last executing test programs: 56.368945508s ago: executing program 1 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x9, 0x10001, 0x49, 0x24008, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x9, 0x10001, 0x49, 0x24008, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000000000000104000003000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000000000000104000003000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c9d4f2f174eba802000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='hrtimer_init\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b3d8daf7236e963c1677ac74206b1fe53a2cff80001425b1e0a91e399bef6c07ef97c4dfab5a07ce6abad788db719b4f38951e39713449ae1b34700285e049c12d2a05c3e4b3adda656bb6b0b27609308a2f8aa412445c1e0407115c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000d53a0000fb000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05220000001f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 56.237684846s ago: executing program 1 (id=1398): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000002c0)="b064f5ec5781a0cc6bd56ee77c91a9a24ce9fc9b10bae4f1ef52102e5c74d9b8684d2a44983f33ad75a96168", 0x2c, 0x4000000}, 0x2000c000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r3) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000fc0000000000e5ff0000181100dcfa83288fa6d2a3c6b49bfda235fc4afb4ef751858a92fd2a2d0778f4307da155dc8c00f0e1e540daf74dc675ba80f3aeaec138354d664487f3c12aae722576dfb58cffbfa73ea88c35f6b32e92c305040a367ce814aa064f49be01bcfd869c5e9bf4e8fd928bfd574579cd98cf5637713242a70e246846", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 55.32160165s ago: executing program 1 (id=1412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 55.267242683s ago: executing program 1 (id=1413): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x6280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000640)='tasks\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000320000", @ANYRES32, @ANYBLOB="000000000000001b00000000008bf496bb7d3491", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000079000600000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f8000000000000004be17979cf00996de30de1c58ea2037021d880b6a6775ebf835a8975af88a419bbbd3673b66b97e5c4380c1c0eff08b0a3fa1c260ada89df448953d47bbc337132e3e782a87d8e12748bc11f0171ae129f5295f134875ba7ea2853e113dce58fad8854cb4913342881cf9b610fe3a96eb2efab43e8bcae90e41486aab945dac4f894b63f6eca449a36f281e02a907f0a8c1d0bb4f8d8dbaf370481081f3c751acf67165c5a3729c495d879cd3e46abdc0cf3acca701884cc5df127396c5c"], 0x48) 54.962610055s ago: executing program 1 (id=1415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 54.940464017s ago: executing program 1 (id=1416): r0 = perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 24.91348757s ago: executing program 4 (id=1745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="2d706900000000000e8839"], 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000280)="0823d5fa5bd8c6f70fcdc7bb977ec668f17613c52f7f953a47a8eb72108a92c8da734d0f406f8a635d819355f9c17b96531d72f6cba769c0717c2bee8040528de90ad470142444b749921f9fae7ecc3838495b98503b8fb7dfb3e8e5b5ed851913100fe5deba32d9ed88b1d9e645961da30d5e130c65edf61dee4ad7", 0x7c}, {&(0x7f0000000300)="10073b6702d5c464fe1d27d5696c45ab02c70a45739be015ee01eacfbfa390edaf1ed68d97fc2f42c7316d002d81c6de4a19f22fdab5ef3aa4ccea85668c2673ca292a76f34df482ba9f4f5e2b3f4a2ed8fce497170796dd8019fd5a3e1f5c863ef49125edcceacf2299a933", 0x6c}, {&(0x7f00000001c0)="401c9a05e69d8804396d5bed307f57e8e8f29250a0b88acdb0a2ad4b33f9", 0x1e}, {&(0x7f0000000680)="8d6232b423e7c5f4b0f3b55b60ef8b085e50a79c8a0bb40f63750426ff952d047ee74e3ebf78d50cdfebb5930607c3032f556e0853dc2af14760e63138d307e2bb3bc25cdfb61901b82a1b0fdb8611d258d6535723800436682b3cd9f2e392cbbe18e41afa0da62d292df27a8e601287ff83454c094a91e839a5e3341e6d5e661255ab63b2883ab00499ed762d5ed0c5b220e510c27d2ca3d4aa185b944f1f5a8a4f94e6617081159140f1eec9c55ae850454dda3312b70272a2f2a76a38723d26857c406f82bdbea5fc9e8dfc7b2d0fa11b700584f7ee83acb6eccc", 0xdc}], 0x5}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454ce, 0x0) 24.020565091s ago: executing program 4 (id=1750): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000002c0)="b064f5ec5781a0cc6bd56ee77c91a9a24ce9fc9b10bae4f1ef52102e5c74d9b8684d2a44983f33ad75a96168", 0x2c, 0x4000000}, 0x2000c000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0xc4, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r3) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000fc0000000000e5ff0000181100dcfa83288fa6d2a3c6b49bfda235fc4afb4ef751858a92fd2a2d0778f4307da155dc8c00f0e1e540daf74dc675ba80f3aeaec138354d664487f3c12aae722576dfb58cffbfa73ea88c35f6b32e92c305040a367ce814aa064f49be01bcfd869c5e9bf4e8fd928bfd574579cd98cf5637713242a70e246846", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 23.806724956s ago: executing program 3 (id=1756): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000002c0)="b064f5ec5781a0cc6bd56ee77c91a9a24ce9fc9b10bae4f1ef52102e5c74d9b8684d2a44983f33ad75a96168", 0x2c, 0x4000000}, 0x2000c000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0xc4, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r3) gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000fc0000000000e5ff0000181100dcfa83288fa6d2a3c6b49bfda235fc4afb4ef751858a92fd2a2d0778f4307da155dc8c00f0e1e540daf74dc675ba80f3aeaec138354d664487f3c12aae722576dfb58cffbfa73ea88c35f6b32e92c305040a367ce814aa064f49be01bcfd869c5e9bf4e8fd928bfd574579cd98cf5637713242a70e246846", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 23.501577037s ago: executing program 2 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x9808, 0x14a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x44240, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x100009000, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="d608a68fecbc1820defca66e29461900590046656fc638b8eb1f963c6dff1c156d9749e98a0f9bdbcdee1fb9b8bcf05f8f2630b29cfde83f553a217bac3c8d39dd88ba0ddb812afba85a76233039f1") perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 22.748746259s ago: executing program 3 (id=1760): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x2, 0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000447000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRES8=r1, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000001c000000000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 22.626247107s ago: executing program 2 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 22.475341228s ago: executing program 2 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 22.404038553s ago: executing program 2 (id=1766): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x726bf176, 0x3, 0x80000001, 0x8300, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x2, 0x4, 0x3, 0xa, @value, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb, 0xb, 0x9, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @generic={0x0, 0x7, 0x8, 0x1000}, @ldst={0x2, 0x3, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[r3, r1, r1, r1, r9, r1, r3, r1], &(0x7f0000001600)=[{0x1, 0x3, 0x2, 0x2}, {0x5, 0x2, 0x10, 0x2}, {0x4, 0x1, 0x2, 0x7}, {0x0, 0x4, 0x0, 0x1}, {0x3, 0x3, 0x4, 0x6}, {0x0, 0x3, 0x8, 0xc}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0xc, 0x9}, {0x0, 0x4, 0xf}], 0x10, 0x4f, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='\\/-\\[}(-*\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r12, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb904"], 0xfdef) 22.289554541s ago: executing program 4 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x2b, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6578, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800802574b5e2181100009b51db27d5b044020be04161dfb428d5273d94e3b4b8883b3e87e61d7028052ba186adb6f1d15359f7e23c9d61acf381cce0af57a77283356b35749dba81dc4a4ad9c58699f4981fa8dd", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='/dev/ppp\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0x9, 0x1ff, 0x20240, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 22.084103305s ago: executing program 4 (id=1768): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x6280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000640)='tasks\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) sendmsg$tipc(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000320000", @ANYRES32, @ANYBLOB="000000000000001b00000000008bf496bb7d3491", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f8000000000000004be17979cf00996de30de1c58ea2037021d880b6a6775ebf835a8975af88a419bbbd3673b66b97e5c4380c1c0eff08b0a3fa1c260ada89df448953d47bbc337132e3e782a87d8e12748bc11f0171ae129f5295f134875ba7ea2853e113dce58fad8854cb4913342881cf9b610fe3a96eb2efab43e8bcae90e41486aab945dac4f894b63f6eca449a36f281e02a907f0a8c1d0bb4f8d8dbaf370481081f3c751acf67165c5a3729c495d879cd3e46abdc0cf3acca701884cc5df127396c5c"], 0x48) 21.970378053s ago: executing program 4 (id=1770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000040071120a00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 21.913310317s ago: executing program 2 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400000000500000000000000000000000f40000002b3c458b4041eb2a2dfaa494bdda1cbb556a880b3b5076ab4abc9755bdb250dffcca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073113600000000009500000000000000"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000000274d700ff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), &(0x7f0000001340), 0x0, 0x27, &(0x7f0000001200)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x2e, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x8, 0x32, &(0x7f00000001c0)=""/50, 0x41000, 0x21, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='!\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x1b, 0x0, 0xfffffffc, 0x3d, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1d, 0x6, 0x10a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xabf7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000080000000c0000000000", @ANYRES32, @ANYBLOB="00400000eb5d7fff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 21.882373079s ago: executing program 0 (id=1772): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.864819211s ago: executing program 3 (id=1773): bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x101, 0x6, 0xa5, 0xffffffffffffffff, 0x76c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0xa, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (fail_nth: 2) 21.422670271s ago: executing program 3 (id=1774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x1, 0x7, 0x9, 0x0, 0x14, 0x22000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8080, 0x4, 0xb3, 0x0, 0xc000000000000000, 0x5, 0x3ff, 0x0, 0x2c5, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) (async) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26) write$cgroup_subtree(r4, 0x0, 0x0) 21.414468931s ago: executing program 0 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x65, 0x8, 0x0, 0xffffffffffffffff, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.374121624s ago: executing program 0 (id=1776): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x7ff, r0}, 0x38) socketpair(0x2a, 0xa, 0x101, &(0x7f00000007c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000a40)="0793e414b98838181934b30e2a4207a668e8f3ec23ae1e918b2750543ca1075ce35f8c674f48df0e591bbfb4f913268419ea043ea62e7f801e8a9662a5d69a8c592c8e91b90ce7cbbdddf4b30035127ac65929b375cdac1dac0055f25c607ffff8ee3bd5f3229420fecc856d7dc3ffffed1c417e17ea2a13ccd285ebdf5f6c0760c164c266a0c5474d1af6f7f90ab1a1d376eb8a61d4bd8fe6949f8a802ef19c4c444782c074d1818fb30ef89587e4829afa772a2a09f52a854bc2436bc46234ed0319dbb176cdde0f4d42cc675fcf3e74a05501a60eb8b96a1ddc2ead1e184e7f183b325872a84e6325", 0xea}, {&(0x7f0000000b40)="a788a70bb7207866b0175e17f2eb9d285da4ac9b92ef7b2309b2a2b27e9b878e7394e1dc6e740b69c1276d891717eb905d3caab95c6c5519eef12858f3d787363d6a19494574ae09a2935340eac3c0bd2bfc087b5b54840de516f3235a6f55fc2bdb630ba3f274b3f5953edaaa8b62ec85132e4d23dc3317e350562af034", 0x7e}, {&(0x7f00000004c0)="fb62a2c9833b6416ffbc2ad6cd649c37e4f362783df146ca7cbf38b64d54cf1bc8b26e0283605dd2a383fc3beb0c52250b3adec4", 0x34}, {&(0x7f0000000bc0)="ccdad64ed011bdff2acf398a64b8e9013e01c5f787d2879a07237895e9a45db53c59292fcd8a1dc068a326b9f1f66c171e32f9f03c0eb9a2aa7799b99ca02377b9850969df244129e9f379b58755b62efdd603efa9361dc96764e21dca683b623cadbe5f83dd8c3f39a3beb939cc22c4b57ef04bc647a221d3d016d42c438fe59a4c7b0b225fc73b36c477da7447f8f3661785dff5632ae73d1aefef704db2773e62046b79b486fa39e198d1172423df2fdfc8d9630d7f00e416e3f7efb8abfdec0dae738e", 0xc5}, {&(0x7f0000000d00)="f42c7b17400fffe13675db7d7b457029bd90dfc22e30d384442459d8e98bc677c3bcfedd66b7e31fc64a9b4ace18f32a6aa821dffc933d6c449d6061f0efec41659fd293077836d171ea87d6a3c26d1d7e2ac828c53aab0c955eff917df4504b99071095d767bc48e05026fcb4b96a7c2d7004e81eb35c0ddd657f14e63407c3544c4b0fa42601f734496b9d086aa4701a853fbdfd0a162bff7e65b7fea1cba4adeaffdc", 0xa4}, {&(0x7f0000000dc0)="455766330921c64850a26e90c2d3157e9891948d3d8e93ae01f11245b6292dea9d9e53b799e7510de55485439015a6a06b9bb47bab3d37e2d270e426a710e9b3638e9d79f65717dce39ee57d2bc193482d91d2924774ea9bf294c6f3526cfb226c245996c68b794914e09ee6d8839628eed35ecdcf55027cad94d6d92436dc3a75189865449baa49f174cc385931ebc4c836", 0x92}, {&(0x7f0000000e80)="b923141e06cdb3c5d17147320283770bec52dc725594ecf5703a8f1a22c814770a2b78a119e1cc91ac019fc10b5289d55fe29187308c6989d2c8ad86c59f88dc4909888544dfdf066c7e112eb06161bb00f3862ccf8e2a0fd1a9ebced20a973cafc56acf405410a475e70b542cc576ec89863cd3c8267fe881f2aacf9e819600943e87b1f4c82882b83f2d9cca8b84c94c473559788acce2564ca5a423a7bd97be297af6d9cd3bcbe6ccd59d419fa425e25b004a365201f00f4b4bef114cfcfdd3e35716865d9fb7f8e357feab821e588e170c6fc3ab9a1f96fce0bcb8a065b92553b580d858785b1f7b898e06593ec33380eab9c884", 0xf6}], 0x7, 0x0, 0x0, 0x4001}, 0x8010) 21.324483078s ago: executing program 0 (id=1777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x200}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x900000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000d000000000000008d7fabeaa306a8e6b6604b778fd3cc8ddd52a377"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x800000000000b, 0xffffffffffffffff, 0x1) 21.323688508s ago: executing program 4 (id=1778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000540)="c29f68ae46d38be107527c6857b496e45e4bae32ddd0d987d76cd51adad6361cbb0565a2f4b187c60db261aa62f460e17a4a01713e5edebf1c4f65f0bbefd10ce264f524c1c6f77e6abf1166bc3816319fbe621d7a135b62f2df11ffd02b1930d30ea88cdaa944c8eb08549fe14fc27747b2621114025cb0cd", &(0x7f00000005c0)=""/113}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="b2ab8e5815", 0x5}, {&(0x7f0000000080)="ef44372a14c9ede0df2b84af8cf47a94006998335eddf2e68fe3be72bdf34f574a011a64dff6bd70ad26c1a2864f5b2052dfbb4c0e5fa1da29", 0x39}, {&(0x7f00000001c0)}, {&(0x7f0000000280)="e693112a4b8a9fbcc5a4e3a449d88fb2df39215e10e29df41e08c1ccd58f784bf1d977ddc5ca959b779b3b1ba43c856619a8c1af976265db960c865e18dabc8c138e5a98c4db2cd96ecfd538d3349db3068e3833e61a7a1b670ca74062a19cc134135f37f1e5dc40537640119d1f5c47475b5c7442c045df24d35ada7c7d739965532e48fc27517c8e99f12f", 0x8c}], 0x4, &(0x7f0000000640)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x7, 0xfb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x2, [@multicast1, @multicast1, @broadcast, @remote]}, @cipso={0x86, 0x29, 0x2, [{0x2, 0x3, "d4"}, {0x1, 0x12, "0d222cff00"/16}, {0x0, 0xe, "b0fb58087a4f73a6d95e1632"}]}, @generic={0x83, 0x4, "7f85"}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x78, [@local, @loopback, @local, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x7, [{@broadcast, 0x3}, {@multicast2}, {@loopback, 0xe}, {@loopback, 0x2}]}]}}}], 0xc8}, 0x8cc557af47df35a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1c, 0x5, 0x401, 0x4, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x1d, &(0x7f00000001c0), 0x4) sendmsg$tipc(r9, &(0x7f00000008c0)={&(0x7f0000000740)=@name={0x1e, 0x2, 0x1, {{0x62bff583df16be80, 0x4}, 0x2}}, 0x10, &(0x7f0000000780), 0x0, &(0x7f00000007c0)="8fc5f66aaf026ea81a9919e86d716419abf8a4aab69a7090697396627e278a16dc8c5d81ab68006c35df51336f75d39753b6d00c439d6c6b38673132be4712cecb3af02d663b8781b5e45d3e6ee227dcaad6814a8b887bd4466fc00f1a9db1f0c6d79dbe244109da3e114d66f4eafa67295c37c4c8fbeec5eb546d4c5fb953e289ae9aa0dbf77c08eb7bdb3317fad1804fd8f994fc3b82b5ed2738da1d785d5ad44e10a2e55d198c3bdc52ae2c1182fab21d7789fddac78af3438bc8fb7d1ec86655386c91df39cb", 0xc8, 0x4004000}, 0x40980) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="97f10a5b6a1a"}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e40806"], 0x66) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 21.283318181s ago: executing program 0 (id=1779): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 21.28273931s ago: executing program 3 (id=1780): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x726bf176, 0x3, 0x80000001, 0x8300, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x2, 0x4, 0x3, 0xa, @value, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb, 0xb, 0x9, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @generic={0x0, 0x7, 0x8, 0x1000}, @ldst={0x2, 0x3, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[r3, r1, r1, r1, r9, r1, r3, r1], &(0x7f0000001600)=[{0x1, 0x3, 0x2, 0x2}, {0x5, 0x2, 0x10, 0x2}, {0x4, 0x1, 0x2, 0x7}, {0x0, 0x4, 0x0, 0x1}, {0x3, 0x3, 0x4, 0x6}, {0x0, 0x3, 0x8, 0xc}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0xc, 0x9}, {0x0, 0x4, 0xf}], 0x10, 0x4f, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='\\/-\\[}(-*\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r12, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb904"], 0xfdef) 21.274401201s ago: executing program 0 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@volatile={0xb, 0x0, 0x0, 0x9, 0x5}, @fwd={0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x3, 0x5}, {0x7, 0x4}, {0x7}, {0x0, 0x1}, {0x10, 0x5}, {0x1}, {0xb, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/42, 0x8b, 0x2a, 0x0, 0x2, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7, 0x8}, 0x6c) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000010000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095d34b3ce1a8357ad7caae46fcaa7f31d2cef7f824fd3743dca637ca93f1ff9eacc405f855046fc11bb4c21611b3b698685ff28d5860a4eb5cd56ef196ffe31753f61c38404b203153ef07c810b2c029", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050000000000", @ANYBLOB="00000000f8ffffffffffffff2e", @ANYRES16], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 21.263430852s ago: executing program 2 (id=1782): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x2, 0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000447000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRES8=r1, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000001c000000000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4c3, 0x7fff, 0xcc, 0x20, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004f852b3418110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001240)='block_split\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x69}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xfffffffffffffec9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x50, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000080), &(0x7f0000000380), 0xfffffffffffffcb0, 0xa6, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (rerun: 64) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x15, 0x9, 0xe000000, 0x9, 0x1081, r8, 0x3f, '\x00', r10, r11, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x16, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x6, 0x1, 0x8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0x3, 0x4, 0xa, 0x2, 0x2, 0x1}, @call={0x85, 0x0, 0x0, 0x63}, @exit, @ldst={0x0, 0x1, 0x3, 0x4, 0x4, 0x30, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x1f9a4282, 0x21, &(0x7f0000000200)=""/33, 0x40f00, 0x2, '\x00', r6, 0x0, r11, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0x10000, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r5], &(0x7f0000000540)=[{0x6, 0x4, 0xf, 0x2}, {0x0, 0x2, 0x3, 0x3}, {0x4, 0x1, 0x4, 0x9}, {0x4, 0x3, 0x4, 0x2}, {0x0, 0x5, 0x9, 0x6}, {0x1, 0x4, 0x1, 0x7}], 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x7, '\x00', r6, r4, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x45, 0x7f, &(0x7f0000000680)="db36ad91a9ccd2f7e86715766d6681859730554d4a4dcb6a349e32df317c7a1789e67a2c2965e973844cbd3935caab2b0a69c1eb150da6affc87cae2286ecc621d03ab8662", &(0x7f0000000700)=""/127, 0x8, 0x0, 0x86, 0x1000, &(0x7f0000000900)="43c473bb676b8a78279ae44d5969b72cd410e586ee89414d2a7923cb7485a6383b4e80f6d7dae2192276976ef4f311e5afff9aecb3826196fda9dff364776fe12838bce2a36b5ebd02353f75086b1229c19719489c733751dd0fd0b99fd762326747f56a7aeeabc0d6e6e65b85fd33afc34a7ec76b4610fc1eaa25fdbc0fcb5b14fcbf6b29c4", &(0x7f0000001940)="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", 0x0, 0x0, 0x7fff}, 0x50) kernel console output (not intermixed with test programs): ][ T2396] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 83.454774][ T2396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.462589][ T2396] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 83.722713][ T2403] device sit0 left promiscuous mode [ 84.483868][ T2432] FAULT_INJECTION: forcing a failure. [ 84.483868][ T2432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.583940][ T2432] CPU: 0 PID: 2432 Comm: syz.1.725 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 84.593561][ T2432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.603451][ T2432] Call Trace: [ 84.606585][ T2432] dump_stack_lvl+0x1e2/0x24b [ 84.611094][ T2432] ? bfq_pos_tree_add_move+0x43b/0x43b [ 84.616386][ T2432] dump_stack+0x15/0x17 [ 84.620381][ T2432] should_fail+0x3c6/0x510 [ 84.624634][ T2432] should_fail_alloc_page+0x52/0x60 [ 84.629662][ T2432] __alloc_pages_nodemask+0x1b3/0xaf0 [ 84.634872][ T2432] ? sched_clock_cpu+0x1b/0x3b0 [ 84.639563][ T2432] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 84.644942][ T2432] ? _raw_spin_trylock_bh+0x190/0x190 [ 84.650145][ T2432] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 84.656135][ T2432] ? kasan_populate_vmalloc+0x70/0x70 [ 84.661344][ T2432] __get_free_pages+0xe/0x30 [ 84.665767][ T2432] kasan_populate_vmalloc_pte+0x39/0x130 [ 84.671238][ T2432] ? __apply_to_page_range+0x710/0x9e0 [ 84.676531][ T2432] __apply_to_page_range+0x720/0x9e0 [ 84.681654][ T2432] ? kasan_populate_vmalloc+0x70/0x70 [ 84.686865][ T2432] ? kasan_populate_vmalloc+0x70/0x70 [ 84.692065][ T2432] apply_to_page_range+0x3b/0x50 [ 84.696844][ T2432] kasan_populate_vmalloc+0x65/0x70 [ 84.701883][ T2432] alloc_vmap_area+0x1944/0x1a90 [ 84.706651][ T2432] ? vm_map_ram+0x9d0/0x9d0 [ 84.710984][ T2432] ? __kasan_kmalloc+0x9/0x10 [ 84.715500][ T2432] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 84.720881][ T2432] ? __get_vm_area_node+0x116/0x470 [ 84.725914][ T2432] __get_vm_area_node+0x156/0x470 [ 84.730781][ T2432] __vmalloc_node_range+0xdc/0x7c0 [ 84.735719][ T2432] ? reuseport_array_alloc+0x14f/0x240 [ 84.741022][ T2432] bpf_map_area_alloc+0xd9/0xf0 [ 84.745790][ T2432] ? reuseport_array_alloc+0x14f/0x240 [ 84.751083][ T2432] reuseport_array_alloc+0x14f/0x240 [ 84.756204][ T2432] ? reuseport_array_alloc_check+0x90/0x90 [ 84.761846][ T2432] ? reuseport_array_alloc_check+0x3d/0x90 [ 84.767490][ T2432] __se_sys_bpf+0x620f/0x11cb0 [ 84.772088][ T2432] ? perf_event_output_forward+0x14e/0x1b0 [ 84.777732][ T2432] ? perf_prepare_sample+0x1af0/0x1af0 [ 84.783042][ T2432] ? __x64_sys_bpf+0x90/0x90 [ 84.787461][ T2432] ? __this_cpu_preempt_check+0x13/0x20 [ 84.792835][ T2432] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 84.798907][ T2432] ? hrtimer_forward+0x1a6/0x2c0 [ 84.803681][ T2432] ? perf_swevent_hrtimer+0x4b8/0x560 [ 84.808889][ T2432] ? cpu_clock_event_read+0x50/0x50 [ 84.813924][ T2432] ? timerqueue_add+0x24c/0x270 [ 84.818609][ T2432] ? enqueue_hrtimer+0xad/0x200 [ 84.823290][ T2432] ? __hrtimer_run_queues+0x438/0xa50 [ 84.828587][ T2432] ? __hrtimer_run_queues+0x9ea/0xa50 [ 84.833799][ T2432] ? ktime_get+0x10e/0x140 [ 84.838047][ T2432] ? lapic_next_event+0x5f/0x70 [ 84.842828][ T2432] ? clockevents_program_event+0x214/0x2c0 [ 84.848466][ T2432] ? hrtimer_interrupt+0x6a8/0x8b0 [ 84.853422][ T2432] ? debug_smp_processor_id+0x17/0x20 [ 84.859140][ T2432] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 84.865129][ T2432] __x64_sys_bpf+0x7b/0x90 [ 84.869388][ T2432] do_syscall_64+0x34/0x70 [ 84.873642][ T2432] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.879359][ T2432] RIP: 0033:0x7f90bccc3ef9 [ 84.883618][ T2432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.903055][ T2432] RSP: 002b:00007f90bb93d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.911316][ T2432] RAX: ffffffffffffffda RBX: 00007f90bce7bf80 RCX: 00007f90bccc3ef9 [ 84.919110][ T2432] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000000 [ 84.926920][ T2432] RBP: 00007f90bb93d090 R08: 0000000000000000 R09: 0000000000000000 [ 84.934732][ T2432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.942646][ T2432] R13: 0000000000000000 R14: 00007f90bce7bf80 R15: 00007fffb347c168 [ 87.068786][ T2494] device veth0_vlan left promiscuous mode [ 87.232983][ T2494] device veth0_vlan entered promiscuous mode [ 87.799188][ T2505] device sit0 entered promiscuous mode [ 91.022374][ T2608] device veth0_vlan left promiscuous mode [ 91.217368][ T2608] device veth0_vlan entered promiscuous mode [ 91.697077][ T2622] bridge0: port 3(veth0_to_batadv) entered blocking state [ 91.725403][ T2622] bridge0: port 3(veth0_to_batadv) entered disabled state [ 91.782359][ T2622] device veth0_to_batadv entered promiscuous mode [ 92.050034][ T2625] device veth0_to_batadv left promiscuous mode [ 92.056278][ T2625] bridge0: port 3(veth0_to_batadv) entered disabled state [ 92.071424][ T2627] bridge0: port 3(veth0_to_batadv) entered blocking state [ 92.080029][ T2627] bridge0: port 3(veth0_to_batadv) entered disabled state [ 92.171970][ T2627] device veth0_to_batadv entered promiscuous mode [ 92.192334][ T2627] bridge0: port 3(veth0_to_batadv) entered blocking state [ 92.201728][ T2627] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 92.229368][ T2636] device pim6reg1 entered promiscuous mode [ 92.236313][ T2630] device veth0_to_batadv left promiscuous mode [ 92.268251][ T2630] bridge0: port 3(veth0_to_batadv) entered disabled state [ 93.393113][ T2662] device veth0_vlan left promiscuous mode [ 93.480023][ T2662] device veth0_vlan entered promiscuous mode [ 94.067996][ T2681] device pim6reg1 entered promiscuous mode [ 94.214185][ T2694] device sit0 left promiscuous mode [ 94.336490][ T2694] device sit0 entered promiscuous mode [ 94.404837][ T2698] device pim6reg1 entered promiscuous mode [ 96.147249][ T2743] device sit0 left promiscuous mode [ 96.257519][ T2743] device sit0 entered promiscuous mode [ 96.937346][ T2773] bridge0: port 3(veth0_to_batadv) entered blocking state [ 96.944282][ T2773] bridge0: port 3(veth0_to_batadv) entered disabled state [ 97.029072][ T2773] device veth0_to_batadv entered promiscuous mode [ 97.113770][ T2773] device veth0_to_batadv left promiscuous mode [ 97.160869][ T2773] bridge0: port 3(veth0_to_batadv) entered disabled state [ 98.563972][ T2815] device syzkaller0 entered promiscuous mode [ 98.994909][ T2833] device pim6reg1 entered promiscuous mode [ 99.289674][ T2840] device pim6reg1 entered promiscuous mode [ 99.299589][ T2842] device sit0 left promiscuous mode [ 99.421646][ T2847] device sit0 entered promiscuous mode [ 100.624012][ T2882] device pim6reg1 entered promiscuous mode [ 100.648413][ T2885] device pim6reg1 entered promiscuous mode [ 101.366909][ T2913] device pim6reg1 entered promiscuous mode [ 101.793015][ T2927] device pim6reg1 entered promiscuous mode [ 102.092252][ T2952] device pim6reg1 entered promiscuous mode [ 102.626220][ T2969] device sit0 left promiscuous mode [ 102.763757][ T2972] device sit0 entered promiscuous mode [ 103.744115][ T2994] device syzkaller0 entered promiscuous mode [ 104.038572][ T3006] FAULT_INJECTION: forcing a failure. [ 104.038572][ T3006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.059016][ T3006] CPU: 1 PID: 3006 Comm: syz.3.910 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 104.068724][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.078615][ T3006] Call Trace: [ 104.081747][ T3006] dump_stack_lvl+0x1e2/0x24b [ 104.086258][ T3006] ? bfq_pos_tree_add_move+0x43b/0x43b [ 104.091561][ T3006] ? __check_object_size+0x73/0x3c0 [ 104.096587][ T3006] dump_stack+0x15/0x17 [ 104.100576][ T3006] should_fail+0x3c6/0x510 [ 104.104833][ T3006] should_fail_usercopy+0x1a/0x20 [ 104.109699][ T3006] _copy_from_user+0x20/0xd0 [ 104.114123][ T3006] __tun_chr_ioctl+0x265/0x2260 [ 104.118803][ T3006] ? tun_flow_create+0x320/0x320 [ 104.123568][ T3006] ? __fget_files+0x31e/0x380 [ 104.128090][ T3006] tun_chr_ioctl+0x2a/0x40 [ 104.132337][ T3006] ? tun_chr_poll+0x670/0x670 [ 104.136858][ T3006] __se_sys_ioctl+0x114/0x190 [ 104.141361][ T3006] __x64_sys_ioctl+0x7b/0x90 [ 104.145787][ T3006] do_syscall_64+0x34/0x70 [ 104.150043][ T3006] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.155854][ T3006] RIP: 0033:0x7f40aa4b3ef9 [ 104.160120][ T3006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.179655][ T3006] RSP: 002b:00007f40a912d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.187890][ T3006] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b3ef9 [ 104.196252][ T3006] RDX: 0000000020000140 RSI: 00000000400454ca RDI: 000000000000000b [ 104.204019][ T3006] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 104.211832][ T3006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.219646][ T3006] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 104.585607][ T3019] device sit0 left promiscuous mode [ 104.746144][ T3019] device sit0 entered promiscuous mode [ 105.421718][ T3053] device sit0 left promiscuous mode [ 105.698354][ T3053] device sit0 entered promiscuous mode [ 105.730956][ T3064] device pim6reg1 entered promiscuous mode [ 106.382842][ T3088] device sit0 left promiscuous mode [ 106.395338][ T3088] device sit0 entered promiscuous mode [ 107.653817][ T3125] device sit0 left promiscuous mode [ 107.716740][ T3125] device sit0 entered promiscuous mode [ 109.182918][ T3171] device sit0 left promiscuous mode [ 109.278141][ T3175] device sit0 entered promiscuous mode [ 109.816694][ T3206] Â: renamed from pim6reg1 [ 109.982356][ T3217] FAULT_INJECTION: forcing a failure. [ 109.982356][ T3217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.024562][ T3217] CPU: 1 PID: 3217 Comm: syz.1.985 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 110.034181][ T3217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.044071][ T3217] Call Trace: [ 110.047206][ T3217] dump_stack_lvl+0x1e2/0x24b [ 110.051715][ T3217] ? bfq_pos_tree_add_move+0x43b/0x43b [ 110.057030][ T3217] ? ktime_get+0x10e/0x140 [ 110.061271][ T3217] dump_stack+0x15/0x17 [ 110.065256][ T3217] should_fail+0x3c6/0x510 [ 110.069511][ T3217] should_fail_usercopy+0x1a/0x20 [ 110.074369][ T3217] _copy_to_user+0x20/0x90 [ 110.078623][ T3217] bpf_test_finish+0x1db/0x5a0 [ 110.083219][ T3217] ? convert___skb_to_skb+0x570/0x570 [ 110.088429][ T3217] ? convert_skb_to___skb+0x360/0x360 [ 110.093720][ T3217] ? convert___skb_to_skb+0x44/0x570 [ 110.098841][ T3217] ? convert_skb_to___skb+0x208/0x360 [ 110.104048][ T3217] bpf_prog_test_run_skb+0xd7a/0x1410 [ 110.109261][ T3217] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 110.114982][ T3217] ? __kasan_check_write+0x14/0x20 [ 110.119933][ T3217] ? fput_many+0x160/0x1b0 [ 110.124183][ T3217] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 110.129912][ T3217] __se_sys_bpf+0x5235/0x11cb0 [ 110.134513][ T3217] ? stack_trace_save+0x113/0x1c0 [ 110.139371][ T3217] ? terminate_walk+0x407/0x4f0 [ 110.144057][ T3217] ? stack_trace_snprint+0xf0/0xf0 [ 110.149015][ T3217] ? kmem_cache_free+0xa9/0x1e0 [ 110.153691][ T3217] ? kmem_cache_free+0xa9/0x1e0 [ 110.158377][ T3217] ? kasan_set_track+0x5d/0x70 [ 110.162982][ T3217] ? __x64_sys_bpf+0x90/0x90 [ 110.167418][ T3217] ? __kasan_slab_free+0x11/0x20 [ 110.172357][ T3217] ? slab_free_freelist_hook+0xc0/0x190 [ 110.177740][ T3217] ? kmem_cache_free+0xa9/0x1e0 [ 110.182446][ T3217] ? putname+0xe7/0x140 [ 110.186418][ T3217] ? do_sys_openat2+0x1fc/0x710 [ 110.191103][ T3217] ? __x64_sys_openat+0x243/0x290 [ 110.195965][ T3217] ? do_syscall_64+0x34/0x70 [ 110.200405][ T3217] ? _kstrtoull+0x3a0/0x4a0 [ 110.204727][ T3217] ? kstrtouint_from_user+0x20a/0x2a0 [ 110.209947][ T3217] ? kstrtol_from_user+0x310/0x310 [ 110.214893][ T3217] ? memset+0x35/0x40 [ 110.218704][ T3217] ? __fsnotify_parent+0x4b9/0x6c0 [ 110.223647][ T3217] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 110.230257][ T3217] ? proc_fail_nth_write+0x20b/0x290 [ 110.235375][ T3217] ? proc_fail_nth_read+0x210/0x210 [ 110.240402][ T3217] ? security_file_permission+0x86/0xb0 [ 110.245780][ T3217] ? rw_verify_area+0x1c3/0x360 [ 110.250464][ T3217] ? preempt_count_add+0x92/0x1a0 [ 110.255324][ T3217] ? vfs_write+0x852/0xe70 [ 110.259579][ T3217] ? kmem_cache_free+0xa9/0x1e0 [ 110.264269][ T3217] ? kernel_write+0x3d0/0x3d0 [ 110.268779][ T3217] ? __kasan_check_write+0x14/0x20 [ 110.273724][ T3217] ? mutex_lock+0xa5/0x110 [ 110.277977][ T3217] ? mutex_trylock+0xa0/0xa0 [ 110.282404][ T3217] ? __kasan_check_write+0x14/0x20 [ 110.287356][ T3217] ? fput_many+0x160/0x1b0 [ 110.291622][ T3217] ? debug_smp_processor_id+0x17/0x20 [ 110.296814][ T3217] __x64_sys_bpf+0x7b/0x90 [ 110.301063][ T3217] do_syscall_64+0x34/0x70 [ 110.305315][ T3217] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.311039][ T3217] RIP: 0033:0x7f90bccc3ef9 [ 110.315297][ T3217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.334826][ T3217] RSP: 002b:00007f90bb93d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.343066][ T3217] RAX: ffffffffffffffda RBX: 00007f90bce7bf80 RCX: 00007f90bccc3ef9 [ 110.350879][ T3217] RDX: 0000000000000024 RSI: 0000000020000640 RDI: 000000000000000a [ 110.358689][ T3217] RBP: 00007f90bb93d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.366498][ T3217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.374315][ T3217] R13: 0000000000000000 R14: 00007f90bce7bf80 R15: 00007fffb347c168 [ 110.990299][ T24] audit: type=1400 audit(1726315507.330:137): avc: denied { setattr } for pid=3251 comm="syz.0.998" path="pipe:[1553]" dev="pipefs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.113573][ T3261] FAULT_INJECTION: forcing a failure. [ 111.113573][ T3261] name failslab, interval 1, probability 0, space 0, times 0 [ 111.288398][ T3261] CPU: 1 PID: 3261 Comm: syz.3.1002 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 111.298110][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.308005][ T3261] Call Trace: [ 111.311143][ T3261] dump_stack_lvl+0x1e2/0x24b [ 111.315653][ T3261] ? panic+0x812/0x812 [ 111.319560][ T3261] ? bfq_pos_tree_add_move+0x43b/0x43b [ 111.324850][ T3261] dump_stack+0x15/0x17 [ 111.328843][ T3261] should_fail+0x3c6/0x510 [ 111.333183][ T3261] ? selinux_sk_alloc_security+0x60/0x140 [ 111.338736][ T3261] __should_failslab+0xa4/0xe0 [ 111.343498][ T3261] should_failslab+0x9/0x20 [ 111.347840][ T3261] kmem_cache_alloc_trace+0x3a/0x2e0 [ 111.352959][ T3261] selinux_sk_alloc_security+0x60/0x140 [ 111.358351][ T3261] security_sk_alloc+0x72/0xb0 [ 111.362939][ T3261] sk_prot_alloc+0x142/0x370 [ 111.367364][ T3261] sk_alloc+0x38/0x4d0 [ 111.371270][ T3261] ? bpf_ctx_init+0x177/0x1c0 [ 111.375784][ T3261] bpf_prog_test_run_skb+0x35c/0x1410 [ 111.381002][ T3261] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 111.386722][ T3261] ? __kasan_check_write+0x14/0x20 [ 111.391675][ T3261] ? fput_many+0x160/0x1b0 [ 111.395919][ T3261] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 111.401653][ T3261] __se_sys_bpf+0x5235/0x11cb0 [ 111.406255][ T3261] ? stack_trace_save+0x113/0x1c0 [ 111.411108][ T3261] ? terminate_walk+0x407/0x4f0 [ 111.415793][ T3261] ? stack_trace_snprint+0xf0/0xf0 [ 111.420743][ T3261] ? kmem_cache_free+0xa9/0x1e0 [ 111.425430][ T3261] ? kmem_cache_free+0xa9/0x1e0 [ 111.430117][ T3261] ? kasan_set_track+0x5d/0x70 [ 111.434715][ T3261] ? __x64_sys_bpf+0x90/0x90 [ 111.439141][ T3261] ? __kasan_check_write+0x14/0x20 [ 111.444088][ T3261] ? _kstrtoull+0x3a0/0x4a0 [ 111.448427][ T3261] ? kstrtouint_from_user+0x20a/0x2a0 [ 111.453637][ T3261] ? kstrtol_from_user+0x310/0x310 [ 111.458582][ T3261] ? memset+0x35/0x40 [ 111.462401][ T3261] ? __fsnotify_parent+0x4b9/0x6c0 [ 111.467353][ T3261] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 111.473953][ T3261] ? proc_fail_nth_write+0x20b/0x290 [ 111.479067][ T3261] ? proc_fail_nth_read+0x210/0x210 [ 111.484099][ T3261] ? security_file_permission+0x86/0xb0 [ 111.489483][ T3261] ? rw_verify_area+0x1c3/0x360 [ 111.494169][ T3261] ? preempt_count_add+0x92/0x1a0 [ 111.499029][ T3261] ? vfs_write+0x852/0xe70 [ 111.503279][ T3261] ? kmem_cache_free+0x1c0/0x1e0 [ 111.508054][ T3261] ? kernel_write+0x3d0/0x3d0 [ 111.512566][ T3261] ? __kasan_check_write+0x14/0x20 [ 111.517515][ T3261] ? mutex_lock+0xa5/0x110 [ 111.521762][ T3261] ? mutex_trylock+0xa0/0xa0 [ 111.526192][ T3261] ? __kasan_check_write+0x14/0x20 [ 111.531138][ T3261] ? fput_many+0x160/0x1b0 [ 111.535398][ T3261] ? debug_smp_processor_id+0x17/0x20 [ 111.540599][ T3261] __x64_sys_bpf+0x7b/0x90 [ 111.544851][ T3261] do_syscall_64+0x34/0x70 [ 111.549105][ T3261] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 111.554830][ T3261] RIP: 0033:0x7f40aa4b3ef9 [ 111.559090][ T3261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.578610][ T3261] RSP: 002b:00007f40a912d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.586859][ T3261] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b3ef9 [ 111.594666][ T3261] RDX: 0000000000000040 RSI: 0000000020000280 RDI: 000000000000000a [ 111.602480][ T3261] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.610297][ T3261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.618099][ T3261] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 111.763507][ T3287] FAULT_INJECTION: forcing a failure. [ 111.763507][ T3287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.819421][ T3287] CPU: 0 PID: 3287 Comm: syz.0.1010 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 111.829132][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.839025][ T3287] Call Trace: [ 111.842156][ T3287] dump_stack_lvl+0x1e2/0x24b [ 111.846674][ T3287] ? bfq_pos_tree_add_move+0x43b/0x43b [ 111.851964][ T3287] dump_stack+0x15/0x17 [ 111.855953][ T3287] should_fail+0x3c6/0x510 [ 111.860220][ T3287] should_fail_alloc_page+0x52/0x60 [ 111.865247][ T3287] __alloc_pages_nodemask+0x1b3/0xaf0 [ 111.870449][ T3287] ? sched_clock+0x3a/0x40 [ 111.874699][ T3287] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 111.880085][ T3287] ? _raw_spin_trylock_bh+0x190/0x190 [ 111.885285][ T3287] ? kasan_populate_vmalloc+0x70/0x70 [ 111.890488][ T3287] __get_free_pages+0xe/0x30 [ 111.894913][ T3287] kasan_populate_vmalloc_pte+0x39/0x130 [ 111.900380][ T3287] ? __apply_to_page_range+0x710/0x9e0 [ 111.905673][ T3287] __apply_to_page_range+0x720/0x9e0 [ 111.910810][ T3287] ? kasan_populate_vmalloc+0x70/0x70 [ 111.916009][ T3287] ? kasan_populate_vmalloc+0x70/0x70 [ 111.922958][ T3287] apply_to_page_range+0x3b/0x50 [ 111.927721][ T3287] kasan_populate_vmalloc+0x65/0x70 [ 111.932752][ T3287] alloc_vmap_area+0x1944/0x1a90 [ 111.937527][ T3287] ? vm_map_ram+0x9d0/0x9d0 [ 111.941863][ T3287] ? __kasan_kmalloc+0x9/0x10 [ 111.946381][ T3287] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 111.951758][ T3287] ? __get_vm_area_node+0x116/0x470 [ 111.956797][ T3287] __get_vm_area_node+0x156/0x470 [ 111.961738][ T3287] ? kasan_check_range+0x78/0x2a0 [ 111.966602][ T3287] __vmalloc_node_range+0xdc/0x7c0 [ 111.971551][ T3287] ? reuseport_array_alloc+0x14f/0x240 [ 111.976850][ T3287] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 111.982487][ T3287] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 111.988474][ T3287] bpf_map_area_alloc+0xd9/0xf0 [ 111.993169][ T3287] ? reuseport_array_alloc+0x14f/0x240 [ 111.998451][ T3287] reuseport_array_alloc+0x14f/0x240 [ 112.003572][ T3287] ? reuseport_array_alloc_check+0x90/0x90 [ 112.009214][ T3287] ? reuseport_array_alloc_check+0x3d/0x90 [ 112.014857][ T3287] ? reuseport_array_alloc+0x8/0x240 [ 112.019977][ T3287] __se_sys_bpf+0x620f/0x11cb0 [ 112.024577][ T3287] ? sched_clock_cpu+0x1b/0x3b0 [ 112.029265][ T3287] ? perf_event_output_forward+0x14e/0x1b0 [ 112.034905][ T3287] ? perf_prepare_sample+0x1af0/0x1af0 [ 112.040219][ T3287] ? sched_clock+0x3a/0x40 [ 112.044456][ T3287] ? sched_clock_cpu+0x1b/0x3b0 [ 112.049148][ T3287] ? __x64_sys_bpf+0x90/0x90 [ 112.053707][ T3287] ? __this_cpu_preempt_check+0x13/0x20 [ 112.059055][ T3287] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 112.065141][ T3287] ? hrtimer_forward+0x1a6/0x2c0 [ 112.069905][ T3287] ? perf_swevent_hrtimer+0x4b8/0x560 [ 112.075114][ T3287] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 112.081097][ T3287] ? cpu_clock_event_read+0x50/0x50 [ 112.086157][ T3287] ? timerqueue_add+0x24c/0x270 [ 112.090906][ T3287] ? enqueue_hrtimer+0xad/0x200 [ 112.095588][ T3287] ? __hrtimer_run_queues+0x438/0xa50 [ 112.100797][ T3287] ? __hrtimer_run_queues+0x9ea/0xa50 [ 112.106140][ T3287] ? ktime_get+0x10e/0x140 [ 112.110370][ T3287] ? lapic_next_event+0x5f/0x70 [ 112.115066][ T3287] ? clockevents_program_event+0x214/0x2c0 [ 112.120706][ T3287] ? hrtimer_interrupt+0x6a8/0x8b0 [ 112.125641][ T3287] ? debug_smp_processor_id+0x17/0x20 [ 112.130848][ T3287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 112.136841][ T3287] __x64_sys_bpf+0x7b/0x90 [ 112.141088][ T3287] do_syscall_64+0x34/0x70 [ 112.145342][ T3287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.151071][ T3287] RIP: 0033:0x7ffb95751ef9 [ 112.155324][ T3287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.174763][ T3287] RSP: 002b:00007ffb943aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.183008][ T3287] RAX: ffffffffffffffda RBX: 00007ffb9590a058 RCX: 00007ffb95751ef9 [ 112.190817][ T3287] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000000 [ 112.198644][ T3287] RBP: 00007ffb943aa090 R08: 0000000000000000 R09: 0000000000000000 [ 112.206455][ T3287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.214251][ T3287] R13: 0000000000000000 R14: 00007ffb9590a058 R15: 00007ffe955481a8 [ 112.530350][ T3310] FAULT_INJECTION: forcing a failure. [ 112.530350][ T3310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.657644][ T3310] CPU: 1 PID: 3310 Comm: syz.0.1018 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 112.667875][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.677766][ T3310] Call Trace: [ 112.680903][ T3310] dump_stack_lvl+0x1e2/0x24b [ 112.685407][ T3310] ? bfq_pos_tree_add_move+0x43b/0x43b [ 112.690709][ T3310] dump_stack+0x15/0x17 [ 112.694692][ T3310] should_fail+0x3c6/0x510 [ 112.698945][ T3310] should_fail_usercopy+0x1a/0x20 [ 112.703804][ T3310] _copy_to_user+0x20/0x90 [ 112.708064][ T3310] simple_read_from_buffer+0xc7/0x150 [ 112.713268][ T3310] proc_fail_nth_read+0x1a3/0x210 [ 112.718129][ T3310] ? proc_fault_inject_write+0x390/0x390 [ 112.723594][ T3310] ? security_file_permission+0x86/0xb0 [ 112.728976][ T3310] ? rw_verify_area+0x1c3/0x360 [ 112.733660][ T3310] ? proc_fault_inject_write+0x390/0x390 [ 112.739130][ T3310] vfs_read+0x200/0xba0 [ 112.743121][ T3310] ? kernel_read+0x70/0x70 [ 112.747381][ T3310] ? __kasan_check_write+0x14/0x20 [ 112.752322][ T3310] ? mutex_lock+0xa5/0x110 [ 112.756586][ T3310] ? mutex_trylock+0xa0/0xa0 [ 112.761003][ T3310] ? __fdget_pos+0x2e7/0x3a0 [ 112.765425][ T3310] ? ksys_read+0x77/0x2c0 [ 112.769588][ T3310] ksys_read+0x199/0x2c0 [ 112.773666][ T3310] ? vfs_write+0xe70/0xe70 [ 112.777924][ T3310] ? debug_smp_processor_id+0x17/0x20 [ 112.783126][ T3310] __x64_sys_read+0x7b/0x90 [ 112.787465][ T3310] do_syscall_64+0x34/0x70 [ 112.791720][ T3310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.797448][ T3310] RIP: 0033:0x7ffb9575093c [ 112.801703][ T3310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 112.821140][ T3310] RSP: 002b:00007ffb943aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.829384][ T3310] RAX: ffffffffffffffda RBX: 00007ffb9590a058 RCX: 00007ffb9575093c [ 112.837194][ T3310] RDX: 000000000000000f RSI: 00007ffb943aa0a0 RDI: 0000000000000007 [ 112.845005][ T3310] RBP: 00007ffb943aa090 R08: 0000000000000000 R09: 0000000000000000 [ 112.852905][ T3310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.860717][ T3310] R13: 0000000000000001 R14: 00007ffb9590a058 R15: 00007ffe955481a8 [ 113.226374][ T3323] device sit0 left promiscuous mode [ 113.309523][ T3330] device syzkaller0 entered promiscuous mode [ 113.372938][ T3331] FAULT_INJECTION: forcing a failure. [ 113.372938][ T3331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.390182][ T3331] CPU: 0 PID: 3331 Comm: syz.0.1024 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 113.399879][ T3331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.409766][ T3331] Call Trace: [ 113.412899][ T3331] dump_stack_lvl+0x1e2/0x24b [ 113.417408][ T3331] ? bfq_pos_tree_add_move+0x43b/0x43b [ 113.422708][ T3331] dump_stack+0x15/0x17 [ 113.426698][ T3331] should_fail+0x3c6/0x510 [ 113.430947][ T3331] should_fail_usercopy+0x1a/0x20 [ 113.435806][ T3331] strncpy_from_user+0x24/0x2d0 [ 113.440496][ T3331] __se_sys_bpf+0x1389/0x11cb0 [ 113.445096][ T3331] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 113.451084][ T3331] ? perf_event_output_forward+0x14e/0x1b0 [ 113.456724][ T3331] ? perf_prepare_sample+0x1af0/0x1af0 [ 113.462019][ T3331] ? __x64_sys_bpf+0x90/0x90 [ 113.466447][ T3331] ? __this_cpu_preempt_check+0x13/0x20 [ 113.471827][ T3331] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 113.477906][ T3331] ? hrtimer_forward+0x1a6/0x2c0 [ 113.482851][ T3331] ? cpu_clock_event_read+0x50/0x50 [ 113.487884][ T3331] ? timerqueue_add+0x24c/0x270 [ 113.492571][ T3331] ? enqueue_hrtimer+0xad/0x200 [ 113.497253][ T3331] ? __hrtimer_run_queues+0x438/0xa50 [ 113.502461][ T3331] ? __hrtimer_run_queues+0x9ea/0xa50 [ 113.507668][ T3331] ? ktime_get+0x10e/0x140 [ 113.511929][ T3331] ? lapic_next_event+0x5f/0x70 [ 113.516609][ T3331] ? clockevents_program_event+0x214/0x2c0 [ 113.522274][ T3331] ? hrtimer_interrupt+0x6a8/0x8b0 [ 113.527205][ T3331] ? debug_smp_processor_id+0x17/0x20 [ 113.532412][ T3331] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 113.538394][ T3331] __x64_sys_bpf+0x7b/0x90 [ 113.542648][ T3331] do_syscall_64+0x34/0x70 [ 113.546902][ T3331] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 113.552629][ T3331] RIP: 0033:0x7ffb95751ef9 [ 113.556881][ T3331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.576319][ T3331] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.584565][ T3331] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 113.592375][ T3331] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 113.600272][ T3331] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 113.608084][ T3331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.615897][ T3331] R13: 0000000000000000 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 113.952406][ T3368] FAULT_INJECTION: forcing a failure. [ 113.952406][ T3368] name failslab, interval 1, probability 0, space 0, times 0 [ 114.118206][ T3368] CPU: 1 PID: 3368 Comm: syz.0.1041 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 114.128001][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.137892][ T3368] Call Trace: [ 114.141024][ T3368] dump_stack_lvl+0x1e2/0x24b [ 114.145531][ T3368] ? panic+0x812/0x812 [ 114.149448][ T3368] ? bfq_pos_tree_add_move+0x43b/0x43b [ 114.154758][ T3368] ? avc_has_perm_noaudit+0x117/0x240 [ 114.159946][ T3368] dump_stack+0x15/0x17 [ 114.163932][ T3368] should_fail+0x3c6/0x510 [ 114.168190][ T3368] ? __get_vm_area_node+0x116/0x470 [ 114.173310][ T3368] __should_failslab+0xa4/0xe0 [ 114.177911][ T3368] should_failslab+0x9/0x20 [ 114.182246][ T3368] kmem_cache_alloc_trace+0x3a/0x2e0 [ 114.187373][ T3368] __get_vm_area_node+0x116/0x470 [ 114.192230][ T3368] __vmalloc_node_range+0xdc/0x7c0 [ 114.197174][ T3368] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.202562][ T3368] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.207935][ T3368] __vmalloc+0x7a/0x90 [ 114.211843][ T3368] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.217223][ T3368] bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.222427][ T3368] bpf_prog_alloc+0x21/0x1e0 [ 114.226852][ T3368] __se_sys_bpf+0x9856/0x11cb0 [ 114.231455][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.236148][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.240827][ T3368] ? kasan_set_track+0x5d/0x70 [ 114.245422][ T3368] ? __x64_sys_bpf+0x90/0x90 [ 114.249937][ T3368] ? __kasan_slab_free+0x11/0x20 [ 114.254710][ T3368] ? slab_free_freelist_hook+0xc0/0x190 [ 114.260092][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.264779][ T3368] ? putname+0xe7/0x140 [ 114.268772][ T3368] ? do_sys_openat2+0x1fc/0x710 [ 114.273465][ T3368] ? __x64_sys_openat+0x243/0x290 [ 114.278318][ T3368] ? do_syscall_64+0x34/0x70 [ 114.282747][ T3368] ? _kstrtoull+0x3a0/0x4a0 [ 114.287085][ T3368] ? memset+0x35/0x40 [ 114.290903][ T3368] ? __fsnotify_parent+0x4b9/0x6c0 [ 114.295852][ T3368] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 114.302447][ T3368] ? proc_fail_nth_write+0x20b/0x290 [ 114.307568][ T3368] ? proc_fail_nth_read+0x210/0x210 [ 114.312602][ T3368] ? security_file_permission+0x86/0xb0 [ 114.317982][ T3368] ? rw_verify_area+0x1c3/0x360 [ 114.322667][ T3368] ? preempt_count_add+0x92/0x1a0 [ 114.327526][ T3368] ? vfs_write+0x852/0xe70 [ 114.331782][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.336468][ T3368] ? kernel_write+0x3d0/0x3d0 [ 114.340981][ T3368] ? __kasan_check_write+0x14/0x20 [ 114.345928][ T3368] ? mutex_lock+0xa5/0x110 [ 114.350181][ T3368] ? mutex_trylock+0xa0/0xa0 [ 114.354609][ T3368] ? __kasan_check_write+0x14/0x20 [ 114.359561][ T3368] ? fput_many+0x160/0x1b0 [ 114.363814][ T3368] ? debug_smp_processor_id+0x17/0x20 [ 114.369016][ T3368] __x64_sys_bpf+0x7b/0x90 [ 114.373270][ T3368] do_syscall_64+0x34/0x70 [ 114.377522][ T3368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 114.383332][ T3368] RIP: 0033:0x7ffb95751ef9 [ 114.387589][ T3368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.407116][ T3368] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.415359][ T3368] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 114.423168][ T3368] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 114.430981][ T3368] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 114.438879][ T3368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.446692][ T3368] R13: 0000000000000001 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 114.503621][ T3368] warn_alloc: 1 callbacks suppressed [ 114.503639][ T3368] syz.0.1041: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 114.687260][ T3368] CPU: 1 PID: 3368 Comm: syz.0.1041 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 114.697058][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.706948][ T3368] Call Trace: [ 114.710078][ T3368] dump_stack_lvl+0x1e2/0x24b [ 114.714586][ T3368] ? wake_up_klogd+0xb8/0xf0 [ 114.719013][ T3368] ? bfq_pos_tree_add_move+0x43b/0x43b [ 114.724309][ T3368] ? pr_cont_kernfs_name+0xf0/0x100 [ 114.729355][ T3368] dump_stack+0x15/0x17 [ 114.733345][ T3368] warn_alloc+0x21a/0x390 [ 114.737509][ T3368] ? __get_vm_area_node+0x116/0x470 [ 114.742536][ T3368] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 114.747914][ T3368] ? __kasan_kmalloc+0x9/0x10 [ 114.752429][ T3368] ? __get_vm_area_node+0x34b/0x470 [ 114.757463][ T3368] __vmalloc_node_range+0x287/0x7c0 [ 114.762502][ T3368] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.767874][ T3368] __vmalloc+0x7a/0x90 [ 114.771782][ T3368] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.777166][ T3368] bpf_prog_alloc_no_stats+0x39/0x2a0 [ 114.782370][ T3368] bpf_prog_alloc+0x21/0x1e0 [ 114.786798][ T3368] __se_sys_bpf+0x9856/0x11cb0 [ 114.791402][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.796081][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.800774][ T3368] ? kasan_set_track+0x5d/0x70 [ 114.805371][ T3368] ? __x64_sys_bpf+0x90/0x90 [ 114.809797][ T3368] ? __kasan_slab_free+0x11/0x20 [ 114.814575][ T3368] ? slab_free_freelist_hook+0xc0/0x190 [ 114.819950][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.824645][ T3368] ? putname+0xe7/0x140 [ 114.828638][ T3368] ? do_sys_openat2+0x1fc/0x710 [ 114.833317][ T3368] ? __x64_sys_openat+0x243/0x290 [ 114.838177][ T3368] ? do_syscall_64+0x34/0x70 [ 114.842605][ T3368] ? _kstrtoull+0x3a0/0x4a0 [ 114.847039][ T3368] ? memset+0x35/0x40 [ 114.850942][ T3368] ? __fsnotify_parent+0x4b9/0x6c0 [ 114.855894][ T3368] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 114.862477][ T3368] ? proc_fail_nth_write+0x20b/0x290 [ 114.867598][ T3368] ? proc_fail_nth_read+0x210/0x210 [ 114.872632][ T3368] ? security_file_permission+0x86/0xb0 [ 114.878013][ T3368] ? rw_verify_area+0x1c3/0x360 [ 114.882698][ T3368] ? preempt_count_add+0x92/0x1a0 [ 114.887559][ T3368] ? vfs_write+0x852/0xe70 [ 114.891814][ T3368] ? kmem_cache_free+0xa9/0x1e0 [ 114.896502][ T3368] ? kernel_write+0x3d0/0x3d0 [ 114.901016][ T3368] ? __kasan_check_write+0x14/0x20 [ 114.905959][ T3368] ? mutex_lock+0xa5/0x110 [ 114.910209][ T3368] ? mutex_trylock+0xa0/0xa0 [ 114.914644][ T3368] ? __kasan_check_write+0x14/0x20 [ 114.919584][ T3368] ? fput_many+0x160/0x1b0 [ 114.923842][ T3368] ? debug_smp_processor_id+0x17/0x20 [ 114.929047][ T3368] __x64_sys_bpf+0x7b/0x90 [ 114.933297][ T3368] do_syscall_64+0x34/0x70 [ 114.937554][ T3368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 114.943277][ T3368] RIP: 0033:0x7ffb95751ef9 [ 114.947532][ T3368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.966975][ T3368] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.975216][ T3368] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 114.983025][ T3368] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 114.990836][ T3368] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 114.998648][ T3368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.006460][ T3368] R13: 0000000000000001 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 115.051892][ T3368] Mem-Info: [ 115.054855][ T3368] active_anon:118 inactive_anon:4426 isolated_anon:0 [ 115.054855][ T3368] active_file:24434 inactive_file:2484 isolated_file:0 [ 115.054855][ T3368] unevictable:0 dirty:79 writeback:0 [ 115.054855][ T3368] slab_reclaimable:6617 slab_unreclaimable:75214 [ 115.054855][ T3368] mapped:21070 shmem:177 pagetables:502 bounce:0 [ 115.054855][ T3368] free:1577496 free_pcp:1264 free_cma:0 [ 115.091768][ T3368] Node 0 active_anon:472kB inactive_anon:17704kB active_file:97736kB inactive_file:9936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84280kB dirty:316kB writeback:0kB shmem:708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4608kB all_unreclaimable? no [ 115.223591][ T3368] DMA32 free:2981840kB min:62624kB low:78280kB high:93936kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2984768kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2928kB local_pcp:1432kB free_cma:0kB [ 115.256815][ T3368] lowmem_reserve[]: 0 3941 3941 [ 115.336842][ T3368] Normal free:3328144kB min:84828kB low:106032kB high:127236kB reserved_highatomic:0KB active_anon:472kB inactive_anon:17804kB active_file:97736kB inactive_file:9936kB unevictable:0kB writepending:316kB present:5242880kB managed:4035856kB mlocked:0kB pagetables:2008kB bounce:0kB free_pcp:2292kB local_pcp:1144kB free_cma:0kB [ 115.403566][ T3368] lowmem_reserve[]: 0 0 0 [ 115.407827][ T3368] DMA32: 6*4kB (UM) 3*8kB (M) 4*16kB (M) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2981840kB [ 115.423924][ T3368] Normal: 2012*4kB (UME) 1770*8kB (UME) 1306*16kB (UME) 1100*32kB (UME) 396*64kB (UME) 197*128kB (UME) 77*256kB (UME) 58*512kB (UME) 37*1024kB (UM) 17*2048kB (UME) 751*4096kB (UM) = 3327072kB [ 115.442684][ T3368] 27170 total pagecache pages [ 115.452782][ T3368] 0 pages in swap cache [ 115.456771][ T3368] Swap cache stats: add 0, delete 0, find 0/0 [ 115.462648][ T3368] Free swap = 124996kB [ 115.467362][ T3368] Total swap = 124996kB [ 115.471315][ T3368] 2097051 pages RAM [ 115.474959][ T3368] 0 pages HighMem/MovableOnly [ 115.479833][ T3368] 341895 pages reserved [ 115.483786][ T3368] 0 pages cma reserved [ 115.849702][ T24] audit: type=1400 audit(1726315512.190:138): avc: denied { create } for pid=3409 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.067153][ T3419] FAULT_INJECTION: forcing a failure. [ 116.067153][ T3419] name failslab, interval 1, probability 0, space 0, times 0 [ 116.079640][ T3419] CPU: 1 PID: 3419 Comm: syz.3.1057 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 116.089269][ T3419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.099160][ T3419] Call Trace: [ 116.102295][ T3419] dump_stack_lvl+0x1e2/0x24b [ 116.106799][ T3419] ? panic+0x812/0x812 [ 116.110705][ T3419] ? bfq_pos_tree_add_move+0x43b/0x43b [ 116.115997][ T3419] ? 0xffffffffa00029e0 [ 116.120004][ T3419] ? is_bpf_text_address+0x172/0x190 [ 116.125113][ T3419] dump_stack+0x15/0x17 [ 116.129105][ T3419] should_fail+0x3c6/0x510 [ 116.133366][ T3419] ? skb_clone+0x1de/0x370 [ 116.137618][ T3419] __should_failslab+0xa4/0xe0 [ 116.142473][ T3419] should_failslab+0x9/0x20 [ 116.146810][ T3419] kmem_cache_alloc+0x3d/0x2e0 [ 116.151414][ T3419] skb_clone+0x1de/0x370 [ 116.155490][ T3419] ? stack_trace_snprint+0xf0/0xf0 [ 116.160440][ T3419] bpf_clone_redirect+0xa6/0x390 [ 116.165217][ T3419] ? selinux_sk_alloc_security+0x60/0x140 [ 116.170768][ T3419] bpf_prog_6893982b85ceadf7+0x56/0x80 [ 116.176062][ T3419] ? __kasan_slab_alloc+0xc3/0xe0 [ 116.180928][ T3419] ? __kasan_slab_alloc+0xb1/0xe0 [ 116.185780][ T3419] ? slab_post_alloc_hook+0x61/0x2f0 [ 116.190904][ T3419] ? kmem_cache_alloc+0x168/0x2e0 [ 116.195763][ T3419] ? __build_skb+0x2a/0x300 [ 116.200099][ T3419] ? build_skb+0x25/0x1e0 [ 116.204267][ T3419] ? bpf_prog_test_run_skb+0x388/0x1410 [ 116.209650][ T3419] ? __se_sys_bpf+0x5235/0x11cb0 [ 116.214420][ T3419] ? __x64_sys_bpf+0x7b/0x90 [ 116.218847][ T3419] ? do_syscall_64+0x34/0x70 [ 116.223275][ T3419] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.229294][ T3419] ? bpf_test_run+0xde/0xc20 [ 116.233689][ T3419] ? ktime_get+0x10e/0x140 [ 116.237942][ T3419] bpf_test_run+0x40b/0xc20 [ 116.242284][ T3419] ? convert___skb_to_skb+0x570/0x570 [ 116.247487][ T3419] ? eth_type_trans+0x2e4/0x620 [ 116.252176][ T3419] ? eth_get_headlen+0x240/0x240 [ 116.256951][ T3419] ? convert___skb_to_skb+0x44/0x570 [ 116.262079][ T3419] bpf_prog_test_run_skb+0xb6e/0x1410 [ 116.267282][ T3419] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 116.273008][ T3419] ? __kasan_check_write+0x14/0x20 [ 116.277954][ T3419] ? fput_many+0x160/0x1b0 [ 116.282205][ T3419] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 116.287934][ T3419] __se_sys_bpf+0x5235/0x11cb0 [ 116.292534][ T3419] ? stack_trace_save+0x113/0x1c0 [ 116.297432][ T3419] ? terminate_walk+0x407/0x4f0 [ 116.302080][ T3419] ? stack_trace_snprint+0xf0/0xf0 [ 116.307028][ T3419] ? kmem_cache_free+0xa9/0x1e0 [ 116.311713][ T3419] ? kmem_cache_free+0xa9/0x1e0 [ 116.316400][ T3419] ? kasan_set_track+0x5d/0x70 [ 116.321087][ T3419] ? __x64_sys_bpf+0x90/0x90 [ 116.325512][ T3419] ? __kasan_slab_free+0x11/0x20 [ 116.330289][ T3419] ? slab_free_freelist_hook+0xc0/0x190 [ 116.335670][ T3419] ? kmem_cache_free+0xa9/0x1e0 [ 116.340355][ T3419] ? putname+0xe7/0x140 [ 116.344353][ T3419] ? do_sys_openat2+0x1fc/0x710 [ 116.349032][ T3419] ? __x64_sys_openat+0x243/0x290 [ 116.353893][ T3419] ? do_syscall_64+0x34/0x70 [ 116.358320][ T3419] ? _kstrtoull+0x3a0/0x4a0 [ 116.362747][ T3419] ? kstrtouint_from_user+0x20a/0x2a0 [ 116.367961][ T3419] ? kstrtol_from_user+0x310/0x310 [ 116.372902][ T3419] ? memset+0x35/0x40 [ 116.376721][ T3419] ? __fsnotify_parent+0x4b9/0x6c0 [ 116.381672][ T3419] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 116.388264][ T3419] ? proc_fail_nth_write+0x20b/0x290 [ 116.393385][ T3419] ? proc_fail_nth_read+0x210/0x210 [ 116.398419][ T3419] ? security_file_permission+0x86/0xb0 [ 116.403798][ T3419] ? rw_verify_area+0x1c3/0x360 [ 116.408489][ T3419] ? preempt_count_add+0x92/0x1a0 [ 116.413351][ T3419] ? vfs_write+0x852/0xe70 [ 116.417603][ T3419] ? kmem_cache_free+0xa9/0x1e0 [ 116.422287][ T3419] ? kernel_write+0x3d0/0x3d0 [ 116.426798][ T3419] ? __kasan_check_write+0x14/0x20 [ 116.431746][ T3419] ? mutex_lock+0xa5/0x110 [ 116.435997][ T3419] ? mutex_trylock+0xa0/0xa0 [ 116.440427][ T3419] ? __kasan_check_write+0x14/0x20 [ 116.445457][ T3419] ? fput_many+0x160/0x1b0 [ 116.449716][ T3419] ? debug_smp_processor_id+0x17/0x20 [ 116.454921][ T3419] ? perf_trace_sys_enter+0x30/0x140 [ 116.460045][ T3419] __x64_sys_bpf+0x7b/0x90 [ 116.464292][ T3419] do_syscall_64+0x34/0x70 [ 116.468547][ T3419] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.474272][ T3419] RIP: 0033:0x7f40aa4b3ef9 [ 116.478528][ T3419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.497969][ T3419] RSP: 002b:00007f40a912d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.506210][ T3419] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b3ef9 [ 116.514021][ T3419] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 116.521832][ T3419] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 116.529645][ T3419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.537452][ T3419] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 116.773443][ T3432] syz.3.1060[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.773492][ T3432] syz.3.1060[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.791519][ T3432] syz.3.1060[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.803202][ T3432] syz.3.1060[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.375020][ T3508] device veth0_vlan left promiscuous mode [ 123.605068][ T3508] device veth0_vlan entered promiscuous mode [ 126.521839][ T3530] FAULT_INJECTION: forcing a failure. [ 126.521839][ T3530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.786697][ T3530] CPU: 1 PID: 3530 Comm: syz.4.1093 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 126.796532][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.806418][ T3530] Call Trace: [ 126.809562][ T3530] dump_stack_lvl+0x1e2/0x24b [ 126.814062][ T3530] ? bfq_pos_tree_add_move+0x43b/0x43b [ 126.819356][ T3530] dump_stack+0x15/0x17 [ 126.823359][ T3530] should_fail+0x3c6/0x510 [ 126.827600][ T3530] should_fail_usercopy+0x1a/0x20 [ 126.832458][ T3530] _copy_to_user+0x20/0x90 [ 126.836715][ T3530] simple_read_from_buffer+0xc7/0x150 [ 126.841919][ T3530] proc_fail_nth_read+0x1a3/0x210 [ 126.846782][ T3530] ? proc_fault_inject_write+0x390/0x390 [ 126.852253][ T3530] ? security_file_permission+0x86/0xb0 [ 126.857629][ T3530] ? rw_verify_area+0x1c3/0x360 [ 126.862314][ T3530] ? proc_fault_inject_write+0x390/0x390 [ 126.867795][ T3530] vfs_read+0x200/0xba0 [ 126.871779][ T3530] ? kernel_read+0x70/0x70 [ 126.876131][ T3530] ? __kasan_check_write+0x14/0x20 [ 126.881073][ T3530] ? mutex_lock+0xa5/0x110 [ 126.885334][ T3530] ? mutex_trylock+0xa0/0xa0 [ 126.889757][ T3530] ? __fdget_pos+0x2e7/0x3a0 [ 126.894183][ T3530] ? ksys_read+0x77/0x2c0 [ 126.898344][ T3530] ksys_read+0x199/0x2c0 [ 126.902424][ T3530] ? vfs_write+0xe70/0xe70 [ 126.906676][ T3530] ? debug_smp_processor_id+0x17/0x20 [ 126.911882][ T3530] __x64_sys_read+0x7b/0x90 [ 126.916225][ T3530] do_syscall_64+0x34/0x70 [ 126.920476][ T3530] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 126.926198][ T3530] RIP: 0033:0x7f65831ba93c [ 126.930461][ T3530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 126.949897][ T3530] RSP: 002b:00007f6581e35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.958140][ T3530] RAX: ffffffffffffffda RBX: 00007f6583373f80 RCX: 00007f65831ba93c [ 126.965949][ T3530] RDX: 000000000000000f RSI: 00007f6581e350a0 RDI: 0000000000000006 [ 126.973771][ T3530] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 126.981570][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.989392][ T3530] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 127.829145][ T3563] device syzkaller0 entered promiscuous mode [ 128.563320][ T3597] FAULT_INJECTION: forcing a failure. [ 128.563320][ T3597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.798180][ T3597] CPU: 1 PID: 3597 Comm: syz.0.1114 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 128.808060][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 128.817965][ T3597] Call Trace: [ 128.821100][ T3597] dump_stack_lvl+0x1e2/0x24b [ 128.825604][ T3597] ? bfq_pos_tree_add_move+0x43b/0x43b [ 128.830895][ T3597] dump_stack+0x15/0x17 [ 128.834883][ T3597] should_fail+0x3c6/0x510 [ 128.839147][ T3597] should_fail_usercopy+0x1a/0x20 [ 128.844002][ T3597] _copy_to_user+0x20/0x90 [ 128.848253][ T3597] simple_read_from_buffer+0xc7/0x150 [ 128.853472][ T3597] proc_fail_nth_read+0x1a3/0x210 [ 128.858320][ T3597] ? proc_fault_inject_write+0x390/0x390 [ 128.863874][ T3597] ? security_file_permission+0x86/0xb0 [ 128.869265][ T3597] ? rw_verify_area+0x1c3/0x360 [ 128.874047][ T3597] ? proc_fault_inject_write+0x390/0x390 [ 128.879515][ T3597] vfs_read+0x200/0xba0 [ 128.883501][ T3597] ? kernel_read+0x70/0x70 [ 128.887749][ T3597] ? __kasan_check_write+0x14/0x20 [ 128.892704][ T3597] ? mutex_lock+0xa5/0x110 [ 128.896966][ T3597] ? mutex_trylock+0xa0/0xa0 [ 128.901383][ T3597] ? __fdget_pos+0x2e7/0x3a0 [ 128.905793][ T3597] ? ksys_read+0x77/0x2c0 [ 128.909962][ T3597] ksys_read+0x199/0x2c0 [ 128.914042][ T3597] ? fsnotify_link_count+0x90/0x90 [ 128.918999][ T3597] ? vfs_write+0xe70/0xe70 [ 128.923244][ T3597] ? debug_smp_processor_id+0x17/0x20 [ 128.928448][ T3597] __x64_sys_read+0x7b/0x90 [ 128.932788][ T3597] do_syscall_64+0x34/0x70 [ 128.937041][ T3597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 128.942767][ T3597] RIP: 0033:0x7ffb9575093c [ 128.947022][ T3597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 128.966687][ T3597] RSP: 002b:00007ffb943cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.974930][ T3597] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb9575093c [ 128.982720][ T3597] RDX: 000000000000000f RSI: 00007ffb943cb0a0 RDI: 0000000000000006 [ 128.990668][ T3597] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 128.998477][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.006382][ T3597] R13: 0000000000000000 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 129.113301][ T24] audit: type=1400 audit(1726315525.450:139): avc: denied { create } for pid=3608 comm="syz.4.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.963536][ T3637] FAULT_INJECTION: forcing a failure. [ 129.963536][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 129.990515][ T3637] CPU: 1 PID: 3637 Comm: syz.2.1128 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 130.000312][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.010202][ T3637] Call Trace: [ 130.013333][ T3637] dump_stack_lvl+0x1e2/0x24b [ 130.017850][ T3637] ? bfq_pos_tree_add_move+0x43b/0x43b [ 130.023145][ T3637] ? wake_up_klogd+0xb8/0xf0 [ 130.027562][ T3637] ? dump_stack+0x9/0x17 [ 130.031643][ T3637] dump_stack+0x15/0x17 [ 130.035637][ T3637] should_fail+0x3c6/0x510 [ 130.039891][ T3637] ? tracepoint_add_func+0x321/0xa30 [ 130.045003][ T3637] __should_failslab+0xa4/0xe0 [ 130.049604][ T3637] should_failslab+0x9/0x20 [ 130.053942][ T3637] __kmalloc+0x60/0x330 [ 130.057934][ T3637] tracepoint_add_func+0x321/0xa30 [ 130.062881][ T3637] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x180/0x180 [ 130.070609][ T3637] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x180/0x180 [ 130.078331][ T3637] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x180/0x180 [ 130.086229][ T3637] tracepoint_probe_register+0xff/0x160 [ 130.091609][ T3637] ? tracepoint_probe_register_prio+0x190/0x190 [ 130.097684][ T3637] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x180/0x180 [ 130.105407][ T3637] trace_event_reg+0x1b6/0x260 [ 130.110008][ T3637] perf_trace_event_init+0x4a0/0x950 [ 130.115130][ T3637] perf_trace_init+0x1c6/0x210 [ 130.119736][ T3637] perf_tp_event_init+0x8c/0x110 [ 130.124501][ T3637] perf_try_init_event+0x143/0x410 [ 130.129450][ T3637] perf_event_alloc+0xcf5/0x1970 [ 130.134230][ T3637] __se_sys_perf_event_open+0x7ab/0x3c30 [ 130.139690][ T3637] ? ktime_get+0x10e/0x140 [ 130.143943][ T3637] ? clockevents_program_event+0x214/0x2c0 [ 130.149587][ T3637] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 130.155054][ T3637] ? hrtimer_interrupt+0x6a8/0x8b0 [ 130.160003][ T3637] ? debug_smp_processor_id+0x17/0x20 [ 130.165209][ T3637] __x64_sys_perf_event_open+0xbf/0xd0 [ 130.170500][ T3637] do_syscall_64+0x34/0x70 [ 130.174761][ T3637] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 130.180481][ T3637] RIP: 0033:0x7f4f26220ef9 [ 130.184734][ T3637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.204181][ T3637] RSP: 002b:00007f4f24e9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.212415][ T3637] RAX: ffffffffffffffda RBX: 00007f4f263d8f80 RCX: 00007f4f26220ef9 [ 130.220236][ T3637] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000200 [ 130.228040][ T3637] RBP: 00007f4f24e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.235852][ T3637] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 130.243664][ T3637] R13: 0000000000000000 R14: 00007f4f263d8f80 R15: 00007fff53057058 [ 130.294407][ T3651] FAULT_INJECTION: forcing a failure. [ 130.294407][ T3651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.396824][ T3651] CPU: 0 PID: 3651 Comm: syz.4.1132 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 130.406538][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.416429][ T3651] Call Trace: [ 130.419561][ T3651] dump_stack_lvl+0x1e2/0x24b [ 130.424068][ T3651] ? bfq_pos_tree_add_move+0x43b/0x43b [ 130.429367][ T3651] dump_stack+0x15/0x17 [ 130.433356][ T3651] should_fail+0x3c6/0x510 [ 130.437612][ T3651] should_fail_alloc_page+0x52/0x60 [ 130.442666][ T3651] __alloc_pages_nodemask+0x1b3/0xaf0 [ 130.447943][ T3651] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 130.453324][ T3651] ? pcpu_block_update_hint_alloc+0x8e0/0xcf0 [ 130.459228][ T3651] pcpu_populate_chunk+0x190/0xe10 [ 130.464184][ T3651] pcpu_alloc+0xa81/0x1420 [ 130.468425][ T3651] __alloc_percpu_gfp+0x27/0x30 [ 130.473109][ T3651] array_map_alloc+0x486/0x7c0 [ 130.477703][ T3651] ? bpf_percpu_array_update+0x6d0/0x6d0 [ 130.483167][ T3651] ? selinux_bpf+0xcb/0x100 [ 130.487507][ T3651] ? array_map_alloc_check+0x27b/0x350 [ 130.492821][ T3651] __se_sys_bpf+0x620f/0x11cb0 [ 130.497403][ T3651] ? stack_trace_save+0x113/0x1c0 [ 130.502348][ T3651] ? terminate_walk+0x407/0x4f0 [ 130.507037][ T3651] ? stack_trace_snprint+0xf0/0xf0 [ 130.512079][ T3651] ? kmem_cache_free+0xa9/0x1e0 [ 130.516763][ T3651] ? kmem_cache_free+0xa9/0x1e0 [ 130.521448][ T3651] ? kasan_set_track+0x5d/0x70 [ 130.526050][ T3651] ? __x64_sys_bpf+0x90/0x90 [ 130.530475][ T3651] ? __kasan_slab_free+0x11/0x20 [ 130.535246][ T3651] ? slab_free_freelist_hook+0xc0/0x190 [ 130.540630][ T3651] ? kmem_cache_free+0xa9/0x1e0 [ 130.545318][ T3651] ? putname+0xe7/0x140 [ 130.549309][ T3651] ? do_sys_openat2+0x1fc/0x710 [ 130.553995][ T3651] ? __x64_sys_openat+0x243/0x290 [ 130.558859][ T3651] ? do_syscall_64+0x34/0x70 [ 130.563287][ T3651] ? _kstrtoull+0x3a0/0x4a0 [ 130.567624][ T3651] ? kstrtouint_from_user+0x20a/0x2a0 [ 130.572830][ T3651] ? kstrtol_from_user+0x310/0x310 [ 130.577778][ T3651] ? memset+0x35/0x40 [ 130.581601][ T3651] ? __fsnotify_parent+0x4b9/0x6c0 [ 130.586546][ T3651] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 130.593142][ T3651] ? proc_fail_nth_write+0x20b/0x290 [ 130.598260][ T3651] ? proc_fail_nth_read+0x210/0x210 [ 130.603295][ T3651] ? security_file_permission+0x86/0xb0 [ 130.608674][ T3651] ? rw_verify_area+0x1c3/0x360 [ 130.613363][ T3651] ? preempt_count_add+0x92/0x1a0 [ 130.618220][ T3651] ? vfs_write+0x852/0xe70 [ 130.622474][ T3651] ? kmem_cache_free+0x1c0/0x1e0 [ 130.627251][ T3651] ? kernel_write+0x3d0/0x3d0 [ 130.631760][ T3651] ? __kasan_check_write+0x14/0x20 [ 130.636708][ T3651] ? mutex_lock+0xa5/0x110 [ 130.640958][ T3651] ? mutex_trylock+0xa0/0xa0 [ 130.645388][ T3651] ? __kasan_check_write+0x14/0x20 [ 130.650334][ T3651] ? fput_many+0x160/0x1b0 [ 130.654591][ T3651] ? debug_smp_processor_id+0x17/0x20 [ 130.659883][ T3651] __x64_sys_bpf+0x7b/0x90 [ 130.664136][ T3651] do_syscall_64+0x34/0x70 [ 130.668390][ T3651] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 130.674116][ T3651] RIP: 0033:0x7f65831bbef9 [ 130.678368][ T3651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.697808][ T3651] RSP: 002b:00007f6581e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.706136][ T3651] RAX: ffffffffffffffda RBX: 00007f6583373f80 RCX: 00007f65831bbef9 [ 130.713951][ T3651] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 130.721760][ T3651] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 130.729569][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.737380][ T3651] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 131.108788][ T3672] device syzkaller0 entered promiscuous mode [ 131.417236][ T3687] FAULT_INJECTION: forcing a failure. [ 131.417236][ T3687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.468040][ T3687] CPU: 0 PID: 3687 Comm: syz.0.1144 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 131.477749][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.487645][ T3687] Call Trace: [ 131.490775][ T3687] dump_stack_lvl+0x1e2/0x24b [ 131.495289][ T3687] ? bfq_pos_tree_add_move+0x43b/0x43b [ 131.500581][ T3687] ? __alloc_pages_nodemask+0x435/0xaf0 [ 131.505960][ T3687] dump_stack+0x15/0x17 [ 131.509951][ T3687] should_fail+0x3c6/0x510 [ 131.514217][ T3687] should_fail_usercopy+0x1a/0x20 [ 131.519072][ T3687] copy_page_from_iter+0x398/0x6e0 [ 131.524028][ T3687] pipe_write+0x92b/0x18c0 [ 131.528482][ T3687] ? pipe_read+0x1040/0x1040 [ 131.532871][ T3687] ? fsnotify_perm+0x67/0x4e0 [ 131.537381][ T3687] ? security_file_permission+0x7b/0xb0 [ 131.542768][ T3687] ? security_file_permission+0x86/0xb0 [ 131.548144][ T3687] ? iov_iter_init+0x3f/0x120 [ 131.552656][ T3687] vfs_write+0xb4c/0xe70 [ 131.556737][ T3687] ? kernel_write+0x3d0/0x3d0 [ 131.561251][ T3687] ? __fdget_pos+0x209/0x3a0 [ 131.565672][ T3687] ? ksys_write+0x77/0x2c0 [ 131.569925][ T3687] ksys_write+0x199/0x2c0 [ 131.574094][ T3687] ? __ia32_sys_read+0x90/0x90 [ 131.578692][ T3687] ? fpu__clear_all+0x20/0x20 [ 131.583206][ T3687] ? __kasan_check_read+0x11/0x20 [ 131.588066][ T3687] __x64_sys_write+0x7b/0x90 [ 131.592502][ T3687] do_syscall_64+0x34/0x70 [ 131.596745][ T3687] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 131.602469][ T3687] RIP: 0033:0x7ffb95751ef9 [ 131.606722][ T3687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.626165][ T3687] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.634416][ T3687] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 131.642224][ T3687] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 131.650035][ T3687] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 131.657850][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.665652][ T3687] R13: 0000000000000000 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 132.009537][ T24] audit: type=1400 audit(1726315528.340:140): avc: denied { create } for pid=3702 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.084054][ T3704] device veth1_macvtap left promiscuous mode [ 132.393290][ T3717] device veth0_vlan left promiscuous mode [ 132.456639][ T3717] device veth0_vlan entered promiscuous mode [ 132.581023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.594426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.602251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.761633][ T3735] bridge0: port 3(veth0_to_batadv) entered blocking state [ 132.810481][ T3735] bridge0: port 3(veth0_to_batadv) entered disabled state [ 132.903802][ T3735] device veth0_to_batadv entered promiscuous mode [ 132.948487][ T3735] bridge0: port 3(veth0_to_batadv) entered blocking state [ 132.955447][ T3735] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 133.206632][ T3740] device veth0_to_batadv left promiscuous mode [ 133.295706][ T3740] bridge0: port 3(veth0_to_batadv) entered disabled state [ 134.217828][ T3781] device veth0_vlan left promiscuous mode [ 134.353079][ T3781] device veth0_vlan entered promiscuous mode [ 136.147301][ T3857] syz.3.1198[3857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.147352][ T3857] syz.3.1198[3857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.343813][ T3859] FAULT_INJECTION: forcing a failure. [ 136.343813][ T3859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.556158][ T3859] CPU: 1 PID: 3859 Comm: syz.2.1197 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 136.565865][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.575849][ T3859] Call Trace: [ 136.578981][ T3859] dump_stack_lvl+0x1e2/0x24b [ 136.583486][ T3859] ? bfq_pos_tree_add_move+0x43b/0x43b [ 136.588786][ T3859] ? wake_up_klogd+0xb8/0xf0 [ 136.593216][ T3859] dump_stack+0x15/0x17 [ 136.597198][ T3859] should_fail+0x3c6/0x510 [ 136.601449][ T3859] should_fail_alloc_page+0x52/0x60 [ 136.606478][ T3859] __alloc_pages_nodemask+0x1b3/0xaf0 [ 136.611685][ T3859] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 136.617071][ T3859] ? avc_has_perm_noaudit+0x117/0x240 [ 136.622276][ T3859] shmem_alloc_page+0x257/0x420 [ 136.626960][ T3859] ? put_page+0xd0/0xd0 [ 136.630956][ T3859] ? percpu_counter_add_batch+0x13d/0x160 [ 136.636510][ T3859] shmem_alloc_and_acct_page+0x395/0x8e0 [ 136.641980][ T3859] ? shmem_swapin_page+0x1950/0x1950 [ 136.647110][ T3859] ? find_get_entry+0x44c/0x4c0 [ 136.651785][ T3859] ? page_cache_prev_miss+0x410/0x410 [ 136.656992][ T3859] ? pagevec_add_and_need_flush+0x1fe/0x430 [ 136.662980][ T3859] ? __kasan_check_write+0x14/0x20 [ 136.667926][ T3859] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 136.672873][ T3859] ? _raw_spin_lock_irqsave+0x210/0x210 [ 136.678256][ T3859] ? find_lock_entry+0x1df/0x200 [ 136.683028][ T3859] shmem_getpage_gfp+0x891/0x2480 [ 136.687891][ T3859] ? shmem_getpage+0xa0/0xa0 [ 136.692313][ T3859] ? __kasan_check_write+0x14/0x20 [ 136.697261][ T3859] ? __set_page_dirty_no_writeback+0xf1/0x120 [ 136.703164][ T3859] shmem_fallocate+0x9a5/0xe90 [ 136.707766][ T3859] ? shmem_mmap+0x270/0x270 [ 136.712103][ T3859] ? avc_policy_seqno+0x1b/0x70 [ 136.716792][ T3859] ? selinux_file_permission+0x2bb/0x560 [ 136.722257][ T3859] ? fsnotify_perm+0x67/0x4e0 [ 136.726768][ T3859] ? security_file_permission+0x7b/0xb0 [ 136.732151][ T3859] ? preempt_count_add+0x92/0x1a0 [ 136.737012][ T3859] vfs_fallocate+0x492/0x570 [ 136.741439][ T3859] do_vfs_ioctl+0x1686/0x1a30 [ 136.745948][ T3859] ? ioctl_has_perm+0x3f0/0x560 [ 136.750638][ T3859] ? __x32_compat_sys_ioctl+0x90/0x90 [ 136.755844][ T3859] ? has_cap_mac_admin+0x3c0/0x3c0 [ 136.760796][ T3859] ? selinux_file_ioctl+0x3cc/0x540 [ 136.765825][ T3859] ? sched_clock+0x3a/0x40 [ 136.770078][ T3859] ? selinux_file_alloc_security+0x120/0x120 [ 136.775893][ T3859] ? __fget_files+0x31e/0x380 [ 136.780416][ T3859] ? security_file_ioctl+0x84/0xb0 [ 136.785353][ T3859] __se_sys_ioctl+0x99/0x190 [ 136.789778][ T3859] __x64_sys_ioctl+0x7b/0x90 [ 136.794212][ T3859] do_syscall_64+0x34/0x70 [ 136.798463][ T3859] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 136.804185][ T3859] RIP: 0033:0x7f4f26220ef9 [ 136.808441][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.827879][ T3859] RSP: 002b:00007f4f24e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.836123][ T3859] RAX: ffffffffffffffda RBX: 00007f4f263d8f80 RCX: 00007f4f26220ef9 [ 136.844022][ T3859] RDX: 0000000020000040 RSI: 000000004030582a RDI: 000000000000000b [ 136.851832][ T3859] RBP: 00007f4f24e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.859642][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.867467][ T3859] R13: 0000000000000000 R14: 00007f4f263d8f80 R15: 00007fff53057058 [ 137.829708][ T3902] FAULT_INJECTION: forcing a failure. [ 137.829708][ T3902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.842616][ T3902] CPU: 1 PID: 3902 Comm: syz.4.1214 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 137.852261][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.862236][ T3902] Call Trace: [ 137.865376][ T3902] dump_stack_lvl+0x1e2/0x24b [ 137.869881][ T3902] ? bfq_pos_tree_add_move+0x43b/0x43b [ 137.875180][ T3902] ? kasan_set_track+0x5d/0x70 [ 137.879775][ T3902] ? __kasan_slab_free+0x11/0x20 [ 137.884553][ T3902] ? kmem_cache_free+0xa9/0x1e0 [ 137.889241][ T3902] ? security_file_free+0xc6/0xe0 [ 137.894345][ T3902] ? __fput+0x566/0x7b0 [ 137.898341][ T3902] ? task_work_run+0x129/0x190 [ 137.902938][ T3902] ? exit_to_user_mode_loop+0xbf/0xd0 [ 137.908139][ T3902] dump_stack+0x15/0x17 [ 137.912166][ T3902] should_fail+0x3c6/0x510 [ 137.916390][ T3902] should_fail_usercopy+0x1a/0x20 [ 137.921248][ T3902] strncpy_from_user+0x24/0x2d0 [ 137.925934][ T3902] strncpy_from_user_nofault+0x73/0x150 [ 137.931315][ T3902] bpf_probe_read_compat_str+0xec/0x180 [ 137.936696][ T3902] ? security_file_free+0xc6/0xe0 [ 137.941551][ T3902] bpf_prog_e42f6260c1b72fb3+0x35/0x3b0 [ 137.946932][ T3902] bpf_trace_run2+0xef/0x280 [ 137.951354][ T3902] ? bpf_trace_run1+0x210/0x210 [ 137.956043][ T3902] ? security_file_free+0xc6/0xe0 [ 137.960899][ T3902] ? ____kasan_slab_free+0x12c/0x160 [ 137.966025][ T3902] ? security_file_free+0xc6/0xe0 [ 137.970901][ T3902] __bpf_trace_kmem_free+0x6f/0x90 [ 137.975828][ T3902] kmem_cache_free+0x1c0/0x1e0 [ 137.980428][ T3902] ? security_file_free+0xc6/0xe0 [ 137.985287][ T3902] security_file_free+0xc6/0xe0 [ 137.989972][ T3902] __fput+0x566/0x7b0 [ 137.993794][ T3902] ____fput+0x15/0x20 [ 137.997613][ T3902] task_work_run+0x129/0x190 [ 138.002043][ T3902] exit_to_user_mode_loop+0xbf/0xd0 [ 138.007070][ T3902] syscall_exit_to_user_mode+0xa2/0x1a0 [ 138.012453][ T3902] do_syscall_64+0x40/0x70 [ 138.016707][ T3902] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 138.022450][ T3902] RIP: 0033:0x7f65831bbef9 [ 138.026705][ T3902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.046130][ T3902] RSP: 002b:00007f6581e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 138.054457][ T3902] RAX: 0000000000000000 RBX: 00007f6583373f80 RCX: 00007f65831bbef9 [ 138.062273][ T3902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 138.070078][ T3902] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 138.077889][ T3902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.085700][ T3902] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 141.049008][ T4043] device syzkaller0 entered promiscuous mode [ 143.637180][ T4153] FAULT_INJECTION: forcing a failure. [ 143.637180][ T4153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.650070][ T4153] CPU: 0 PID: 4153 Comm: syz.0.1309 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 143.659739][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 143.669623][ T4153] Call Trace: [ 143.672757][ T4153] dump_stack_lvl+0x1e2/0x24b [ 143.677268][ T4153] ? bfq_pos_tree_add_move+0x43b/0x43b [ 143.682563][ T4153] ? group_send_sig_info+0xa4/0x320 [ 143.687693][ T4153] dump_stack+0x15/0x17 [ 143.691672][ T4153] should_fail+0x3c6/0x510 [ 143.695926][ T4153] should_fail_usercopy+0x1a/0x20 [ 143.700788][ T4153] strncpy_from_user+0x24/0x2d0 [ 143.705484][ T4153] ? bpf_do_trace_printk+0x270/0x270 [ 143.710593][ T4153] strncpy_from_user_nofault+0x73/0x150 [ 143.715974][ T4153] ? kvfree+0x35/0x40 [ 143.719796][ T4153] bpf_probe_read_user_str+0x2a/0x70 [ 143.724916][ T4153] bpf_prog_02a70dbeb5f742df+0x3a/0x28c [ 143.730299][ T4153] bpf_trace_run2+0xef/0x280 [ 143.734723][ T4153] ? bpf_trace_run1+0x210/0x210 [ 143.739447][ T4153] ? kvfree+0x35/0x40 [ 143.743227][ T4153] ? kvfree+0x35/0x40 [ 143.747043][ T4153] ? kvfree+0x35/0x40 [ 143.750871][ T4153] __bpf_trace_kmem_free+0x6f/0x90 [ 143.755812][ T4153] kfree+0x24b/0x270 [ 143.759558][ T4153] kvfree+0x35/0x40 [ 143.763198][ T4153] btf_check_all_metas+0x445/0x820 [ 143.768139][ T4153] btf_parse_type_sec+0x14c/0x16b0 [ 143.773092][ T4153] ? __btf_verifier_log+0x120/0x120 [ 143.778119][ T4153] ? sort+0x37/0x50 [ 143.781762][ T4153] ? btf_check_sec_info+0x371/0x4f0 [ 143.786796][ T4153] ? btf_verifier_log+0x2a0/0x2a0 [ 143.791654][ T4153] ? btf_parse_hdr+0x1d5/0x770 [ 143.796256][ T4153] ? btf_verifier_log_vsi+0x4d0/0x4d0 [ 143.801461][ T4153] ? btf_parse_hdr+0x597/0x770 [ 143.806062][ T4153] ? btf_parse_str_sec+0x1b0/0x270 [ 143.811011][ T4153] btf_new_fd+0x53b/0x9c0 [ 143.815175][ T4153] __se_sys_bpf+0x1aed/0x11cb0 [ 143.819779][ T4153] ? stack_trace_save+0x113/0x1c0 [ 143.824636][ T4153] ? terminate_walk+0x407/0x4f0 [ 143.829323][ T4153] ? stack_trace_snprint+0xf0/0xf0 [ 143.834273][ T4153] ? kmem_cache_free+0xa9/0x1e0 [ 143.838960][ T4153] ? kmem_cache_free+0xa9/0x1e0 [ 143.843643][ T4153] ? kasan_set_track+0x5d/0x70 [ 143.848243][ T4153] ? __x64_sys_bpf+0x90/0x90 [ 143.852669][ T4153] ? __kasan_slab_free+0x11/0x20 [ 143.857441][ T4153] ? slab_free_freelist_hook+0xc0/0x190 [ 143.862822][ T4153] ? kmem_cache_free+0xa9/0x1e0 [ 143.867508][ T4153] ? putname+0xe7/0x140 [ 143.871504][ T4153] ? do_sys_openat2+0x1fc/0x710 [ 143.876188][ T4153] ? __x64_sys_openat+0x243/0x290 [ 143.881050][ T4153] ? do_syscall_64+0x34/0x70 [ 143.885479][ T4153] ? _kstrtoull+0x3a0/0x4a0 [ 143.889818][ T4153] ? kstrtouint_from_user+0x20a/0x2a0 [ 143.895024][ T4153] ? kstrtol_from_user+0x310/0x310 [ 143.899974][ T4153] ? memset+0x35/0x40 [ 143.903791][ T4153] ? __fsnotify_parent+0x4b9/0x6c0 [ 143.908754][ T4153] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 143.915338][ T4153] ? proc_fail_nth_write+0x20b/0x290 [ 143.920459][ T4153] ? proc_fail_nth_read+0x210/0x210 [ 143.925492][ T4153] ? security_file_permission+0x86/0xb0 [ 143.930872][ T4153] ? rw_verify_area+0x1c3/0x360 [ 143.935554][ T4153] ? preempt_count_add+0x92/0x1a0 [ 143.940418][ T4153] ? vfs_write+0x852/0xe70 [ 143.944667][ T4153] ? kmem_cache_free+0xa9/0x1e0 [ 143.949354][ T4153] ? kernel_write+0x3d0/0x3d0 [ 143.953887][ T4153] ? __kasan_check_write+0x14/0x20 [ 143.958813][ T4153] ? mutex_lock+0xa5/0x110 [ 143.963068][ T4153] ? mutex_trylock+0xa0/0xa0 [ 143.967500][ T4153] ? __kasan_check_write+0x14/0x20 [ 143.972441][ T4153] ? fput_many+0x160/0x1b0 [ 143.976698][ T4153] ? debug_smp_processor_id+0x17/0x20 [ 143.981903][ T4153] __x64_sys_bpf+0x7b/0x90 [ 143.986153][ T4153] do_syscall_64+0x34/0x70 [ 143.990413][ T4153] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 143.996223][ T4153] RIP: 0033:0x7ffb95751ef9 [ 144.000478][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.020003][ T4153] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.028245][ T4153] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 144.036066][ T4153] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 144.043871][ T4153] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 144.051681][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.059489][ T4153] R13: 0000000000000001 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 144.071891][ T24] audit: type=1400 audit(1726315540.410:141): avc: denied { unlink } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.233179][ T4175] device sit0 left promiscuous mode [ 145.281141][ T4208] device sit0 entered promiscuous mode [ 146.861440][ T24] audit: type=1400 audit(1726315543.200:142): avc: denied { create } for pid=4245 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.402515][ T4272] device sit0 left promiscuous mode [ 148.045404][ T4277] device syzkaller0 entered promiscuous mode [ 148.589564][ T4329] syz.2.1369[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.589646][ T4329] syz.2.1369[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.789361][ T4329] syz.2.1369[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.907008][ T4329] syz.2.1369[4329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.229179][ T4334] syz.2.1369[4334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.258154][ T4334] syz.2.1369[4334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.585295][ T4379] device syzkaller0 entered promiscuous mode [ 152.050426][ T4438] device syzkaller0 entered promiscuous mode [ 152.440425][ T4448] device syzkaller0 entered promiscuous mode [ 153.506911][ T4495] syz.4.1421 (4495) used obsolete PPPIOCDETACH ioctl [ 153.682687][ T4503] FAULT_INJECTION: forcing a failure. [ 153.682687][ T4503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.841858][ T4503] CPU: 1 PID: 4503 Comm: syz.3.1426 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 153.851566][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 153.861463][ T4503] Call Trace: [ 153.864626][ T4503] dump_stack_lvl+0x1e2/0x24b [ 153.869101][ T4503] ? bfq_pos_tree_add_move+0x43b/0x43b [ 153.874391][ T4503] dump_stack+0x15/0x17 [ 153.878385][ T4503] should_fail+0x3c6/0x510 [ 153.882634][ T4503] should_fail_usercopy+0x1a/0x20 [ 153.887491][ T4503] _copy_to_user+0x20/0x90 [ 153.891870][ T4503] simple_read_from_buffer+0xc7/0x150 [ 153.897062][ T4503] proc_fail_nth_read+0x1a3/0x210 [ 153.901922][ T4503] ? proc_fault_inject_write+0x390/0x390 [ 153.907388][ T4503] ? security_file_permission+0x86/0xb0 [ 153.912763][ T4503] ? rw_verify_area+0x1c3/0x360 [ 153.917449][ T4503] ? proc_fault_inject_write+0x390/0x390 [ 153.922917][ T4503] vfs_read+0x200/0xba0 [ 153.926911][ T4503] ? kernel_read+0x70/0x70 [ 153.931164][ T4503] ? __kasan_check_write+0x14/0x20 [ 153.936111][ T4503] ? mutex_lock+0xa5/0x110 [ 153.940364][ T4503] ? mutex_trylock+0xa0/0xa0 [ 153.944789][ T4503] ? __fdget_pos+0x2e7/0x3a0 [ 153.949212][ T4503] ? ksys_read+0x77/0x2c0 [ 153.953380][ T4503] ksys_read+0x199/0x2c0 [ 153.957460][ T4503] ? vfs_write+0xe70/0xe70 [ 153.961715][ T4503] ? debug_smp_processor_id+0x17/0x20 [ 153.966922][ T4503] __x64_sys_read+0x7b/0x90 [ 153.971278][ T4503] do_syscall_64+0x34/0x70 [ 153.975515][ T4503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 153.981266][ T4503] RIP: 0033:0x7f40aa4b293c [ 153.985500][ T4503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 154.004941][ T4503] RSP: 002b:00007f40a912d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.013179][ T4503] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b293c [ 154.020988][ T4503] RDX: 000000000000000f RSI: 00007f40a912d0a0 RDI: 0000000000000006 [ 154.028798][ T4503] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.036611][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.044424][ T4503] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 154.169761][ T4524] FAULT_INJECTION: forcing a failure. [ 154.169761][ T4524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.214333][ T4524] CPU: 0 PID: 4524 Comm: syz.3.1434 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 154.224040][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 154.233930][ T4524] Call Trace: [ 154.237067][ T4524] dump_stack_lvl+0x1e2/0x24b [ 154.241657][ T4524] ? bfq_pos_tree_add_move+0x43b/0x43b [ 154.246947][ T4524] dump_stack+0x15/0x17 [ 154.250938][ T4524] should_fail+0x3c6/0x510 [ 154.255195][ T4524] should_fail_usercopy+0x1a/0x20 [ 154.260048][ T4524] _copy_to_user+0x20/0x90 [ 154.264314][ T4524] simple_read_from_buffer+0xc7/0x150 [ 154.269513][ T4524] proc_fail_nth_read+0x1a3/0x210 [ 154.274372][ T4524] ? proc_fault_inject_write+0x390/0x390 [ 154.279903][ T4524] ? security_file_permission+0x86/0xb0 [ 154.285395][ T4524] ? rw_verify_area+0x1c3/0x360 [ 154.290082][ T4524] ? proc_fault_inject_write+0x390/0x390 [ 154.295550][ T4524] vfs_read+0x200/0xba0 [ 154.299541][ T4524] ? kernel_read+0x70/0x70 [ 154.303795][ T4524] ? __kasan_check_write+0x14/0x20 [ 154.308743][ T4524] ? mutex_lock+0xa5/0x110 [ 154.313168][ T4524] ? mutex_trylock+0xa0/0xa0 [ 154.317595][ T4524] ? __fdget_pos+0x2e7/0x3a0 [ 154.322019][ T4524] ? ksys_read+0x77/0x2c0 [ 154.326186][ T4524] ksys_read+0x199/0x2c0 [ 154.330267][ T4524] ? vfs_write+0xe70/0xe70 [ 154.334524][ T4524] ? debug_smp_processor_id+0x17/0x20 [ 154.339726][ T4524] __x64_sys_read+0x7b/0x90 [ 154.344083][ T4524] do_syscall_64+0x34/0x70 [ 154.348321][ T4524] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.354100][ T4524] RIP: 0033:0x7f40aa4b293c [ 154.358420][ T4524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 154.377859][ T4524] RSP: 002b:00007f40a912d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.386104][ T4524] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b293c [ 154.393911][ T4524] RDX: 000000000000000f RSI: 00007f40a912d0a0 RDI: 0000000000000006 [ 154.401724][ T4524] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.409534][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.417345][ T4524] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 154.605263][ T4536] FAULT_INJECTION: forcing a failure. [ 154.605263][ T4536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.754681][ T4536] CPU: 1 PID: 4536 Comm: syz.3.1439 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 154.764390][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 154.774369][ T4536] Call Trace: [ 154.777499][ T4536] dump_stack_lvl+0x1e2/0x24b [ 154.782016][ T4536] ? bfq_pos_tree_add_move+0x43b/0x43b [ 154.787307][ T4536] dump_stack+0x15/0x17 [ 154.791294][ T4536] should_fail+0x3c6/0x510 [ 154.795546][ T4536] should_fail_usercopy+0x1a/0x20 [ 154.800405][ T4536] _copy_to_user+0x20/0x90 [ 154.804662][ T4536] simple_read_from_buffer+0xc7/0x150 [ 154.809954][ T4536] proc_fail_nth_read+0x1a3/0x210 [ 154.814815][ T4536] ? proc_fault_inject_write+0x390/0x390 [ 154.820284][ T4536] ? security_file_permission+0x86/0xb0 [ 154.825662][ T4536] ? rw_verify_area+0x1c3/0x360 [ 154.830351][ T4536] ? proc_fault_inject_write+0x390/0x390 [ 154.835818][ T4536] vfs_read+0x200/0xba0 [ 154.839811][ T4536] ? kernel_read+0x70/0x70 [ 154.844066][ T4536] ? __kasan_check_write+0x14/0x20 [ 154.849011][ T4536] ? mutex_lock+0xa5/0x110 [ 154.853262][ T4536] ? mutex_trylock+0xa0/0xa0 [ 154.857692][ T4536] ? __fdget_pos+0x2e7/0x3a0 [ 154.862113][ T4536] ? ksys_read+0x77/0x2c0 [ 154.866284][ T4536] ksys_read+0x199/0x2c0 [ 154.870363][ T4536] ? vfs_write+0xe70/0xe70 [ 154.874615][ T4536] ? debug_smp_processor_id+0x17/0x20 [ 154.879827][ T4536] __x64_sys_read+0x7b/0x90 [ 154.884159][ T4536] do_syscall_64+0x34/0x70 [ 154.888415][ T4536] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.894140][ T4536] RIP: 0033:0x7f40aa4b293c [ 154.898399][ T4536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 154.917842][ T4536] RSP: 002b:00007f40a912d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.926088][ T4536] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b293c [ 154.933893][ T4536] RDX: 000000000000000f RSI: 00007f40a912d0a0 RDI: 000000000000000a [ 154.941703][ T4536] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.949516][ T4536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.957415][ T4536] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 155.322416][ T4543] FAULT_INJECTION: forcing a failure. [ 155.322416][ T4543] name failslab, interval 1, probability 0, space 0, times 0 [ 155.335658][ T4543] CPU: 0 PID: 4543 Comm: syz.3.1440 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 155.345357][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.355248][ T4543] Call Trace: [ 155.358384][ T4543] dump_stack_lvl+0x1e2/0x24b [ 155.362881][ T4543] ? bfq_pos_tree_add_move+0x43b/0x43b [ 155.368183][ T4543] ? arch_stack_walk+0xf3/0x140 [ 155.372860][ T4543] dump_stack+0x15/0x17 [ 155.376855][ T4543] should_fail+0x3c6/0x510 [ 155.381110][ T4543] ? __d_alloc+0x2d/0x6c0 [ 155.385274][ T4543] __should_failslab+0xa4/0xe0 [ 155.389877][ T4543] should_failslab+0x9/0x20 [ 155.394213][ T4543] kmem_cache_alloc+0x3d/0x2e0 [ 155.398814][ T4543] __d_alloc+0x2d/0x6c0 [ 155.402805][ T4543] d_alloc_parallel+0xec/0x1370 [ 155.407493][ T4543] ? avc_has_perm_noaudit+0x117/0x240 [ 155.412700][ T4543] ? memcpy+0x56/0x70 [ 155.416519][ T4543] ? avc_has_perm_noaudit+0x158/0x240 [ 155.421725][ T4543] ? avc_denied+0x1b0/0x1b0 [ 155.426069][ T4543] ? d_hash_and_lookup+0x1e0/0x1e0 [ 155.431014][ T4543] ? walk_component+0x610/0x610 [ 155.435699][ T4543] ? __kasan_check_write+0x14/0x20 [ 155.440647][ T4543] ? lockref_get_not_dead+0xc3/0x180 [ 155.445770][ T4543] __lookup_slow+0x154/0x400 [ 155.450194][ T4543] ? __kasan_check_write+0x14/0x20 [ 155.455141][ T4543] ? lookup_one_len+0x2c0/0x2c0 [ 155.459825][ T4543] ? lookup_fast+0x340/0x7d0 [ 155.464255][ T4543] ? security_inode_permission+0xb0/0xf0 [ 155.469722][ T4543] ? handle_dots+0x1030/0x1030 [ 155.474320][ T4543] ? inode_permission+0xf1/0x500 [ 155.479095][ T4543] lookup_slow+0x5a/0x80 [ 155.483174][ T4543] walk_component+0x48c/0x610 [ 155.487685][ T4543] ? nd_alloc_stack+0xf0/0xf0 [ 155.492200][ T4543] ? handle_lookup_down+0x130/0x130 [ 155.497237][ T4543] path_lookupat+0x16d/0x450 [ 155.501748][ T4543] filename_lookup+0x26a/0x6f0 [ 155.506349][ T4543] ? hashlen_string+0x120/0x120 [ 155.511045][ T4543] ? getname_flags+0x1fd/0x520 [ 155.515635][ T4543] user_path_at_empty+0x40/0x50 [ 155.520323][ T4543] bpf_obj_get_user+0xb3/0x440 [ 155.524919][ T4543] ? bpf_obj_pin_user+0x310/0x310 [ 155.529780][ T4543] ? selinux_bpf+0xd2/0x100 [ 155.534142][ T4543] __se_sys_bpf+0x2819/0x11cb0 [ 155.538721][ T4543] ? stack_trace_save+0x113/0x1c0 [ 155.543763][ T4543] ? terminate_walk+0x407/0x4f0 [ 155.548532][ T4543] ? __kasan_check_write+0x14/0x20 [ 155.553474][ T4543] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 155.558778][ T4543] ? _raw_spin_lock+0x1b0/0x1b0 [ 155.563462][ T4543] ? kmem_cache_free+0xa9/0x1e0 [ 155.568143][ T4543] ? kasan_set_track+0x5d/0x70 [ 155.572740][ T4543] ? __x64_sys_bpf+0x90/0x90 [ 155.577167][ T4543] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 155.582810][ T4543] ? _kstrtoull+0x3a0/0x4a0 [ 155.587153][ T4543] ? kstrtouint_from_user+0x20a/0x2a0 [ 155.592353][ T4543] ? kstrtol_from_user+0x310/0x310 [ 155.597392][ T4543] ? memset+0x35/0x40 [ 155.601208][ T4543] ? __fsnotify_parent+0x4b9/0x6c0 [ 155.606161][ T4543] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 155.612751][ T4543] ? proc_fail_nth_write+0x20b/0x290 [ 155.617879][ T4543] ? proc_fail_nth_read+0x210/0x210 [ 155.622907][ T4543] ? security_file_permission+0x86/0xb0 [ 155.628289][ T4543] ? rw_verify_area+0x1c3/0x360 [ 155.632975][ T4543] ? preempt_count_add+0x92/0x1a0 [ 155.637840][ T4543] ? vfs_write+0x852/0xe70 [ 155.642085][ T4543] ? putname+0xe7/0x140 [ 155.646080][ T4543] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 155.651720][ T4543] ? kmem_cache_free+0x1c0/0x1e0 [ 155.656494][ T4543] ? kernel_write+0x3d0/0x3d0 [ 155.661008][ T4543] ? __kasan_check_write+0x14/0x20 [ 155.665958][ T4543] ? mutex_lock+0xa5/0x110 [ 155.670207][ T4543] ? mutex_trylock+0xa0/0xa0 [ 155.674640][ T4543] ? __kasan_check_write+0x14/0x20 [ 155.679580][ T4543] ? fput_many+0x160/0x1b0 [ 155.683837][ T4543] ? debug_smp_processor_id+0x17/0x20 [ 155.689044][ T4543] __x64_sys_bpf+0x7b/0x90 [ 155.693292][ T4543] do_syscall_64+0x34/0x70 [ 155.697548][ T4543] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.703274][ T4543] RIP: 0033:0x7f40aa4b3ef9 [ 155.707528][ T4543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.726966][ T4543] RSP: 002b:00007f40a90eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.735211][ T4543] RAX: ffffffffffffffda RBX: 00007f40aa66c130 RCX: 00007f40aa4b3ef9 [ 155.743021][ T4543] RDX: 0000000000000018 RSI: 0000000020000040 RDI: 0000000000000007 [ 155.750831][ T4543] RBP: 00007f40a90eb090 R08: 0000000000000000 R09: 0000000000000000 [ 155.758645][ T4543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.766454][ T4543] R13: 0000000000000000 R14: 00007f40aa66c130 R15: 00007fff7fe05d88 [ 156.907688][ T4582] syz.3.1453[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.907739][ T4582] syz.3.1453[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.120900][ T4590] syz.4.1455[4590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.136145][ T24] audit: type=1400 audit(1726315553.470:143): avc: denied { ioctl } for pid=4581 comm="syz.3.1453" path="uts:[4026532445]" dev="nsfs" ino=4026532445 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 157.157035][ T4590] syz.4.1455[4590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.287821][ T4592] device syzkaller0 entered promiscuous mode [ 158.319399][ T4625] device pim6reg1 entered promiscuous mode [ 159.697903][ T4675] FAULT_INJECTION: forcing a failure. [ 159.697903][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 159.710443][ T4675] CPU: 0 PID: 4675 Comm: syz.4.1483 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 159.720113][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 159.730003][ T4675] Call Trace: [ 159.733139][ T4675] dump_stack_lvl+0x1e2/0x24b [ 159.737647][ T4675] ? panic+0x812/0x812 [ 159.741552][ T4675] ? bfq_pos_tree_add_move+0x43b/0x43b [ 159.746852][ T4675] ? fib6_table_lookup+0x986/0xaf0 [ 159.751798][ T4675] dump_stack+0x15/0x17 [ 159.755786][ T4675] should_fail+0x3c6/0x510 [ 159.760040][ T4675] ? dst_alloc+0x17d/0x590 [ 159.764292][ T4675] __should_failslab+0xa4/0xe0 [ 159.768893][ T4675] should_failslab+0x9/0x20 [ 159.773232][ T4675] kmem_cache_alloc+0x3d/0x2e0 [ 159.777831][ T4675] ? arch_stack_walk+0xf3/0x140 [ 159.782520][ T4675] ? fib6_select_path+0x140/0x560 [ 159.787382][ T4675] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 159.792847][ T4675] dst_alloc+0x17d/0x590 [ 159.796930][ T4675] ip6_pol_route+0xc2a/0x14b0 [ 159.801442][ T4675] ? __alloc_pages_nodemask+0x435/0xaf0 [ 159.806826][ T4675] ? fib6_table_lookup+0xaf0/0xaf0 [ 159.811768][ T4675] ? alloc_skb_with_frags+0xa1/0x570 [ 159.816892][ T4675] ? sched_clock_cpu+0x1b/0x3b0 [ 159.821575][ T4675] ? __kasan_check_write+0x14/0x20 [ 159.826522][ T4675] ip6_pol_route_input+0x55/0x80 [ 159.831300][ T4675] fib6_rule_lookup+0x25a/0x620 [ 159.835982][ T4675] ? ip6_route_input_lookup+0xd0/0xd0 [ 159.841192][ T4675] ? fib6_lookup+0x3f0/0x3f0 [ 159.845702][ T4675] ? __local_bh_enable_ip+0x53/0x80 [ 159.850735][ T4675] ? local_bh_enable+0x1f/0x30 [ 159.855337][ T4675] ? ip6t_do_table+0x162c/0x1800 [ 159.860112][ T4675] ? ip6_route_input+0x248/0xb00 [ 159.864884][ T4675] ? __ipv6_addr_type+0x244/0x2f0 [ 159.869744][ T4675] ip6_route_input+0x726/0xb00 [ 159.874344][ T4675] ? ip6_multipath_l3_keys+0x610/0x610 [ 159.879643][ T4675] ? ip6table_raw_hook+0x69/0x80 [ 159.884422][ T4675] ip6_rcv_finish+0x14f/0x350 [ 159.888929][ T4675] ipv6_rcv+0xee/0x270 [ 159.892830][ T4675] ? ip6_rcv_finish+0x350/0x350 [ 159.897518][ T4675] ? refcount_add+0x80/0x80 [ 159.901866][ T4675] ? down_read_trylock+0x179/0x1d0 [ 159.906902][ T4675] ? kasan_poison+0x5d/0x70 [ 159.911238][ T4675] ? __kasan_kmalloc_large+0xad/0xc0 [ 159.916360][ T4675] ? __init_rwsem+0x1c0/0x1c0 [ 159.920871][ T4675] ? ip6_rcv_finish+0x350/0x350 [ 159.925553][ T4675] __netif_receive_skb+0x1c6/0x530 [ 159.930508][ T4675] ? __kasan_check_write+0x14/0x20 [ 159.935457][ T4675] ? exc_page_fault+0x33d/0x5b0 [ 159.940142][ T4675] ? deliver_ptype_list_skb+0x3c0/0x3c0 [ 159.945518][ T4675] ? asm_exc_page_fault+0x1e/0x30 [ 159.950382][ T4675] ? _copy_from_iter+0x1e1/0xd10 [ 159.955154][ T4675] netif_receive_skb+0xb0/0x480 [ 159.959933][ T4675] ? _copy_from_iter+0x3e6/0xd10 [ 159.964787][ T4675] ? netif_receive_skb_core+0x210/0x210 [ 159.970167][ T4675] ? sock_alloc_send_pskb+0x936/0xa50 [ 159.975371][ T4675] tun_rx_batched+0x6d9/0x870 [ 159.979882][ T4675] ? eth_type_trans+0x2e4/0x620 [ 159.984565][ T4675] ? local_bh_enable+0x30/0x30 [ 159.989171][ T4675] tun_get_user+0x2bf3/0x38f0 [ 159.993686][ T4675] ? kmem_cache_free+0xa9/0x1e0 [ 159.998449][ T4675] ? do_sys_openat2+0x1fc/0x710 [ 160.003137][ T4675] ? _kstrtoull+0x3a0/0x4a0 [ 160.007571][ T4675] ? tun_do_read+0x1f60/0x1f60 [ 160.012177][ T4675] ? kstrtouint_from_user+0x20a/0x2a0 [ 160.017374][ T4675] ? kstrtol_from_user+0x310/0x310 [ 160.022323][ T4675] ? avc_policy_seqno+0x1b/0x70 [ 160.027006][ T4675] ? selinux_file_permission+0x2bb/0x560 [ 160.032478][ T4675] ? fsnotify_perm+0x67/0x4e0 [ 160.036988][ T4675] tun_chr_write_iter+0x1a8/0x250 [ 160.041846][ T4675] vfs_write+0xb4c/0xe70 [ 160.045928][ T4675] ? kernel_write+0x3d0/0x3d0 [ 160.050443][ T4675] ? __fdget_pos+0x209/0x3a0 [ 160.054865][ T4675] ? ksys_write+0x77/0x2c0 [ 160.059119][ T4675] ksys_write+0x199/0x2c0 [ 160.063370][ T4675] ? __ia32_sys_read+0x90/0x90 [ 160.067974][ T4675] ? debug_smp_processor_id+0x17/0x20 [ 160.073179][ T4675] __x64_sys_write+0x7b/0x90 [ 160.077606][ T4675] do_syscall_64+0x34/0x70 [ 160.081861][ T4675] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 160.087670][ T4675] RIP: 0033:0x7f65831bbef9 [ 160.091940][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.111377][ T4675] RSP: 002b:00007f6581e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.119703][ T4675] RAX: ffffffffffffffda RBX: 00007f6583373f80 RCX: 00007f65831bbef9 [ 160.127506][ T4675] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 160.135327][ T4675] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 160.143127][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.150941][ T4675] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 160.393465][ T4689] bridge0: port 3(veth0_to_batadv) entered blocking state [ 160.400645][ T4689] bridge0: port 3(veth0_to_batadv) entered disabled state [ 160.408074][ T4689] device veth0_to_batadv entered promiscuous mode [ 160.416124][ T4689] device veth0_to_batadv left promiscuous mode [ 160.422295][ T4689] bridge0: port 3(veth0_to_batadv) entered disabled state [ 160.661757][ T4715] FAULT_INJECTION: forcing a failure. [ 160.661757][ T4715] name failslab, interval 1, probability 0, space 0, times 0 [ 160.675101][ T4715] CPU: 1 PID: 4715 Comm: syz.4.1498 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 160.684886][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.694770][ T4715] Call Trace: [ 160.697907][ T4715] dump_stack_lvl+0x1e2/0x24b [ 160.702411][ T4715] ? bfq_pos_tree_add_move+0x43b/0x43b [ 160.707708][ T4715] dump_stack+0x15/0x17 [ 160.711704][ T4715] should_fail+0x3c6/0x510 [ 160.715955][ T4715] ? kvmalloc_node+0x82/0x130 [ 160.720468][ T4715] __should_failslab+0xa4/0xe0 [ 160.725065][ T4715] should_failslab+0x9/0x20 [ 160.729408][ T4715] __kmalloc+0x60/0x330 [ 160.733398][ T4715] kvmalloc_node+0x82/0x130 [ 160.737738][ T4715] simple_xattr_alloc+0x43/0xa0 [ 160.742427][ T4715] shmem_initxattrs+0x8d/0x200 [ 160.747025][ T4715] security_inode_init_security+0x252/0x390 [ 160.752748][ T4715] ? shmem_tmpfile+0x100/0x100 [ 160.757353][ T4715] ? security_dentry_create_files_as+0xc0/0xc0 [ 160.763339][ T4715] ? simple_acl_create+0x29e/0x2c0 [ 160.768288][ T4715] ? shmem_get_inode+0x720/0x9e0 [ 160.773077][ T4715] shmem_mknod+0xb8/0x1c0 [ 160.777229][ T4715] ? selinux_inode_mkdir+0x22/0x30 [ 160.782172][ T4715] shmem_mkdir+0x2b/0x60 [ 160.786342][ T4715] vfs_mkdir+0x4cf/0x6c0 [ 160.790419][ T4715] do_mkdirat+0x1a6/0x2c0 [ 160.794590][ T4715] ? do_mknodat+0x450/0x450 [ 160.798924][ T4715] __x64_sys_mkdir+0x60/0x70 [ 160.803349][ T4715] do_syscall_64+0x34/0x70 [ 160.807603][ T4715] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 160.813328][ T4715] RIP: 0033:0x7f65831bbef9 [ 160.817584][ T4715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.837024][ T4715] RSP: 002b:00007f6581e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 160.845267][ T4715] RAX: ffffffffffffffda RBX: 00007f6583373f80 RCX: 00007f65831bbef9 [ 160.853080][ T4715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000300 [ 160.860890][ T4715] RBP: 00007f6581e35090 R08: 0000000000000000 R09: 0000000000000000 [ 160.868812][ T4715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.876619][ T4715] R13: 0000000000000000 R14: 00007f6583373f80 R15: 00007ffc711bba48 [ 160.899496][ T4727] -A: renamed from syzkaller0 [ 161.734331][ T4778] device syzkaller0 entered promiscuous mode [ 162.861453][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.868453][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.892442][ T4789] device bridge0 entered promiscuous mode [ 163.260649][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.805264][ T4812] device syzkaller0 entered promiscuous mode [ 163.839657][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.846509][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.854057][ T4810] device bridge_slave_0 entered promiscuous mode [ 163.863697][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.872181][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.879833][ T4810] device bridge_slave_1 entered promiscuous mode [ 164.058196][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.065201][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.072284][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.079056][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.111056][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.128804][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.138591][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.309286][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.364829][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.371705][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.471701][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.535436][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.542319][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.812633][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.852555][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.914988][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.995456][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.009619][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.027024][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.045839][ T4810] device veth0_vlan entered promiscuous mode [ 165.077723][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.090519][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.108948][ T4810] device veth1_macvtap entered promiscuous mode [ 165.131782][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.141047][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.149661][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.215691][ T24] audit: type=1400 audit(1726315561.550:144): avc: denied { mounton } for pid=4810 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 165.241810][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.311584][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.477285][ T24] audit: type=1400 audit(1726315561.810:145): avc: denied { create } for pid=4862 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.569084][ T4870] syz.3.1549[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.569138][ T4870] syz.3.1549[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.688450][ T4872] device syzkaller0 entered promiscuous mode [ 165.859705][ T708] device bridge_slave_1 left promiscuous mode [ 165.865698][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.927855][ T708] device bridge_slave_0 left promiscuous mode [ 165.933828][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.063227][ T708] device veth0_vlan left promiscuous mode [ 166.840335][ T24] audit: type=1400 audit(1726315563.180:146): avc: denied { create } for pid=4918 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.937086][ T4919] device pim6reg1 entered promiscuous mode [ 167.579894][ T4939] syz.3.1574[4939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.580004][ T4939] syz.3.1574[4939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.936734][ T24] audit: type=1400 audit(1726315564.270:147): avc: denied { write } for pid=4951 comm="syz.3.1580" name="cgroup.subtree_control" dev="cgroup2" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.971790][ T24] audit: type=1400 audit(1726315564.270:148): avc: denied { open } for pid=4951 comm="syz.3.1580" path="" dev="cgroup2" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.910945][ T4981] syz.2.1587[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.911002][ T4981] syz.2.1587[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.040244][ T4986] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.129980][ T4986] device bridge0 left promiscuous mode [ 169.651642][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.668398][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.728142][ T4994] device bridge0 left promiscuous mode [ 169.889173][ T5000] bridge0: port 3(veth0_to_batadv) entered blocking state [ 169.897856][ T5000] bridge0: port 3(veth0_to_batadv) entered disabled state [ 169.905198][ T5000] device veth0_to_batadv entered promiscuous mode [ 169.917272][ T5001] device veth0_to_batadv left promiscuous mode [ 169.933652][ T5001] bridge0: port 3(veth0_to_batadv) entered disabled state [ 170.017082][ T5003] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.023945][ T5003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.031068][ T5003] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.037828][ T5003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.047988][ T5003] device bridge0 entered promiscuous mode [ 170.427719][ T5024] device syzkaller0 entered promiscuous mode [ 171.086484][ T5043] device sit0 entered promiscuous mode [ 171.528656][ T5063] device syzkaller0 entered promiscuous mode [ 171.735004][ T5075] bridge0: port 3(veth0_to_batadv) entered blocking state [ 171.797092][ T5075] bridge0: port 3(veth0_to_batadv) entered disabled state [ 172.024659][ T5075] device veth0_to_batadv entered promiscuous mode [ 172.122826][ T5082] device veth0_to_batadv left promiscuous mode [ 172.190503][ T5082] bridge0: port 3(veth0_to_batadv) entered disabled state [ 172.575942][ T5088] device syzkaller0 entered promiscuous mode [ 173.266222][ T5119] tap0: tun_chr_ioctl cmd 1074025692 [ 173.468655][ T5125] syz.0.1637[5125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.468704][ T5125] syz.0.1637[5125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.067779][ T5204] device syzkaller0 entered promiscuous mode [ 176.410650][ T5215] device pim6reg1 entered promiscuous mode [ 177.586310][ T5257] device syzkaller0 entered promiscuous mode [ 177.626681][ T5255] device veth0_vlan left promiscuous mode [ 177.632890][ T5255] device veth0_vlan entered promiscuous mode [ 178.218145][ T24] audit: type=1400 audit(1726315574.550:149): avc: denied { create } for pid=5274 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 178.378926][ T5295] FAULT_INJECTION: forcing a failure. [ 178.378926][ T5295] name failslab, interval 1, probability 0, space 0, times 0 [ 178.458279][ T5295] CPU: 1 PID: 5295 Comm: syz.0.1700 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 178.467989][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 178.477881][ T5295] Call Trace: [ 178.481009][ T5295] dump_stack_lvl+0x1e2/0x24b [ 178.485515][ T5295] ? panic+0x812/0x812 [ 178.489420][ T5295] ? bfq_pos_tree_add_move+0x43b/0x43b [ 178.494716][ T5295] ? kasan_check_range+0x78/0x2a0 [ 178.499572][ T5295] dump_stack+0x15/0x17 [ 178.503565][ T5295] should_fail+0x3c6/0x510 [ 178.507936][ T5295] ? __get_vm_area_node+0x116/0x470 [ 178.512939][ T5295] __should_failslab+0xa4/0xe0 [ 178.517542][ T5295] should_failslab+0x9/0x20 [ 178.521880][ T5295] kmem_cache_alloc_trace+0x3a/0x2e0 [ 178.527002][ T5295] __get_vm_area_node+0x116/0x470 [ 178.531858][ T5295] ? sched_clock_cpu+0x1b/0x3b0 [ 178.536566][ T5295] __vmalloc_node_range+0xdc/0x7c0 [ 178.541495][ T5295] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 178.546877][ T5295] ? __irq_exit_rcu+0x40/0x150 [ 178.551475][ T5295] ? irq_exit_rcu+0x9/0x10 [ 178.555733][ T5295] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 178.561143][ T5295] __vmalloc+0x7a/0x90 [ 178.565015][ T5295] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 178.570399][ T5295] bpf_prog_alloc_no_stats+0x39/0x2a0 [ 178.575607][ T5295] bpf_prog_alloc+0x21/0x1e0 [ 178.580030][ T5295] __se_sys_bpf+0x9856/0x11cb0 [ 178.584633][ T5295] ? perf_prepare_sample+0x1af0/0x1af0 [ 178.589927][ T5295] ? __x64_sys_bpf+0x90/0x90 [ 178.594349][ T5295] ? __this_cpu_preempt_check+0x13/0x20 [ 178.599734][ T5295] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 178.605808][ T5295] ? hrtimer_forward+0x1a6/0x2c0 [ 178.610582][ T5295] ? cpu_clock_event_read+0x50/0x50 [ 178.615624][ T5295] ? timerqueue_add+0x24c/0x270 [ 178.620301][ T5295] ? enqueue_hrtimer+0xad/0x200 [ 178.624984][ T5295] ? __hrtimer_run_queues+0x438/0xa50 [ 178.630195][ T5295] ? __hrtimer_run_queues+0x9ea/0xa50 [ 178.635403][ T5295] ? ktime_get+0x10e/0x140 [ 178.639656][ T5295] ? kvm_sched_clock_read+0x18/0x40 [ 178.644690][ T5295] ? sched_clock+0x3a/0x40 [ 178.648943][ T5295] ? sched_clock_cpu+0x1b/0x3b0 [ 178.653628][ T5295] ? sched_clock+0x3a/0x40 [ 178.657883][ T5295] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 178.663870][ T5295] __x64_sys_bpf+0x7b/0x90 [ 178.668126][ T5295] do_syscall_64+0x34/0x70 [ 178.672378][ T5295] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 178.678101][ T5295] RIP: 0033:0x7ffb95751ef9 [ 178.682355][ T5295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.701796][ T5295] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.710038][ T5295] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 178.717849][ T5295] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 178.725663][ T5295] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 178.733470][ T5295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.741289][ T5295] R13: 0000000000000000 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 179.029580][ T5295] syz.0.1700: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 179.223894][ T5295] CPU: 1 PID: 5295 Comm: syz.0.1700 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 179.233600][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 179.243487][ T5295] Call Trace: [ 179.246636][ T5295] dump_stack_lvl+0x1e2/0x24b [ 179.251232][ T5295] ? wake_up_klogd+0xb8/0xf0 [ 179.255644][ T5295] ? bfq_pos_tree_add_move+0x43b/0x43b [ 179.260948][ T5295] ? pr_cont_kernfs_name+0xf0/0x100 [ 179.265975][ T5295] dump_stack+0x15/0x17 [ 179.270052][ T5295] warn_alloc+0x21a/0x390 [ 179.274222][ T5295] ? __get_vm_area_node+0x116/0x470 [ 179.279255][ T5295] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 179.284631][ T5295] ? __kasan_kmalloc+0x9/0x10 [ 179.289146][ T5295] ? __get_vm_area_node+0x34b/0x470 [ 179.294178][ T5295] ? sched_clock_cpu+0x1b/0x3b0 [ 179.298869][ T5295] __vmalloc_node_range+0x287/0x7c0 [ 179.303900][ T5295] ? __irq_exit_rcu+0x40/0x150 [ 179.308501][ T5295] ? irq_exit_rcu+0x9/0x10 [ 179.312754][ T5295] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 179.318135][ T5295] __vmalloc+0x7a/0x90 [ 179.322040][ T5295] ? bpf_prog_alloc_no_stats+0x39/0x2a0 [ 179.327421][ T5295] bpf_prog_alloc_no_stats+0x39/0x2a0 [ 179.332629][ T5295] bpf_prog_alloc+0x21/0x1e0 [ 179.337053][ T5295] __se_sys_bpf+0x9856/0x11cb0 [ 179.341657][ T5295] ? perf_prepare_sample+0x1af0/0x1af0 [ 179.346948][ T5295] ? __x64_sys_bpf+0x90/0x90 [ 179.351378][ T5295] ? __this_cpu_preempt_check+0x13/0x20 [ 179.356762][ T5295] ? __perf_event_account_interrupt+0x18f/0x2c0 [ 179.362919][ T5295] ? hrtimer_forward+0x1a6/0x2c0 [ 179.367700][ T5295] ? cpu_clock_event_read+0x50/0x50 [ 179.372731][ T5295] ? timerqueue_add+0x24c/0x270 [ 179.377419][ T5295] ? enqueue_hrtimer+0xad/0x200 [ 179.382099][ T5295] ? __hrtimer_run_queues+0x438/0xa50 [ 179.387310][ T5295] ? __hrtimer_run_queues+0x9ea/0xa50 [ 179.392517][ T5295] ? ktime_get+0x10e/0x140 [ 179.396772][ T5295] ? kvm_sched_clock_read+0x18/0x40 [ 179.401802][ T5295] ? sched_clock+0x3a/0x40 [ 179.406053][ T5295] ? sched_clock_cpu+0x1b/0x3b0 [ 179.410741][ T5295] ? sched_clock+0x3a/0x40 [ 179.414998][ T5295] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 179.420985][ T5295] __x64_sys_bpf+0x7b/0x90 [ 179.425234][ T5295] do_syscall_64+0x34/0x70 [ 179.429489][ T5295] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 179.435215][ T5295] RIP: 0033:0x7ffb95751ef9 [ 179.439554][ T5295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.458999][ T5295] RSP: 002b:00007ffb943cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.467240][ T5295] RAX: ffffffffffffffda RBX: 00007ffb95909f80 RCX: 00007ffb95751ef9 [ 179.475053][ T5295] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 179.482865][ T5295] RBP: 00007ffb943cb090 R08: 0000000000000000 R09: 0000000000000000 [ 179.490762][ T5295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.498571][ T5295] R13: 0000000000000000 R14: 00007ffb95909f80 R15: 00007ffe955481a8 [ 179.516306][ T5316] tap0: tun_chr_ioctl cmd 1074025692 [ 179.525438][ T5295] Mem-Info: [ 179.529182][ T5295] active_anon:101 inactive_anon:8815 isolated_anon:0 [ 179.529182][ T5295] active_file:24519 inactive_file:2427 isolated_file:0 [ 179.529182][ T5295] unevictable:0 dirty:326 writeback:0 [ 179.529182][ T5295] slab_reclaimable:6944 slab_unreclaimable:74848 [ 179.529182][ T5295] mapped:21056 shmem:161 pagetables:486 bounce:0 [ 179.529182][ T5295] free:1575120 free_pcp:1173 free_cma:0 [ 179.567268][ T5295] Node 0 active_anon:404kB inactive_anon:35260kB active_file:98076kB inactive_file:9708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84224kB dirty:1304kB writeback:0kB shmem:644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4608kB all_unreclaimable? no [ 179.596469][ T5295] DMA32 free:2981840kB min:62624kB low:78280kB high:93936kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2984768kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2928kB local_pcp:1432kB free_cma:0kB [ 179.629111][ T5295] lowmem_reserve[]: 0 3941 [ 179.629327][ T5319] device veth0_vlan left promiscuous mode [ 179.639598][ T5295] 3941 [ 179.642194][ T5295] Normal free:3318324kB min:84828kB low:106032kB high:127236kB reserved_highatomic:0KB active_anon:404kB inactive_anon:35360kB active_file:98076kB inactive_file:9708kB unevictable:0kB writepending:1304kB present:5242880kB managed:4035856kB mlocked:0kB pagetables:1944kB bounce:0kB free_pcp:1744kB local_pcp:1296kB free_cma:0kB [ 179.668833][ T5319] device veth0_vlan entered promiscuous mode [ 179.672784][ T5295] lowmem_reserve[]: 0 0 0 [ 179.683046][ T5295] DMA32: 6*4kB (UM) 3*8kB (M) 4*16kB (M) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2981840kB [ 179.699179][ T5295] Normal: 1211*4kB (UME) 567*8kB (UME) 1105*16kB (UME) 908*32kB (UME) 437*64kB (UME) 140*128kB (UME) 64*256kB (ME) 68*512kB (UM) 47*1024kB (UM) 20*2048kB (UME) 751*4096kB (UM) = 3318388kB [ 179.718200][ T5295] 27107 total pagecache pages [ 179.722836][ T5295] 0 pages in swap cache [ 179.726829][ T5295] Swap cache stats: add 0, delete 0, find 0/0 [ 179.732804][ T5295] Free swap = 124996kB [ 179.736875][ T5295] Total swap = 124996kB [ 179.741001][ T5295] 2097051 pages RAM [ 179.744720][ T5295] 0 pages HighMem/MovableOnly [ 179.749444][ T5295] 341895 pages reserved [ 179.753402][ T5295] 0 pages cma reserved [ 179.767174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.776980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.784206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.903471][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.910366][ T5498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.921997][ T5498] device bridge0 entered promiscuous mode [ 185.983164][ T5502] FAULT_INJECTION: forcing a failure. [ 185.983164][ T5502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.993909][ T5500] bridge0: port 3(veth0_to_batadv) entered blocking state [ 186.003540][ T5500] bridge0: port 3(veth0_to_batadv) entered disabled state [ 186.008408][ T5502] CPU: 0 PID: 5502 Comm: syz.3.1773 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 186.020189][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 186.030116][ T5502] Call Trace: [ 186.033222][ T5502] dump_stack_lvl+0x1e2/0x24b [ 186.037723][ T5502] ? bfq_pos_tree_add_move+0x43b/0x43b [ 186.043011][ T5502] ? __irq_exit_rcu+0x40/0x150 [ 186.047610][ T5502] ? irq_exit_rcu+0x9/0x10 [ 186.051862][ T5502] dump_stack+0x15/0x17 [ 186.055854][ T5502] should_fail+0x3c6/0x510 [ 186.060110][ T5502] should_fail_usercopy+0x1a/0x20 [ 186.064967][ T5502] _copy_from_user+0x20/0xd0 [ 186.069394][ T5502] __se_sys_bpf+0x232/0x11cb0 [ 186.073994][ T5502] ? perf_callchain_user+0x3f0/0x1170 [ 186.079341][ T5502] ? perf_callchain_user+0xe43/0x1170 [ 186.084536][ T5502] ? ktime_get+0x10e/0x140 [ 186.088781][ T5502] ? lapic_next_event+0x5f/0x70 [ 186.093467][ T5502] ? clockevents_program_event+0x214/0x2c0 [ 186.099107][ T5502] ? __x64_sys_bpf+0x90/0x90 [ 186.103535][ T5502] ? visit_groups_merge+0x2434/0x24b0 [ 186.108828][ T5502] ? ctx_flexible_sched_in+0x100/0x100 [ 186.114119][ T5502] ? kvm_sched_clock_read+0x18/0x40 [ 186.119155][ T5502] ? ctx_flexible_sched_in+0xa8/0x100 [ 186.124363][ T5502] ? ctx_pinned_sched_in+0x100/0x100 [ 186.129481][ T5502] ? kvm_sched_clock_read+0x18/0x40 [ 186.134515][ T5502] ? sched_clock+0x3a/0x40 [ 186.138769][ T5502] ? sched_clock_cpu+0x1b/0x3b0 [ 186.143465][ T5502] ? _raw_spin_lock+0xa4/0x1b0 [ 186.148065][ T5502] ? _raw_spin_trylock_bh+0x190/0x190 [ 186.153262][ T5502] ? ctx_sched_in+0x276/0x310 [ 186.157783][ T5502] ? _raw_spin_unlock+0x4d/0x70 [ 186.162461][ T5502] ? perf_event_context_sched_in+0x48f/0x580 [ 186.168280][ T5502] ? __this_cpu_preempt_check+0x13/0x20 [ 186.173659][ T5502] ? __perf_event_task_sched_in+0x219/0x2a0 [ 186.179385][ T5502] ? perf_pmu_sched_task+0x190/0x190 [ 186.184509][ T5502] ? native_set_ldt+0x360/0x360 [ 186.189194][ T5502] ? __this_cpu_preempt_check+0x13/0x20 [ 186.194573][ T5502] ? perf_sched_cb_inc+0x260/0x260 [ 186.199523][ T5502] ? _raw_spin_unlock_irq+0x4e/0x70 [ 186.204556][ T5502] ? finish_task_switch+0x130/0x5a0 [ 186.209589][ T5502] ? switch_mm_irqs_off+0x71b/0x9a0 [ 186.214729][ T5502] ? __switch_to_asm+0x34/0x60 [ 186.219332][ T5502] ? __schedule+0xbee/0x1330 [ 186.223767][ T5502] ? __kasan_check_read+0x11/0x20 [ 186.228616][ T5502] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 186.234517][ T5502] __x64_sys_bpf+0x7b/0x90 [ 186.238774][ T5502] do_syscall_64+0x34/0x70 [ 186.243027][ T5502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.248750][ T5502] RIP: 0033:0x7f40aa4b3ef9 [ 186.253008][ T5502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.272447][ T5502] RSP: 002b:00007f40a912d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.280688][ T5502] RAX: ffffffffffffffda RBX: 00007f40aa66bf80 RCX: 00007f40aa4b3ef9 [ 186.288499][ T5502] RDX: 0000000000000078 RSI: 0000000020000440 RDI: 0000000000000005 [ 186.296308][ T5502] RBP: 00007f40a912d090 R08: 0000000000000000 R09: 0000000000000000 [ 186.304120][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.311933][ T5502] R13: 0000000000000000 R14: 00007f40aa66bf80 R15: 00007fff7fe05d88 [ 186.403911][ T5500] device veth0_to_batadv entered promiscuous mode [ 186.426564][ T5500] bridge0: port 3(veth0_to_batadv) entered blocking state [ 186.433594][ T5500] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 186.453540][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.467785][ T5507] device veth0_to_batadv left promiscuous mode [ 186.478217][ T5507] bridge0: port 3(veth0_to_batadv) entered disabled state [ 186.560906][ T5521] device syzkaller0 entered promiscuous mode [ 206.429256][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.436099][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.443395][ T5558] device bridge_slave_0 entered promiscuous mode [ 206.451676][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.458698][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.465785][ T5558] device bridge_slave_1 entered promiscuous mode [ 206.495041][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.501920][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.509227][ T5559] device bridge_slave_0 entered promiscuous mode [ 206.515868][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.522918][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.530111][ T5559] device bridge_slave_1 entered promiscuous mode [ 206.564094][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.571016][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.578295][ T5561] device bridge_slave_0 entered promiscuous mode [ 206.602505][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.609385][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.616449][ T5561] device bridge_slave_1 entered promiscuous mode [ 206.626273][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.633450][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.640639][ T5560] device bridge_slave_0 entered promiscuous mode [ 206.649202][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.656033][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.663296][ T5560] device bridge_slave_1 entered promiscuous mode [ 206.712908][ T24] audit: type=1400 audit(1726315603.050:150): avc: denied { create } for pid=5558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.737147][ T24] audit: type=1400 audit(1726315603.080:151): avc: denied { write } for pid=5558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.757582][ T24] audit: type=1400 audit(1726315603.080:152): avc: denied { read } for pid=5558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.787967][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.794802][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.801915][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.808701][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.822510][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.829366][ T5560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.836430][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.843251][ T5560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.859282][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.866122][ T5561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.873249][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.880044][ T5561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.887968][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.894799][ T5559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.901911][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.908699][ T5559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.939795][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.947378][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.954382][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.961845][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.968888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.976135][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.983221][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.990270][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.997448][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.025747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.033546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.041551][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.048385][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.056489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.064963][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.071840][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.079003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.086969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.094659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.103484][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.110333][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.118316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.126252][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.133100][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.142030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.153467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.170701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.179042][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.185862][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.193247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.201373][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.208362][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.215524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.223557][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.230387][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.237614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.245548][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.252489][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.263714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.281166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.290248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.298031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.305701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.317935][ T317] device bridge_slave_1 left promiscuous mode [ 207.323960][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.331516][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.339077][ T317] device veth1_macvtap left promiscuous mode [ 207.344861][ T317] device veth0_vlan left promiscuous mode [ 207.430226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.438400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.449258][ T5560] device veth0_vlan entered promiscuous mode [ 207.463886][ T5558] device veth0_vlan entered promiscuous mode [ 207.472571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.480484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.488277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.496327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.506469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.514542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.522440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.529802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.537175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.544355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.557616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.565608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.573774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.582172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.591320][ T5560] device veth1_macvtap entered promiscuous mode [ 207.602913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.610450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.618217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.625915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.633323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.640955][ T5561] device veth0_vlan entered promiscuous mode [ 207.651859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.660650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.686348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.694447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.702714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.710812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.719357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.727433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.735348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.743413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.751327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.759436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.767638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.774885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.783865][ T5558] device veth1_macvtap entered promiscuous mode [ 207.790798][ T5559] device veth0_vlan entered promiscuous mode [ 207.801473][ T5561] device veth1_macvtap entered promiscuous mode [ 207.818224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.826217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 207.834552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.842841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.851368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.859674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.878097][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.890014][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.903928][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.913200][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.931039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.940133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.619488][ T317] device bridge_slave_1 left promiscuous mode [ 208.625400][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.632577][ T317] device bridge_slave_0 left promiscuous mode [ 208.638753][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.646107][ T317] device bridge_slave_1 left promiscuous mode [ 208.652278][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.659629][ T317] device bridge_slave_0 left promiscuous mode [ 208.666145][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.673684][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.680831][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.688561][ T317] device veth0_vlan left promiscuous mode [ 208.694185][ T317] device veth1_macvtap left promiscuous mode [ 208.700357][ T317] device veth0_vlan left promiscuous mode [ 208.706147][ T317] device veth1_macvtap left promiscuous mode [ 208.711962][ T317] device veth0_vlan left promiscuous mode [ 210.937608][ T317] device bridge_slave_1 left promiscuous mode [ 210.943529][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.950834][ T317] device bridge_slave_0 left promiscuous mode [ 210.956967][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.964399][ T317] device bridge_slave_1 left promiscuous mode [ 210.970434][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.977704][ T317] device bridge_slave_0 left promiscuous mode [ 210.983602][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.991305][ T317] device bridge_slave_1 left promiscuous mode [ 210.997306][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.004346][ T317] device bridge_slave_0 left promiscuous mode [ 211.010465][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.018034][ T317] device bridge_slave_1 left promiscuous mode [ 211.023935][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.031296][ T317] device bridge_slave_0 left promiscuous mode [ 211.037363][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.044858][ T317] device bridge_slave_1 left promiscuous mode [ 211.050942][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.058186][ T317] device bridge_slave_0 left promiscuous mode [ 211.064082][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.072152][ T317] device veth1_macvtap left promiscuous mode [ 211.078004][ T317] device veth0_vlan left promiscuous mode [ 211.083614][ T317] device veth0_vlan left promiscuous mode [ 211.089256][ T317] device veth1_macvtap left promiscuous mode [ 211.095051][ T317] device veth0_vlan left promiscuous mode [ 211.100921][ T317] device veth1_macvtap left promiscuous mode [ 211.106822][ T317] device veth0_vlan left promiscuous mode [ 211.112366][ T317] device veth1_macvtap left promiscuous mode [ 211.118250][ T317] device veth0_vlan left promiscuous mode