814][ T30] audit: type=1400 audit(1732640058.484:154): avc: denied { create } for pid=7446 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.353121][ T7484] syz.4.2609[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.353198][ T7484] syz.4.2609[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.542040][ T7521] syz.2.2623[7521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.689241][ T7521] syz.2.2623[7521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.949616][ T7540] syz.2.2627[7540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.127993][ T7540] syz.2.2627[7540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.557588][ T7560] syz.4.2637[7560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.617667][ T7560] syz.4.2637[7560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.325347][ T7609] syz.2.2654[7609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.343479][ T7609] syz.2.2654[7609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.758356][ T7655] device veth0_vlan left promiscuous mode [ 256.828073][ T7655] device veth0_vlan entered promiscuous mode [ 257.052683][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.073371][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.081031][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 257.482033][ T7685] bpf_get_probe_write_proto: 2 callbacks suppressed [ 257.482054][ T7685] syz.2.2687[7685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.569681][ T7685] syz.2.2687[7685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.258738][ T7739] syz.1.2702[7739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.269967][ T7739] syz.1.2702[7739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.286113][ T7771] ÿÿÿÿÿÿ: renamed from vlan1 [ 260.411147][ T7777] syz.3.2717[7777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.411219][ T7777] syz.3.2717[7777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.000823][ T7817] syz.2.2732[7817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.012027][ T7819] ÿÿÿÿÿÿ: renamed from vlan1 [ 261.027791][ T7817] syz.2.2732[7817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.501625][ T7851] syz.1.2744[7851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.717771][ T7851] syz.1.2744[7851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.187523][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.592537][ T7912] bpf_get_probe_write_proto: 2 callbacks suppressed [ 262.592558][ T7912] syz.1.2769[7912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.610178][ T7912] syz.1.2769[7912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.626164][ T7906] device pim6reg1 entered promiscuous mode [ 262.839161][ T7942] syz.3.2782[7942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.839236][ T7942] syz.3.2782[7942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.462313][ T7973] syz.0.2796[7973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.530609][ T7973] syz.0.2796[7973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.346514][ T30] audit: type=1400 audit(1732640073.504:155): avc: denied { create } for pid=8029 comm="syz.0.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 265.320670][ T8064] device pim6reg1 entered promiscuous mode [ 266.029434][ T8084] tun0: tun_chr_ioctl cmd 1074025675 [ 266.034571][ T8084] tun0: persist disabled [ 269.129813][ T8195] syz.2.2872[8195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.129887][ T8195] syz.2.2872[8195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.589858][ T8220] device veth1_macvtap left promiscuous mode [ 269.609329][ T8220] device macsec0 left promiscuous mode [ 269.612290][ T8223] syz.3.2883[8223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.614680][ T8223] syz.3.2883[8223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.670363][ T8212] device veth1_macvtap entered promiscuous mode [ 269.693954][ T8212] device macsec0 entered promiscuous mode [ 269.901589][ T297] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 269.913141][ T297] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 269.921385][ T297] CPU: 1 PID: 297 Comm: syz-executor Tainted: G W 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 269.932586][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.942475][ T297] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 269.947947][ T297] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 a9 b8 2a ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 86 b8 2a ff 41 f6 07 01 48 89 5d [ 269.967388][ T297] RSP: 0018:ffffc900009f76a0 EFLAGS: 00010246 [ 269.973286][ T297] RAX: dffffc0000000000 RBX: ffff88811d2c8190 RCX: ffff88810acd3b40 [ 269.981100][ T297] RDX: ffffffff81a57c60 RSI: ffff888111168348 RDI: ffff88811d2c8180 [ 269.988911][ T297] RBP: ffffc900009f7700 R08: ffffffff81a55d20 R09: ffffed102222d06d [ 269.996722][ T297] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 270.004540][ T297] R13: ffff88811d2c8180 R14: 1ffff11023a59032 R15: 0000000000000000 [ 270.012346][ T297] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 270.021113][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.027533][ T297] CR2: 00005555916404a8 CR3: 0000000125f1f000 CR4: 00000000003506a0 [ 270.035349][ T297] DR0: 0000000020000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.043160][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 270.050968][ T297] Call Trace: [ 270.054094][ T297] [ 270.056874][ T297] ? __die_body+0x62/0xb0 [ 270.061036][ T297] ? die_addr+0x9f/0xd0 [ 270.065031][ T297] ? exc_general_protection+0x311/0x4b0 [ 270.070415][ T297] ? asm_exc_general_protection+0x27/0x30 [ 270.076062][ T297] ? vma_interval_tree_remove+0xae0/0xba0 [ 270.081617][ T297] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 270.087867][ T297] ? __rb_erase_color+0x20b/0xa60 [ 270.092726][ T297] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 270.098973][ T297] ? rwsem_mark_wake+0x770/0x770 [ 270.103753][ T297] vma_interval_tree_remove+0xb82/0xba0 [ 270.109131][ T297] unlink_file_vma+0xd9/0xf0 [ 270.113556][ T297] free_pgtables+0x13f/0x280 [ 270.117986][ T297] exit_mmap+0x405/0x940 [ 270.122065][ T297] ? exit_aio+0x25e/0x3c0 [ 270.126225][ T297] ? vm_brk+0x30/0x30 [ 270.130047][ T297] ? mutex_unlock+0xb2/0x260 [ 270.134480][ T297] ? uprobe_clear_state+0x2cd/0x320 [ 270.139509][ T297] __mmput+0x95/0x310 [ 270.143327][ T297] mmput+0x5b/0x170 [ 270.146972][ T297] do_exit+0xb9c/0x2ca0 [ 270.150964][ T297] ? put_task_struct+0x80/0x80 [ 270.155565][ T297] ? __kasan_check_write+0x14/0x20 [ 270.160510][ T297] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 270.165460][ T297] ? _raw_spin_lock_irqsave+0x210/0x210 [ 270.170838][ T297] do_group_exit+0x141/0x310 [ 270.175270][ T297] get_signal+0x7a3/0x1630 [ 270.179538][ T297] arch_do_signal_or_restart+0xbd/0x1680 [ 270.184993][ T297] ? file_end_write+0x1c0/0x1c0 [ 270.189682][ T297] ? kernel_waitid+0x520/0x520 [ 270.194276][ T297] ? get_sigframe_size+0x10/0x10 [ 270.199047][ T297] ? __kasan_check_read+0x11/0x20 [ 270.203915][ T297] ? __fdget_pos+0x209/0x3a0 [ 270.208335][ T297] ? __ia32_sys_read+0x90/0x90 [ 270.212942][ T297] exit_to_user_mode_loop+0xa0/0xe0 [ 270.217972][ T297] exit_to_user_mode_prepare+0x5a/0xa0 [ 270.223264][ T297] syscall_exit_to_user_mode+0x26/0x160 [ 270.228648][ T297] do_syscall_64+0x47/0xb0 [ 270.232897][ T297] ? clear_bhb_loop+0x35/0x90 [ 270.237413][ T297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.243143][ T297] RIP: 0033:0x7f7d56df63c0 [ 270.247391][ T297] Code: Unable to access opcode bytes at RIP 0x7f7d56df6396. [ 270.254598][ T297] RSP: 002b:00007fffccf1f4e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 270.262840][ T297] RAX: 0000000000000004 RBX: 0000000000000627 RCX: 00007f7d56df63c0 [ 270.270652][ T297] RDX: 0000000000000004 RSI: 00007fffccf1f570 RDI: 00000000000000f8 [ 270.278463][ T297] RBP: 00007fffccf1f51c R08: 00007fffccff1080 R09: 00007fffccff10b0 [ 270.286276][ T297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 270.294084][ T297] R13: 0000000000041b0e R14: 0000000000041aa3 R15: 00007fffccf1f570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.301904][ T297] [ 270.304763][ T297] Modules linked in: [ 270.316230][ T297] ---[ end trace 5a20923058e90e45 ]--- [ 270.321645][ T297] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 270.327204][ T297] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 a9 b8 2a ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 86 b8 2a ff 41 f6 07 01 48 89 5d [ 270.346648][ T297] RSP: 0018:ffffc900009f76a0 EFLAGS: 00010246 [ 270.353237][ T297] RAX: dffffc0000000000 RBX: ffff88811d2c8190 RCX: ffff88810acd3b40 [ 270.476498][ T297] RDX: ffffffff81a57c60 RSI: ffff888111168348 RDI: ffff88811d2c8180 [ 270.485201][ T297] RBP: ffffc900009f7700 R08: ffffffff81a55d20 R09: ffffed102222d06d [ 270.493101][ T297] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 270.501126][ T297] R13: ffff88811d2c8180 R14: 1ffff11023a59032 R15: 0000000000000000 [ 270.539729][ T297] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 270.548572][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.555410][ T297] CR2: 0000000100000000 CR3: 0000000124dd3000 CR4: 00000000003506a0 [ 270.563220][ T297] DR0: 0000000020000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.571456][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 270.585792][ T297] Kernel panic - not syncing: Fatal exception [ 270.591921][ T297] Kernel Offset: disabled [ 270.596051][ T297] Rebooting in 86400 seconds..