last executing test programs: 1m57.732828263s ago: executing program 3 (id=8878): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000100000000"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000700000000000000000085000000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000580)="e05c144e4923e231c5d6c3a9fca961", 0x0, 0xffffffff, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f3ab8e20f8c129ba334506429f17080000000038ddbc66000000f50000000000ebffffff00000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@struct={0xc, 0x8, 0x0, 0x4, 0x0, 0x7fffffff, [{0xd, 0x3, 0x8}, {0xc, 0x4, 0xfffffff7}, {0x9, 0x4, 0x9}, {0xd, 0x4}, {0x5, 0x4, 0x200}, {0x2, 0x3, 0x4}, {0x10, 0x3, 0xfffffff9}, {0x4, 0x2, 0xb}]}, @fwd={0x10}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}, @union={0xe, 0x2, 0x0, 0x5, 0x1, 0x0, [{0x5, 0x0, 0xd8d}, {0xd, 0x2}]}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f00000009c0)=""/121, 0xde, 0x79, 0x1, 0x40, 0x0, @void, @value}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xfff, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x11, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4f1e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000440)='syzkaller\x00', 0xa0000000, 0x0, &(0x7f0000000480), 0x41000, 0x18, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000a80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xd, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[r11, r12], &(0x7f0000000c40)=[{0x3, 0x2, 0x7, 0x3}, {0x2, 0x2, 0x0, 0xa}, {0x3, 0x5, 0xc, 0xc}], 0x10, 0x5, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1m54.610386264s ago: executing program 3 (id=8886): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x0, 0x60, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x20000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x2}, [@generic={0xf, 0x2, 0x9, 0x9, 0x1730}]}, &(0x7f0000000340)='syzkaller\x00', 0x44, 0x27, &(0x7f0000000380)=""/39, 0x41100, 0x40, '\x00', r4, @fallback, r1, 0x8, &(0x7f0000000900)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xf, 0x2, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000980)=[r0], &(0x7f0000000a00)=[{0x4, 0x1, 0x4, 0x3}, {0x3, 0x1, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x2, 0x3, 0x4, 0x8}], 0x10, 0xfffffff7, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x2a, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/39, 0x2b, 0x27, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r5, &(0x7f00000002c0), 0x0}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000000)=0x1) 1m54.30571529s ago: executing program 3 (id=8888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000aa988b6000004", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_destroy\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1m54.141362374s ago: executing program 3 (id=8891): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x100, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002b31ea8bc64b9274104032a24180423c0c636d2bb545d9cdcd1760ddfbb0b139f551316b276b4f52229c45c95e52d806ec2c042c"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m53.882804637s ago: executing program 3 (id=8894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 1m53.822350882s ago: executing program 3 (id=8896): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 4.27679786s ago: executing program 0 (id=9836): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.230121924s ago: executing program 0 (id=9837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xa, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4.195826617s ago: executing program 0 (id=9838): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfdef) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'nicvf0\x00', 0x8000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000300), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000980)=""/175, 0xb5}, {&(0x7f0000000580)=""/16, 0x51}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/126, 0x83}], 0x7, &(0x7f0000000840), 0x80}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="ff009dbb57e0a66a00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2000000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, 0x0, 0xfffffeb4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='qgroup_update_counters\x00', r11, 0x0, 0x8000000000000}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.017843089s ago: executing program 0 (id=9854): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x100, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff4305", 0x0, 0xfe, 0x60000000}, 0x50) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002b31ea8bc64b9274104032a24180423c0c636d2bb545d9cdcd1760ddfbb0b139f551316b276b4f52229c45c95e52d806ec2c042c"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.992249971s ago: executing program 1 (id=9857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.951178635s ago: executing program 1 (id=9860): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_freezer_state(r0, &(0x7f0000000400)='FREEZING\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x100, 0x9, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5c0e0000ff000000"], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) 2.77337001s ago: executing program 0 (id=9863): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 2.760587021s ago: executing program 0 (id=9864): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r7, 0x8982, 0x20000000) 2.210027289s ago: executing program 1 (id=9868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x16, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) gettid() 2.173182302s ago: executing program 1 (id=9869): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.140336145s ago: executing program 1 (id=9872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x10810a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900402b1bf400c9ec9af05f6dc473b5308baac3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.08411229s ago: executing program 4 (id=9874): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef) 2.068149181s ago: executing program 4 (id=9875): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x11, &(0x7f00000002c0)=""/17, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x389b0946}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x2, 0x1, 0x5, 0x5}, {0x5, 0x4, 0x10, 0x2}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9f, 0x0, 0x8, 0x0, 0x0}}, 0x10) 623.745716ms ago: executing program 4 (id=9876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_subtree(r2, 0x0, 0x9) 614.693297ms ago: executing program 1 (id=9877): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x3a, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 592.774549ms ago: executing program 4 (id=9879): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_freezer_state(r0, &(0x7f0000000400)='FREEZING\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x100, 0x9, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5c0e0000ff000000"], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) 591.813279ms ago: executing program 2 (id=9888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x16, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) gettid() 459.29285ms ago: executing program 2 (id=9880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 431.533182ms ago: executing program 2 (id=9881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 304.859394ms ago: executing program 2 (id=9882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_subtree(r1, 0x0, 0x9) 154.753897ms ago: executing program 2 (id=9883): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) write$cgroup_subtree(r2, 0x0, 0x9) 151.186917ms ago: executing program 4 (id=9884): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef) 124.895789ms ago: executing program 4 (id=9885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0xc6, &(0x7f0000000300)=""/198, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{r2}, &(0x7f0000001c00), &(0x7f00000020c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000056d77e982378d3a2b20e04f272442100000000000000000000000000e04fc132872f80897a68f50417b97ca67d6120271c0ba8110b9d48402b4473c6d02a39d3466fcf71a7ef74927c2c6031004e1c19e54956bba21769c3a955fa339d99b48f018fdcba7713273c5f0fbfb4d2f5337f289409f918b197c8d8291b884c56a5090044dfceebfd6a9c21d80e4fb3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440)={'ip6_vti0', 0x32, 0x34}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='xprtrdma_marshal\x00', r1, 0x0, 0x6}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000400)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3d8}, [@exit, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xa, 0xb, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @generic={0x0, 0x7, 0xf, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0xee, &(0x7f0000000880)=""/238, 0x40f00, 0x20, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x2, 0xd, 0xff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000b80)=[r2, r5, r5, r4, r5], &(0x7f0000000bc0)=[{0x1, 0x2, 0x3, 0x1}, {0x2, 0x2, 0x9, 0x3}, {0x3, 0x3, 0x5, 0xb}, {0x3, 0x5, 0x3, 0x7}, {0x2, 0x2, 0x8, 0xb}, {0x4, 0x4, 0xe, 0x5}, {0x4, 0x4, 0x9, 0x4}, {0x2, 0x4, 0x7, 0x9}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=9886): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x11, &(0x7f00000002c0)=""/17, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x389b0946}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x2, 0x1, 0x5, 0x5}, {0x5, 0x4, 0x10, 0x2}], 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9f, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): ---------- [ 1076.188719][T26481] trace type BPF program uses run-time allocation [ 1076.250945][T26481] WARNING: CPU: 1 PID: 26481 at kernel/bpf/verifier.c:11685 check_map_prog_compatibility+0x6f1/0x890 [ 1076.275680][T26481] Modules linked in: [ 1076.279464][T26481] CPU: 1 PID: 26481 Comm: syz.0.8804 Not tainted 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1076.289667][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1076.301722][T26481] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 1076.308423][T26481] Code: db e9 f9 fc ff ff e8 3e 33 ed ff 31 db e9 ed fc ff ff e8 32 33 ed ff c6 05 1d 20 a3 05 01 48 c7 c7 60 df 87 85 e8 6f 68 be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 1076.343727][T26488] device pim6reg1 entered promiscuous mode [ 1076.356362][T26481] RSP: 0018:ffffc90000ad7328 EFLAGS: 00010246 [ 1076.363185][T26481] RAX: 0e028e6b2ad45400 RBX: 0000000000000001 RCX: 0000000000040000 [ 1076.371931][T26481] RDX: ffffc900037a9000 RSI: 0000000000000a8e RDI: 0000000000000a8f [ 1076.380786][T26481] RBP: ffffc90000ad7370 R08: ffffffff815796f5 R09: ffffed103ee265e8 [ 1076.388928][T26481] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 1076.404007][T26481] R13: ffff888115eb2800 R14: ffffc90000069000 R15: dffffc0000000000 [ 1076.421919][T26498] device pim6reg1 entered promiscuous mode [ 1076.423627][T26481] FS: 00007fdc4afc96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1076.436886][T26481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1076.450497][T26481] CR2: 0000000100000000 CR3: 000000010dbd7000 CR4: 00000000003506a0 [ 1076.459491][T26481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1076.467620][T26481] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1076.475859][T26481] Call Trace: [ 1076.479072][T26481] [ 1076.481856][T26481] ? show_regs+0x58/0x60 [ 1076.486417][T26481] ? __warn+0x160/0x2f0 [ 1076.490426][T26481] ? check_map_prog_compatibility+0x6f1/0x890 [ 1076.496605][T26481] ? report_bug+0x3d9/0x5b0 [ 1076.500958][T26481] ? check_map_prog_compatibility+0x6f1/0x890 [ 1076.506962][T26481] ? handle_bug+0x41/0x70 [ 1076.511528][T26481] ? exc_invalid_op+0x1b/0x50 [ 1076.522176][T26481] ? asm_exc_invalid_op+0x1b/0x20 [ 1076.527732][T26481] ? __wake_up_klogd+0xd5/0x110 [ 1076.538969][T26481] ? check_map_prog_compatibility+0x6f1/0x890 [ 1076.545425][T26481] ? check_map_prog_compatibility+0x6f1/0x890 [ 1076.552055][T26481] resolve_pseudo_ldimm64+0x682/0x1240 [ 1076.571111][T26481] ? check_attach_btf_id+0xef0/0xef0 [ 1076.577049][T26481] ? __mark_reg_known+0x1b0/0x1b0 [ 1076.582378][T26481] ? security_capable+0x87/0xb0 [ 1076.587700][T26481] bpf_check+0x3174/0x12bf0 [ 1076.592756][T26481] ? 0xffffffffa0014000 [ 1076.597456][T26481] ? is_bpf_text_address+0x172/0x190 [ 1076.602695][T26481] ? stack_trace_save+0x1c0/0x1c0 [ 1076.607945][T26481] ? __kernel_text_address+0x9b/0x110 [ 1076.616705][T26481] ? unwind_get_return_address+0x4d/0x90 [ 1076.637909][T26481] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1076.646779][T26481] ? arch_stack_walk+0xf3/0x140 [ 1076.655971][T26481] ? stack_trace_save+0x113/0x1c0 [ 1076.661567][T26481] ? stack_trace_snprint+0xf0/0xf0 [ 1076.726341][T26481] ? stack_trace_snprint+0xf0/0xf0 [ 1076.756684][T26481] ? __stack_depot_save+0x34/0x470 [ 1076.786331][T26481] ? ____kasan_kmalloc+0xed/0x110 [ 1076.843619][T26481] ? ____kasan_kmalloc+0xdb/0x110 [ 1076.869685][T26481] ? __kasan_kmalloc+0x9/0x10 [ 1076.900051][T26481] ? kmem_cache_alloc_trace+0x115/0x210 [ 1076.945094][T26481] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1076.993003][T26481] ? security_bpf_prog_alloc+0x62/0x90 [ 1076.998342][T26481] ? bpf_prog_load+0x9ee/0x1b50 [ 1077.042919][T26481] ? __sys_bpf+0x4bc/0x760 [ 1077.079177][T26481] ? __x64_sys_bpf+0x7c/0x90 [ 1077.105467][T26481] ? x64_sys_call+0x87f/0x9a0 [ 1077.136586][T26481] ? do_syscall_64+0x3b/0xb0 [ 1077.156829][T26481] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1077.189138][T26481] ? __kasan_kmalloc+0x9/0x10 [ 1077.263695][T26481] ? memset+0x35/0x40 [ 1077.267543][T26481] ? bpf_obj_name_cpy+0x196/0x1e0 [ 1077.355050][T26481] bpf_prog_load+0x12ac/0x1b50 [ 1077.389826][T26481] ? map_freeze+0x370/0x370 [ 1077.425090][T26481] ? selinux_bpf+0xcb/0x100 [ 1077.429464][T26481] ? security_bpf+0x82/0xb0 [ 1077.453493][T26481] __sys_bpf+0x4bc/0x760 [ 1077.467991][T26536] device pim6reg1 entered promiscuous mode [ 1077.473951][T26481] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1077.479486][T26481] ? __kasan_check_read+0x11/0x20 [ 1077.487205][T26481] __x64_sys_bpf+0x7c/0x90 [ 1077.492542][T26481] x64_sys_call+0x87f/0x9a0 [ 1077.530054][T26481] do_syscall_64+0x3b/0xb0 [ 1077.551334][T26481] ? clear_bhb_loop+0x35/0x90 [ 1077.573115][T26481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1077.578932][T26481] RIP: 0033:0x7fdc4c34fef9 [ 1077.583202][T26481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.606268][T26481] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.614953][T26481] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1077.628197][T26481] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1077.636309][T26481] RBP: 00007fdc4c3c2b76 R08: 0000000000000000 R09: 0000000000000000 [ 1077.644251][T26481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.652269][T26481] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1077.681059][T26481] [ 1077.686775][T26481] ---[ end trace 4f4f4ae95a8a12ac ]--- [ 1077.960218][T26542] device syzkaller0 entered promiscuous mode [ 1078.414090][T26580] device pim6reg1 entered promiscuous mode [ 1079.727063][T26606] FAULT_INJECTION: forcing a failure. [ 1079.727063][T26606] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.796917][T26606] CPU: 0 PID: 26606 Comm: syz.0.8851 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1079.808940][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1079.818823][T26606] Call Trace: [ 1079.821948][T26606] [ 1079.824815][T26606] dump_stack_lvl+0x151/0x1c0 [ 1079.829329][T26606] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1079.834802][T26606] dump_stack+0x15/0x20 [ 1079.838799][T26606] should_fail+0x3c6/0x510 [ 1079.843043][T26606] __should_failslab+0xa4/0xe0 [ 1079.847650][T26606] ? alloc_vmap_area+0x19e/0x1a80 [ 1079.852505][T26606] should_failslab+0x9/0x20 [ 1079.856838][T26606] slab_pre_alloc_hook+0x37/0xd0 [ 1079.861623][T26606] ? alloc_vmap_area+0x19e/0x1a80 [ 1079.866472][T26606] kmem_cache_alloc+0x44/0x200 [ 1079.871168][T26606] alloc_vmap_area+0x19e/0x1a80 [ 1079.875860][T26606] ? vm_map_ram+0xa90/0xa90 [ 1079.880396][T26606] ? kmem_cache_alloc_trace+0x115/0x210 [ 1079.885770][T26606] ? __get_vm_area_node+0x117/0x360 [ 1079.890809][T26606] __get_vm_area_node+0x158/0x360 [ 1079.895764][T26606] __vmalloc_node_range+0xe2/0x8d0 [ 1079.900961][T26606] ? sock_hash_alloc+0x2bf/0x560 [ 1079.905926][T26606] bpf_map_area_alloc+0xd9/0xf0 [ 1079.910596][T26606] ? sock_hash_alloc+0x2bf/0x560 [ 1079.915371][T26606] sock_hash_alloc+0x2bf/0x560 [ 1079.919979][T26606] map_create+0x411/0x2050 [ 1079.924230][T26606] __sys_bpf+0x296/0x760 [ 1079.928301][T26606] ? fput_many+0x160/0x1b0 [ 1079.932557][T26606] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1079.937777][T26606] ? debug_smp_processor_id+0x17/0x20 [ 1079.943065][T26606] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1079.948970][T26606] __x64_sys_bpf+0x7c/0x90 [ 1079.953279][T26606] x64_sys_call+0x87f/0x9a0 [ 1079.957590][T26606] do_syscall_64+0x3b/0xb0 [ 1079.961811][T26606] ? clear_bhb_loop+0x35/0x90 [ 1079.966335][T26606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1079.972312][T26606] RIP: 0033:0x7fdc4c34fef9 [ 1079.976575][T26606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.996194][T26606] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.004603][T26606] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1080.012416][T26606] RDX: 0000000000000048 RSI: 00000000200001c0 RDI: 0000000000000000 [ 1080.020341][T26606] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.028151][T26606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.035963][T26606] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1080.043784][T26606] [ 1080.061372][T26617] device pim6reg1 entered promiscuous mode [ 1080.178891][T26625] FAULT_INJECTION: forcing a failure. [ 1080.178891][T26625] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.191460][T26625] CPU: 0 PID: 26625 Comm: syz.4.8859 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1080.202603][T26625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1080.212580][T26625] Call Trace: [ 1080.215703][T26625] [ 1080.218499][T26625] dump_stack_lvl+0x151/0x1c0 [ 1080.223227][T26625] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1080.228773][T26625] dump_stack+0x15/0x20 [ 1080.232756][T26625] should_fail+0x3c6/0x510 [ 1080.237007][T26625] __should_failslab+0xa4/0xe0 [ 1080.241697][T26625] ? skb_ext_add+0x13f/0x840 [ 1080.246121][T26625] should_failslab+0x9/0x20 [ 1080.250458][T26625] slab_pre_alloc_hook+0x37/0xd0 [ 1080.255258][T26625] ? skb_ext_add+0x13f/0x840 [ 1080.259659][T26625] kmem_cache_alloc+0x44/0x200 [ 1080.264268][T26625] skb_ext_add+0x13f/0x840 [ 1080.268600][T26625] ? sock_alloc_send_pskb+0x915/0xa50 [ 1080.273809][T26625] xfrm_input+0x3e1/0x69c0 [ 1080.278060][T26625] ? fib6_table_lookup+0xaf0/0xaf0 [ 1080.283451][T26625] ? xfrm_parse_spi+0x570/0x570 [ 1080.288301][T26625] ? ip6_tnl_rcv_ctl+0x2c3/0x410 [ 1080.293124][T26625] vti6_input_proto+0x3c4/0x530 [ 1080.297766][T26625] vti6_rcv+0x9a/0xe0 [ 1080.301609][T26625] xfrm6_ah_rcv+0x65/0xf0 [ 1080.305752][T26625] ip6_protocol_deliver_rcu+0xa85/0x13c0 [ 1080.311237][T26625] ip6_input+0xd9/0x260 [ 1080.315212][T26625] ? ip6_protocol_deliver_rcu+0x13c0/0x13c0 [ 1080.320941][T26625] ? ip6_input+0x260/0x260 [ 1080.325194][T26625] ? sk_setup_caps+0x430/0x430 [ 1080.329793][T26625] ip6_rcv_finish+0x186/0x350 [ 1080.334390][T26625] ipv6_rcv+0xeb/0x270 [ 1080.338299][T26625] ? ip6_rcv_finish+0x350/0x350 [ 1080.342996][T26625] ? refcount_add+0x80/0x80 [ 1080.347326][T26625] ? ip6_rcv_finish+0x350/0x350 [ 1080.352011][T26625] __netif_receive_skb+0x1c6/0x530 [ 1080.356956][T26625] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 1080.362341][T26625] ? _copy_from_iter+0x221/0xdc0 [ 1080.367111][T26625] netif_receive_skb+0xb0/0x480 [ 1080.371903][T26625] ? _copy_from_iter+0x34d/0xdc0 [ 1080.376677][T26625] ? netif_receive_skb_core+0x210/0x210 [ 1080.382064][T26625] tun_rx_batched+0x6d9/0x870 [ 1080.386573][T26625] ? eth_type_trans+0x2e4/0x620 [ 1080.391262][T26625] ? local_bh_enable+0x30/0x30 [ 1080.395862][T26625] tun_get_user+0x2cb7/0x3aa0 [ 1080.400543][T26625] ? __x64_sys_openat+0x210/0x290 [ 1080.405387][T26625] ? x64_sys_call+0x6bf/0x9a0 [ 1080.409900][T26625] ? _kstrtoull+0x3a0/0x4a0 [ 1080.414240][T26625] ? tun_do_read+0x2010/0x2010 [ 1080.418835][T26625] ? kstrtouint_from_user+0x20a/0x2a0 [ 1080.424139][T26625] ? kstrtol_from_user+0x310/0x310 [ 1080.429081][T26625] ? avc_policy_seqno+0x1b/0x70 [ 1080.433764][T26625] ? selinux_file_permission+0x2c4/0x570 [ 1080.439245][T26625] tun_chr_write_iter+0x1e1/0x2e0 [ 1080.444096][T26625] vfs_write+0xd5d/0x1110 [ 1080.448262][T26625] ? file_end_write+0x1c0/0x1c0 [ 1080.452948][T26625] ? __fdget_pos+0x209/0x3a0 [ 1080.457378][T26625] ? ksys_write+0x77/0x2c0 [ 1080.461624][T26625] ksys_write+0x199/0x2c0 [ 1080.465890][T26625] ? __ia32_sys_read+0x90/0x90 [ 1080.470486][T26625] ? debug_smp_processor_id+0x17/0x20 [ 1080.475685][T26625] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1080.481590][T26625] __x64_sys_write+0x7b/0x90 [ 1080.486017][T26625] x64_sys_call+0x2f/0x9a0 [ 1080.490265][T26625] do_syscall_64+0x3b/0xb0 [ 1080.494525][T26625] ? clear_bhb_loop+0x35/0x90 [ 1080.499036][T26625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1080.504864][T26625] RIP: 0033:0x7f33e2897ef9 [ 1080.509116][T26625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.528642][T26625] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1080.536893][T26625] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1080.545098][T26625] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 1080.552957][T26625] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.560939][T26625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.568750][T26625] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1080.576572][T26625] [ 1081.306170][T26654] FAULT_INJECTION: forcing a failure. [ 1081.306170][T26654] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.384843][T26654] CPU: 0 PID: 26654 Comm: syz.2.8869 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1081.396058][T26654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1081.405957][T26654] Call Trace: [ 1081.409167][T26654] [ 1081.412027][T26654] dump_stack_lvl+0x151/0x1c0 [ 1081.416628][T26654] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1081.422100][T26654] dump_stack+0x15/0x20 [ 1081.426090][T26654] should_fail+0x3c6/0x510 [ 1081.430440][T26654] __should_failslab+0xa4/0xe0 [ 1081.435225][T26654] should_failslab+0x9/0x20 [ 1081.439637][T26654] slab_pre_alloc_hook+0x37/0xd0 [ 1081.444414][T26654] __kmalloc+0x6d/0x270 [ 1081.448489][T26654] ? sk_prot_alloc+0xf9/0x330 [ 1081.453004][T26654] sk_prot_alloc+0xf9/0x330 [ 1081.457339][T26654] ? _copy_from_user+0x96/0xd0 [ 1081.461942][T26654] sk_alloc+0x38/0x430 [ 1081.465936][T26654] bpf_prog_test_run_skb+0x362/0x1420 [ 1081.471149][T26654] ? __kasan_check_write+0x14/0x20 [ 1081.476093][T26654] ? proc_fail_nth_write+0x20b/0x290 [ 1081.481297][T26654] ? selinux_file_permission+0x2c4/0x570 [ 1081.486778][T26654] ? proc_fail_nth_read+0x210/0x210 [ 1081.491809][T26654] ? fsnotify_perm+0x6a/0x5d0 [ 1081.496317][T26654] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1081.502041][T26654] ? __kasan_check_write+0x14/0x20 [ 1081.506989][T26654] ? fput_many+0x160/0x1b0 [ 1081.511250][T26654] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1081.517059][T26654] bpf_prog_test_run+0x3b0/0x630 [ 1081.521830][T26654] ? bpf_prog_query+0x220/0x220 [ 1081.526520][T26654] ? selinux_bpf+0xd2/0x100 [ 1081.530856][T26654] ? security_bpf+0x82/0xb0 [ 1081.535195][T26654] __sys_bpf+0x525/0x760 [ 1081.539273][T26654] ? fput_many+0x160/0x1b0 [ 1081.543525][T26654] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1081.548740][T26654] ? debug_smp_processor_id+0x17/0x20 [ 1081.554031][T26654] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1081.559935][T26654] __x64_sys_bpf+0x7c/0x90 [ 1081.564199][T26654] x64_sys_call+0x87f/0x9a0 [ 1081.568530][T26654] do_syscall_64+0x3b/0xb0 [ 1081.572871][T26654] ? clear_bhb_loop+0x35/0x90 [ 1081.577502][T26654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1081.583401][T26654] RIP: 0033:0x7f117f40eef9 [ 1081.587654][T26654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.607182][T26654] RSP: 002b:00007f117e088038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.615515][T26654] RAX: ffffffffffffffda RBX: 00007f117f5c6f80 RCX: 00007f117f40eef9 [ 1081.623525][T26654] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 1081.631330][T26654] RBP: 00007f117e088090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.639196][T26654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.647211][T26654] R13: 0000000000000000 R14: 00007f117f5c6f80 R15: 00007ffd05e53ba8 [ 1081.655035][T26654] [ 1081.686211][T26658] device pim6reg1 entered promiscuous mode [ 1081.747826][T26667] FAULT_INJECTION: forcing a failure. [ 1081.747826][T26667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.812263][T26667] CPU: 1 PID: 26667 Comm: syz.2.8875 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1081.823657][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1081.833640][T26667] Call Trace: [ 1081.836772][T26667] [ 1081.839544][T26667] dump_stack_lvl+0x151/0x1c0 [ 1081.844058][T26667] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1081.849526][T26667] ? numa_migrate_prep+0xe0/0xe0 [ 1081.854307][T26667] dump_stack+0x15/0x20 [ 1081.858378][T26667] should_fail+0x3c6/0x510 [ 1081.862636][T26667] should_fail_alloc_page+0x5a/0x80 [ 1081.867680][T26667] prepare_alloc_pages+0x15c/0x700 [ 1081.872717][T26667] ? __alloc_pages_bulk+0xe40/0xe40 [ 1081.877749][T26667] ? down_read_trylock+0x3d6/0x7d0 [ 1081.882697][T26667] __alloc_pages+0x18c/0x8f0 [ 1081.887217][T26667] ? prep_new_page+0x110/0x110 [ 1081.891890][T26667] kmalloc_order+0x4a/0x160 [ 1081.896162][T26667] kmalloc_order_trace+0x1a/0xb0 [ 1081.900924][T26667] __kmalloc+0x19c/0x270 [ 1081.905093][T26667] kvmalloc_node+0x1f0/0x4d0 [ 1081.909522][T26667] ? vm_mmap+0xb0/0xb0 [ 1081.913514][T26667] ? _copy_from_user+0x96/0xd0 [ 1081.918118][T26667] map_lookup_and_delete_elem+0x51f/0x8d0 [ 1081.923924][T26667] __sys_bpf+0x4ce/0x760 [ 1081.928089][T26667] ? fput_many+0x160/0x1b0 [ 1081.932367][T26667] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1081.937552][T26667] ? debug_smp_processor_id+0x17/0x20 [ 1081.942758][T26667] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1081.948667][T26667] __x64_sys_bpf+0x7c/0x90 [ 1081.952911][T26667] x64_sys_call+0x87f/0x9a0 [ 1081.957254][T26667] do_syscall_64+0x3b/0xb0 [ 1081.961506][T26667] ? clear_bhb_loop+0x35/0x90 [ 1081.966025][T26667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1081.971750][T26667] RIP: 0033:0x7f117f40eef9 [ 1081.975997][T26667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.995527][T26667] RSP: 002b:00007f117e088038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1082.003772][T26667] RAX: ffffffffffffffda RBX: 00007f117f5c6f80 RCX: 00007f117f40eef9 [ 1082.011582][T26667] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000015 [ 1082.019393][T26667] RBP: 00007f117e088090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.027207][T26667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.035105][T26667] R13: 0000000000000000 R14: 00007f117f5c6f80 R15: 00007ffd05e53ba8 [ 1082.042927][T26667] [ 1085.609798][T26710] device pim6reg1 entered promiscuous mode [ 1087.308360][T26762] device sit0 entered promiscuous mode [ 1087.581845][T26771] device sit0 entered promiscuous mode [ 1087.682156][T26780] device sit0 entered promiscuous mode [ 1087.844189][T26808] syz.2.8933[26808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1087.844274][T26808] syz.2.8933[26808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.017854][T26821] syz.0.8938[26821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.045547][T26820] device syzkaller0 entered promiscuous mode [ 1088.063256][T26821] syz.0.8938[26821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.094212][T26828] syz.0.8942[26828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.122497][T26828] syz.0.8942[26828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.810165][T26863] device syzkaller0 entered promiscuous mode [ 1088.876276][T26866] device syzkaller0 entered promiscuous mode [ 1089.122649][T26895] device bridge0 entered promiscuous mode [ 1089.548362][T26936] device pim6reg1 entered promiscuous mode [ 1092.200750][T27031] veth1_macvtap: mtu less than device minimum [ 1096.392238][T25151] cgroup: fork rejected by pids controller in /syz2 [ 1096.552569][T27129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.573059][T27129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.580448][T27129] device bridge_slave_0 entered promiscuous mode [ 1096.621487][T27129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.654933][T27129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.702596][T27129] device bridge_slave_1 entered promiscuous mode [ 1097.503940][T27173] FAULT_INJECTION: forcing a failure. [ 1097.503940][T27173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.522941][T27153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.534019][T27173] CPU: 0 PID: 27173 Comm: syz.0.9091 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1097.545315][T27173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1097.555428][T27173] Call Trace: [ 1097.558640][T27173] [ 1097.561411][T27173] dump_stack_lvl+0x151/0x1c0 [ 1097.565919][T27173] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1097.571391][T27173] dump_stack+0x15/0x20 [ 1097.575379][T27173] should_fail+0x3c6/0x510 [ 1097.579636][T27173] should_fail_usercopy+0x1a/0x20 [ 1097.584509][T27173] _copy_from_user+0x20/0xd0 [ 1097.589055][T27173] bpf_test_init+0x13b/0x1b0 [ 1097.593465][T27173] bpf_prog_test_run_skb+0x268/0x1420 [ 1097.598727][T27173] ? __kasan_check_write+0x14/0x20 [ 1097.603768][T27173] ? proc_fail_nth_write+0x20b/0x290 [ 1097.608881][T27173] ? selinux_file_permission+0x2c4/0x570 [ 1097.614523][T27173] ? proc_fail_nth_read+0x210/0x210 [ 1097.619505][T27173] ? fsnotify_perm+0x6a/0x5d0 [ 1097.624023][T27173] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1097.629833][T27173] ? __kasan_check_write+0x14/0x20 [ 1097.634866][T27173] ? fput_many+0x160/0x1b0 [ 1097.639117][T27173] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1097.644964][T27173] bpf_prog_test_run+0x3b0/0x630 [ 1097.649736][T27173] ? bpf_prog_query+0x220/0x220 [ 1097.654430][T27173] ? selinux_bpf+0xd2/0x100 [ 1097.659195][T27173] ? security_bpf+0x82/0xb0 [ 1097.663534][T27173] __sys_bpf+0x525/0x760 [ 1097.667611][T27173] ? fput_many+0x160/0x1b0 [ 1097.671867][T27173] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1097.677090][T27173] ? debug_smp_processor_id+0x17/0x20 [ 1097.682279][T27173] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1097.688186][T27173] __x64_sys_bpf+0x7c/0x90 [ 1097.692531][T27173] x64_sys_call+0x87f/0x9a0 [ 1097.696864][T27173] do_syscall_64+0x3b/0xb0 [ 1097.701113][T27173] ? clear_bhb_loop+0x35/0x90 [ 1097.705630][T27173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1097.711534][T27173] RIP: 0033:0x7fdc4c34fef9 [ 1097.715785][T27173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.731031][T27153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.735231][T27173] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1097.735258][T27173] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1097.735275][T27173] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 1097.745579][T27153] device bridge_slave_0 entered promiscuous mode [ 1097.750582][T27173] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.759766][T27153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.766207][T27173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.766223][T27173] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1097.766247][T27173] [ 1097.772801][T27153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.814054][T27153] device bridge_slave_1 entered promiscuous mode [ 1098.063290][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1098.070695][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1098.299298][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.312145][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.369222][T22887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.376298][T22887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.456048][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1098.473372][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1098.484885][T22887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.491769][T22887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.553796][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1098.561649][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1098.586294][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1098.623910][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1098.637245][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1098.672621][T27129] device veth0_vlan entered promiscuous mode [ 1098.707650][T27129] device veth1_macvtap entered promiscuous mode [ 1098.716601][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1098.724963][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1098.733281][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1098.740899][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1098.748436][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.793232][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.823473][T22893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.830358][T22893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.851134][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1098.859187][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1098.878090][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1098.892115][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1098.907008][T22893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.913927][T22893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.933168][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1098.946716][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1098.960232][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1098.980850][T27223] FAULT_INJECTION: forcing a failure. [ 1098.980850][T27223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1098.994192][T27223] CPU: 1 PID: 27223 Comm: syz.0.9108 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1099.005394][T27223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1099.015656][T27223] Call Trace: [ 1099.018775][T27223] [ 1099.021556][T27223] dump_stack_lvl+0x151/0x1c0 [ 1099.026072][T27223] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1099.031532][T27223] ? 0xffffffffa0014000 [ 1099.035538][T27223] ? is_bpf_text_address+0x172/0x190 [ 1099.040744][T27223] dump_stack+0x15/0x20 [ 1099.044724][T27223] should_fail+0x3c6/0x510 [ 1099.048980][T27223] should_fail_alloc_page+0x5a/0x80 [ 1099.054017][T27223] prepare_alloc_pages+0x15c/0x700 [ 1099.058961][T27223] ? __alloc_pages+0x8f0/0x8f0 [ 1099.063563][T27223] ? __alloc_pages_bulk+0xe40/0xe40 [ 1099.068597][T27223] ? pcpu_chunk_refresh_hint+0x802/0x930 [ 1099.074152][T27223] __alloc_pages+0x18c/0x8f0 [ 1099.078578][T27223] ? prep_new_page+0x110/0x110 [ 1099.083191][T27223] ? pcpu_chunk_relocate+0x20a/0x430 [ 1099.088301][T27223] pcpu_populate_chunk+0x18c/0xe30 [ 1099.093259][T27223] pcpu_alloc+0x984/0x13e0 [ 1099.097509][T27223] __alloc_percpu_gfp+0x27/0x30 [ 1099.102185][T27223] bpf_map_alloc_percpu+0xe6/0x160 [ 1099.107222][T27223] htab_map_alloc+0xcb8/0x1650 [ 1099.111830][T27223] map_create+0x411/0x2050 [ 1099.116159][T27223] __sys_bpf+0x296/0x760 [ 1099.120236][T27223] ? fput_many+0x160/0x1b0 [ 1099.124497][T27223] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1099.129700][T27223] ? debug_smp_processor_id+0x17/0x20 [ 1099.134991][T27223] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1099.140985][T27223] __x64_sys_bpf+0x7c/0x90 [ 1099.145676][T27223] x64_sys_call+0x87f/0x9a0 [ 1099.150012][T27223] do_syscall_64+0x3b/0xb0 [ 1099.154258][T27223] ? clear_bhb_loop+0x35/0x90 [ 1099.158771][T27223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1099.164508][T27223] RIP: 0033:0x7fdc4c34fef9 [ 1099.168759][T27223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.188196][T27223] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1099.196450][T27223] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1099.204338][T27223] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 1099.212152][T27223] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.219964][T27223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.227773][T27223] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1099.235595][T27223] [ 1099.246535][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1099.264914][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1099.281474][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1099.289299][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1099.297856][T22893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1099.309290][T27212] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1099.318587][T27212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.327342][T27212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.401137][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1099.411519][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1099.420394][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1099.428906][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1099.457235][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1099.467118][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1099.488837][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1099.511151][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1099.537057][T27153] device veth0_vlan entered promiscuous mode [ 1099.559748][ T1080] device veth0_to_batadv left promiscuous mode [ 1099.579992][ T1080] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1099.624633][ T1080] device bridge_slave_1 left promiscuous mode [ 1099.664293][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.677730][ T1080] device bridge_slave_0 left promiscuous mode [ 1099.726478][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.760148][ T1080] device veth0_to_batadv left promiscuous mode [ 1099.784364][ T1080] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1099.791942][ T1080] device bridge_slave_1 left promiscuous mode [ 1099.802818][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.812112][ T1080] device bridge_slave_0 left promiscuous mode [ 1099.818630][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.831519][ T1080] device veth0_vlan left promiscuous mode [ 1099.878306][ T1080] device veth1_macvtap left promiscuous mode [ 1099.884459][ T1080] device veth0_vlan left promiscuous mode [ 1100.025924][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1100.033326][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.112902][T27252] tap0: tun_chr_ioctl cmd 1074025673 [ 1100.124482][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1100.133440][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.143754][T27153] device veth1_macvtap entered promiscuous mode [ 1100.157301][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1100.165659][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1100.174195][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.198068][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1100.217543][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1100.248954][T27258] device pim6reg1 entered promiscuous mode [ 1100.472295][T27268] FAULT_INJECTION: forcing a failure. [ 1100.472295][T27268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.486466][T27268] CPU: 0 PID: 27268 Comm: syz.4.9122 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1100.497677][T27268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1100.507579][T27268] Call Trace: [ 1100.510693][T27268] [ 1100.513473][T27268] dump_stack_lvl+0x151/0x1c0 [ 1100.517991][T27268] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1100.523457][T27268] ? vbin_printf+0x1bc0/0x1bc0 [ 1100.528056][T27268] ? bpf_snprintf+0xa1/0x260 [ 1100.532481][T27268] dump_stack+0x15/0x20 [ 1100.536478][T27268] should_fail+0x3c6/0x510 [ 1100.540737][T27268] should_fail_usercopy+0x1a/0x20 [ 1100.545584][T27268] _copy_to_user+0x20/0x90 [ 1100.549844][T27268] bpf_test_finish+0x235/0x5a0 [ 1100.554436][T27268] ? migrate_disable+0x190/0x190 [ 1100.559215][T27268] ? convert_skb_to___skb+0x360/0x360 [ 1100.564428][T27268] ? ktime_get+0x12f/0x160 [ 1100.568679][T27268] bpf_prog_test_run_flow_dissector+0x5d7/0x860 [ 1100.574753][T27268] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 1100.580129][T27268] ? proc_fail_nth_write+0x20b/0x290 [ 1100.585254][T27268] ? proc_fail_nth_read+0x210/0x210 [ 1100.590282][T27268] ? fsnotify_perm+0x6a/0x5d0 [ 1100.594802][T27268] ? __kasan_check_write+0x14/0x20 [ 1100.599743][T27268] ? fput_many+0x160/0x1b0 [ 1100.603996][T27268] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 1100.609392][T27268] bpf_prog_test_run+0x3b0/0x630 [ 1100.614152][T27268] ? bpf_prog_query+0x220/0x220 [ 1100.618934][T27268] ? selinux_bpf+0xd2/0x100 [ 1100.623468][T27268] ? security_bpf+0x82/0xb0 [ 1100.628025][T27268] __sys_bpf+0x525/0x760 [ 1100.632108][T27268] ? fput_many+0x160/0x1b0 [ 1100.636366][T27268] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1100.641573][T27268] ? debug_smp_processor_id+0x17/0x20 [ 1100.646981][T27268] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1100.653038][T27268] __x64_sys_bpf+0x7c/0x90 [ 1100.657462][T27268] x64_sys_call+0x87f/0x9a0 [ 1100.661787][T27268] do_syscall_64+0x3b/0xb0 [ 1100.666038][T27268] ? clear_bhb_loop+0x35/0x90 [ 1100.670554][T27268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1100.676283][T27268] RIP: 0033:0x7f33e2897ef9 [ 1100.680623][T27268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.700063][T27268] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1100.708308][T27268] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1100.716118][T27268] RDX: 0000000000000050 RSI: 0000000020000580 RDI: 000000000000000a [ 1100.723934][T27268] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.731750][T27268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.739651][T27268] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1100.747471][T27268] [ 1101.308795][T27292] FAULT_INJECTION: forcing a failure. [ 1101.308795][T27292] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.321760][T27292] CPU: 0 PID: 27292 Comm: syz.1.9131 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1101.332970][T27292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1101.342859][T27292] Call Trace: [ 1101.345980][T27292] [ 1101.348760][T27292] dump_stack_lvl+0x151/0x1c0 [ 1101.353276][T27292] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1101.358851][T27292] dump_stack+0x15/0x20 [ 1101.362935][T27292] should_fail+0x3c6/0x510 [ 1101.367177][T27292] __should_failslab+0xa4/0xe0 [ 1101.371772][T27292] should_failslab+0x9/0x20 [ 1101.376127][T27292] slab_pre_alloc_hook+0x37/0xd0 [ 1101.380899][T27292] __kmalloc+0x6d/0x270 [ 1101.384962][T27292] ? sk_prot_alloc+0xf9/0x330 [ 1101.389484][T27292] sk_prot_alloc+0xf9/0x330 [ 1101.393827][T27292] ? _copy_from_user+0x96/0xd0 [ 1101.398521][T27292] sk_alloc+0x38/0x430 [ 1101.402426][T27292] bpf_prog_test_run_skb+0x362/0x1420 [ 1101.407656][T27292] ? __kasan_check_write+0x14/0x20 [ 1101.412851][T27292] ? proc_fail_nth_write+0x20b/0x290 [ 1101.417961][T27292] ? selinux_file_permission+0x2c4/0x570 [ 1101.423436][T27292] ? proc_fail_nth_read+0x210/0x210 [ 1101.428571][T27292] ? fsnotify_perm+0x6a/0x5d0 [ 1101.433075][T27292] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1101.438889][T27292] ? __kasan_check_write+0x14/0x20 [ 1101.443865][T27292] ? fput_many+0x160/0x1b0 [ 1101.448087][T27292] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1101.453917][T27292] bpf_prog_test_run+0x3b0/0x630 [ 1101.458680][T27292] ? bpf_prog_query+0x220/0x220 [ 1101.463365][T27292] ? selinux_bpf+0xd2/0x100 [ 1101.467713][T27292] ? security_bpf+0x82/0xb0 [ 1101.472047][T27292] __sys_bpf+0x525/0x760 [ 1101.476127][T27292] ? fput_many+0x160/0x1b0 [ 1101.480464][T27292] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1101.485671][T27292] ? debug_smp_processor_id+0x17/0x20 [ 1101.490876][T27292] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1101.496793][T27292] __x64_sys_bpf+0x7c/0x90 [ 1101.501115][T27292] x64_sys_call+0x87f/0x9a0 [ 1101.505465][T27292] do_syscall_64+0x3b/0xb0 [ 1101.509712][T27292] ? clear_bhb_loop+0x35/0x90 [ 1101.514223][T27292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1101.520051][T27292] RIP: 0033:0x7f05031d1ef9 [ 1101.524293][T27292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.543917][T27292] RSP: 002b:00007f0501e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.552160][T27292] RAX: ffffffffffffffda RBX: 00007f0503389f80 RCX: 00007f05031d1ef9 [ 1101.560162][T27292] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 1101.567971][T27292] RBP: 00007f0501e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.575793][T27292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.583597][T27292] R13: 0000000000000000 R14: 00007f0503389f80 R15: 00007ffe2ead4328 [ 1101.591428][T27292] [ 1101.659079][T27288] device pim6reg1 entered promiscuous mode [ 1102.305062][T27347] device pim6reg1 entered promiscuous mode [ 1102.639194][T27355] FAULT_INJECTION: forcing a failure. [ 1102.639194][T27355] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.698531][T27355] CPU: 0 PID: 27355 Comm: syz.4.9153 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1102.709750][T27355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1102.719648][T27355] Call Trace: [ 1102.722888][T27355] [ 1102.725627][T27355] dump_stack_lvl+0x151/0x1c0 [ 1102.730146][T27355] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1102.735705][T27355] dump_stack+0x15/0x20 [ 1102.739710][T27355] should_fail+0x3c6/0x510 [ 1102.743944][T27355] __should_failslab+0xa4/0xe0 [ 1102.748542][T27355] should_failslab+0x9/0x20 [ 1102.752888][T27355] slab_pre_alloc_hook+0x37/0xd0 [ 1102.757668][T27355] __kmalloc+0x6d/0x270 [ 1102.761746][T27355] ? kvmalloc_node+0x1f0/0x4d0 [ 1102.766338][T27355] kvmalloc_node+0x1f0/0x4d0 [ 1102.770939][T27355] ? vm_mmap+0xb0/0xb0 [ 1102.775345][T27355] ? memset+0x35/0x40 [ 1102.779221][T27355] alloc_netdev_mqs+0x832/0xc90 [ 1102.784006][T27355] ppp_ioctl+0x585/0x19a0 [ 1102.788154][T27355] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1102.794167][T27355] ? ppp_poll+0x250/0x250 [ 1102.798481][T27355] ? __fget_files+0x31e/0x380 [ 1102.803002][T27355] ? security_file_ioctl+0x84/0xb0 [ 1102.807942][T27355] ? ppp_poll+0x250/0x250 [ 1102.812209][T27355] __se_sys_ioctl+0x114/0x190 [ 1102.816709][T27355] __x64_sys_ioctl+0x7b/0x90 [ 1102.821258][T27355] x64_sys_call+0x98/0x9a0 [ 1102.825509][T27355] do_syscall_64+0x3b/0xb0 [ 1102.829763][T27355] ? clear_bhb_loop+0x35/0x90 [ 1102.834277][T27355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1102.840001][T27355] RIP: 0033:0x7f33e2897ef9 [ 1102.844257][T27355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.863722][T27355] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.872031][T27355] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1102.879843][T27355] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000005 [ 1102.887740][T27355] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.895550][T27355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.903372][T27355] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1102.911350][T27355] [ 1103.158304][T27377] FAULT_INJECTION: forcing a failure. [ 1103.158304][T27377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.171436][T27377] CPU: 0 PID: 27377 Comm: syz.0.9160 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1103.182582][T27377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1103.192468][T27377] Call Trace: [ 1103.195601][T27377] [ 1103.198373][T27377] dump_stack_lvl+0x151/0x1c0 [ 1103.202897][T27377] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1103.208359][T27377] ? __kasan_check_read+0x11/0x20 [ 1103.213216][T27377] dump_stack+0x15/0x20 [ 1103.217205][T27377] should_fail+0x3c6/0x510 [ 1103.221461][T27377] should_fail_usercopy+0x1a/0x20 [ 1103.226321][T27377] copy_page_from_iter_atomic+0x423/0x10e0 [ 1103.231971][T27377] ? pipe_zero+0x4e0/0x4e0 [ 1103.236221][T27377] generic_perform_write+0x337/0x5a0 [ 1103.241343][T27377] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1103.246989][T27377] ? file_remove_privs+0x610/0x610 [ 1103.252100][T27377] ? rwsem_write_trylock+0x153/0x340 [ 1103.257222][T27377] ? rwsem_mark_wake+0x770/0x770 [ 1103.262080][T27377] __generic_file_write_iter+0x25b/0x4b0 [ 1103.267573][T27377] generic_file_write_iter+0xaf/0x1c0 [ 1103.272959][T27377] vfs_write+0xd5d/0x1110 [ 1103.277133][T27377] ? putname+0xfa/0x150 [ 1103.281226][T27377] ? file_end_write+0x1c0/0x1c0 [ 1103.285924][T27377] ? mutex_lock+0xb6/0x1e0 [ 1103.290134][T27377] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1103.296671][T27377] ? __fdget_pos+0x2e7/0x3a0 [ 1103.301270][T27377] ? ksys_write+0x77/0x2c0 [ 1103.305514][T27377] ksys_write+0x199/0x2c0 [ 1103.309681][T27377] ? __ia32_sys_read+0x90/0x90 [ 1103.314461][T27377] ? debug_smp_processor_id+0x17/0x20 [ 1103.319675][T27377] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1103.325572][T27377] __x64_sys_write+0x7b/0x90 [ 1103.329987][T27377] x64_sys_call+0x2f/0x9a0 [ 1103.334351][T27377] do_syscall_64+0x3b/0xb0 [ 1103.338829][T27377] ? clear_bhb_loop+0x35/0x90 [ 1103.343383][T27377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.349189][T27377] RIP: 0033:0x7fdc4c34fef9 [ 1103.353629][T27377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.373144][T27377] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1103.381610][T27377] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1103.389410][T27377] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000007 [ 1103.397227][T27377] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.405035][T27377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.412937][T27377] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1103.420760][T27377] [ 1103.462425][T27383] device pim6reg1 entered promiscuous mode [ 1103.838957][T27397] FAULT_INJECTION: forcing a failure. [ 1103.838957][T27397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1103.852959][T27397] CPU: 0 PID: 27397 Comm: syz.1.9168 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1103.864160][T27397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1103.874054][T27397] Call Trace: [ 1103.877179][T27397] [ 1103.879962][T27397] dump_stack_lvl+0x151/0x1c0 [ 1103.884642][T27397] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1103.890116][T27397] dump_stack+0x15/0x20 [ 1103.894316][T27397] should_fail+0x3c6/0x510 [ 1103.898571][T27397] should_fail_alloc_page+0x5a/0x80 [ 1103.903602][T27397] prepare_alloc_pages+0x15c/0x700 [ 1103.908638][T27397] ? __alloc_pages+0x8f0/0x8f0 [ 1103.913415][T27397] ? __alloc_pages_bulk+0xe40/0xe40 [ 1103.918455][T27397] __alloc_pages+0x18c/0x8f0 [ 1103.922902][T27397] ? __sys_bpf+0x50e/0x760 [ 1103.927211][T27397] ? prep_new_page+0x110/0x110 [ 1103.931815][T27397] ? __kasan_check_write+0x14/0x20 [ 1103.936763][T27397] __get_free_pages+0x10/0x30 [ 1103.941273][T27397] kasan_populate_vmalloc_pte+0x39/0x130 [ 1103.946736][T27397] ? __apply_to_page_range+0x8ca/0xbe0 [ 1103.952045][T27397] __apply_to_page_range+0x8dd/0xbe0 [ 1103.957155][T27397] ? kasan_populate_vmalloc+0x70/0x70 [ 1103.962366][T27397] ? kasan_populate_vmalloc+0x70/0x70 [ 1103.967570][T27397] apply_to_page_range+0x3b/0x50 [ 1103.972343][T27397] kasan_populate_vmalloc+0x65/0x70 [ 1103.977385][T27397] alloc_vmap_area+0x192f/0x1a80 [ 1103.982171][T27397] ? vm_map_ram+0xa90/0xa90 [ 1103.986592][T27397] ? __kasan_kmalloc+0x9/0x10 [ 1103.991105][T27397] ? __get_vm_area_node+0x117/0x360 [ 1103.996235][T27397] __get_vm_area_node+0x158/0x360 [ 1104.001091][T27397] __vmalloc_node_range+0xe2/0x8d0 [ 1104.006031][T27397] ? btf_new_fd+0x2d3/0x910 [ 1104.010374][T27397] ? __kasan_kmalloc_large+0x1a/0xc0 [ 1104.015493][T27397] ? kmalloc_order_trace+0x1a/0xb0 [ 1104.020440][T27397] ? btf_new_fd+0x2d3/0x910 [ 1104.024780][T27397] __vmalloc_node+0x81/0x90 [ 1104.029119][T27397] ? btf_new_fd+0x2d3/0x910 [ 1104.033457][T27397] kvmalloc_node+0x242/0x4d0 [ 1104.037884][T27397] ? vm_mmap+0xb0/0xb0 [ 1104.041794][T27397] ? kmem_cache_alloc_trace+0x115/0x210 [ 1104.047171][T27397] ? btf_new_fd+0x297/0x910 [ 1104.051510][T27397] btf_new_fd+0x2d3/0x910 [ 1104.055679][T27397] bpf_btf_load+0x6f/0x90 [ 1104.059850][T27397] __sys_bpf+0x50e/0x760 [ 1104.063922][T27397] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1104.069130][T27397] ? bpf_trace_run2+0xf1/0x210 [ 1104.073739][T27397] ? __bpf_trace_sys_enter+0x62/0x70 [ 1104.078857][T27397] __x64_sys_bpf+0x7c/0x90 [ 1104.083105][T27397] x64_sys_call+0x87f/0x9a0 [ 1104.087444][T27397] do_syscall_64+0x3b/0xb0 [ 1104.091694][T27397] ? clear_bhb_loop+0x35/0x90 [ 1104.096209][T27397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1104.101937][T27397] RIP: 0033:0x7f05031d1ef9 [ 1104.106193][T27397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.125637][T27397] RSP: 002b:00007f0501e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1104.133879][T27397] RAX: ffffffffffffffda RBX: 00007f0503389f80 RCX: 00007f05031d1ef9 [ 1104.141902][T27397] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 1104.149810][T27397] RBP: 00007f0501e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.157610][T27397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.165426][T27397] R13: 0000000000000000 R14: 00007f0503389f80 R15: 00007ffe2ead4328 [ 1104.173373][T27397] [ 1104.951428][T27425] device pim6reg1 entered promiscuous mode [ 1105.170819][T27430] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1105.212148][T27430] device syzkaller0 entered promiscuous mode [ 1105.246724][T27432] FAULT_INJECTION: forcing a failure. [ 1105.246724][T27432] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.259209][T27432] CPU: 0 PID: 27432 Comm: syz.4.9180 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1105.270351][T27432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1105.280342][T27432] Call Trace: [ 1105.283460][T27432] [ 1105.286243][T27432] dump_stack_lvl+0x151/0x1c0 [ 1105.290752][T27432] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1105.296411][T27432] ? kmem_cache_free+0x116/0x2e0 [ 1105.301181][T27432] ? kfree_skb+0xc2/0x360 [ 1105.305356][T27432] ? __bpf_trace_fib_table_lookup+0x33/0x40 [ 1105.311085][T27432] dump_stack+0x15/0x20 [ 1105.315070][T27432] should_fail+0x3c6/0x510 [ 1105.319321][T27432] __should_failslab+0xa4/0xe0 [ 1105.324013][T27432] ? dst_alloc+0x164/0x1e0 [ 1105.328292][T27432] should_failslab+0x9/0x20 [ 1105.332623][T27432] slab_pre_alloc_hook+0x37/0xd0 [ 1105.337376][T27432] ? dst_alloc+0x164/0x1e0 [ 1105.341621][T27432] kmem_cache_alloc+0x44/0x200 [ 1105.346319][T27432] dst_alloc+0x164/0x1e0 [ 1105.350397][T27432] ip_route_output_key_hash_rcu+0x129a/0x20b0 [ 1105.356314][T27432] ip_route_output_key_hash+0x142/0x210 [ 1105.361692][T27432] ? ip_route_input_rcu+0x29b0/0x29b0 [ 1105.366893][T27432] vti6_tnl_xmit+0xd91/0x1860 [ 1105.371453][T27432] ? vti6_dev_uninit+0x360/0x360 [ 1105.376177][T27432] ? netif_skb_features+0x7fc/0xb70 [ 1105.381216][T27432] dev_hard_start_xmit+0x228/0x620 [ 1105.386161][T27432] __dev_queue_xmit+0x18b4/0x2e70 [ 1105.391032][T27432] ? dev_queue_xmit+0x20/0x20 [ 1105.395546][T27432] ? __kasan_check_write+0x14/0x20 [ 1105.400493][T27432] ? skb_release_data+0x1c3/0xa80 [ 1105.405339][T27432] ? __kasan_check_write+0x14/0x20 [ 1105.410284][T27432] ? pskb_expand_head+0xc8f/0x1240 [ 1105.415320][T27432] dev_queue_xmit+0x17/0x20 [ 1105.419753][T27432] __bpf_redirect+0x690/0xe60 [ 1105.424270][T27432] bpf_clone_redirect+0x24d/0x390 [ 1105.429144][T27432] bpf_prog_6893982b85ceadf7+0x56/0xb08 [ 1105.434513][T27432] ? trace_event_raw_event_swiotlb_bounced+0x380/0x480 [ 1105.441187][T27432] ? __stack_depot_save+0x34/0x470 [ 1105.446223][T27432] ? __kasan_slab_alloc+0xc3/0xe0 [ 1105.451077][T27432] ? __kasan_slab_alloc+0xb1/0xe0 [ 1105.455945][T27432] ? slab_post_alloc_hook+0x53/0x2c0 [ 1105.461067][T27432] ? kmem_cache_alloc+0xf5/0x200 [ 1105.465846][T27432] ? __build_skb+0x2a/0x300 [ 1105.470171][T27432] ? build_skb+0x25/0x1f0 [ 1105.474474][T27432] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 1105.479852][T27432] ? bpf_prog_test_run+0x3b0/0x630 [ 1105.484800][T27432] ? __sys_bpf+0x525/0x760 [ 1105.489136][T27432] ? __x64_sys_bpf+0x7c/0x90 [ 1105.493565][T27432] ? x64_sys_call+0x87f/0x9a0 [ 1105.498087][T27432] ? do_syscall_64+0x3b/0xb0 [ 1105.502505][T27432] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1105.508415][T27432] ? __kasan_check_read+0x11/0x20 [ 1105.513271][T27432] ? bpf_test_timer_continue+0x140/0x460 [ 1105.518739][T27432] bpf_test_run+0x478/0xa10 [ 1105.523298][T27432] ? convert___skb_to_skb+0x570/0x570 [ 1105.528599][T27432] ? eth_type_trans+0x2e4/0x620 [ 1105.533283][T27432] ? eth_get_headlen+0x240/0x240 [ 1105.538137][T27432] ? convert___skb_to_skb+0x44/0x570 [ 1105.543252][T27432] bpf_prog_test_run_skb+0xb41/0x1420 [ 1105.548460][T27432] ? __kasan_check_write+0x14/0x20 [ 1105.553530][T27432] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1105.559331][T27432] ? __kasan_check_write+0x14/0x20 [ 1105.564367][T27432] ? fput_many+0x160/0x1b0 [ 1105.568635][T27432] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1105.574441][T27432] bpf_prog_test_run+0x3b0/0x630 [ 1105.579218][T27432] ? bpf_prog_query+0x220/0x220 [ 1105.584000][T27432] ? selinux_bpf+0xd2/0x100 [ 1105.588416][T27432] ? security_bpf+0x82/0xb0 [ 1105.592769][T27432] __sys_bpf+0x525/0x760 [ 1105.596836][T27432] ? fput_many+0x160/0x1b0 [ 1105.601111][T27432] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1105.606297][T27432] ? debug_smp_processor_id+0x17/0x20 [ 1105.611501][T27432] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1105.617415][T27432] __x64_sys_bpf+0x7c/0x90 [ 1105.621661][T27432] x64_sys_call+0x87f/0x9a0 [ 1105.626001][T27432] do_syscall_64+0x3b/0xb0 [ 1105.630251][T27432] ? clear_bhb_loop+0x35/0x90 [ 1105.634774][T27432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1105.640493][T27432] RIP: 0033:0x7f33e2897ef9 [ 1105.644746][T27432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.664186][T27432] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1105.672525][T27432] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1105.680345][T27432] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 1105.688146][T27432] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.695956][T27432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.703774][T27432] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1105.711705][T27432] [ 1105.844508][T27446] FAULT_INJECTION: forcing a failure. [ 1105.844508][T27446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1105.857894][T27446] CPU: 1 PID: 27446 Comm: syz.2.9186 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1105.869182][T27446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1105.879088][T27446] Call Trace: [ 1105.882200][T27446] [ 1105.884980][T27446] dump_stack_lvl+0x151/0x1c0 [ 1105.889500][T27446] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1105.894962][T27446] ? arch_stack_walk+0xf3/0x140 [ 1105.899654][T27446] dump_stack+0x15/0x20 [ 1105.903637][T27446] should_fail+0x3c6/0x510 [ 1105.907892][T27446] should_fail_alloc_page+0x5a/0x80 [ 1105.913098][T27446] prepare_alloc_pages+0x15c/0x700 [ 1105.918045][T27446] ? __kasan_check_write+0x14/0x20 [ 1105.923000][T27446] ? __alloc_pages_bulk+0xe40/0xe40 [ 1105.928030][T27446] ? copy_page_range+0x2deb/0x2f90 [ 1105.932976][T27446] ? __kasan_slab_alloc+0xb1/0xe0 [ 1105.937833][T27446] ? slab_post_alloc_hook+0x53/0x2c0 [ 1105.942961][T27446] __alloc_pages+0x18c/0x8f0 [ 1105.947396][T27446] ? prep_new_page+0x110/0x110 [ 1105.951990][T27446] new_slab+0x9a/0x4e0 [ 1105.955899][T27446] ___slab_alloc+0x39e/0x830 [ 1105.960318][T27446] ? vm_area_dup+0x26/0x230 [ 1105.964657][T27446] ? rwsem_write_trylock+0x153/0x340 [ 1105.969868][T27446] ? vm_area_dup+0x26/0x230 [ 1105.974212][T27446] __slab_alloc+0x4a/0x90 [ 1105.978374][T27446] ? vm_area_dup+0x26/0x230 [ 1105.982815][T27446] kmem_cache_alloc+0x134/0x200 [ 1105.987523][T27446] vm_area_dup+0x26/0x230 [ 1105.991653][T27446] copy_mm+0x9a1/0x13e0 [ 1105.995655][T27446] ? copy_signal+0x610/0x610 [ 1106.000068][T27446] ? __init_rwsem+0xfe/0x1d0 [ 1106.004604][T27446] ? copy_signal+0x4e3/0x610 [ 1106.009017][T27446] copy_process+0x1149/0x3290 [ 1106.013525][T27446] ? __kasan_check_write+0x14/0x20 [ 1106.018476][T27446] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1106.023413][T27446] ? vfs_write+0x9ec/0x1110 [ 1106.027763][T27446] kernel_clone+0x21e/0x9e0 [ 1106.032094][T27446] ? __kasan_check_write+0x14/0x20 [ 1106.037042][T27446] ? create_io_thread+0x1e0/0x1e0 [ 1106.041905][T27446] __x64_sys_clone+0x23f/0x290 [ 1106.046504][T27446] ? __do_sys_vfork+0x130/0x130 [ 1106.051190][T27446] ? debug_smp_processor_id+0x17/0x20 [ 1106.056587][T27446] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1106.062654][T27446] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1106.068533][T27446] x64_sys_call+0x1b0/0x9a0 [ 1106.073307][T27446] do_syscall_64+0x3b/0xb0 [ 1106.077754][T27446] ? clear_bhb_loop+0x35/0x90 [ 1106.082925][T27446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1106.089180][T27446] RIP: 0033:0x7f45f39c4ef9 [ 1106.094361][T27446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.116587][T27446] RSP: 002b:00007f45f263dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1106.125613][T27446] RAX: ffffffffffffffda RBX: 00007f45f3b7cf80 RCX: 00007f45f39c4ef9 [ 1106.134255][T27446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020000 [ 1106.142231][T27446] RBP: 00007f45f263e090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.150319][T27446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1106.159058][T27446] R13: 0000000000000000 R14: 00007f45f3b7cf80 R15: 00007ffcc702d0f8 [ 1106.168002][T27446] [ 1106.246783][T27451] device pim6reg1 entered promiscuous mode [ 1106.816093][T27483] FAULT_INJECTION: forcing a failure. [ 1106.816093][T27483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1106.832442][T27483] CPU: 0 PID: 27483 Comm: syz.0.9200 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1106.843650][T27483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1106.853631][T27483] Call Trace: [ 1106.856755][T27483] [ 1106.859532][T27483] dump_stack_lvl+0x151/0x1c0 [ 1106.864142][T27483] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1106.869606][T27483] dump_stack+0x15/0x20 [ 1106.873763][T27483] should_fail+0x3c6/0x510 [ 1106.878039][T27483] should_fail_alloc_page+0x5a/0x80 [ 1106.883055][T27483] prepare_alloc_pages+0x15c/0x700 [ 1106.887998][T27483] ? __alloc_pages+0x8f0/0x8f0 [ 1106.892703][T27483] ? __alloc_pages_bulk+0xe40/0xe40 [ 1106.897720][T27483] ? pcpu_chunk_refresh_hint+0x802/0x930 [ 1106.903205][T27483] __alloc_pages+0x18c/0x8f0 [ 1106.907615][T27483] ? prep_new_page+0x110/0x110 [ 1106.912218][T27483] ? pcpu_chunk_relocate+0x20a/0x430 [ 1106.917427][T27483] pcpu_populate_chunk+0x18c/0xe30 [ 1106.922393][T27483] pcpu_alloc+0x984/0x13e0 [ 1106.926628][T27483] __alloc_percpu_gfp+0x27/0x30 [ 1106.931411][T27483] bpf_map_alloc_percpu+0xe6/0x160 [ 1106.936382][T27483] htab_map_alloc+0xcb8/0x1650 [ 1106.940952][T27483] map_create+0x411/0x2050 [ 1106.945198][T27483] __sys_bpf+0x296/0x760 [ 1106.949280][T27483] ? fput_many+0x160/0x1b0 [ 1106.953532][T27483] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1106.958828][T27483] ? debug_smp_processor_id+0x17/0x20 [ 1106.964031][T27483] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1106.969936][T27483] __x64_sys_bpf+0x7c/0x90 [ 1106.974186][T27483] x64_sys_call+0x87f/0x9a0 [ 1106.978529][T27483] do_syscall_64+0x3b/0xb0 [ 1106.982776][T27483] ? clear_bhb_loop+0x35/0x90 [ 1106.987312][T27483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1106.993110][T27483] RIP: 0033:0x7fdc4c34fef9 [ 1106.997372][T27483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.017060][T27483] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1107.025495][T27483] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1107.033305][T27483] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 1107.041124][T27483] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.048931][T27483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1107.056743][T27483] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1107.064569][T27483] [ 1107.107498][T27487] device pim6reg1 entered promiscuous mode [ 1107.132304][T27489] device syzkaller0 entered promiscuous mode [ 1107.145475][T27492] device pim6reg1 entered promiscuous mode [ 1107.156904][T27496] device pim6reg1 entered promiscuous mode [ 1107.263130][T27507] device pim6reg1 entered promiscuous mode [ 1107.272532][T27507] FAULT_INJECTION: forcing a failure. [ 1107.272532][T27507] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.377484][T27507] CPU: 1 PID: 27507 Comm: syz.2.9209 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1107.388716][T27507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1107.398591][T27507] Call Trace: [ 1107.401716][T27507] [ 1107.404494][T27507] dump_stack_lvl+0x151/0x1c0 [ 1107.409111][T27507] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1107.414562][T27507] ? memcpy+0x56/0x70 [ 1107.418380][T27507] dump_stack+0x15/0x20 [ 1107.422369][T27507] should_fail+0x3c6/0x510 [ 1107.426714][T27507] __should_failslab+0xa4/0xe0 [ 1107.431315][T27507] should_failslab+0x9/0x20 [ 1107.435658][T27507] slab_pre_alloc_hook+0x37/0xd0 [ 1107.440601][T27507] ? netlink_trim+0x19b/0x230 [ 1107.445111][T27507] __kmalloc_track_caller+0x6c/0x260 [ 1107.450233][T27507] ? netlink_trim+0x19b/0x230 [ 1107.454752][T27507] ? netlink_trim+0x19b/0x230 [ 1107.459258][T27507] pskb_expand_head+0x113/0x1240 [ 1107.464039][T27507] netlink_trim+0x19b/0x230 [ 1107.468376][T27507] netlink_broadcast_filtered+0x66/0x1220 [ 1107.473925][T27507] ? __kasan_kmalloc+0x9/0x10 [ 1107.478491][T27507] ? rtmsg_ifinfo_build_skb+0xd4/0x180 [ 1107.483735][T27507] nlmsg_notify+0x101/0x1c0 [ 1107.488074][T27507] rtmsg_ifinfo+0xe7/0x120 [ 1107.492325][T27507] dev_close_many+0x2a6/0x530 [ 1107.496841][T27507] ? __dev_open+0x4e0/0x4e0 [ 1107.501183][T27507] ? __kasan_check_read+0x11/0x20 [ 1107.506051][T27507] unregister_netdevice_many+0x492/0x17c0 [ 1107.511621][T27507] ? __kasan_check_write+0x14/0x20 [ 1107.516645][T27507] ? slab_free_freelist_hook+0xbd/0x190 [ 1107.522041][T27507] ? alloc_netdev_mqs+0xc90/0xc90 [ 1107.527076][T27507] ? add_timer+0x68/0x80 [ 1107.531145][T27507] ? __queue_delayed_work+0x16d/0x1f0 [ 1107.536358][T27507] ? __kasan_check_read+0x11/0x20 [ 1107.541218][T27507] unregister_netdevice_queue+0x2e6/0x350 [ 1107.546866][T27507] ? linkwatch_urgent_event+0x335/0x4d0 [ 1107.552243][T27507] ? list_netdevice+0x4c0/0x4c0 [ 1107.556935][T27507] __tun_detach+0xd14/0x1510 [ 1107.561362][T27507] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1107.567962][T27507] tun_chr_close+0x92/0x140 [ 1107.572294][T27507] ? tun_chr_open+0x530/0x530 [ 1107.576810][T27507] __fput+0x3fe/0x910 [ 1107.580629][T27507] ____fput+0x15/0x20 [ 1107.584442][T27507] task_work_run+0x129/0x190 [ 1107.589261][T27507] exit_to_user_mode_loop+0xc4/0xe0 [ 1107.594264][T27507] exit_to_user_mode_prepare+0x5a/0xa0 [ 1107.599732][T27507] syscall_exit_to_user_mode+0x26/0x160 [ 1107.605115][T27507] do_syscall_64+0x47/0xb0 [ 1107.609363][T27507] ? clear_bhb_loop+0x35/0x90 [ 1107.614113][T27507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1107.619909][T27507] RIP: 0033:0x7f45f39c4ef9 [ 1107.624102][T27507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.643636][T27507] RSP: 002b:00007f45f263e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1107.652062][T27507] RAX: 0000000000000000 RBX: 00007f45f3b7cf80 RCX: 00007f45f39c4ef9 [ 1107.659856][T27507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1107.667746][T27507] RBP: 00007f45f263e090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.675572][T27507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.683568][T27507] R13: 0000000000000000 R14: 00007f45f3b7cf80 R15: 00007ffcc702d0f8 [ 1107.691384][T27507] [ 1107.902548][T27531] device pim6reg1 entered promiscuous mode [ 1108.617452][T27548] FAULT_INJECTION: forcing a failure. [ 1108.617452][T27548] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.647078][T27548] CPU: 0 PID: 27548 Comm: syz.0.9221 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1108.658303][T27548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1108.668363][T27548] Call Trace: [ 1108.671485][T27548] [ 1108.674348][T27548] dump_stack_lvl+0x151/0x1c0 [ 1108.678873][T27548] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1108.684427][T27548] dump_stack+0x15/0x20 [ 1108.688410][T27548] should_fail+0x3c6/0x510 [ 1108.692664][T27548] __should_failslab+0xa4/0xe0 [ 1108.697360][T27548] ? __alloc_skb+0xbe/0x550 [ 1108.701690][T27548] should_failslab+0x9/0x20 [ 1108.706209][T27548] slab_pre_alloc_hook+0x37/0xd0 [ 1108.711002][T27548] ? __alloc_skb+0xbe/0x550 [ 1108.715322][T27548] kmem_cache_alloc+0x44/0x200 [ 1108.719926][T27548] __alloc_skb+0xbe/0x550 [ 1108.724090][T27548] tipc_msg_build+0x149/0x1230 [ 1108.728694][T27548] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1108.734438][T27548] ? tipc_node_find+0x206/0x4c0 [ 1108.739103][T27548] ? tipc_msg_fragment+0x760/0x760 [ 1108.744057][T27548] ? tipc_in_scope+0x6c/0xd0 [ 1108.748481][T27548] ? tipc_nametbl_lookup_anycast+0x301/0x1090 [ 1108.754482][T27548] ? tipc_node_get_mtu+0x20f/0x2b0 [ 1108.759434][T27548] __tipc_sendmsg+0x1c7b/0x3240 [ 1108.764105][T27548] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1108.769307][T27548] ? local_bh_enable+0x30/0x30 [ 1108.773906][T27548] ? avc_denied+0x1b0/0x1b0 [ 1108.778263][T27548] ? kasan_check_range+0x275/0x2a0 [ 1108.783215][T27548] ? avc_has_perm+0x16f/0x260 [ 1108.787800][T27548] ? avc_has_perm_noaudit+0x430/0x430 [ 1108.793001][T27548] ? __kasan_check_write+0x14/0x20 [ 1108.797948][T27548] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1108.802813][T27548] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1108.807845][T27548] ? __local_bh_enable_ip+0x58/0x80 [ 1108.812878][T27548] ? lock_sock_nested+0x266/0x300 [ 1108.817738][T27548] ? sock_init_data+0xc0/0xc0 [ 1108.822258][T27548] ? wait_woken+0x170/0x170 [ 1108.826591][T27548] ? __kasan_kmalloc+0x9/0x10 [ 1108.831109][T27548] tipc_sendmsg+0x55/0x70 [ 1108.835272][T27548] ? tipc_recvmsg+0x13b0/0x13b0 [ 1108.839958][T27548] ____sys_sendmsg+0x59e/0x8f0 [ 1108.844562][T27548] ? __sys_sendmsg_sock+0x40/0x40 [ 1108.849422][T27548] ? import_iovec+0xe5/0x120 [ 1108.853850][T27548] ___sys_sendmsg+0x252/0x2e0 [ 1108.858358][T27548] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1108.864001][T27548] ? __sys_sendmsg+0x260/0x260 [ 1108.868606][T27548] ? vfs_write+0x94b/0x1110 [ 1108.873037][T27548] ? preempt_count_add+0xb5/0x1a0 [ 1108.877940][T27548] ? __fdget+0x1bc/0x240 [ 1108.881972][T27548] __se_sys_sendmsg+0x19a/0x260 [ 1108.886659][T27548] ? __x64_sys_sendmsg+0x90/0x90 [ 1108.891430][T27548] ? ksys_write+0x260/0x2c0 [ 1108.895782][T27548] ? debug_smp_processor_id+0x17/0x20 [ 1108.900994][T27548] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1108.906885][T27548] __x64_sys_sendmsg+0x7b/0x90 [ 1108.911567][T27548] x64_sys_call+0x16a/0x9a0 [ 1108.915904][T27548] do_syscall_64+0x3b/0xb0 [ 1108.920156][T27548] ? clear_bhb_loop+0x35/0x90 [ 1108.924668][T27548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1108.930483][T27548] RIP: 0033:0x7fdc4c34fef9 [ 1108.934737][T27548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.954177][T27548] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.962435][T27548] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1108.970234][T27548] RDX: 0000000020004000 RSI: 0000000020000b80 RDI: 0000000000000007 [ 1108.978218][T27548] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.986037][T27548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.993842][T27548] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1109.001748][T27548] [ 1109.047175][T27563] device pim6reg1 entered promiscuous mode [ 1110.130508][T27586] device veth0_to_batadv left promiscuous mode [ 1110.163442][T27586] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1110.424646][T27602] FAULT_INJECTION: forcing a failure. [ 1110.424646][T27602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.545963][T27602] CPU: 0 PID: 27602 Comm: syz.1.9240 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1110.557180][T27602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1110.567075][T27602] Call Trace: [ 1110.570200][T27602] [ 1110.571933][T27606] device pim6reg1 entered promiscuous mode [ 1110.572971][T27602] dump_stack_lvl+0x151/0x1c0 [ 1110.573003][T27602] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1110.588600][T27602] ? kstrtouint_from_user+0x20a/0x2a0 [ 1110.593808][T27602] dump_stack+0x15/0x20 [ 1110.597816][T27602] should_fail+0x3c6/0x510 [ 1110.602051][T27602] should_fail_usercopy+0x1a/0x20 [ 1110.606919][T27602] _copy_to_user+0x20/0x90 [ 1110.611196][T27602] simple_read_from_buffer+0xc7/0x150 [ 1110.616373][T27602] proc_fail_nth_read+0x1a3/0x210 [ 1110.621407][T27602] ? proc_fault_inject_write+0x390/0x390 [ 1110.626874][T27602] ? fsnotify_perm+0x470/0x5d0 [ 1110.631474][T27602] ? security_file_permission+0x86/0xb0 [ 1110.636852][T27602] ? proc_fault_inject_write+0x390/0x390 [ 1110.642322][T27602] vfs_read+0x27d/0xd40 [ 1110.646410][T27602] ? kernel_read+0x1f0/0x1f0 [ 1110.650827][T27602] ? __kasan_check_write+0x14/0x20 [ 1110.655778][T27602] ? mutex_lock+0xb6/0x1e0 [ 1110.660028][T27602] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1110.666456][T27602] ? __fdget_pos+0x2e7/0x3a0 [ 1110.670880][T27602] ? ksys_read+0x77/0x2c0 [ 1110.675055][T27602] ksys_read+0x199/0x2c0 [ 1110.679129][T27602] ? vfs_write+0x1110/0x1110 [ 1110.683644][T27602] ? debug_smp_processor_id+0x17/0x20 [ 1110.688844][T27602] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1110.694747][T27602] __x64_sys_read+0x7b/0x90 [ 1110.699092][T27602] x64_sys_call+0x28/0x9a0 [ 1110.703336][T27602] do_syscall_64+0x3b/0xb0 [ 1110.707591][T27602] ? clear_bhb_loop+0x35/0x90 [ 1110.712106][T27602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1110.717832][T27602] RIP: 0033:0x7f05031d093c [ 1110.722091][T27602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1110.741613][T27602] RSP: 002b:00007f0501e4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.749956][T27602] RAX: ffffffffffffffda RBX: 00007f0503389f80 RCX: 00007f05031d093c [ 1110.757758][T27602] RDX: 000000000000000f RSI: 00007f0501e4b0a0 RDI: 0000000000000006 [ 1110.765570][T27602] RBP: 00007f0501e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.773655][T27602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.781457][T27602] R13: 0000000000000000 R14: 00007f0503389f80 R15: 00007ffe2ead4328 [ 1110.789283][T27602] [ 1111.727566][T27643] device pim6reg1 entered promiscuous mode [ 1111.735310][T27647] bond_slave_1: mtu less than device minimum [ 1111.872790][T27656] FAULT_INJECTION: forcing a failure. [ 1111.872790][T27656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1111.893863][T27656] CPU: 1 PID: 27656 Comm: syz.4.9261 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1111.905078][T27656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1111.915408][T27656] Call Trace: [ 1111.918521][T27656] [ 1111.921302][T27656] dump_stack_lvl+0x151/0x1c0 [ 1111.925899][T27656] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1111.931543][T27656] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1111.937097][T27656] ? __wake_up_klogd+0xd5/0x110 [ 1111.941875][T27656] dump_stack+0x15/0x20 [ 1111.945866][T27656] should_fail+0x3c6/0x510 [ 1111.950213][T27656] should_fail_alloc_page+0x5a/0x80 [ 1111.955343][T27656] prepare_alloc_pages+0x15c/0x700 [ 1111.960492][T27656] ? __alloc_pages_bulk+0xe40/0xe40 [ 1111.965524][T27656] __alloc_pages+0x18c/0x8f0 [ 1111.969948][T27656] ? prep_new_page+0x110/0x110 [ 1111.974639][T27656] ? __apply_to_page_range+0x8e8/0xbe0 [ 1111.979927][T27656] ? __apply_to_page_range+0x8ca/0xbe0 [ 1111.985487][T27656] __get_free_pages+0x10/0x30 [ 1111.990436][T27656] kasan_populate_vmalloc_pte+0x39/0x130 [ 1111.996375][T27656] ? __apply_to_page_range+0x8ca/0xbe0 [ 1112.001758][T27656] __apply_to_page_range+0x8dd/0xbe0 [ 1112.007056][T27656] ? kasan_populate_vmalloc+0x70/0x70 [ 1112.012263][T27656] ? kasan_populate_vmalloc+0x70/0x70 [ 1112.017493][T27656] apply_to_page_range+0x3b/0x50 [ 1112.022235][T27656] kasan_populate_vmalloc+0x65/0x70 [ 1112.027354][T27656] alloc_vmap_area+0x192f/0x1a80 [ 1112.032130][T27656] ? irqentry_exit+0x30/0x40 [ 1112.036557][T27656] ? vm_map_ram+0xa90/0xa90 [ 1112.040898][T27656] __get_vm_area_node+0x158/0x360 [ 1112.045755][T27656] ? kasan_check_range+0x82/0x2a0 [ 1112.050702][T27656] __vmalloc_node_range+0xe2/0x8d0 [ 1112.055647][T27656] ? reuseport_array_alloc+0xc3/0x160 [ 1112.060859][T27656] bpf_map_area_alloc+0xd9/0xf0 [ 1112.065632][T27656] ? reuseport_array_alloc+0xc3/0x160 [ 1112.070904][T27656] reuseport_array_alloc+0xc3/0x160 [ 1112.075873][T27656] map_create+0x411/0x2050 [ 1112.080124][T27656] __sys_bpf+0x296/0x760 [ 1112.084207][T27656] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1112.089626][T27656] ? debug_smp_processor_id+0x17/0x20 [ 1112.094995][T27656] __x64_sys_bpf+0x7c/0x90 [ 1112.099246][T27656] x64_sys_call+0x87f/0x9a0 [ 1112.103683][T27656] do_syscall_64+0x3b/0xb0 [ 1112.108049][T27656] ? clear_bhb_loop+0x35/0x90 [ 1112.112625][T27656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1112.118350][T27656] RIP: 0033:0x7f33e2897ef9 [ 1112.122638][T27656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.142388][T27656] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1112.150633][T27656] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1112.158443][T27656] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000000 [ 1112.166268][T27656] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.174253][T27656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.182063][T27656] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1112.189889][T27656] [ 1112.537864][T27679] device pim6reg1 entered promiscuous mode [ 1112.687475][T27688] FAULT_INJECTION: forcing a failure. [ 1112.687475][T27688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.700503][T27688] CPU: 0 PID: 27688 Comm: syz.0.9273 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1112.711708][T27688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1112.721601][T27688] Call Trace: [ 1112.724819][T27688] [ 1112.727586][T27688] dump_stack_lvl+0x151/0x1c0 [ 1112.732113][T27688] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1112.737573][T27688] ? __kasan_check_read+0x11/0x20 [ 1112.742429][T27688] dump_stack+0x15/0x20 [ 1112.746427][T27688] should_fail+0x3c6/0x510 [ 1112.750678][T27688] should_fail_usercopy+0x1a/0x20 [ 1112.755540][T27688] copy_page_from_iter_atomic+0x423/0x10e0 [ 1112.761182][T27688] ? pipe_zero+0x4e0/0x4e0 [ 1112.765435][T27688] generic_perform_write+0x337/0x5a0 [ 1112.770554][T27688] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1112.776377][T27688] ? file_remove_privs+0x610/0x610 [ 1112.781313][T27688] ? rwsem_write_trylock+0x153/0x340 [ 1112.786434][T27688] ? rwsem_mark_wake+0x770/0x770 [ 1112.791209][T27688] __generic_file_write_iter+0x25b/0x4b0 [ 1112.796806][T27688] generic_file_write_iter+0xaf/0x1c0 [ 1112.802020][T27688] vfs_write+0xd5d/0x1110 [ 1112.806179][T27688] ? putname+0xfa/0x150 [ 1112.810171][T27688] ? file_end_write+0x1c0/0x1c0 [ 1112.814859][T27688] ? mutex_lock+0xb6/0x1e0 [ 1112.819107][T27688] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1112.825533][T27688] ? __fdget_pos+0x2e7/0x3a0 [ 1112.829969][T27688] ? ksys_write+0x77/0x2c0 [ 1112.834212][T27688] ksys_write+0x199/0x2c0 [ 1112.838381][T27688] ? __ia32_sys_read+0x90/0x90 [ 1112.842982][T27688] ? debug_smp_processor_id+0x17/0x20 [ 1112.848191][T27688] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1112.854088][T27688] __x64_sys_write+0x7b/0x90 [ 1112.858515][T27688] x64_sys_call+0x2f/0x9a0 [ 1112.862764][T27688] do_syscall_64+0x3b/0xb0 [ 1112.867022][T27688] ? clear_bhb_loop+0x35/0x90 [ 1112.871625][T27688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1112.877347][T27688] RIP: 0033:0x7fdc4c34fef9 [ 1112.881600][T27688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.901063][T27688] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1112.909301][T27688] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1112.917100][T27688] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000006 [ 1112.924909][T27688] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.932720][T27688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.940533][T27688] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1112.948354][T27688] [ 1113.166361][T27698] FAULT_INJECTION: forcing a failure. [ 1113.166361][T27698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1113.231158][T27698] CPU: 1 PID: 27698 Comm: syz.0.9278 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1113.242396][T27698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1113.252447][T27698] Call Trace: [ 1113.255577][T27698] [ 1113.258355][T27698] dump_stack_lvl+0x151/0x1c0 [ 1113.262947][T27698] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1113.268506][T27698] ? 0xffffffffa0014000 [ 1113.272510][T27698] ? is_bpf_text_address+0x172/0x190 [ 1113.277612][T27698] ? stack_trace_save+0x1c0/0x1c0 [ 1113.282488][T27698] dump_stack+0x15/0x20 [ 1113.286469][T27698] should_fail+0x3c6/0x510 [ 1113.290721][T27698] should_fail_alloc_page+0x5a/0x80 [ 1113.295844][T27698] prepare_alloc_pages+0x15c/0x700 [ 1113.300800][T27698] ? __alloc_pages_bulk+0xe40/0xe40 [ 1113.305828][T27698] __alloc_pages+0x18c/0x8f0 [ 1113.310250][T27698] ? prep_new_page+0x110/0x110 [ 1113.314848][T27698] ? slab_post_alloc_hook+0x53/0x2c0 [ 1113.320004][T27698] ? security_inode_alloc+0x29/0x120 [ 1113.325106][T27698] ? new_inode_pseudo+0x93/0x220 [ 1113.330049][T27698] ? proc_pid_make_inode+0x27/0x1d0 [ 1113.335230][T27698] ? do_sys_openat2+0x13f/0x830 [ 1113.339874][T27698] ? __x64_sys_openat+0x243/0x290 [ 1113.344819][T27698] ? x64_sys_call+0x6bf/0x9a0 [ 1113.349331][T27698] ? avc_has_perm_noaudit+0x348/0x430 [ 1113.354541][T27698] ? memcpy+0x56/0x70 [ 1113.358386][T27698] handle_pte_fault+0xea0/0x24d0 [ 1113.363238][T27698] ? avc_denied+0x1b0/0x1b0 [ 1113.367560][T27698] ? fault_around_bytes_set+0xc0/0xc0 [ 1113.372780][T27698] do_handle_mm_fault+0x20bc/0x2400 [ 1113.377808][T27698] ? numa_migrate_prep+0xe0/0xe0 [ 1113.382590][T27698] ? stack_trace_save+0x1c0/0x1c0 [ 1113.387535][T27698] ? __kernel_text_address+0x9b/0x110 [ 1113.392739][T27698] ? unwind_get_return_address+0x4d/0x90 [ 1113.398296][T27698] ? down_read_trylock+0x3d6/0x7d0 [ 1113.403240][T27698] ? __init_rwsem+0x1d0/0x1d0 [ 1113.407746][T27698] ? vmacache_find+0x21f/0x4d0 [ 1113.412344][T27698] ? __find_vma+0x30/0x150 [ 1113.416598][T27698] exc_page_fault+0x3b5/0x830 [ 1113.421132][T27698] asm_exc_page_fault+0x27/0x30 [ 1113.425820][T27698] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1113.431964][T27698] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1113.451404][T27698] RSP: 0018:ffffc90000cafb10 EFLAGS: 00050203 [ 1113.457309][T27698] RAX: ffffffff82658401 RBX: 000000000000000f RCX: 0000000000000001 [ 1113.465209][T27698] RDX: 0000000000000007 RSI: ffff888121d34214 RDI: 0000000020002600 [ 1113.473023][T27698] RBP: ffffc90000cafb40 R08: 30203a636967616d R09: ffffed10243a6845 [ 1113.480825][T27698] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007ffffffff000 [ 1113.488723][T27698] R13: 000000002000260f R14: ffff888121d34214 R15: 0000000020002600 [ 1113.496553][T27698] ? _copy_to_user+0x51/0x90 [ 1113.500966][T27698] ? _copy_to_user+0x78/0x90 [ 1113.505493][T27698] bpf_verifier_vlog+0x1ab/0x330 [ 1113.510336][T27698] __btf_verifier_log+0xd1/0x120 [ 1113.515114][T27698] ? btf_parse_hdr+0x2bf/0x7c0 [ 1113.519804][T27698] ? btf_check_sec_info+0x4f0/0x4f0 [ 1113.524976][T27698] ? kvmalloc_node+0x281/0x4d0 [ 1113.529553][T27698] ? memcpy+0x56/0x70 [ 1113.533369][T27698] btf_parse_hdr+0x31a/0x7c0 [ 1113.537792][T27698] btf_new_fd+0x3fb/0x910 [ 1113.542108][T27698] bpf_btf_load+0x6f/0x90 [ 1113.546208][T27698] __sys_bpf+0x50e/0x760 [ 1113.550386][T27698] ? fput_many+0x160/0x1b0 [ 1113.554721][T27698] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1113.559945][T27698] ? debug_smp_processor_id+0x17/0x20 [ 1113.565335][T27698] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1113.571206][T27698] __x64_sys_bpf+0x7c/0x90 [ 1113.575469][T27698] x64_sys_call+0x87f/0x9a0 [ 1113.579806][T27698] do_syscall_64+0x3b/0xb0 [ 1113.584051][T27698] ? clear_bhb_loop+0x35/0x90 [ 1113.588567][T27698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1113.594297][T27698] RIP: 0033:0x7fdc4c34fef9 [ 1113.598557][T27698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.617990][T27698] RSP: 002b:00007fdc4afc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1113.626318][T27698] RAX: ffffffffffffffda RBX: 00007fdc4c507f80 RCX: 00007fdc4c34fef9 [ 1113.634131][T27698] RDX: 0000000000000020 RSI: 0000000020000ec0 RDI: 0000000000000012 [ 1113.641951][T27698] RBP: 00007fdc4afc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.649758][T27698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.657563][T27698] R13: 0000000000000000 R14: 00007fdc4c507f80 R15: 00007fffa835dd38 [ 1113.665385][T27698] [ 1113.743831][T27710] device pim6reg1 entered promiscuous mode [ 1114.381503][T27742] device pim6reg1 entered promiscuous mode [ 1114.950790][T27756] device syzkaller0 entered promiscuous mode [ 1115.057822][T27772] syz.0.9304[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.057908][T27772] syz.0.9304[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.074811][T27770] syz.1.9305[27770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.084812][T27774] device pim6reg1 entered promiscuous mode [ 1115.096410][T27770] syz.1.9305[27770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.742267][T27794] device syzkaller0 entered promiscuous mode [ 1116.186698][T27809] device pim6reg1 entered promiscuous mode [ 1117.843663][T27840] device pim6reg1 entered promiscuous mode [ 1118.837428][T27864] FAULT_INJECTION: forcing a failure. [ 1118.837428][T27864] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.892587][T27864] CPU: 0 PID: 27864 Comm: syz.2.9338 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1118.903946][T27864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.914010][T27864] Call Trace: [ 1118.917124][T27864] [ 1118.919898][T27864] dump_stack_lvl+0x151/0x1c0 [ 1118.924411][T27864] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1118.929884][T27864] dump_stack+0x15/0x20 [ 1118.933870][T27864] should_fail+0x3c6/0x510 [ 1118.938136][T27864] __should_failslab+0xa4/0xe0 [ 1118.942816][T27864] should_failslab+0x9/0x20 [ 1118.947165][T27864] slab_pre_alloc_hook+0x37/0xd0 [ 1118.951924][T27864] __kmalloc+0x6d/0x270 [ 1118.955916][T27864] ? sk_prot_alloc+0xf9/0x330 [ 1118.960544][T27864] sk_prot_alloc+0xf9/0x330 [ 1118.964895][T27864] ? _copy_from_user+0x96/0xd0 [ 1118.969582][T27864] sk_alloc+0x38/0x430 [ 1118.973512][T27864] bpf_prog_test_run_skb+0x362/0x1420 [ 1118.978684][T27864] ? __kasan_check_write+0x14/0x20 [ 1118.983628][T27864] ? proc_fail_nth_write+0x20b/0x290 [ 1118.988749][T27864] ? selinux_file_permission+0x2c4/0x570 [ 1118.994220][T27864] ? proc_fail_nth_read+0x210/0x210 [ 1118.999307][T27864] ? fsnotify_perm+0x6a/0x5d0 [ 1119.003771][T27864] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1119.009494][T27864] ? __kasan_check_write+0x14/0x20 [ 1119.014442][T27864] ? fput_many+0x160/0x1b0 [ 1119.018692][T27864] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1119.024583][T27864] bpf_prog_test_run+0x3b0/0x630 [ 1119.029531][T27864] ? bpf_prog_query+0x220/0x220 [ 1119.034216][T27864] ? selinux_bpf+0xd2/0x100 [ 1119.038559][T27864] ? security_bpf+0x82/0xb0 [ 1119.042901][T27864] __sys_bpf+0x525/0x760 [ 1119.046989][T27864] ? fput_many+0x160/0x1b0 [ 1119.051228][T27864] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1119.056528][T27864] ? debug_smp_processor_id+0x17/0x20 [ 1119.061728][T27864] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1119.067735][T27864] __x64_sys_bpf+0x7c/0x90 [ 1119.071975][T27864] x64_sys_call+0x87f/0x9a0 [ 1119.076342][T27864] do_syscall_64+0x3b/0xb0 [ 1119.080567][T27864] ? clear_bhb_loop+0x35/0x90 [ 1119.085167][T27864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1119.090894][T27864] RIP: 0033:0x7f45f39c4ef9 [ 1119.095151][T27864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.114854][T27864] RSP: 002b:00007f45f263e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1119.123094][T27864] RAX: ffffffffffffffda RBX: 00007f45f3b7cf80 RCX: 00007f45f39c4ef9 [ 1119.130999][T27864] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 1119.138988][T27864] RBP: 00007f45f263e090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.146797][T27864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.154609][T27864] R13: 0000000000000000 R14: 00007f45f3b7cf80 R15: 00007ffcc702d0f8 [ 1119.162476][T27864] [ 1119.207065][T27868] device pim6reg1 entered promiscuous mode [ 1120.323397][T27899] device pim6reg1 entered promiscuous mode [ 1120.462511][T27905] device pim6reg1 entered promiscuous mode [ 1120.576977][T27911] FAULT_INJECTION: forcing a failure. [ 1120.576977][T27911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.601885][T27911] CPU: 0 PID: 27911 Comm: syz.1.9356 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1120.613189][T27911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1120.623086][T27911] Call Trace: [ 1120.626219][T27911] [ 1120.628985][T27911] dump_stack_lvl+0x151/0x1c0 [ 1120.633509][T27911] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1120.638969][T27911] dump_stack+0x15/0x20 [ 1120.643044][T27911] should_fail+0x3c6/0x510 [ 1120.647298][T27911] should_fail_usercopy+0x1a/0x20 [ 1120.652159][T27911] _copy_to_user+0x20/0x90 [ 1120.656521][T27911] simple_read_from_buffer+0xc7/0x150 [ 1120.661722][T27911] proc_fail_nth_read+0x1a3/0x210 [ 1120.666586][T27911] ? proc_fault_inject_write+0x390/0x390 [ 1120.672048][T27911] ? fsnotify_perm+0x470/0x5d0 [ 1120.676647][T27911] ? security_file_permission+0x86/0xb0 [ 1120.682113][T27911] ? proc_fault_inject_write+0x390/0x390 [ 1120.687583][T27911] vfs_read+0x27d/0xd40 [ 1120.691575][T27911] ? kernel_read+0x1f0/0x1f0 [ 1120.695999][T27911] ? __kasan_check_write+0x14/0x20 [ 1120.700948][T27911] ? mutex_lock+0xb6/0x1e0 [ 1120.705203][T27911] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1120.711636][T27911] ? __fdget_pos+0x2e7/0x3a0 [ 1120.716070][T27911] ? ksys_read+0x77/0x2c0 [ 1120.720325][T27911] ksys_read+0x199/0x2c0 [ 1120.724387][T27911] ? __kasan_check_write+0x14/0x20 [ 1120.729513][T27911] ? vfs_write+0x1110/0x1110 [ 1120.733933][T27911] ? __kasan_check_read+0x11/0x20 [ 1120.738796][T27911] __x64_sys_read+0x7b/0x90 [ 1120.743140][T27911] x64_sys_call+0x28/0x9a0 [ 1120.747477][T27911] do_syscall_64+0x3b/0xb0 [ 1120.751726][T27911] ? clear_bhb_loop+0x35/0x90 [ 1120.756325][T27911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1120.762140][T27911] RIP: 0033:0x7f05031d093c [ 1120.766395][T27911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1120.785928][T27911] RSP: 002b:00007f0501e4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1120.794338][T27911] RAX: ffffffffffffffda RBX: 00007f0503389f80 RCX: 00007f05031d093c [ 1120.802239][T27911] RDX: 000000000000000f RSI: 00007f0501e4b0a0 RDI: 0000000000000005 [ 1120.810308][T27911] RBP: 00007f0501e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.818120][T27911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.825935][T27911] R13: 0000000000000000 R14: 00007f0503389f80 R15: 00007ffe2ead4328 [ 1120.833752][T27911] [ 1121.308280][T27931] FAULT_INJECTION: forcing a failure. [ 1121.308280][T27931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1121.403635][T27931] CPU: 1 PID: 27931 Comm: syz.4.9363 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1121.414853][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1121.424847][T27931] Call Trace: [ 1121.427963][T27931] [ 1121.430736][T27931] dump_stack_lvl+0x151/0x1c0 [ 1121.435250][T27931] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1121.440716][T27931] ? ___ratelimit+0xb2/0x5a0 [ 1121.445142][T27931] dump_stack+0x15/0x20 [ 1121.449134][T27931] should_fail+0x3c6/0x510 [ 1121.453387][T27931] should_fail_alloc_page+0x5a/0x80 [ 1121.458433][T27931] prepare_alloc_pages+0x15c/0x700 [ 1121.463367][T27931] ? __alloc_pages+0x8f0/0x8f0 [ 1121.468408][T27931] ? __alloc_pages_bulk+0xe40/0xe40 [ 1121.473442][T27931] __alloc_pages+0x18c/0x8f0 [ 1121.477864][T27931] ? prep_new_page+0x110/0x110 [ 1121.482465][T27931] ? __kasan_kmalloc+0x9/0x10 [ 1121.486977][T27931] ? __kmalloc+0x13a/0x270 [ 1121.491228][T27931] ? __vmalloc_node_range+0x2d6/0x8d0 [ 1121.496440][T27931] __vmalloc_node_range+0x482/0x8d0 [ 1121.501573][T27931] bpf_map_area_alloc+0xd9/0xf0 [ 1121.506247][T27931] ? array_map_alloc+0x278/0x6d0 [ 1121.511020][T27931] array_map_alloc+0x278/0x6d0 [ 1121.515725][T27931] map_create+0x411/0x2050 [ 1121.519974][T27931] __sys_bpf+0x296/0x760 [ 1121.524039][T27931] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1121.529263][T27931] ? debug_smp_processor_id+0x17/0x20 [ 1121.534462][T27931] __x64_sys_bpf+0x7c/0x90 [ 1121.538707][T27931] x64_sys_call+0x87f/0x9a0 [ 1121.543047][T27931] do_syscall_64+0x3b/0xb0 [ 1121.547296][T27931] ? clear_bhb_loop+0x35/0x90 [ 1121.551815][T27931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1121.557540][T27931] RIP: 0033:0x7f33e2897ef9 [ 1121.561807][T27931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.581640][T27931] RSP: 002b:00007f33e1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1121.589872][T27931] RAX: ffffffffffffffda RBX: 00007f33e2a4ff80 RCX: 00007f33e2897ef9 [ 1121.597783][T27931] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 0000000000000000 [ 1121.605599][T27931] RBP: 00007f33e1511090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.613406][T27931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.621323][T27931] R13: 0000000000000000 R14: 00007f33e2a4ff80 R15: 00007ffed8d87fb8 [ 1121.629138][T27931] [ 1122.010539][T27940] device pim6reg1 entered promiscuous mode [ 1127.490367][T27986] device pim6reg1 entered promiscuous mode [ 1127.627343][T27993] device pim6reg1 entered promiscuous mode [ 1127.880464][T28001] device pim6reg1 entered promiscuous mode [ 1129.110526][T28031] device pim6reg1 entered promiscuous mode [ 1129.273305][T28039] device pim6reg1 entered promiscuous mode [ 1129.534977][T28045] device pim6reg1 entered promiscuous mode [ 1130.806733][T28071] device pim6reg1 entered promiscuous mode [ 1131.698194][T28099] device sit0 entered promiscuous mode [ 1131.848088][T28105] device syzkaller0 entered promiscuous mode [ 1132.053563][T28120] device pim6reg1 entered promiscuous mode [ 1132.546777][T28141] device sit0 left promiscuous mode [ 1132.644799][T28145] device syzkaller0 entered promiscuous mode [ 1132.661527][T28141] device sit0 entered promiscuous mode [ 1133.103020][T28157] device pim6reg1 entered promiscuous mode [ 1133.909421][T28203] device pim6reg1 entered promiscuous mode [ 1134.418065][T28221] device pim6reg1 entered promiscuous mode [ 1140.359257][T28315] ref_ctr_offset mismatch. inode: 0x4fc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1141.163463][T28342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.322781][T28344] ref_ctr_offset mismatch. inode: 0x565 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1141.568728][T28346] device syzkaller0 entered promiscuous mode [ 1141.817423][T28370] device macsec0 entered promiscuous mode [ 1147.342554][T28439] device pim6reg1 entered promiscuous mode [ 1159.735762][T28460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.742639][T28460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.750005][T28460] device bridge_slave_0 entered promiscuous mode [ 1159.758243][T28460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.765127][T28460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.772423][T28460] device bridge_slave_1 entered promiscuous mode [ 1159.778982][T28462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.786085][T28462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.793725][T28462] device bridge_slave_0 entered promiscuous mode [ 1159.801935][T28462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.809539][T28462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.817630][T28462] device bridge_slave_1 entered promiscuous mode [ 1159.979306][T28464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.986211][T28464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.993794][T28464] device bridge_slave_0 entered promiscuous mode [ 1160.022358][T28464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.029380][T28464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.036742][T28464] device bridge_slave_1 entered promiscuous mode [ 1160.050752][T28463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.057937][T28463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.065383][T28463] device bridge_slave_0 entered promiscuous mode [ 1160.089794][T28463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.096808][T28463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.104286][T28463] device bridge_slave_1 entered promiscuous mode [ 1160.141813][T28465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.148737][T28465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.156294][T28465] device bridge_slave_0 entered promiscuous mode [ 1160.163288][T28465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.170127][T28465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.177716][T28465] device bridge_slave_1 entered promiscuous mode [ 1160.191093][T28462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.197988][T28462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.205180][T28462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.211925][T28462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.238456][T28460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.245432][T28460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.252663][T28460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.259545][T28460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.310395][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.318156][ T8] device bridge_slave_0 left promiscuous mode [ 1160.324367][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.505255][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.513401][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.521018][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.528738][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.537151][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.567692][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.575951][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.584253][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.591292][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.598885][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.607319][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.615569][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.622412][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.683755][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1160.691835][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1160.700034][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1160.708968][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1160.739184][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.747026][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.754396][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.762559][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.770918][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.777893][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.785523][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.793714][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.801882][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.808777][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.816123][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.823590][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.830793][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.839034][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.847027][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.853886][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.861115][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.869384][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.877370][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.884219][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.892054][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1160.914936][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.922371][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.929927][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.938164][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.957953][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.966179][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.974983][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.981917][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.989635][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.998213][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.006322][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.013268][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.020633][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.028821][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.036808][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1161.045089][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.069712][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.077299][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.085636][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.094303][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.102134][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.110588][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1161.118870][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.127403][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1161.135447][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.143845][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.151447][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.162719][T28462] device veth0_vlan entered promiscuous mode [ 1161.189094][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.197290][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.205828][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.213910][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.220739][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.228008][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.236260][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.244463][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.251488][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.258805][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.266718][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.309655][T28463] device veth0_vlan entered promiscuous mode [ 1161.325715][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.334351][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.342483][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.350862][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.358645][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.366316][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.373985][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1161.382094][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.394009][T28460] device veth0_vlan entered promiscuous mode [ 1161.403829][T28464] device veth0_vlan entered promiscuous mode [ 1161.413170][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.421140][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.428751][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.437418][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1161.445193][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.453606][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.460927][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.475351][T28462] device veth1_macvtap entered promiscuous mode [ 1161.486556][T28465] device veth0_vlan entered promiscuous mode [ 1161.496064][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.504666][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1161.512797][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.521131][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1161.528843][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1161.537187][T28464] device veth1_macvtap entered promiscuous mode [ 1161.550293][T28463] device veth1_macvtap entered promiscuous mode [ 1161.557356][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.568136][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1161.575885][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1161.589993][T28460] device veth1_macvtap entered promiscuous mode [ 1161.599552][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1161.607918][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.616191][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1161.623998][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.632116][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.640548][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.649210][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.663029][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.671160][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.679469][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.687771][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.722054][T28465] device veth1_macvtap entered promiscuous mode [ 1161.731572][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.740497][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.748881][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1161.757122][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1161.765219][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1161.772958][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.781141][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.802532][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.810762][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.819200][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.827582][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.836025][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.844730][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.852939][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.861693][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1162.687303][ T8] device veth0_to_batadv left promiscuous mode [ 1162.703168][ T8] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1162.741118][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.793243][ T8] device bridge_slave_0 left promiscuous mode [ 1162.858374][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.918665][ T8] device bridge_slave_1 left promiscuous mode [ 1162.956753][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.996622][ T8] device bridge_slave_0 left promiscuous mode [ 1163.004784][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.015024][ T8] device bridge_slave_1 left promiscuous mode [ 1163.023344][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.031577][ T8] device bridge_slave_0 left promiscuous mode [ 1163.038384][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.051936][ T8] device bridge_slave_1 left promiscuous mode [ 1163.062225][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.087191][ T8] device bridge_slave_0 left promiscuous mode [ 1163.113298][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.138138][ T8] device veth1_macvtap left promiscuous mode [ 1163.157035][ T8] device veth0_vlan left promiscuous mode [ 1163.168108][ T8] device veth1_macvtap left promiscuous mode [ 1163.178702][ T8] device veth0_vlan left promiscuous mode [ 1163.223145][ T8] device veth1_macvtap left promiscuous mode [ 1163.229086][ T8] device veth0_vlan left promiscuous mode [ 1172.688974][T28654] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1172.701833][T28654] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1172.728839][T28654] device veth0_to_batadv entered promiscuous mode [ 1172.749421][T28654] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1172.756921][T28654] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 1176.583610][T28721] device pim6reg1 entered promiscuous mode [ 1180.784280][T28769] device pim6reg1 entered promiscuous mode [ 1180.897339][T28774] device syzkaller0 entered promiscuous mode [ 1181.078220][T28786] FAULT_INJECTION: forcing a failure. [ 1181.078220][T28786] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.092380][T28786] CPU: 1 PID: 28786 Comm: syz.2.9659 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1181.104128][T28786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1181.114634][T28786] Call Trace: [ 1181.118420][T28786] [ 1181.121634][T28786] dump_stack_lvl+0x151/0x1c0 [ 1181.126831][T28786] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1181.133189][T28786] dump_stack+0x15/0x20 [ 1181.137286][T28786] should_fail+0x3c6/0x510 [ 1181.141723][T28786] __should_failslab+0xa4/0xe0 [ 1181.146835][T28786] should_failslab+0x9/0x20 [ 1181.151269][T28786] slab_pre_alloc_hook+0x37/0xd0 [ 1181.156215][T28786] ? alloc_skb_with_frags+0xa6/0x680 [ 1181.161545][T28786] __kmalloc_track_caller+0x6c/0x260 [ 1181.167381][T28786] ? alloc_skb_with_frags+0xa6/0x680 [ 1181.173114][T28786] ? alloc_skb_with_frags+0xa6/0x680 [ 1181.178541][T28786] __alloc_skb+0x10c/0x550 [ 1181.182806][T28786] alloc_skb_with_frags+0xa6/0x680 [ 1181.187739][T28786] ? fib6_rule_lookup+0x3b4/0x620 [ 1181.192618][T28786] ? ip6_route_output_flags_noref+0x350/0x350 [ 1181.198509][T28786] sock_alloc_send_pskb+0x915/0xa50 [ 1181.203532][T28786] ? sock_kzfree_s+0x60/0x60 [ 1181.208058][T28786] ? ip6_route_output_flags_noref+0x289/0x350 [ 1181.213961][T28786] ? ip6_route_output_flags+0xfd/0x220 [ 1181.219257][T28786] ? __local_bh_enable_ip+0x58/0x80 [ 1181.224381][T28786] ? local_bh_enable+0x1f/0x30 [ 1181.229063][T28786] sock_alloc_send_skb+0x32/0x40 [ 1181.233846][T28786] __ip6_append_data+0x2a4b/0x41d0 [ 1181.238804][T28786] ? ip6_setup_cork+0x12a0/0x12a0 [ 1181.243648][T28786] ? __kasan_check_read+0x11/0x20 [ 1181.248506][T28786] ? ip6_setup_cork+0xd29/0x12a0 [ 1181.253285][T28786] ip6_append_data+0x1ca/0x300 [ 1181.258000][T28786] ? icmpv6_route_lookup+0x5a0/0x5a0 [ 1181.263088][T28786] ? icmpv6_route_lookup+0x5a0/0x5a0 [ 1181.268237][T28786] icmp6_send+0x130d/0x1d60 [ 1181.272651][T28786] ? icmpv6_push_pending_frames+0x450/0x450 [ 1181.278363][T28786] ? ipgre_xmit+0x87a/0xc30 [ 1181.282795][T28786] ? dev_hard_start_xmit+0x1a0/0x620 [ 1181.287918][T28786] ? __dev_queue_xmit+0x18b4/0x2e70 [ 1181.293079][T28786] ? call_netdevice_register_net_notifiers+0x30/0x5a0 [ 1181.299802][T28786] ? __bpf_redirect+0x690/0xe60 [ 1181.304496][T28786] ? bpf_clone_redirect+0x24d/0x390 [ 1181.309522][T28786] ? bpf_prog_e2f29814702bf05a+0x56/0x80 [ 1181.315001][T28786] ? fib_table_lookup+0x1046/0x1c90 [ 1181.320034][T28786] ? memset+0x35/0x40 [ 1181.323868][T28786] icmpv6_ndo_send+0x131/0x4e0 [ 1181.328533][T28786] ? ip_route_output_key_hash_rcu+0x17ec/0x20b0 [ 1181.334614][T28786] ? udp6_set_csum+0x5e0/0x5e0 [ 1181.339218][T28786] ? ip_route_output_flow+0x1ef/0x310 [ 1181.344416][T28786] ? kfree_skbmem+0x104/0x170 [ 1181.349144][T28786] ? ipv4_sk_update_pmtu+0x1e00/0x1e00 [ 1181.354432][T28786] tnl_update_pmtu+0x926/0xba0 [ 1181.359036][T28786] ip_tunnel_xmit+0xc9c/0x2760 [ 1181.363630][T28786] ? ip_tunnel_xmit+0x101/0x2760 [ 1181.368438][T28786] ? tnl_update_pmtu+0xba0/0xba0 [ 1181.373262][T28786] ? skb_push+0x60/0x120 [ 1181.377341][T28786] ? skb_network_protocol+0x578/0x770 [ 1181.382559][T28786] ? gre_build_header+0x233/0x7a0 [ 1181.387716][T28786] ipgre_xmit+0x87a/0xc30 [ 1181.391880][T28786] dev_hard_start_xmit+0x228/0x620 [ 1181.396816][T28786] __dev_queue_xmit+0x18b4/0x2e70 [ 1181.401760][T28786] ? dev_queue_xmit+0x20/0x20 [ 1181.406270][T28786] ? __kasan_check_write+0x14/0x20 [ 1181.411260][T28786] ? skb_release_data+0x1c3/0xa80 [ 1181.416077][T28786] ? __kasan_check_write+0x14/0x20 [ 1181.421032][T28786] ? pskb_expand_head+0xc8f/0x1240 [ 1181.425970][T28786] dev_queue_xmit+0x17/0x20 [ 1181.430308][T28786] __bpf_redirect+0x690/0xe60 [ 1181.434826][T28786] bpf_clone_redirect+0x24d/0x390 [ 1181.439771][T28786] bpf_prog_e2f29814702bf05a+0x56/0x80 [ 1181.445062][T28786] ? trace_event_raw_event_swiotlb_bounced+0x380/0x480 [ 1181.451749][T28786] ? __stack_depot_save+0x34/0x470 [ 1181.456781][T28786] ? __kasan_slab_alloc+0xc3/0xe0 [ 1181.461639][T28786] ? __kasan_slab_alloc+0xb1/0xe0 [ 1181.466502][T28786] ? slab_post_alloc_hook+0x53/0x2c0 [ 1181.471723][T28786] ? kmem_cache_alloc+0xf5/0x200 [ 1181.476568][T28786] ? __build_skb+0x2a/0x300 [ 1181.480907][T28786] ? build_skb+0x25/0x1f0 [ 1181.485074][T28786] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 1181.490479][T28786] ? bpf_prog_test_run+0x3b0/0x630 [ 1181.495405][T28786] ? __sys_bpf+0x525/0x760 [ 1181.499658][T28786] ? __x64_sys_bpf+0x7c/0x90 [ 1181.504094][T28786] ? x64_sys_call+0x87f/0x9a0 [ 1181.509118][T28786] ? do_syscall_64+0x3b/0xb0 [ 1181.513558][T28786] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1181.519555][T28786] ? __kasan_check_read+0x11/0x20 [ 1181.524485][T28786] ? bpf_test_timer_continue+0x140/0x460 [ 1181.529968][T28786] bpf_test_run+0x478/0xa10 [ 1181.534308][T28786] ? convert___skb_to_skb+0x570/0x570 [ 1181.539496][T28786] ? eth_type_trans+0x2e4/0x620 [ 1181.544185][T28786] ? eth_get_headlen+0x240/0x240 [ 1181.548958][T28786] ? bpf_prog_test_run_skb+0x7bd/0x1420 [ 1181.554362][T28786] ? convert___skb_to_skb+0x44/0x570 [ 1181.559458][T28786] ? memcpy+0x56/0x70 [ 1181.563281][T28786] bpf_prog_test_run_skb+0xb41/0x1420 [ 1181.568486][T28786] ? __kasan_check_write+0x14/0x20 [ 1181.573442][T28786] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1181.579169][T28786] ? __kasan_check_write+0x14/0x20 [ 1181.584115][T28786] ? fput_many+0x160/0x1b0 [ 1181.588365][T28786] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 1181.594109][T28786] bpf_prog_test_run+0x3b0/0x630 [ 1181.599144][T28786] ? bpf_prog_query+0x220/0x220 [ 1181.603916][T28786] ? selinux_bpf+0xd2/0x100 [ 1181.608260][T28786] ? security_bpf+0x82/0xb0 [ 1181.612589][T28786] __sys_bpf+0x525/0x760 [ 1181.616667][T28786] ? fput_many+0x160/0x1b0 [ 1181.620919][T28786] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1181.626132][T28786] ? debug_smp_processor_id+0x17/0x20 [ 1181.631336][T28786] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1181.637368][T28786] __x64_sys_bpf+0x7c/0x90 [ 1181.641788][T28786] x64_sys_call+0x87f/0x9a0 [ 1181.646373][T28786] do_syscall_64+0x3b/0xb0 [ 1181.650590][T28786] ? clear_bhb_loop+0x35/0x90 [ 1181.655102][T28786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1181.660827][T28786] RIP: 0033:0x7f49d2b0def9 [ 1181.665088][T28786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.684524][T28786] RSP: 002b:00007f49d1787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1181.692769][T28786] RAX: ffffffffffffffda RBX: 00007f49d2cc5f80 RCX: 00007f49d2b0def9 [ 1181.700587][T28786] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1181.708499][T28786] RBP: 00007f49d1787090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.716311][T28786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.724209][T28786] R13: 0000000000000000 R14: 00007f49d2cc5f80 R15: 00007ffd13f78108 [ 1181.732211][T28786] [ 1183.420440][T28873] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1183.500171][T28873] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1183.568000][T28873] device veth0_to_batadv entered promiscuous mode [ 1183.579329][T28873] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1183.586582][T28873] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 1183.715944][T28879] device pim6reg1 entered promiscuous mode [ 1185.103035][T28944] device veth0_to_batadv left promiscuous mode [ 1185.147626][T28944] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1185.309108][T28957] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1185.317362][T28957] bridge0: port 3(veth0_to_batadv) entered disabled state [ 1185.337564][T28957] device veth0_to_batadv entered promiscuous mode [ 1185.361552][T28957] bridge0: port 3(veth0_to_batadv) entered blocking state [ 1185.368933][T28957] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 1188.169207][T29049] cgroup: fork rejected by pids controller in /syz4 [ 1188.187217][T29049] device pim6reg1 entered promiscuous mode [ 1188.816806][T29070] device veth0_vlan left promiscuous mode [ 1188.850115][T29070] device veth0_vlan entered promiscuous mode [ 1189.153991][ T1080] device bridge_slave_1 left promiscuous mode [ 1189.167705][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.175726][ T1080] device bridge_slave_0 left promiscuous mode [ 1189.181917][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.211276][ T1080] device veth1_macvtap left promiscuous mode [ 1189.312831][ T1080] device veth0_vlan left promiscuous mode [ 1189.613665][T29071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.625582][T29071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.633988][T29071] device bridge_slave_0 entered promiscuous mode [ 1189.709110][T29071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.719125][T29071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.727310][T29071] device bridge_slave_1 entered promiscuous mode [ 1190.507862][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1190.516049][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.548015][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.598411][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.669225][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.676197][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.789095][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.797690][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.806608][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.813689][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.826070][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1190.932335][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.981369][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.989666][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.997997][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1191.042261][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.050668][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.062957][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.079731][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.090532][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.108847][T29071] device veth0_vlan entered promiscuous mode [ 1191.123804][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.133847][T29071] device veth1_macvtap entered promiscuous mode [ 1191.144221][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1191.153293][T22868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1191.182427][T28921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1191.200037][T28921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.758842][T29214] device syzkaller0 entered promiscuous mode [ 1193.943176][T29218] FAULT_INJECTION: forcing a failure. [ 1193.943176][T29218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1194.012916][T29218] CPU: 0 PID: 29218 Comm: syz.0.9817 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1194.024496][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1194.034401][T29218] Call Trace: [ 1194.037519][T29218] [ 1194.040288][T29218] dump_stack_lvl+0x151/0x1c0 [ 1194.044804][T29218] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1194.050409][T29218] dump_stack+0x15/0x20 [ 1194.054410][T29218] should_fail+0x3c6/0x510 [ 1194.058910][T29218] should_fail_alloc_page+0x5a/0x80 [ 1194.064824][T29218] prepare_alloc_pages+0x15c/0x700 [ 1194.071279][T29218] ? __alloc_pages+0x8f0/0x8f0 [ 1194.077083][T29218] ? __alloc_pages_bulk+0xe40/0xe40 [ 1194.083755][T29218] __alloc_pages+0x18c/0x8f0 [ 1194.088643][T29218] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1194.094853][T29218] ? prep_new_page+0x110/0x110 [ 1194.100068][T29218] ? __kasan_check_write+0x14/0x20 [ 1194.105710][T29218] ? kasan_check_range+0x1bd/0x2a0 [ 1194.110884][T29218] __get_free_pages+0x10/0x30 [ 1194.115888][T29218] kasan_populate_vmalloc_pte+0x39/0x130 [ 1194.121737][T29218] ? __apply_to_page_range+0x8ca/0xbe0 [ 1194.127198][T29218] __apply_to_page_range+0x8dd/0xbe0 [ 1194.132403][T29218] ? kasan_populate_vmalloc+0x70/0x70 [ 1194.137767][T29218] ? kasan_populate_vmalloc+0x70/0x70 [ 1194.142991][T29218] apply_to_page_range+0x3b/0x50 [ 1194.147861][T29218] kasan_populate_vmalloc+0x65/0x70 [ 1194.153057][T29218] alloc_vmap_area+0x192f/0x1a80 [ 1194.157842][T29218] ? vm_map_ram+0xa90/0xa90 [ 1194.162932][T29218] ? kmem_cache_alloc_trace+0x115/0x210 [ 1194.168849][T29218] ? __get_vm_area_node+0x117/0x360 [ 1194.173924][T29218] __get_vm_area_node+0x158/0x360 [ 1194.179263][T29218] ? selinux_capset+0xf0/0xf0 [ 1194.183808][T29218] __vmalloc_node_range+0xe2/0x8d0 [ 1194.188990][T29218] ? array_map_alloc+0x278/0x6d0 [ 1194.193852][T29218] ? cap_capable+0x1d2/0x270 [ 1194.198347][T29218] bpf_map_area_alloc+0xd9/0xf0 [ 1194.204070][T29218] ? array_map_alloc+0x278/0x6d0 [ 1194.209089][T29218] array_map_alloc+0x278/0x6d0 [ 1194.214146][T29218] map_create+0x411/0x2050 [ 1194.218398][T29218] __sys_bpf+0x296/0x760 [ 1194.222542][T29218] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1194.227942][T29218] __x64_sys_bpf+0x7c/0x90 [ 1194.232186][T29218] x64_sys_call+0x87f/0x9a0 [ 1194.236531][T29218] do_syscall_64+0x3b/0xb0 [ 1194.240871][T29218] ? clear_bhb_loop+0x35/0x90 [ 1194.245388][T29218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1194.251101][T29218] RIP: 0033:0x7f6636277ef9 [ 1194.255753][T29218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.275195][T29218] RSP: 002b:00007f6634ef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1194.283519][T29218] RAX: ffffffffffffffda RBX: 00007f663642ff80 RCX: 00007f6636277ef9 [ 1194.291417][T29218] RDX: 0000000000000048 RSI: 0000000020000540 RDI: 0b00000000000000 [ 1194.299237][T29218] RBP: 00007f6634ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.307230][T29218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1194.315266][T29218] R13: 0000000000000000 R14: 00007f663642ff80 R15: 00007ffc89633c38 [ 1194.323123][T29218] [ 1195.953339][T29285] device pim6reg1 entered promiscuous mode [ 1196.478254][T29306] FAULT_INJECTION: forcing a failure. [ 1196.478254][T29306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.491516][T29306] CPU: 0 PID: 29306 Comm: syz.2.9848 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1196.502896][T29306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1196.512904][T29306] Call Trace: [ 1196.516082][T29306] [ 1196.519078][T29306] dump_stack_lvl+0x151/0x1c0 [ 1196.523666][T29306] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1196.529272][T29306] ? group_send_sig_info+0xa4/0x460 [ 1196.534545][T29306] ? kmem_cache_free+0x116/0x2e0 [ 1196.539326][T29306] ? do_sys_openat2+0x71c/0x830 [ 1196.544018][T29306] dump_stack+0x15/0x20 [ 1196.548261][T29306] should_fail+0x3c6/0x510 [ 1196.552809][T29306] should_fail_usercopy+0x1a/0x20 [ 1196.557664][T29306] _copy_from_user+0x20/0xd0 [ 1196.562115][T29306] iovec_from_user+0xc7/0x330 [ 1196.566779][T29306] __import_iovec+0x6d/0x420 [ 1196.571216][T29306] import_iovec+0xe5/0x120 [ 1196.575455][T29306] ___sys_recvmsg+0x56b/0x690 [ 1196.579971][T29306] ? __sys_recvmsg+0x260/0x260 [ 1196.584783][T29306] ? __fdget+0x1bc/0x240 [ 1196.588850][T29306] __x64_sys_recvmsg+0x1dc/0x2b0 [ 1196.593673][T29306] ? ___sys_recvmsg+0x690/0x690 [ 1196.598402][T29306] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1196.604399][T29306] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1196.609859][T29306] x64_sys_call+0x171/0x9a0 [ 1196.614199][T29306] do_syscall_64+0x3b/0xb0 [ 1196.618647][T29306] ? clear_bhb_loop+0x35/0x90 [ 1196.623139][T29306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1196.628847][T29306] RIP: 0033:0x7f49d2b0def9 [ 1196.633144][T29306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.652824][T29306] RSP: 002b:00007f49d1787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1196.661259][T29306] RAX: ffffffffffffffda RBX: 00007f49d2cc5f80 RCX: 00007f49d2b0def9 [ 1196.669116][T29306] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 1196.677013][T29306] RBP: 00007f49d1787090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.685036][T29306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.692839][T29306] R13: 0000000000000000 R14: 00007f49d2cc5f80 R15: 00007ffd13f78108 [ 1196.700675][T29306] Connection to 10.128.0.42 closed by remote host. [ 1201.275719][T29398] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1201.287643][T29398] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1201.295878][T29398] CPU: 1 PID: 29398 Comm: syz.4.9885 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 1201.307069][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1201.317016][T29398] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 1201.322433][T29398] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 b9 04 2b ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 96 04 2b ff 41 f6 07 01 48 89 5d [ 1201.342893][T29398] RSP: 0018:ffffc90000d676a0 EFLAGS: 00010246 [ 1201.348797][T29398] RAX: dffffc0000000000 RBX: ffff888126a6cd20 RCX: ffff88810ff93b40 [ 1201.356606][T29398] RDX: ffffffff81a574a0 RSI: ffff88810df82080 RDI: ffff888126a6cd10 [ 1201.364418][T29398] RBP: ffffc90000d67700 R08: ffffffff81a55560 R09: ffffed1021bf0414 [ 1201.372226][T29398] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1201.380047][T29398] R13: ffff888126a6cd10 R14: 1ffff11024d4d9a4 R15: 0000000000000000 [ 1201.387866][T29398] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1201.396736][T29398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.403266][T29398] CR2: 0000000000000000 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 1201.411114][T29398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.419047][T29398] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1201.426946][T29398] Call Trace: [ 1201.430340][T29398] [ 1201.433320][T29398] ? __die_body+0x62/0xb0 [ 1201.437469][T29398] ? die_addr+0x9f/0xd0 [ 1201.441460][T29398] ? exc_general_protection+0x311/0x4b0 [ 1201.446872][T29398] ? asm_exc_general_protection+0x27/0x30 [ 1201.452481][T29398] ? vma_interval_tree_remove+0xae0/0xba0 [ 1201.458031][T29398] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 1201.464288][T29398] ? __rb_erase_color+0x20b/0xa60 [ 1201.469146][T29398] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 1201.475395][T29398] ? rwsem_mark_wake+0x770/0x770 [ 1201.480167][T29398] vma_interval_tree_remove+0xb82/0xba0 [ 1201.485564][T29398] unlink_file_vma+0xd9/0xf0 [ 1201.490149][T29398] free_pgtables+0x13f/0x280 [ 1201.494579][T29398] exit_mmap+0x405/0x940 [ 1201.498768][T29398] ? exit_aio+0x25e/0x3c0 [ 1201.502945][T29398] ? vm_brk+0x30/0x30 [ 1201.506830][T29398] ? mutex_unlock+0xb2/0x260 [ 1201.511562][T29398] ? uprobe_clear_state+0x2cd/0x320 [ 1201.516747][T29398] __mmput+0x95/0x310 [ 1201.520585][T29398] mmput+0x5b/0x170 [ 1201.524353][T29398] do_exit+0xb9c/0x2ca0 [ 1201.528340][T29398] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 1201.534642][T29398] ? put_task_struct+0x80/0x80 [ 1201.539517][T29398] ? irqentry_exit+0x30/0x40 [ 1201.543871][T29398] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1201.549525][T29398] do_group_exit+0x141/0x310 [ 1201.554374][T29398] ? _raw_spin_unlock_irq+0x49/0x70 [ 1201.559410][T29398] get_signal+0x7a3/0x1630 [ 1201.564125][T29398] arch_do_signal_or_restart+0xbd/0x1680 [ 1201.569812][T29398] ? _copy_from_user+0x52/0xd0 [ 1201.575090][T29398] ? _copy_from_user+0x64/0xd0 [ 1201.581748][T29398] ? __kasan_check_write+0x14/0x20 [ 1201.588155][T29398] ? _copy_from_user+0x96/0xd0 [ 1201.594629][T29398] ? restore_altstack+0x274/0x400 [ 1201.600533][T29398] ? irqentry_exit+0x30/0x40 [ 1201.605118][T29398] ? get_sigframe_size+0x10/0x10 [ 1201.610018][T29398] ? __ia32_sys_sigaltstack+0x70/0x70 [ 1201.615192][T29398] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 1201.620646][T29398] exit_to_user_mode_loop+0xa0/0xe0 [ 1201.625913][T29398] exit_to_user_mode_prepare+0x5a/0xa0 [ 1201.631147][T29398] syscall_exit_to_user_mode+0x26/0x160 [ 1201.636615][T29398] do_syscall_64+0x47/0xb0 [ 1201.640869][T29398] ? clear_bhb_loop+0x35/0x90 [ 1201.645379][T29398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1201.651108][T29398] RIP: 0033:0x7f7072540850 [ 1201.655365][T29398] Code: Unable to access opcode bytes at RIP 0x7f7072540826. [ 1201.662563][T29398] RSP: 002b:00007f70712f8a38 EFLAGS: 00000206 [ 1201.668583][T29398] RAX: 0000000000000000 RBX: 00007f7072837f80 RCX: 00007f707267fef9 [ 1201.676471][T29398] RDX: 00007f70712f8a40 RSI: 00007f70712f8b70 RDI: 0000000000000011 [ 1201.684308][T29398] RBP: 00007f70726f2b76 R08: 0000000000000000 R09: 0000000000000000 [ 1201.692184][T29398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1201.700258][T29398] R13: 0000000000000000 R14: 00007f7072837f80 R15: 00007ffebc3ba938 [ 1201.708770][T29398] [ 1201.711622][T29398] Modules linked in: [ 1201.716462][T29398] ---[ end trace 4f4f4ae95a8a12ad ]--- [ 1201.722192][T29398] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 1201.728771][T29398] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 b9 04 2b ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 96 04 2b ff 41 f6 07 01 48 89 5d [ 1201.758500][T29398] RSP: 0018:ffffc90000d676a0 EFLAGS: 00010246 [ 1201.765252][T29398] RAX: dffffc0000000000 RBX: ffff888126a6cd20 RCX: ffff88810ff93b40 [ 1201.774248][T29398] RDX: ffffffff81a574a0 RSI: ffff88810df82080 RDI: ffff888126a6cd10 [ 1201.782954][T29398] RBP: ffffc90000d67700 R08: ffffffff81a55560 R09: ffffed1021bf0414 [ 1201.791279][T29398] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1201.799919][T29398] R13: ffff888126a6cd10 R14: 1ffff11024d4d9a4 R15: 0000000000000000 [ 1201.807897][T29398] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1201.817802][T29398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.824891][T29398] CR2: 0000000000000000 CR3: 000000010c230000 CR4: 00000000003506a0 [ 1201.833145][T29398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.841843][T29398] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1201.850365][T29398] Kernel panic - not syncing: Fatal exception [ 1201.856359][T29398] Kernel Offset: disabled [ 1201.860512][T29398] Rebooting in 86400 seconds..