last executing test programs: 11.14026286s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.215338384s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.274751369s ago: executing program 2 (id=2139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000000)="736c3e7acaa66b9ed7ec0641d6a8f687b4ef4a736d2326d11a1617c4d50c4c3647b4057c90c8d44a7d04340c6b", &(0x7f0000000300)=""/173, &(0x7f00000005c0)="8ca068ace1d5aa4314570a87977dda0cedc1fb85351f764b8f533f5133d7c5fbd84fe921c2221eb727ea9206249756e9b3ef5e38d551f3fa988c1ccfd99526fe9e853d025fc184fa86f1de60e9650467e53c0fcc5141d569d15a232c86b80bf4504e62a7b69f2f9799fe37ceb957fb0ee58476fc9768cce6572bd56513f038e52518618ede98698e0693f9e29da89dfecf28adad2a906ad82ad487f51d18912eccd6fd2bf69772f0b49112b57e5fc5027b03758b45e656a9b052cf7f94b51bc87e13f5cea158785ec9fd99068fa42bba7dbbf1ddb5967206d4f7d34d2fb0e11bb2", &(0x7f00000006c0)="9f8d15e12bfe7b391bf8a60ca14b8c0faaf96c16acedabd4b1942658ebaecac49feda5f5924dd7d63c5651680fbc6521b3afcc7d9454c6706d2513101ddd4f08bd385117deae64555ef6b73ec77767973004203c8621a3516b3ff98111fbf1aef1f90cc8ae5dea485cb22c77a471501b06bd709ca1afb1bf72cfb240a88f2ae2adf8e7f5844a4dfaa60283ea06bf93d8f58cd0424f4efde95ea883ce7c283d97250b5ca16cf155afa8bf52005078da8221fe80bbb50ba3fdc5d892d2ce200093c1fff79e72eb66873abd81fe5c41ac9ebf", 0x5, r1, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='qdisc_dequeue\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) 6.907889398s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.034080177s ago: executing program 0 (id=2144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x42, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r1, r0, 0x4, 0x1, 0x5}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r0, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x61]}}, &(0x7f0000003680)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xdd) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 5.033626957s ago: executing program 1 (id=2145): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, 0x0}, 0x8040) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@fwd={0xb}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x2, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x10, 0x5}]}]}, {0x0, [0x71, 0x2e, 0x2e]}}, 0x0, 0x61}, 0x28) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) (async) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb012d18"], 0x0, 0x26}, 0x28) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r11, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000d0000b300000000", @ANYRES32=r9, @ANYBLOB="bc0b00"/20, @ANYRES32=r12, @ANYRES32=r10, @ANYBLOB="00000000050000000500"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff616, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa1e2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xad91bf95cbb85261}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0xaf, &(0x7f0000000840)=""/175, 0x41100, 0x8, '\x00', r12, @cgroup_sock=0x2, r7, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x3, 0x5, 0xf}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000540)=[r0, r4, r1, r0], &(0x7f0000000680)=[{0x3, 0x3, 0x6, 0x6}, {0x3, 0x2, 0x9, 0xc}], 0x10, 0x6a991be1}, 0x94) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.032946068s ago: executing program 2 (id=2146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @fwd={0x6}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x6}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000180)=""/122, 0x9e, 0x7a, 0x1, 0xc6, 0x10000, @value=r1}, 0x28) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x50f8f0c6645035f1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x8, 0x1, 0x0, r6}]}, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, &(0x7f0000000080), 0x41000, 0x8, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0x8}, 0x10, 0x17f27, r5, 0x0, 0x0, &(0x7f0000000300)}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a1, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580), 0x4) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.032358788s ago: executing program 4 (id=2147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f1000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0xa002a0, 0xf, 0x1a, &(0x7f0000000680)="5ae02efc441a80536af0d1d905c723", &(0x7f0000000700)=""/26, 0x6415, 0x0, 0x9b, 0x0, &(0x7f00000007c0)="4ecc8e78362b5f0b6f9ea76b6b86ee39eb7e290baa9a4a081542403e5ea471e43af706c9aead7f8eb102a3c4a6f2398c7da714246f88cfba1ed6e41d912feb71486ca31443558eef966ab6ceae8ba8ed6cc3e8aebb6c360c2f05b77d05c9c41a352fbc4b35ad277b83646373f8bb700c2196642aef9375ab0085304848120908e833a857a2d7ed1fa76abcd72ddf50776d36d9d9d53a49721370fa"}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x378, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x2, 0x100004, 0x4, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='percpu_alloc_percpu\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x850c6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xc}, 0x14185, 0x30, 0xfffffc02, 0x8, 0x6, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x7fff, 0x10}, 0xc) recvmsg$unix(r6, &(0x7f0000000cc0)={&(0x7f0000000600), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/179, 0xb3}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000a40)=""/177, 0xb1}], 0x6, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r8}, 0x10) 4.88765619s ago: executing program 2 (id=2148): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000000000030bb664ba0f78b7ccbd5254768ece45ce35fd9b4c6e3dbbbcbb12368d5fce1829e0f1e91d24d9d12ee8dfe0c3988632741d743", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f500"/13], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0xc8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000740), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001c00)="388c0171eb3749c778a2c6b12c9d4afaff52d3b5f8c2e1517793d788e25f31199fbd3981a959718dc7d0b47b332ba7f680f8fd7016386591be5ebf9d157895d2a800f2a0bc232b90e6a66e3ddc33a1ff6bbbe2bdb10aca1742c2bde8700db4ec6e7b7e3c729c10e8b523d7449d38e545441b8e7bc18d3a3dc43b4b7e022b9629aff0c82a5e55d8e0ae63a7fd2dabff07aca40d60b889662f6873", 0x9a}], 0x1, 0x0, 0x0, 0x40824}, 0x4000040) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r2, r5, 0x4, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000002880), 0x4}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x39e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000001040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001080)}, {&(0x7f0000001140)}, {&(0x7f0000001180)="0bf208c0fb3b282dab6b6ef9d3b69c67a7f449a5facfad59acc1950f405aaa70abc70a72bef2eaeb3fbab2fa73ddd37e1a49175badd2811542cbb53e5bc7df69577d8ed6f295381e4b00136fb2866826e490f2176d6e94cb19ee48403a14509317d967fca47111582ba2814e098d2d9ac24a6d565cfc0bd4e6c7f58c3ad7860208ac36a8d25eee2b257fc42b4f167bd39022e6d660f06e712004eee5bcf9822db0ff1d3a47a0e163ee8d04abd37c33923a136b97f3470dd744b5d330295013aeda2b449c4147853eeb41fd1febdcef55a4fd588a5b7e11b503b86aa82adb213c9062531b3204b9ada217b131613bee73653b1b", 0xf3}, {&(0x7f0000001340)="d27bb8a9401c6f2bdab9728363c7edff777bde2329cfdbae451b3928e12cd4cfc06388ab6a92fd2086b4cd53f31df6fe8462d9e8b19061f519b8f5644688aef584eaa4aca9a047a66331f770d008d58fcafad7e07346956412edd58e2d4dbff86bf2274ff87a2a8d252bdd5e4961d7ba94752a5dc0bdf5a809687586952c14f36a0063fa80aba853cd8b593bf3387a108130", 0x92}, {&(0x7f0000001400)="8a007786a97e56487510ad8857da30775441e780d9b795684725cd71d1dee528babaf3632b63a26e4c86d6f13201e2f6e26eb3853ab55d453a60398a0cdd26bf33486b20d1281934ffdf567a45d1293a05f6316b00b29f62dac6af9a5443f62c5fa9282f62ecb8beb26c7b61ddee14f135dbcef82e3039bc4190509f732da40869dbb6c1fb58d8e3f2209e4a20fee5be6c04735ec136cb905c56260071666c7a7930d589560fef1849fe334bf7f68ddcb85c13856808", 0xb6}, {&(0x7f00000014c0)="7f76b5db1614c0cff4434e5a3784621a2e8213d427fe6673a017581de0de4f2989e825175e9548cb31c7f5cc1f2703433085134037bf6d00189f19b42f80f8541efedeaabb16f5f3897bd2e8d47196a00bfb25c4fb3b891251dfe0de260d2c3a0b49ccd358ed9f29dba90d6569a9acd6b6ba988abf262563cf0b877b04cb9e13be982f1cd48230ff709b4d478523b4a1376c0e70d4d3b2f90bce6e287d5ec1075ecd819fc59555891c7205fb229876c3cb3521ba5832", 0xb6}], 0x6, &(0x7f0000001680)="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", 0x1000, 0x44}, 0x8005) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001080)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0x57, &(0x7f0000001100)=""/87, 0x40f00, 0x4, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000026c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002700)={0x1, 0xb, 0x5, 0x1}, 0x10, 0x19c2b, r6, 0x2, &(0x7f0000002740)=[r1, r1, r1], &(0x7f0000002780)=[{0x4, 0x5, 0xb, 0xa}, {0x5, 0x3, 0x7, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) 4.864986281s ago: executing program 1 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x6018, r1}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x35, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r1, r2, 0x13, 0x30, 0x0, @void, @void, @void, @value, r4}, 0x20) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x80002, 0x0) r5 = syz_clone(0x2006000, &(0x7f0000000280)="36dece14a6fe92f919f4f1c0", 0xc, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7926e592ac4a00b174b7da81546b8f17c0cf70855748f9331e396cc0ed6d807bb646f543c2777bbf27e074545f82f01b243bf7d2ad01d07b9198163a707e7f30492000a34994df76bdfc03face16d0397d94baf4b98193198266741adf0da8ea7f3040342ecfe9b7d6e90e7a55b76d7b62e6195c67e12c79afc3349ddde657c2c87314ffbb14f0a41d90c38b3760cbe03a54fa471a92583990832162eb373df5d78651f912452a0e6a5518e4a946166c2fb0a7e3804b29a5e1541253c9fb69") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r2, 0x1, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000540)=""/3) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r6, 0x31, 0x0, 0xff, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r7, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}, 0x4000) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1a, &(0x7f0000000880)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @generic={0x1, 0x1, 0x9, 0xb, 0x101}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], &(0x7f0000000980)='syzkaller\x00', 0x9, 0xd6, &(0x7f00000009c0)=""/214, 0x41000, 0x2, '\x00', r8, 0x25, r3, 0x8, &(0x7f0000000ac0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x3, 0x3, 0x3, 0x3}], 0x10, 0x780ffe4c}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000cc0)={r9, 0x0, 0x55, 0x0, &(0x7f0000000c00)="6c0bdf955b38abd2dd7f937018c9cd1831437540883120f7f060f4fb10f94c4007d1b4c107a882299545f47c78f7c727a6d6f181cad876072a2a61c547dcacc799aa6ad8edc5ff81d2129693f15f1ec9b8bbd0258c", 0x0, 0xff, 0x0, 0x3f, 0x0, &(0x7f0000000c80)="eca658b13aa7bd776830b04c01b5b52576de28a16ae5be1a5486170fc228f0e752409df809234c5a267165ce378ca0b82a438fdd1457514fa6dd2f6c76c0e3", 0x0, 0x2, 0x0, 0xfffffff8}, 0x50) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (rerun: 64) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f0000000d80)=""/4096) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001d80)={'veth1_to_team\x00', 0x8000}) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001dc0)=r2, 0x4) (async) perf_event_open(&(0x7f0000001e40)={0x7, 0x80, 0x2, 0x2, 0x2, 0x1, 0x0, 0x3, 0x24012, 0xa3982aea125fb61c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000001e00), 0x7}, 0x2, 0xbb2, 0xc26c, 0x9, 0x100000000, 0x0, 0xc00, 0x0, 0x2, 0x0, 0x9}, r5, 0x5, r10, 0x9) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x0, 0x0, r6, 0xfffffffd, '\x00', r8, r10, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r11, &(0x7f0000001f40)="825e672cd9ec71cfffab24140b4ff74f051fb66449bc8f19772dd01913d39ed3b3f6c4ab6b27776c91ffa40852a5246112b638bfa9a4c3fbe1b93c444ca92ab38b73a0849f19e6f4", &(0x7f0000001fc0)=""/170}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002240)={0xffffffffffffffff, &(0x7f00000020c0)="24beacea92ea8f10236d7420022406cfc827b22cf55cad973c129964084fe6021ef4e4666bba4a1307925a8b969def6ac3bea914a23dd03eda76dfc777f410fa72d29d912f51306789fbb838af3d683d08cad8ca560ceaf06f258037e88aaa5252ba771ddefa85a62c7644f9b7230f222923afc5b63939aeaa72a84bc64dcd81f7065008bc6e3921e6bb8eac222f810b8661d7dd2cf518e1f218214d0159d736dc4c7662cb6cec1a845b7cfd0919665eab85e2ce613d625e14dc754077d4fe21782f1ddd1d2e39ec05450187e1b8e01df17dcb3460112eaea5271cd8204a6974d33127", &(0x7f00000021c0)=""/86}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000022c0)={&(0x7f0000002280)='afs_silly_rename\x00', r10, 0x0, 0x4}, 0x18) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002300)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002340)) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002380)='rdma.current\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r3, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000003500)=[0x0, 0x0], &(0x7f0000003540)=[0x0], 0x0, 0xb1, &(0x7f0000003580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003800)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x1, '\x00', r8, r3, 0x5, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003a40)={0x11, 0x12, &(0x7f00000023c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000002480)='syzkaller\x00', 0xd, 0x1000, &(0x7f00000024c0)=""/4096, 0x40f00, 0x26, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000037c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000003980)=[r3, r3, r14, 0xffffffffffffffff, 0xffffffffffffffff, r11], &(0x7f00000039c0)=[{0x3, 0x1, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x4}, {0x0, 0x3, 0x5, 0x8}, {0x1, 0x1, 0x1, 0x8}, {0x0, 0x1, 0x0, 0x2}, {0x5, 0x5, 0x9, 0x7}, {0x2, 0x5, 0x8}, {0x1, 0x2, 0xc, 0xa}], 0x10, 0x4}, 0x94) 4.671816357s ago: executing program 0 (id=2150): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500020000000000851000000200000095008000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x6}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x8810) (async) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010400001d0000000000008100000081"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000580), 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x3) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b1ee94809a2d1a5a33627d077c0b79c93c600"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b346d00000000000000000000804c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) (async, rerun: 32) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) (async, rerun: 32) syz_clone(0x62008011, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.600979322s ago: executing program 1 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x61, 0x0, &(0x7f00000011c0)="6a7e1b0f8b303bc74f26bcdc8be2cbabe8f4f348786efd0b0500779c6d368129695b2624a9011fdbe941b713984eef1d99f60dd12db5e5aa6956dfdcba8bffd7ccb8711ae38f707941183c9248e8c4a3c0e483a500dce5f769564199fa24691ed9"}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001400)={r2, 0x58, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@const={0x5, 0x0, 0x0, 0xa, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x1}}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000014c0)=""/253, 0x57, 0xfd, 0x1, 0x9, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0xd, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x3, 0x6, 0x0, 0x9, 0x30, 0x4}, @printk={@lli}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7f}, @generic={0x3d, 0x0, 0x5, 0x4, 0xff}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x7ff, 0xb9, &(0x7f0000000300)=""/185, 0x41100, 0x2, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x4, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x1, 0x10, 0x490cb9d9858e1313}, {0x2, 0x3, 0x4, 0xa}, {0x2, 0x2, 0xfffffff8, 0x5}, {0x4, 0x5, 0x3, 0xa}], 0x10, 0x2}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1a, 0xb, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa5dd, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x852451c9f5cf9c5e, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xbc, &(0x7f00000012c0)=""/188, 0x41100, 0x12, '\x00', r3, @fallback=0x2e, r4, 0x8, &(0x7f0000001600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x9, 0xfff, 0x7}, 0x10, r5, r1, 0x0, &(0x7f0000001700)=[r7, r0, r0, r0, r0], 0x0, 0x10, 0x2}, 0x94) 4.600454883s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f0061109f0000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.600348052s ago: executing program 0 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_set_irq\x00', r3, 0x0, 0xc}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) 4.598349832s ago: executing program 4 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1300000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="000006000000007f000000000000000000000000396a51fe05865a7bc48d0d766a3fb5e939bd12e9076da8952e86f4fb4d9275a003cd4086934b2c71a3f1a5d30d61d6683e2e5487973d1b02b277a19b978b1e11989941c8253279d3c29683e14a58f6b4a59c210e1b62533c764139d890b776e2de10f792427c451e505247bc94166b20cae245fae2673ea5fe681c1a42f5aa64f1c1a2fd768fdf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc48, 0x8000}, 0x0, 0xc8, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) close(r9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000600)='fdb_delete\x00', r0, 0x0, 0x20000}, 0x18) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1801004878991df0de89b79133842ed93b0001ffffeb00000000eb658e0d850000007b000000958de212345fb5fbbed11f99d51c9206ede52073f3fb0e1defcb499bdf561b48de6fcf6edc7daf811676dbfa21798f50bfdf84a7779446ad773ef59860dc2de159de84c081cc3e57801766f3047b3171b7be91634896e594f7b2c911b95e3572470723dae23a3234c62b41fb719ff6d1b7ed5df372696014207c2dd60eb82d1bce6e1c7038f371ad319b8ad45cf2d5052ce33dfcaa71a2d2972ae2c28017077cda79583bc111f033c762487eb32e66da5b07e79d49402bd3bb0d1d12a22d4a18cbd6347e9b5aeef78081ab295ac96e484da0e9e9266601d3647076000b998005c729328d18eb551dfd6c46f60c1e8553ab904e41546928d8d53ccb20c8a9fb64ce57ab5f5eb0eb51a086566fe4f48b826e42cdb1d327f104d8399388a20532d0128a5ae9003aa5a6a45792c7c32f76c3e529b223fef354db44a416698132af942e0579dabbb810bf762275af765838301c5271432acdc8cccf4174c6fc1b7397cfc880b89b04cb19af437832523e970b38317be267ce30bd05cd351615775e43022b83bc16c184726cecc253d42b3ae300"/452], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r11) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 2.688501105s ago: executing program 0 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x49}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000c00)=""/4096, 0x29, 0x1000, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000c354cc6070401000000000000000f9ffffffffffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_int(r0, &(0x7f0000000940)='blkio.reset_stats\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a"], 0xffdd) 2.687963485s ago: executing program 1 (id=2155): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000000018010000782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000d88cae58c306cd51000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') ioctl$TUNSETIFF(r6, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) close(r7) 2.687490995s ago: executing program 2 (id=2156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1e, &(0x7f00000001c0)=@raw=[@generic={0x4, 0x2, 0xf, 0x1000, 0xa821}, @map_fd={0x18, 0xd, 0x1, 0x0, r0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x8a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x6a, &(0x7f00000002c0)=""/106, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x0, 0x7, 0x9, 0x8}, {0x1, 0x2, 0x10, 0xb}, {0x5, 0x2, 0x3, 0x5}, {0x1, 0x5, 0x1, 0x5}, {0x4, 0x5, 0x0, 0x5}], 0x10, 0x101}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000009000e"], &(0x7f0000000b40)=""/176, 0x28, 0xb0, 0x1}, 0x28) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='br_fdb_add\x00', r0, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000c7f002cb51554187000087e0f9247ef6057ba745216b42d2f6591617886e3c3105daee642a6ed1dd5fd395ffbb1fbe51fd901b5524564eadefbac455c960a50c15a39757fe03ce3699c4f15eac90f44c742979890258dfbeb0efc81e1bf919e92df90a620fe1631fa58e5b775c31df990d10a36861caba66c4", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000023000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r6}, &(0x7f00000014c0), &(0x7f0000001500)=r5}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x101) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r7, &(0x7f0000000980), 0x20000992) 2.686237775s ago: executing program 4 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000ae9fee73b48309b4711f6500502516bbbabc3e8fd26164ed26d1142712a4990ff6dea782061725f72141a8e261e10d8bfdc0cf04717e8e2bef77e5f67ba62862f0ff1be586fa5145a36ea8ea05bd665369ae252c7b1cb7b48de6c49228ab4726e1137c82d591b8de526aa92dc242315e6a0e514958e100f93aececf51434c8f5da129453b8298a855584564f3628047b761e5cb0e292ee376e8a569235e0834cf3b24580befc9f35913194db121903cf039f32985e7442e4818f19a0d864949dca56cd357365", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x800}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000009955cbd76d2fa9b85ab62b31b3f1ed831e8c3bf74cb8bbd1f978c32eac8aa0a614985eabc3921aeaa04a78d3f886f45f99d2c39cdf272286eb9930451bd6dd60e75b786a6404da2cbde3f9a7bfb500"/106], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(r3) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x1, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff15, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9d, 0x54, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x20e, 0x7b, 0x0, &(0x7f00000003c0)="4a0106ebc40f13f208a99b08a8d1cd77605bb20141dcaff8774eb3016863dffeb1e21be1fc1b5222ef6dec1d2cca05efb69e3756623571553d59f9aa103384fb06f7334c91a51df9fce70f250df2cf484efa0d949d6b011bab41d32d3016c4b180e4c5d705fd79d5a1260a3d8c168b83fab303cb8967dcd3c5c921", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.667949647s ago: executing program 4 (id=2158): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x6}, {0xe, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/46, 0x3f, 0x2e, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10, '\x00', r1, r2, 0x5, 0x1, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1e, 0x5, 0x6, 0x355, 0x813, 0x1, 0x7, '\x00', r1, r2, 0x0, 0x3, 0x5}, 0x50) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/57, 0x39}], 0x4, &(0x7f00000005c0)=""/219, 0xdb}, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0xfffffff6, 0x3ff, 0x8, 0x400, r4, 0x8c, '\x00', r1, r2, 0x5, 0x5, 0x2}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xb2, &(0x7f0000000840)=""/178, 0x41100, 0x40, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000900)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x0, 0x8}, 0x10, 0x16a02, 0xffffffffffffffff, 0x4, &(0x7f0000000980)=[r3, r4], &(0x7f00000009c0)=[{0xc3, 0x4, 0x4, 0x5}, {0x0, 0x4, 0xa, 0xb}, {0x4, 0x1, 0x3cd835a2, 0x4}, {0x1, 0x3, 0xd, 0x19}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ac0)=@o_path={&(0x7f0000000700)='./file0\x00', r5, 0x4000, r6}, 0x18) r7 = openat$cgroup(r3, &(0x7f0000000c40)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup=r7, 0x35, 0x1, 0xffffd1c0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0]}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000c80)=r0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@ifindex=r1, 0xe, 0x0, 0x1000, &(0x7f0000000d00), 0x0, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001fc0)={&(0x7f0000000e40)="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", &(0x7f0000001e40)=""/66, &(0x7f0000001ec0)="48b74d38939a6b2293bb2ed8751b84a8e7f2abb1f9b8d2c41f76dfbd1274b4ed609d9f8d005b4bc580b56a8ed0d0d6265d53a26d138e383ea3e265c79c", &(0x7f0000001f00)="443b9185a84395e9bc292b7898c25f32808319bc8a0cf8ec498d716f89d769973204f6701dc3689bc8472019debd906b55921544091c6de8dd43cebbdfb6b540fde9ceeef70afdfc94e87391440bc7cdf829713042a8107d5a404b3ac25d1b53f3a53a3867b0dc94cc894e7bc12da01252f94bffd4ad6845c371bd595e538922f95f49ab2bfac0eb084ebcedaea8890ca4a21db10f7dbf012df552b3c9decf578f72c8b33ad2bb396636b6e8", 0xef22, r5}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002000)={0x1b, 0x0, 0x0, 0x200, 0x0, r4, 0xd, '\x00', r9, r2, 0x1, 0x4, 0x5}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002080), 0x480200, 0x0) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000002100)={0x3, &(0x7f00000020c0)=[{0x4, 0x7, 0x1, 0x1}, {0x6e, 0x4, 0xe1, 0x6}, {0x3ff, 0x2, 0x0, 0xf04}]}) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002400)={r6, 0xe0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000002180)=[0x0], &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000002200)=[{}], 0x8, 0x10, &(0x7f0000002240), &(0x7f0000002280), 0x8, 0x97, 0x8, 0x8, &(0x7f00000022c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)={0x1b, 0x0, 0x0, 0xd4, 0x0, 0x1, 0x3, '\x00', r11, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) recvmsg(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000024c0)=""/151, 0x97}, {&(0x7f0000002580)=""/249, 0xf9}, {&(0x7f0000002680)=""/50, 0x32}, {&(0x7f00000026c0)=""/235, 0xeb}, {&(0x7f00000027c0)=""/94, 0x5e}], 0x5, &(0x7f00000028c0)=""/236, 0xec}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a00)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000003e40)={&(0x7f0000002a40)=@abs, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/99, 0x63}, {&(0x7f0000002b40)=""/44, 0x2c}, {&(0x7f0000002b80)=""/248, 0xf8}, {&(0x7f0000002c80)=""/97, 0x61}, {&(0x7f0000002d00)=""/32, 0x20}, {&(0x7f0000002d40)=""/16, 0x10}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x7, &(0x7f0000003e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003f80)={@map=r13, 0x37, 0x0, 0x80000001, &(0x7f0000003e80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000003ec0)=[0x0], &(0x7f0000003f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003fc0)={0x1b, 0x0, 0x0, 0x2, 0x0, r5, 0x7fffffff, '\x00', r11, r2, 0x0, 0x3, 0x4}, 0x50) syz_clone(0x80810200, &(0x7f0000004040)="f16fad7c79254dfd9f33cf5ecb63958f35932244a69c9a88ec2a27d40afbcf7d9b6dd081186c8c277188150e2245fbf49e6c8906fe423a6c5f8c9b38f7627c639bde64ef0699035ce76eea23b93dd2d9f98ddaf06fb4ae68b41baeac43d58e7d46ddef216571efa8bc8f95f623fd4663a1198ee801aff33fbd9ed0b806953afd9e3e716e7a28e26d72154ed3170945c2c88983cb485f1835a1e57118", 0x9c, &(0x7f0000004100), &(0x7f0000004140), &(0x7f0000004180)="6696f9bd3bc10bb7ed8d4fea9501713d1e34adb452f97dba1d1296afb5434b5a4b08ded3275905a6830b60c02ccab1bdf19f1ed1818b44496888a955fb92c490492ae73801e3eafdac4bea6ee33d1211bc5c67034dc9622b56918be5914d07c0e3ffc025b599520bea4a193e8202ba7ee9dfb2c6d22902d0b74bd910a2f1690a80cdffc2d7a122051d03fb33211a6cb2114aaeb7ee0120c8391dd52bd6a48d932b304a6023bc40343a3db76c598231d8b121d3540c6c9cd507138affd8d4b4e5f3079123f69399c9b4794812d6c1b2ba48574ae9122c68550f39a00c4c8bf5154b9a047b2b7df50e") mkdir(&(0x7f0000004280)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000042c0)) write$cgroup_pid(r13, &(0x7f0000004300), 0x12) 2.488591861s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 440.945055ms ago: executing program 0 (id=2159): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae76}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdbe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x108001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES8=r4], 0xfdef) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x51) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 436.469315ms ago: executing program 1 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000840000000f0000000000000700000000099be8000000000c85000000000004000000000300000000020000000200000007000000090000000000040e03000000000000000c00000000000007000000000c0000000000000a020000000d0000000200001205000000005f5f0080d8c066a562a371f0f05dedd0a4938613bd290a54628d930ddbc26a842ff8289e911b630571553125c61eb77f080f5213f89e08a00317165a08e33cbc60de58d2"], &(0x7f0000000600)=""/8, 0x80, 0x8, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) 434.947955ms ago: executing program 2 (id=2161): syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) close(r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{}, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000880), 0x8, 0x21, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0xffffffffffffffff, 0x0, 0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f00000004c0)="29b9f4c0e0b0a4009db60919f9c8979cbe521211025a27771457f2581c3a42e5e9c10d4f5c9420107f272acc44e9903fba8420001884d5731f7a2413f9ac3891b11706e1e95e4c536d564fe48f003e023c58a6c165bfafddaeb2bab7d0d6d05256db42fb218671832472517a85d20e895f455aa42b98e1b674c782cf39191a992ef5cc2a51bb6753be5fdeed229776e27caed3512a564988579074828b623ba37522839053371ef6ed7ad90540f765911cd57ef0044889f4c8b59fda227e377e5c366c9fe65b7bb0081ac54213b4236b4221d45f2a19ef6d01", &(0x7f0000000380)=""/153, &(0x7f00000006c0)="9c98b1f69ef22804f63140e7538bf5ceab782bd59433555d8f81c90100c1c46bcf0c880a5215ab76ce8cae817a7e7480f27b6f8b749cb598cb338a7341e948024f2de0e30ca0ef9348e28c0c4270af686a60f8f0bd30775913b16ed8ed268e45409441a25b0bea01dfc2bbce8a6a0bac4008caaef9e3b44883d5cfd3044ea7b395d03c5f88a268ba9b0ed7f34d007108a010ca65c66f3f6dc617e4b552ab", &(0x7f0000000780)="30b9b8dc5dd56bcac47a1c880b92da8da56d7fb7e566b5eca5e8a5e313d3b1a1ace20a0ba09e1e12d4bdd6d6a4802752a62277cde93546ad70afed3a89c25d2bd35cc0ae1b24f600032e599c5609e8f2a16d9c3ebac7a437995e8f05fd6a9bdcb292ddcb909f912c57366ad869394c3268bc21a951e98363148656ccdfaf5040ba9e52fa594470642d72060feab0acc50ccc685645eccd94c0213a975d8180c063ebc472012908a1cc080866bdca3515ca6dbc7161debe3f4a04ad7c9661086ace11c39421451ac0e6986d1690555b7614fbd72c040b4fdd5309a2dfe4", 0xf7d, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000c00"/28], 0x50) 425.617846ms ago: executing program 4 (id=2162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="f34c9f7cd0712c0241b590c30158bf4b728ee4de63861871560454a6efc97935676d1f8ac84ca301823aa330409f6a3747a53378d85dc9003ad9d457de0d52e46fb6117cf53cc434ce389542c8aea6e710e260861f4bf7507f8f52603d343851242fdd791552c7dc6186f41252a597dc81770d433edb144aa43cea854f62cdfd2047de287ee53500fecd584cd578"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0x63, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x6, 0x0, &(0x7f00000002c0)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000680)=""/117, 0x75}, 0x40) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000005c0), 0x112) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r9, @ANYRES32=r9, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], &(0x7f0000000280)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 328.794854ms ago: executing program 0 (id=2163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x96b3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0xa000, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6307e08102030000fe0ea66718330200975a65789ff57b00000000000000cade22000000000000ac9ccb"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000ff08d80adca4463a3bda019c2cbaca594b21e9b460c639fd34daa1375eeb34d1db8262c42bb71b1248e1fdaffb902bf385b9e3644ac6384a4be0075ebecde1b13103c5f2f2400d8d761ed1cdebaafb3b0812deee9b75c6da8314bb58614e0727e593a05481af3a9a62cda6309ffd10cedaca3b4b57c74b00553504637657f2ebf67", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 88.468473ms ago: executing program 1 (id=2164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x5}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a300"/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x43000300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x43000300, 0x0, 0x0, 0x0, 0x0, 0x0) 83.790263ms ago: executing program 2 (id=2165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x1000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000069000000000000010000009400"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x71, 0x2e, 0x2e]}}, 0x0, 0x29}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000001", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.450927ms ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f0061109f0000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000f02000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], &(0x7f0000000680)=""/170, 0x47, 0xaa, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r5, r0, 0x3, 0x5, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2166): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000080000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00f8ffc68df3ffffff5f000000000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xf, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23f6}, [@alu={0x7, 0x0, 0x3, 0x8, 0x3, 0x8, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0xfffffffffffffff0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @generic={0x4, 0x2, 0x2, 0x9, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000a000000080000000200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000040000000000000000000c9700c221beb39ebe2a9eaf6b1a74ed2c3158a83655ccc7b682f077ac60c979f725f15e78ba2eeb71d80b448db382027a50813f07a54aa82bbbd0f54b8dcfe65f5b423600d300bc3dd9c690e2cdc9497d99aad04f095dd7c5bb83d03d2011e0af862b29aee88a26fd8575b89bd2f039d313f0a39a1631ece59b2b88f086dd68a97b5"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0x8}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2616}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000000000700000000c000", @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000001d40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000a00), &(0x7f0000000940)=r9}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.200320][ T799] FAULT_INJECTION: forcing a failure. [ 51.200320][ T799] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.350778][ T799] CPU: 0 PID: 799 Comm: syz.4.129 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 51.361611][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.373136][ T799] Call Trace: [ 51.376850][ T799] [ 51.380591][ T799] __dump_stack+0x21/0x30 [ 51.385717][ T799] dump_stack_lvl+0xee/0x150 [ 51.390838][ T799] ? show_regs_print_info+0x20/0x20 [ 51.396577][ T799] ? __kasan_kmalloc+0xec/0x110 [ 51.401623][ T799] ? bpf_map_area_alloc+0x49/0xe0 [ 51.407061][ T799] ? bpf_ringbuf_alloc+0x37/0x470 [ 51.412542][ T799] dump_stack+0x15/0x20 [ 51.416804][ T799] should_fail+0x3c1/0x510 [ 51.421679][ T799] should_fail_alloc_page+0x55/0x80 [ 51.426891][ T799] prepare_alloc_pages+0x156/0x600 [ 51.432555][ T799] ? __alloc_pages_bulk+0xab0/0xab0 [ 51.438282][ T799] __alloc_pages+0x10a/0x440 [ 51.443252][ T799] ? prep_new_page+0x110/0x110 [ 51.448571][ T799] ? bpf_map_area_alloc+0x49/0xe0 [ 51.454160][ T799] bpf_ringbuf_alloc+0x1b5/0x470 [ 51.459648][ T799] ringbuf_map_alloc+0x1f6/0x320 [ 51.464861][ T799] map_create+0x455/0x21b0 [ 51.469372][ T799] __sys_bpf+0x2cf/0x730 [ 51.473740][ T799] ? bpf_link_show_fdinfo+0x310/0x310 [ 51.479214][ T799] ? debug_smp_processor_id+0x17/0x20 [ 51.484956][ T799] __x64_sys_bpf+0x7c/0x90 [ 51.489480][ T799] x64_sys_call+0x4b9/0x9a0 [ 51.494184][ T799] do_syscall_64+0x4c/0xa0 [ 51.498707][ T799] ? clear_bhb_loop+0x50/0xa0 [ 51.504707][ T799] ? clear_bhb_loop+0x50/0xa0 [ 51.510474][ T799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.517170][ T799] RIP: 0033:0x7f97334ffbe9 [ 51.521952][ T799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.548067][ T799] RSP: 002b:00007f9731f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.558998][ T799] RAX: ffffffffffffffda RBX: 00007f9733726fa0 RCX: 00007f97334ffbe9 [ 51.573251][ T799] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 51.584932][ T799] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 51.595153][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.605347][ T799] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 51.614864][ T799] [ 55.485552][ T880] FAULT_INJECTION: forcing a failure. [ 55.485552][ T880] name failslab, interval 1, probability 0, space 0, times 0 [ 55.499208][ T880] CPU: 1 PID: 880 Comm: syz.2.152 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 55.509587][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.520165][ T880] Call Trace: [ 55.523791][ T880] [ 55.527109][ T880] __dump_stack+0x21/0x30 [ 55.532026][ T880] dump_stack_lvl+0xee/0x150 [ 55.537329][ T880] ? show_regs_print_info+0x20/0x20 [ 55.542987][ T880] dump_stack+0x15/0x20 [ 55.547725][ T880] should_fail+0x3c1/0x510 [ 55.552386][ T880] __should_failslab+0xa4/0xe0 [ 55.557651][ T880] should_failslab+0x9/0x20 [ 55.563010][ T880] slab_pre_alloc_hook+0x3b/0xe0 [ 55.568380][ T880] ? __d_alloc+0x2d/0x6a0 [ 55.573712][ T880] kmem_cache_alloc+0x44/0x260 [ 55.579562][ T880] __d_alloc+0x2d/0x6a0 [ 55.584526][ T880] ? __kasan_check_write+0x14/0x20 [ 55.590166][ T880] ? _raw_spin_lock+0x8e/0xe0 [ 55.595220][ T880] d_alloc_pseudo+0x1d/0x70 [ 55.600130][ T880] alloc_file_pseudo+0xc8/0x1f0 [ 55.605445][ T880] ? alloc_empty_file_noaccount+0x80/0x80 [ 55.611618][ T880] __anon_inode_getfd+0x248/0x3b0 [ 55.616840][ T880] ? anon_inode_getfd+0x40/0x40 [ 55.621817][ T880] ? __kasan_check_write+0x14/0x20 [ 55.627554][ T880] ? selinux_bpf_map+0xd2/0x110 [ 55.633130][ T880] anon_inode_getfd+0x31/0x40 [ 55.638199][ T880] bpf_map_new_fd+0x5f/0x70 [ 55.643029][ T880] map_create+0x1590/0x21b0 [ 55.647630][ T880] __sys_bpf+0x2cf/0x730 [ 55.652410][ T880] ? bpf_link_show_fdinfo+0x310/0x310 [ 55.657939][ T880] ? debug_smp_processor_id+0x17/0x20 [ 55.663709][ T880] ? perf_trace_sys_enter+0x30/0x150 [ 55.669482][ T880] __x64_sys_bpf+0x7c/0x90 [ 55.674256][ T880] x64_sys_call+0x4b9/0x9a0 [ 55.679203][ T880] do_syscall_64+0x4c/0xa0 [ 55.683620][ T880] ? clear_bhb_loop+0x50/0xa0 [ 55.689612][ T880] ? clear_bhb_loop+0x50/0xa0 [ 55.694492][ T880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.700925][ T880] RIP: 0033:0x7fa8d069cbe9 [ 55.705878][ T880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.727886][ T880] RSP: 002b:00007fa8cf105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.741799][ T880] RAX: ffffffffffffffda RBX: 00007fa8d08c3fa0 RCX: 00007fa8d069cbe9 [ 55.750448][ T880] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 55.759325][ T880] RBP: 00007fa8cf105090 R08: 0000000000000000 R09: 0000000000000000 [ 55.769437][ T880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.778360][ T880] R13: 00007fa8d08c4038 R14: 00007fa8d08c3fa0 R15: 00007ffeccbafe38 [ 55.786703][ T880] [ 56.569837][ T30] audit: type=1400 audit(1755141033.815:130): avc: denied { create } for pid=898 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.597365][ T905] device sit0 left promiscuous mode [ 56.635885][ T905] device sit0 entered promiscuous mode [ 56.773716][ T919] FAULT_INJECTION: forcing a failure. [ 56.773716][ T919] name failslab, interval 1, probability 0, space 0, times 0 [ 56.873870][ T919] CPU: 0 PID: 919 Comm: syz.1.164 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 56.884190][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.894818][ T919] Call Trace: [ 56.898869][ T919] [ 56.902366][ T919] __dump_stack+0x21/0x30 [ 56.907438][ T919] dump_stack_lvl+0xee/0x150 [ 56.912547][ T919] ? show_regs_print_info+0x20/0x20 [ 56.918042][ T919] dump_stack+0x15/0x20 [ 56.922212][ T919] should_fail+0x3c1/0x510 [ 56.926631][ T919] __should_failslab+0xa4/0xe0 [ 56.931485][ T919] should_failslab+0x9/0x20 [ 56.936263][ T919] slab_pre_alloc_hook+0x3b/0xe0 [ 56.941383][ T919] ? __alloc_file+0x28/0x2a0 [ 56.946354][ T919] kmem_cache_alloc+0x44/0x260 [ 56.951584][ T919] __alloc_file+0x28/0x2a0 [ 56.956201][ T919] alloc_empty_file+0x97/0x180 [ 56.960977][ T919] alloc_file+0x59/0x540 [ 56.965350][ T919] alloc_file_pseudo+0x17a/0x1f0 [ 56.970488][ T919] ? alloc_empty_file_noaccount+0x80/0x80 [ 56.976605][ T919] __anon_inode_getfd+0x248/0x3b0 [ 56.981993][ T919] ? anon_inode_getfd+0x40/0x40 [ 56.987454][ T919] ? __kasan_check_write+0x14/0x20 [ 56.992653][ T919] ? selinux_bpf_map+0xd2/0x110 [ 56.999084][ T919] anon_inode_getfd+0x31/0x40 [ 57.003950][ T919] bpf_map_new_fd+0x5f/0x70 [ 57.008704][ T919] map_create+0x1590/0x21b0 [ 57.013207][ T919] __sys_bpf+0x2cf/0x730 [ 57.017637][ T919] ? bpf_link_show_fdinfo+0x310/0x310 [ 57.023595][ T919] ? debug_smp_processor_id+0x17/0x20 [ 57.029677][ T919] ? perf_trace_sys_enter+0x30/0x150 [ 57.035177][ T919] __x64_sys_bpf+0x7c/0x90 [ 57.040558][ T919] x64_sys_call+0x4b9/0x9a0 [ 57.045812][ T919] do_syscall_64+0x4c/0xa0 [ 57.050603][ T919] ? clear_bhb_loop+0x50/0xa0 [ 57.055558][ T919] ? clear_bhb_loop+0x50/0xa0 [ 57.060708][ T919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.067107][ T919] RIP: 0033:0x7f5e9ecfbbe9 [ 57.071984][ T919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.094575][ T919] RSP: 002b:00007f5e9d764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.103453][ T919] RAX: ffffffffffffffda RBX: 00007f5e9ef22fa0 RCX: 00007f5e9ecfbbe9 [ 57.112057][ T919] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 57.120439][ T919] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 57.128507][ T919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.136756][ T919] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 57.145452][ T919] [ 57.411454][ T929] syz.2.167[929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.411540][ T929] syz.2.167[929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.221490][ T974] syz.2.179[974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.234854][ T974] syz.2.179[974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.631244][ T985] device wg2 entered promiscuous mode [ 59.083328][ T994] device lo entered promiscuous mode [ 60.652092][ T1011] syz.2.190[1011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.652212][ T1011] syz.2.190[1011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.293240][ T1023] ip6_vti0: mtu greater than device maximum [ 62.332540][ T1042] device wg2 entered promiscuous mode [ 62.366831][ T30] audit: type=1400 audit(1755141039.615:131): avc: denied { create } for pid=1038 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 62.610407][ T1058] device veth1_macvtap left promiscuous mode [ 62.652927][ T1058] device macsec0 left promiscuous mode [ 62.711458][ T1065] syz.3.204[1065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.711578][ T1065] syz.3.204[1065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.572595][ T1095] bridge0: port 3(veth0) entered blocking state [ 63.592482][ T1095] bridge0: port 3(veth0) entered disabled state [ 63.600606][ T1095] device veth0 entered promiscuous mode [ 63.606670][ T1095] bridge0: port 3(veth0) entered blocking state [ 63.613650][ T1095] bridge0: port 3(veth0) entered forwarding state [ 63.982757][ T1108] device pim6reg1 entered promiscuous mode [ 64.716362][ T1152] ªªªªªª: renamed from vlan0 [ 64.904872][ T1174] device sit0 entered promiscuous mode [ 65.527973][ T1195] device wg2 entered promiscuous mode [ 67.028586][ T1264] syz.0.263[1264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.028681][ T1264] syz.0.263[1264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.392677][ T1251] device syzkaller0 entered promiscuous mode [ 67.674766][ T1269] bridge0: port 3(veth0) entered disabled state [ 67.681514][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.689303][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.707369][ T1280] device veth0 left promiscuous mode [ 67.713265][ T1280] bridge0: port 3(veth0) entered disabled state [ 67.720601][ T1280] device bridge_slave_1 left promiscuous mode [ 67.727099][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.735467][ T1280] device bridge_slave_0 left promiscuous mode [ 67.741927][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.800531][ T1359] FAULT_INJECTION: forcing a failure. [ 69.800531][ T1359] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.010442][ T1359] CPU: 1 PID: 1359 Comm: syz.1.289 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 70.022217][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.034939][ T1359] Call Trace: [ 70.039805][ T1359] [ 70.043398][ T1359] __dump_stack+0x21/0x30 [ 70.048652][ T1359] dump_stack_lvl+0xee/0x150 [ 70.054083][ T1359] ? show_regs_print_info+0x20/0x20 [ 70.059838][ T1359] ? format_decode+0x1bb/0x1520 [ 70.065179][ T1359] dump_stack+0x15/0x20 [ 70.070031][ T1359] should_fail+0x3c1/0x510 [ 70.074720][ T1359] should_fail_usercopy+0x1a/0x20 [ 70.079839][ T1359] _copy_from_user+0x20/0xd0 [ 70.084699][ T1359] kstrtouint_from_user+0xbe/0x200 [ 70.090430][ T1359] ? kstrtol_from_user+0x260/0x260 [ 70.095735][ T1359] ? 0xffffffff81000000 [ 70.099984][ T1359] ? _copy_to_user+0x78/0x90 [ 70.105022][ T1359] ? simple_read_from_buffer+0x10f/0x160 [ 70.111562][ T1359] proc_fail_nth_write+0x85/0x1f0 [ 70.116782][ T1359] ? proc_fail_nth_read+0x210/0x210 [ 70.122505][ T1359] ? security_file_permission+0x79/0xa0 [ 70.129087][ T1359] ? security_file_permission+0x83/0xa0 [ 70.135013][ T1359] ? proc_fail_nth_read+0x210/0x210 [ 70.141537][ T1359] vfs_write+0x3ee/0xf70 [ 70.146762][ T1359] ? file_end_write+0x1b0/0x1b0 [ 70.151973][ T1359] ? ringbuf_map_free+0xe2/0x110 [ 70.157080][ T1359] ? __kasan_check_write+0x14/0x20 [ 70.162596][ T1359] ? mutex_lock+0x95/0x1a0 [ 70.167310][ T1359] ? wait_for_completion_killable_timeout+0x10/0x10 [ 70.174599][ T1359] ? __fget_files+0x2c4/0x320 [ 70.179561][ T1359] ? __fdget_pos+0x2d2/0x380 [ 70.184521][ T1359] ? ksys_write+0x71/0x240 [ 70.189804][ T1359] ksys_write+0x140/0x240 [ 70.194143][ T1359] ? __ia32_sys_read+0x90/0x90 [ 70.199797][ T1359] ? debug_smp_processor_id+0x17/0x20 [ 70.205756][ T1359] __x64_sys_write+0x7b/0x90 [ 70.210831][ T1359] x64_sys_call+0x8ef/0x9a0 [ 70.216748][ T1359] do_syscall_64+0x4c/0xa0 [ 70.221714][ T1359] ? clear_bhb_loop+0x50/0xa0 [ 70.226480][ T1359] ? clear_bhb_loop+0x50/0xa0 [ 70.231343][ T1359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.237717][ T1359] RIP: 0033:0x7f5e9ecfa69f [ 70.243836][ T1359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 70.265637][ T1359] RSP: 002b:00007f5e9d764030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 70.274600][ T1359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e9ecfa69f [ 70.282765][ T1359] RDX: 0000000000000001 RSI: 00007f5e9d7640a0 RDI: 0000000000000003 [ 70.291468][ T1359] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 70.301287][ T1359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 70.309623][ T1359] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 70.318594][ T1359] [ 70.349544][ T1364] device pim6reg1 entered promiscuous mode [ 70.398823][ T1369] device veth0_vlan left promiscuous mode [ 70.421058][ T1369] device veth0_vlan entered promiscuous mode [ 70.522068][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.538990][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 70.547479][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.111793][ T1407] ÿÿÿÿÿÿ: renamed from vlan1 [ 72.758835][ T30] audit: type=1400 audit(1755141050.005:132): avc: denied { create } for pid=1504 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.923067][ T1518] device sit0 left promiscuous mode [ 72.946939][ T1523] device sit0 entered promiscuous mode [ 82.888638][ T1555] syz.3.344[1555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.888719][ T1555] syz.3.344[1555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.903119][ T1560] device pim6reg1 entered promiscuous mode [ 82.968771][ T1555] syz.3.344[1555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.968870][ T1555] syz.3.344[1555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.202437][ T30] audit: type=1400 audit(1755141060.455:133): avc: denied { create } for pid=1576 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.343948][ T1577] device syzkaller0 entered promiscuous mode [ 83.402058][ T1597] syz.3.359[1597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.402163][ T1597] syz.3.359[1597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.811461][ T1619] device wg2 left promiscuous mode [ 85.321435][ T1668] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.377864][ T1666] bond_slave_1: mtu less than device minimum [ 86.009871][ T1726] device sit0 entered promiscuous mode [ 87.236315][ T1787] device sit0 left promiscuous mode [ 88.201995][ T1816] FAULT_INJECTION: forcing a failure. [ 88.201995][ T1816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.230659][ T1816] CPU: 0 PID: 1816 Comm: syz.1.413 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 88.241725][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.252840][ T1816] Call Trace: [ 88.256324][ T1816] [ 88.259509][ T1816] __dump_stack+0x21/0x30 [ 88.265271][ T1816] dump_stack_lvl+0xee/0x150 [ 88.270597][ T1816] ? show_regs_print_info+0x20/0x20 [ 88.276072][ T1816] ? vfs_write+0xc17/0xf70 [ 88.280650][ T1816] dump_stack+0x15/0x20 [ 88.284929][ T1816] should_fail+0x3c1/0x510 [ 88.289856][ T1816] should_fail_usercopy+0x1a/0x20 [ 88.294983][ T1816] _copy_from_user+0x20/0xd0 [ 88.300168][ T1816] __sys_bpf+0x233/0x730 [ 88.304833][ T1816] ? bpf_link_show_fdinfo+0x310/0x310 [ 88.311589][ T1816] ? debug_smp_processor_id+0x17/0x20 [ 88.317709][ T1816] __x64_sys_bpf+0x7c/0x90 [ 88.323183][ T1816] x64_sys_call+0x4b9/0x9a0 [ 88.327881][ T1816] do_syscall_64+0x4c/0xa0 [ 88.333556][ T1816] ? clear_bhb_loop+0x50/0xa0 [ 88.339345][ T1816] ? clear_bhb_loop+0x50/0xa0 [ 88.348075][ T1816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.355820][ T1816] RIP: 0033:0x7f5e9ecfbbe9 [ 88.361225][ T1816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.384673][ T1816] RSP: 002b:00007f5e9d764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.394125][ T1816] RAX: ffffffffffffffda RBX: 00007f5e9ef22fa0 RCX: 00007f5e9ecfbbe9 [ 88.403387][ T1816] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 88.415106][ T1816] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 88.423424][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.432279][ T1816] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 88.444344][ T1816] [ 89.222513][ T1869] FAULT_INJECTION: forcing a failure. [ 89.222513][ T1869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.260866][ T1869] CPU: 1 PID: 1869 Comm: syz.0.428 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 89.272560][ T1869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.282949][ T1869] Call Trace: [ 89.286237][ T1869] [ 89.289371][ T1869] __dump_stack+0x21/0x30 [ 89.293835][ T1869] dump_stack_lvl+0xee/0x150 [ 89.298936][ T1869] ? show_regs_print_info+0x20/0x20 [ 89.304541][ T1869] dump_stack+0x15/0x20 [ 89.308990][ T1869] should_fail+0x3c1/0x510 [ 89.313588][ T1869] should_fail_usercopy+0x1a/0x20 [ 89.319099][ T1869] _copy_to_user+0x20/0x90 [ 89.324234][ T1869] netns_bpf_prog_query+0x207/0x430 [ 89.329620][ T1869] ? local_bh_enable+0x30/0x30 [ 89.334916][ T1869] ? security_capable+0x87/0xb0 [ 89.340322][ T1869] bpf_prog_query+0x199/0x230 [ 89.346074][ T1869] __sys_bpf+0x335/0x730 [ 89.351476][ T1869] ? bpf_link_show_fdinfo+0x310/0x310 [ 89.357956][ T1869] ? debug_smp_processor_id+0x17/0x20 [ 89.364538][ T1869] __x64_sys_bpf+0x7c/0x90 [ 89.369335][ T1869] x64_sys_call+0x4b9/0x9a0 [ 89.374330][ T1869] do_syscall_64+0x4c/0xa0 [ 89.379015][ T1869] ? clear_bhb_loop+0x50/0xa0 [ 89.383794][ T1869] ? clear_bhb_loop+0x50/0xa0 [ 89.388953][ T1869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.394981][ T1869] RIP: 0033:0x7f7514d3ebe9 [ 89.399440][ T1869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.420261][ T1869] RSP: 002b:00007f75137a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.429963][ T1869] RAX: ffffffffffffffda RBX: 00007f7514f65fa0 RCX: 00007f7514d3ebe9 [ 89.438059][ T1869] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 89.446872][ T1869] RBP: 00007f75137a7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.455487][ T1869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.463733][ T1869] R13: 00007f7514f66038 R14: 00007f7514f65fa0 R15: 00007fffb62a61a8 [ 89.471908][ T1869] [ 89.947451][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.955108][ T1908] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.033317][ T30] audit: type=1400 audit(1755141067.285:134): avc: denied { ioctl } for pid=1917 comm="syz.1.444" path="socket:[20129]" dev="sockfs" ino=20129 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.178023][ T30] audit: type=1400 audit(1755141067.425:135): avc: denied { create } for pid=1933 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.236434][ T1937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 92.165335][ T1976] bond_slave_1: mtu less than device minimum [ 93.550447][ T2048] FAULT_INJECTION: forcing a failure. [ 93.550447][ T2048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.630354][ T2048] CPU: 1 PID: 2048 Comm: syz.4.484 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 93.641659][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.653034][ T2048] Call Trace: [ 93.656644][ T2048] [ 93.659576][ T2048] __dump_stack+0x21/0x30 [ 93.664213][ T2048] dump_stack_lvl+0xee/0x150 [ 93.669236][ T2048] ? show_regs_print_info+0x20/0x20 [ 93.674537][ T2048] dump_stack+0x15/0x20 [ 93.678821][ T2048] should_fail+0x3c1/0x510 [ 93.683373][ T2048] should_fail_alloc_page+0x55/0x80 [ 93.689297][ T2048] prepare_alloc_pages+0x156/0x600 [ 93.695068][ T2048] ? __alloc_pages_bulk+0xab0/0xab0 [ 93.700551][ T2048] ? __kasan_check_write+0x14/0x20 [ 93.705931][ T2048] __alloc_pages+0x10a/0x440 [ 93.710712][ T2048] ? prep_new_page+0x110/0x110 [ 93.715738][ T2048] ? __stack_depot_save+0x442/0x480 [ 93.721349][ T2048] handle_pte_fault+0xe89/0x2680 [ 93.726839][ T2048] ? fault_around_bytes_set+0xc0/0xc0 [ 93.732746][ T2048] ? bpf_prog_array_copy_to_user+0x37/0x280 [ 93.738844][ T2048] ? netns_bpf_prog_query+0x2e6/0x430 [ 93.745564][ T2048] do_handle_mm_fault+0x1a6d/0x1d50 [ 93.752710][ T2048] ? page_ext_put+0x1c/0x30 [ 93.760447][ T2048] ? prep_new_page+0x3b/0x110 [ 93.766475][ T2048] ? numa_migrate_prep+0xd0/0xd0 [ 93.773306][ T2048] ? get_page_from_freelist+0x2cc5/0x2d50 [ 93.779483][ T2048] ? vmacache_update+0xb7/0x120 [ 93.784786][ T2048] ? __find_vma+0x13b/0x150 [ 93.789481][ T2048] do_user_addr_fault+0x841/0x1180 [ 93.794816][ T2048] ? do_kern_addr_fault+0x80/0x80 [ 93.799986][ T2048] ? __this_cpu_preempt_check+0x13/0x20 [ 93.805675][ T2048] ? __mod_node_page_state+0x9e/0xd0 [ 93.812546][ T2048] exc_page_fault+0x51/0xb0 [ 93.817287][ T2048] asm_exc_page_fault+0x27/0x30 [ 93.822409][ T2048] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 93.829799][ T2048] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 93.852461][ T2048] RSP: 0018:ffffc900012a7c00 EFLAGS: 00050206 [ 93.859337][ T2048] RAX: ffffffff824bef01 RBX: 00000000000103a0 RCX: 000000000000f3a0 [ 93.868567][ T2048] RDX: 00000000000103a0 RSI: ffff888133c41000 RDI: 0000200000001000 [ 93.876822][ T2048] RBP: ffffc900012a7c30 R08: dffffc0000000000 R09: ffffed102678a074 [ 93.885492][ T2048] R10: 0000000000000000 R11: 0000000000002070 R12: 00007ffffffff000 [ 93.894676][ T2048] R13: 00002000000103a0 R14: ffff888133c40000 R15: 0000200000000000 [ 93.905074][ T2048] ? _copy_to_user+0x1/0x90 [ 93.910229][ T2048] ? _copy_to_user+0x78/0x90 [ 93.915276][ T2048] bpf_prog_array_copy_to_user+0x234/0x280 [ 93.921976][ T2048] netns_bpf_prog_query+0x2e6/0x430 [ 93.927644][ T2048] ? local_bh_enable+0x30/0x30 [ 93.932691][ T2048] ? security_capable+0x87/0xb0 [ 93.937732][ T2048] bpf_prog_query+0x199/0x230 [ 93.942667][ T2048] __sys_bpf+0x335/0x730 [ 93.946997][ T2048] ? bpf_link_show_fdinfo+0x310/0x310 [ 93.952631][ T2048] ? debug_smp_processor_id+0x17/0x20 [ 93.959108][ T2048] __x64_sys_bpf+0x7c/0x90 [ 93.963537][ T2048] x64_sys_call+0x4b9/0x9a0 [ 93.968362][ T2048] do_syscall_64+0x4c/0xa0 [ 93.973172][ T2048] ? clear_bhb_loop+0x50/0xa0 [ 93.978124][ T2048] ? clear_bhb_loop+0x50/0xa0 [ 93.982837][ T2048] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.989371][ T2048] RIP: 0033:0x7f97334ffbe9 [ 93.994233][ T2048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.015165][ T2048] RSP: 002b:00007f9731f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.025025][ T2048] RAX: ffffffffffffffda RBX: 00007f9733726fa0 RCX: 00007f97334ffbe9 [ 94.034004][ T2048] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 94.042875][ T2048] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 94.051445][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.059511][ T2048] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 94.068549][ T2048] [ 94.454178][ T30] audit: type=1400 audit(1755141071.695:136): avc: denied { create } for pid=2069 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.659085][ T2091] FAULT_INJECTION: forcing a failure. [ 94.659085][ T2091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.748589][ T2091] CPU: 0 PID: 2091 Comm: syz.1.501 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 94.758876][ T2091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.786226][ T2091] Call Trace: [ 94.790016][ T2091] [ 94.793548][ T2091] __dump_stack+0x21/0x30 [ 94.798164][ T2091] dump_stack_lvl+0xee/0x150 [ 94.802766][ T2091] ? show_regs_print_info+0x20/0x20 [ 94.808107][ T2091] ? page_counter_try_charge+0x3a0/0x3d0 [ 94.814188][ T2091] dump_stack+0x15/0x20 [ 94.818893][ T2091] should_fail+0x3c1/0x510 [ 94.823701][ T2091] should_fail_alloc_page+0x55/0x80 [ 94.829167][ T2091] prepare_alloc_pages+0x156/0x600 [ 94.834805][ T2091] ? __alloc_pages_bulk+0xab0/0xab0 [ 94.840816][ T2091] ? cgroup_rstat_updated+0xf5/0x370 [ 94.846456][ T2091] __alloc_pages+0x10a/0x440 [ 94.851131][ T2091] ? prep_new_page+0x110/0x110 [ 94.856210][ T2091] handle_pte_fault+0xe89/0x2680 [ 94.861410][ T2091] ? fault_around_bytes_set+0xc0/0xc0 [ 94.867143][ T2091] ? bpf_prog_array_copy_to_user+0x37/0x280 [ 94.873369][ T2091] ? netns_bpf_prog_query+0x2e6/0x430 [ 94.879347][ T2091] do_handle_mm_fault+0x1a6d/0x1d50 [ 94.884551][ T2091] ? page_ext_put+0x1c/0x30 [ 94.889313][ T2091] ? prep_new_page+0x3b/0x110 [ 94.894099][ T2091] ? numa_migrate_prep+0xd0/0xd0 [ 94.899534][ T2091] ? get_page_from_freelist+0x2cc5/0x2d50 [ 94.906098][ T2091] ? __find_vma+0x30/0x150 [ 94.910615][ T2091] do_user_addr_fault+0x841/0x1180 [ 94.916165][ T2091] ? do_kern_addr_fault+0x80/0x80 [ 94.921756][ T2091] ? __this_cpu_preempt_check+0x13/0x20 [ 94.928016][ T2091] ? __mod_node_page_state+0x9e/0xd0 [ 94.933558][ T2091] exc_page_fault+0x51/0xb0 [ 94.938853][ T2091] asm_exc_page_fault+0x27/0x30 [ 94.945248][ T2091] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 94.953170][ T2091] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 94.973945][ T2091] RSP: 0018:ffffc90000fb7c00 EFLAGS: 00050206 [ 94.980190][ T2091] RAX: ffffffff824bef01 RBX: 00000000000103a0 RCX: 000000000000e3a0 [ 94.988810][ T2091] RDX: 00000000000103a0 RSI: ffff8881393e2000 RDI: 0000200000002000 [ 94.997565][ T2091] RBP: ffffc90000fb7c30 R08: dffffc0000000000 R09: ffffed102727e074 [ 95.006473][ T2091] R10: 0000000000000000 R11: 0000000000002070 R12: 00007ffffffff000 [ 95.015244][ T2091] R13: 00002000000103a0 R14: ffff8881393e0000 R15: 0000200000000000 [ 95.025444][ T2091] ? _copy_to_user+0x1/0x90 [ 95.030705][ T2091] ? _copy_to_user+0x78/0x90 [ 95.035728][ T2091] bpf_prog_array_copy_to_user+0x234/0x280 [ 95.043146][ T2091] netns_bpf_prog_query+0x2e6/0x430 [ 95.048720][ T2091] ? local_bh_enable+0x30/0x30 [ 95.054044][ T2091] ? security_capable+0x87/0xb0 [ 95.059164][ T2091] bpf_prog_query+0x199/0x230 [ 95.065510][ T2091] __sys_bpf+0x335/0x730 [ 95.072394][ T2091] ? bpf_link_show_fdinfo+0x310/0x310 [ 95.078306][ T2091] ? debug_smp_processor_id+0x17/0x20 [ 95.084051][ T2091] __x64_sys_bpf+0x7c/0x90 [ 95.088735][ T2091] x64_sys_call+0x4b9/0x9a0 [ 95.093516][ T2091] do_syscall_64+0x4c/0xa0 [ 95.098448][ T2091] ? clear_bhb_loop+0x50/0xa0 [ 95.103377][ T2091] ? clear_bhb_loop+0x50/0xa0 [ 95.108474][ T2091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.114790][ T2091] RIP: 0033:0x7f5e9ecfbbe9 [ 95.119291][ T2091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.141061][ T2091] RSP: 002b:00007f5e9d764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.150336][ T2091] RAX: ffffffffffffffda RBX: 00007f5e9ef22fa0 RCX: 00007f5e9ecfbbe9 [ 95.159346][ T2091] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 95.168294][ T2091] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 95.176755][ T2091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.185333][ T2091] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 95.193785][ T2091] [ 96.350789][ T2117] device wg2 left promiscuous mode [ 96.569867][ T2135] FAULT_INJECTION: forcing a failure. [ 96.569867][ T2135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.607800][ T2116] device wg2 entered promiscuous mode [ 96.722682][ T2135] CPU: 0 PID: 2135 Comm: syz.1.515 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 96.733592][ T2135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.744637][ T2135] Call Trace: [ 96.748349][ T2135] [ 96.751450][ T2135] __dump_stack+0x21/0x30 [ 96.755962][ T2135] dump_stack_lvl+0xee/0x150 [ 96.760937][ T2135] ? show_regs_print_info+0x20/0x20 [ 96.768478][ T2135] dump_stack+0x15/0x20 [ 96.774335][ T2135] should_fail+0x3c1/0x510 [ 96.779543][ T2135] should_fail_alloc_page+0x55/0x80 [ 96.785106][ T2135] prepare_alloc_pages+0x156/0x600 [ 96.790656][ T2135] ? __alloc_pages_bulk+0xab0/0xab0 [ 96.796463][ T2135] ? cgroup_rstat_updated+0xf5/0x370 [ 96.802988][ T2135] __alloc_pages+0x10a/0x440 [ 96.808611][ T2135] ? prep_new_page+0x110/0x110 [ 96.815103][ T2135] ? __kasan_check_write+0x14/0x20 [ 96.821096][ T2135] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 96.828604][ T2135] ? _raw_spin_lock+0xe0/0xe0 [ 96.835278][ T2135] handle_pte_fault+0xe89/0x2680 [ 96.841878][ T2135] ? bpf_trace_run4+0xd9/0x1f0 [ 96.847490][ T2135] ? fault_around_bytes_set+0xc0/0xc0 [ 96.855529][ T2135] do_handle_mm_fault+0x1a6d/0x1d50 [ 96.863231][ T2135] ? numa_migrate_prep+0xd0/0xd0 [ 96.870734][ T2135] ? __find_vma+0x30/0x150 [ 96.875971][ T2135] do_user_addr_fault+0x841/0x1180 [ 96.881973][ T2135] ? do_kern_addr_fault+0x80/0x80 [ 96.887601][ T2135] ? __this_cpu_preempt_check+0x13/0x20 [ 96.895067][ T2135] ? __mod_node_page_state+0x9e/0xd0 [ 96.902467][ T2135] exc_page_fault+0x51/0xb0 [ 96.907946][ T2135] asm_exc_page_fault+0x27/0x30 [ 96.914211][ T2135] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 96.921157][ T2135] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 96.948547][ T2135] RSP: 0018:ffffc90001207c00 EFLAGS: 00050206 [ 96.956881][ T2135] RAX: ffffffff824bef01 RBX: 00000000000103a0 RCX: 000000000000d3a0 [ 96.966703][ T2135] RDX: 00000000000103a0 RSI: ffff88812b763000 RDI: 0000200000003000 [ 96.976296][ T2135] RBP: ffffc90001207c30 R08: dffffc0000000000 R09: ffffed10256ee074 [ 96.985548][ T2135] R10: 0000000000000000 R11: 0000000000002070 R12: 00007ffffffff000 [ 96.995028][ T2135] R13: 00002000000103a0 R14: ffff88812b760000 R15: 0000200000000000 [ 97.003397][ T2135] ? _copy_to_user+0x1/0x90 [ 97.008450][ T2135] ? _copy_to_user+0x78/0x90 [ 97.013201][ T2135] bpf_prog_array_copy_to_user+0x234/0x280 [ 97.019350][ T2135] netns_bpf_prog_query+0x2e6/0x430 [ 97.025549][ T2135] ? local_bh_enable+0x30/0x30 [ 97.031490][ T2135] ? security_capable+0x87/0xb0 [ 97.038741][ T2135] bpf_prog_query+0x199/0x230 [ 97.044424][ T2135] __sys_bpf+0x335/0x730 [ 97.050079][ T2135] ? bpf_link_show_fdinfo+0x310/0x310 [ 97.056108][ T2135] ? debug_smp_processor_id+0x17/0x20 [ 97.062349][ T2135] __x64_sys_bpf+0x7c/0x90 [ 97.068911][ T2135] x64_sys_call+0x4b9/0x9a0 [ 97.073597][ T2135] do_syscall_64+0x4c/0xa0 [ 97.078196][ T2135] ? clear_bhb_loop+0x50/0xa0 [ 97.083202][ T2135] ? clear_bhb_loop+0x50/0xa0 [ 97.088371][ T2135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.094986][ T2135] RIP: 0033:0x7f5e9ecfbbe9 [ 97.099500][ T2135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.121173][ T2135] RSP: 002b:00007f5e9d764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.130210][ T2135] RAX: ffffffffffffffda RBX: 00007f5e9ef22fa0 RCX: 00007f5e9ecfbbe9 [ 97.138685][ T2135] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 97.147328][ T2135] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 97.155912][ T2135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.164156][ T2135] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 97.172792][ T2135] [ 97.610505][ T2164] device veth0_vlan left promiscuous mode [ 97.634737][ T2164] device veth0_vlan entered promiscuous mode [ 97.693024][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.707588][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.721042][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.333214][ T2192] FAULT_INJECTION: forcing a failure. [ 98.333214][ T2192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.357214][ T2192] CPU: 1 PID: 2192 Comm: syz.2.530 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 98.369204][ T2192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.380454][ T2192] Call Trace: [ 98.384010][ T2192] [ 98.387051][ T2192] __dump_stack+0x21/0x30 [ 98.391709][ T2192] dump_stack_lvl+0xee/0x150 [ 98.396740][ T2192] ? show_regs_print_info+0x20/0x20 [ 98.402949][ T2192] dump_stack+0x15/0x20 [ 98.408408][ T2192] should_fail+0x3c1/0x510 [ 98.417624][ T2192] should_fail_usercopy+0x1a/0x20 [ 98.423922][ T2192] strncpy_from_user+0x24/0x2e0 [ 98.430405][ T2192] bpf_prog_load+0x1b8/0x1550 [ 98.435309][ T2192] ? map_freeze+0x360/0x360 [ 98.440460][ T2192] ? selinux_bpf+0xc7/0xf0 [ 98.445964][ T2192] ? security_bpf+0x82/0xa0 [ 98.450821][ T2192] __sys_bpf+0x4c3/0x730 [ 98.457351][ T2192] ? bpf_link_show_fdinfo+0x310/0x310 [ 98.465864][ T2192] __x64_sys_bpf+0x7c/0x90 [ 98.472640][ T2192] x64_sys_call+0x4b9/0x9a0 [ 98.477753][ T2192] do_syscall_64+0x4c/0xa0 [ 98.483830][ T2192] ? clear_bhb_loop+0x50/0xa0 [ 98.490534][ T2192] ? clear_bhb_loop+0x50/0xa0 [ 98.495795][ T2192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.503221][ T2192] RIP: 0033:0x7fa8d069cbe9 [ 98.509238][ T2192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.536562][ T2192] RSP: 002b:00007fa8cf105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.550865][ T2192] RAX: ffffffffffffffda RBX: 00007fa8d08c3fa0 RCX: 00007fa8d069cbe9 [ 98.564728][ T2192] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 98.578670][ T2192] RBP: 00007fa8cf105090 R08: 0000000000000000 R09: 0000000000000000 [ 98.588987][ T2192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.600492][ T2192] R13: 00007fa8d08c4038 R14: 00007fa8d08c3fa0 R15: 00007ffeccbafe38 [ 98.610307][ T2192] [ 98.630245][ T2193] FAULT_INJECTION: forcing a failure. [ 98.630245][ T2193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.659979][ T2193] CPU: 1 PID: 2193 Comm: syz.4.531 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 98.670788][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.681366][ T2193] Call Trace: [ 98.684750][ T2193] [ 98.687774][ T2193] __dump_stack+0x21/0x30 [ 98.692376][ T2193] dump_stack_lvl+0xee/0x150 [ 98.697323][ T2193] ? show_regs_print_info+0x20/0x20 [ 98.703394][ T2193] dump_stack+0x15/0x20 [ 98.708185][ T2193] should_fail+0x3c1/0x510 [ 98.712754][ T2193] should_fail_alloc_page+0x55/0x80 [ 98.718510][ T2193] prepare_alloc_pages+0x156/0x600 [ 98.723891][ T2193] ? __alloc_pages_bulk+0xab0/0xab0 [ 98.729403][ T2193] ? cgroup_rstat_updated+0xf5/0x370 [ 98.735081][ T2193] __alloc_pages+0x10a/0x440 [ 98.740017][ T2193] ? prep_new_page+0x110/0x110 [ 98.745082][ T2193] ? __kasan_check_write+0x14/0x20 [ 98.750463][ T2193] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 98.756519][ T2193] ? _raw_spin_lock+0xe0/0xe0 [ 98.761198][ T2193] handle_pte_fault+0xe89/0x2680 [ 98.767065][ T2193] ? bpf_trace_run4+0xd9/0x1f0 [ 98.772379][ T2193] ? fault_around_bytes_set+0xc0/0xc0 [ 98.777954][ T2193] do_handle_mm_fault+0x1a6d/0x1d50 [ 98.784441][ T2193] ? numa_migrate_prep+0xd0/0xd0 [ 98.790071][ T2193] ? __find_vma+0x30/0x150 [ 98.794497][ T2193] do_user_addr_fault+0x841/0x1180 [ 98.799963][ T2193] ? do_kern_addr_fault+0x80/0x80 [ 98.805500][ T2193] ? __this_cpu_preempt_check+0x13/0x20 [ 98.811910][ T2193] ? __mod_node_page_state+0x9e/0xd0 [ 98.817360][ T2193] exc_page_fault+0x51/0xb0 [ 98.822045][ T2193] asm_exc_page_fault+0x27/0x30 [ 98.827649][ T2193] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 98.834763][ T2193] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 98.858279][ T2193] RSP: 0018:ffffc900012e7c00 EFLAGS: 00050206 [ 98.864967][ T2193] RAX: ffffffff824bef01 RBX: 00000000000103a0 RCX: 000000000000c3a0 [ 98.873545][ T2193] RDX: 00000000000103a0 RSI: ffff88812b764000 RDI: 0000200000004000 [ 98.881677][ T2193] RBP: ffffc900012e7c30 R08: dffffc0000000000 R09: ffffed10256ee074 [ 98.889722][ T2193] R10: 0000000000000000 R11: 0000000000002070 R12: 00007ffffffff000 [ 98.898282][ T2193] R13: 00002000000103a0 R14: ffff88812b760000 R15: 0000200000000000 [ 98.906890][ T2193] ? _copy_to_user+0x1/0x90 [ 98.911806][ T2193] ? _copy_to_user+0x78/0x90 [ 98.916809][ T2193] bpf_prog_array_copy_to_user+0x234/0x280 [ 98.922717][ T2193] netns_bpf_prog_query+0x2e6/0x430 [ 98.928182][ T2193] ? local_bh_enable+0x30/0x30 [ 98.933506][ T2193] ? security_capable+0x87/0xb0 [ 98.938885][ T2193] bpf_prog_query+0x199/0x230 [ 98.943818][ T2193] __sys_bpf+0x335/0x730 [ 98.948374][ T2193] ? bpf_link_show_fdinfo+0x310/0x310 [ 98.953934][ T2193] ? debug_smp_processor_id+0x17/0x20 [ 98.959735][ T2193] __x64_sys_bpf+0x7c/0x90 [ 98.964381][ T2193] x64_sys_call+0x4b9/0x9a0 [ 98.969137][ T2193] do_syscall_64+0x4c/0xa0 [ 98.973949][ T2193] ? clear_bhb_loop+0x50/0xa0 [ 98.978869][ T2193] ? clear_bhb_loop+0x50/0xa0 [ 98.983673][ T2193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.989731][ T2193] RIP: 0033:0x7f97334ffbe9 [ 98.994334][ T2193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.016559][ T2193] RSP: 002b:00007f9731f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.025052][ T2193] RAX: ffffffffffffffda RBX: 00007f9733726fa0 RCX: 00007f97334ffbe9 [ 99.035772][ T2193] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 99.051190][ T2193] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 99.060585][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.069169][ T2193] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 99.077493][ T2193] [ 99.272810][ T30] audit: type=1400 audit(1755141076.525:137): avc: denied { create } for pid=2211 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.634697][ T2238] FAULT_INJECTION: forcing a failure. [ 99.634697][ T2238] name failslab, interval 1, probability 0, space 0, times 0 [ 99.665826][ T2238] CPU: 0 PID: 2238 Comm: syz.0.544 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 99.676233][ T2238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.686657][ T2238] Call Trace: [ 99.689951][ T2238] [ 99.693126][ T2238] __dump_stack+0x21/0x30 [ 99.698104][ T2238] dump_stack_lvl+0xee/0x150 [ 99.703321][ T2238] ? show_regs_print_info+0x20/0x20 [ 99.708797][ T2238] ? avc_has_perm_noaudit+0x331/0x460 [ 99.714556][ T2238] ? avc_has_perm_noaudit+0x35e/0x460 [ 99.720220][ T2238] dump_stack+0x15/0x20 [ 99.724955][ T2238] should_fail+0x3c1/0x510 [ 99.729645][ T2238] __should_failslab+0xa4/0xe0 [ 99.734713][ T2238] should_failslab+0x9/0x20 [ 99.739300][ T2238] slab_pre_alloc_hook+0x3b/0xe0 [ 99.745135][ T2238] kmem_cache_alloc_trace+0x48/0x270 [ 99.751182][ T2238] ? __get_vm_area_node+0x11d/0x350 [ 99.756575][ T2238] __get_vm_area_node+0x11d/0x350 [ 99.762014][ T2238] __vmalloc_node_range+0xdf/0xaf0 [ 99.767224][ T2238] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 99.773376][ T2238] ? irqentry_exit+0x37/0x40 [ 99.778161][ T2238] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 99.784753][ T2238] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 99.790834][ T2238] __vmalloc+0x79/0x90 [ 99.795096][ T2238] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 99.801071][ T2238] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 99.808904][ T2238] bpf_prog_alloc+0x1f/0x1e0 [ 99.813856][ T2238] bpf_prog_load+0x7c3/0x1550 [ 99.819462][ T2238] ? map_freeze+0x360/0x360 [ 99.824117][ T2238] ? selinux_bpf+0xc7/0xf0 [ 99.830815][ T2238] ? security_bpf+0x82/0xa0 [ 99.835802][ T2238] __sys_bpf+0x4c3/0x730 [ 99.840795][ T2238] ? bpf_link_show_fdinfo+0x310/0x310 [ 99.848323][ T2238] __x64_sys_bpf+0x7c/0x90 [ 99.854626][ T2238] x64_sys_call+0x4b9/0x9a0 [ 99.861302][ T2238] do_syscall_64+0x4c/0xa0 [ 99.867904][ T2238] ? clear_bhb_loop+0x50/0xa0 [ 99.874038][ T2238] ? clear_bhb_loop+0x50/0xa0 [ 99.881221][ T2238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.891971][ T2238] RIP: 0033:0x7f7514d3ebe9 [ 99.897035][ T2238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.921762][ T2238] RSP: 002b:00007f7513786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.932491][ T2238] RAX: ffffffffffffffda RBX: 00007f7514f66090 RCX: 00007f7514d3ebe9 [ 99.942528][ T2238] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 99.954535][ T2238] RBP: 00007f7513786090 R08: 0000000000000000 R09: 0000000000000000 [ 99.965980][ T2238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.974756][ T2238] R13: 00007f7514f66128 R14: 00007f7514f66090 R15: 00007fffb62a61a8 [ 99.983907][ T2238] [ 100.046773][ T2237] FAULT_INJECTION: forcing a failure. [ 100.046773][ T2237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.180055][ T2238] syz.0.544: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 100.210412][ T2237] CPU: 0 PID: 2237 Comm: syz.2.545 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 100.222834][ T2237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.234268][ T2237] Call Trace: [ 100.237965][ T2237] [ 100.243002][ T2237] __dump_stack+0x21/0x30 [ 100.249798][ T2237] dump_stack_lvl+0xee/0x150 [ 100.255527][ T2237] ? show_regs_print_info+0x20/0x20 [ 100.264831][ T2237] dump_stack+0x15/0x20 [ 100.271256][ T2237] should_fail+0x3c1/0x510 [ 100.275883][ T2237] should_fail_alloc_page+0x55/0x80 [ 100.281199][ T2237] prepare_alloc_pages+0x156/0x600 [ 100.287250][ T2237] ? __alloc_pages_bulk+0xab0/0xab0 [ 100.294385][ T2237] ? cgroup_rstat_updated+0xf5/0x370 [ 100.301267][ T2237] __alloc_pages+0x10a/0x440 [ 100.307520][ T2237] ? prep_new_page+0x110/0x110 [ 100.312841][ T2237] ? __kasan_check_write+0x14/0x20 [ 100.318661][ T2237] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 100.324490][ T2237] ? _raw_spin_lock+0xe0/0xe0 [ 100.329687][ T2237] handle_pte_fault+0xe89/0x2680 [ 100.336691][ T2237] ? bpf_trace_run4+0xd9/0x1f0 [ 100.341841][ T2237] ? fault_around_bytes_set+0xc0/0xc0 [ 100.348518][ T2237] do_handle_mm_fault+0x1a6d/0x1d50 [ 100.354764][ T2237] ? numa_migrate_prep+0xd0/0xd0 [ 100.360798][ T2237] ? __find_vma+0x30/0x150 [ 100.367431][ T2237] do_user_addr_fault+0x841/0x1180 [ 100.374447][ T2237] ? do_kern_addr_fault+0x80/0x80 [ 100.381877][ T2237] ? __this_cpu_preempt_check+0x13/0x20 [ 100.389646][ T2237] ? __mod_node_page_state+0x9e/0xd0 [ 100.396618][ T2237] exc_page_fault+0x51/0xb0 [ 100.403495][ T2237] asm_exc_page_fault+0x27/0x30 [ 100.409345][ T2237] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 100.418216][ T2237] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 100.440059][ T2237] RSP: 0018:ffffc90001227c00 EFLAGS: 00050206 [ 100.447169][ T2237] RAX: ffffffff824bef01 RBX: 00000000000103a0 RCX: 000000000000b3a0 [ 100.455829][ T2237] RDX: 00000000000103a0 RSI: ffff888138fe5000 RDI: 0000200000005000 [ 100.464434][ T2237] RBP: ffffc90001227c30 R08: dffffc0000000000 R09: ffffed10271fe074 [ 100.473377][ T2237] R10: 0000000000000000 R11: 0000000000002070 R12: 00007ffffffff000 [ 100.482265][ T2237] R13: 00002000000103a0 R14: ffff888138fe0000 R15: 0000200000000000 [ 100.490886][ T2237] ? _copy_to_user+0x1/0x90 [ 100.496453][ T2237] ? _copy_to_user+0x78/0x90 [ 100.501168][ T2237] bpf_prog_array_copy_to_user+0x234/0x280 [ 100.507763][ T2237] netns_bpf_prog_query+0x2e6/0x430 [ 100.514488][ T2237] ? local_bh_enable+0x30/0x30 [ 100.520188][ T2237] ? security_capable+0x87/0xb0 [ 100.525863][ T2237] bpf_prog_query+0x199/0x230 [ 100.531173][ T2237] __sys_bpf+0x335/0x730 [ 100.536300][ T2237] ? bpf_link_show_fdinfo+0x310/0x310 [ 100.542248][ T2237] ? debug_smp_processor_id+0x17/0x20 [ 100.548345][ T2237] __x64_sys_bpf+0x7c/0x90 [ 100.553249][ T2237] x64_sys_call+0x4b9/0x9a0 [ 100.558402][ T2237] do_syscall_64+0x4c/0xa0 [ 100.563310][ T2237] ? clear_bhb_loop+0x50/0xa0 [ 100.569193][ T2237] ? clear_bhb_loop+0x50/0xa0 [ 100.575036][ T2237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.581567][ T2237] RIP: 0033:0x7fa8d069cbe9 [ 100.586617][ T2237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.607514][ T2237] RSP: 002b:00007fa8cf105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.616117][ T2237] RAX: ffffffffffffffda RBX: 00007fa8d08c3fa0 RCX: 00007fa8d069cbe9 [ 100.624553][ T2237] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 100.633067][ T2237] RBP: 00007fa8cf105090 R08: 0000000000000000 R09: 0000000000000000 [ 100.642986][ T2237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.652570][ T2237] R13: 00007fa8d08c4038 R14: 00007fa8d08c3fa0 R15: 00007ffeccbafe38 [ 100.660818][ T2237] [ 100.668779][ T2238] CPU: 0 PID: 2238 Comm: syz.0.544 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 100.679319][ T2238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.690058][ T2238] Call Trace: [ 100.693880][ T2238] [ 100.696893][ T2238] __dump_stack+0x21/0x30 [ 100.701832][ T2238] dump_stack_lvl+0xee/0x150 [ 100.706953][ T2238] ? show_regs_print_info+0x20/0x20 [ 100.712682][ T2238] ? pr_cont_kernfs_name+0xe3/0xf0 [ 100.718024][ T2238] dump_stack+0x15/0x20 [ 100.722617][ T2238] warn_alloc+0x1b0/0x1d0 [ 100.727822][ T2238] ? __should_failslab+0xa4/0xe0 [ 100.733211][ T2238] ? zone_watermark_ok_safe+0x270/0x270 [ 100.739290][ T2238] ? __get_vm_area_node+0x11d/0x350 [ 100.744778][ T2238] ? __get_vm_area_node+0x33e/0x350 [ 100.750532][ T2238] __vmalloc_node_range+0x152/0xaf0 [ 100.756163][ T2238] ? irqentry_exit+0x37/0x40 [ 100.761019][ T2238] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 100.767608][ T2238] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 100.773337][ T2238] __vmalloc+0x79/0x90 [ 100.777801][ T2238] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 100.783536][ T2238] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 100.788948][ T2238] bpf_prog_alloc+0x1f/0x1e0 [ 100.793805][ T2238] bpf_prog_load+0x7c3/0x1550 [ 100.798879][ T2238] ? map_freeze+0x360/0x360 [ 100.803579][ T2238] ? selinux_bpf+0xc7/0xf0 [ 100.808115][ T2238] ? security_bpf+0x82/0xa0 [ 100.813071][ T2238] __sys_bpf+0x4c3/0x730 [ 100.817418][ T2238] ? bpf_link_show_fdinfo+0x310/0x310 [ 100.823282][ T2238] __x64_sys_bpf+0x7c/0x90 [ 100.827781][ T2238] x64_sys_call+0x4b9/0x9a0 [ 100.832597][ T2238] do_syscall_64+0x4c/0xa0 [ 100.837121][ T2238] ? clear_bhb_loop+0x50/0xa0 [ 100.842158][ T2238] ? clear_bhb_loop+0x50/0xa0 [ 100.848016][ T2238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.854116][ T2238] RIP: 0033:0x7f7514d3ebe9 [ 100.859095][ T2238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.879292][ T2238] RSP: 002b:00007f7513786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.888701][ T2238] RAX: ffffffffffffffda RBX: 00007f7514f66090 RCX: 00007f7514d3ebe9 [ 100.897531][ T2238] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 100.906292][ T2238] RBP: 00007f7513786090 R08: 0000000000000000 R09: 0000000000000000 [ 100.914840][ T2238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.923003][ T2238] R13: 00007f7514f66128 R14: 00007f7514f66090 R15: 00007fffb62a61a8 [ 100.931536][ T2238] [ 101.490021][ T2238] Mem-Info: [ 101.493504][ T2238] active_anon:39 inactive_anon:6925 isolated_anon:0 [ 101.493504][ T2238] active_file:19179 inactive_file:4015 isolated_file:0 [ 101.493504][ T2238] unevictable:0 dirty:81 writeback:25 [ 101.493504][ T2238] slab_reclaimable:8056 slab_unreclaimable:73904 [ 101.493504][ T2238] mapped:29181 shmem:163 pagetables:676 bounce:0 [ 101.493504][ T2238] kernel_misc_reclaimable:0 [ 101.493504][ T2238] free:1536330 free_pcp:27456 free_cma:0 [ 101.973986][ T2238] Node 0 active_anon:156kB inactive_anon:27660kB active_file:76720kB inactive_file:16056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116684kB dirty:312kB writeback:96kB shmem:712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6796kB pagetables:2804kB all_unreclaimable? no [ 102.370580][ T2238] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982964kB mlocked:0kB bounce:0kB free_pcp:4192kB local_pcp:56kB free_cma:0kB [ 102.410355][ T2238] lowmem_reserve[]: 0 3941 3941 [ 102.415333][ T2238] Normal free:3168372kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:156kB inactive_anon:27616kB active_file:76720kB inactive_file:16056kB unevictable:0kB writepending:368kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:105632kB local_pcp:52888kB free_cma:0kB [ 102.590887][ T2308] device veth1_macvtap entered promiscuous mode [ 102.670806][ T2308] device macsec0 entered promiscuous mode [ 102.718327][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.726688][ T2238] lowmem_reserve[]: 0 0 0 [ 102.849949][ T2238] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 102.875599][ T2316] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.940984][ T2238] Normal: 3010*4kB (UME) 2405*8kB (UME) 1143*16kB (UME) 271*32kB (UME) 213*64kB (UME) 64*128kB (UME) 4*256kB (UE) 3*512kB (M) 1*1024kB (E) 2*2048kB (UM) 752*4096kB (M) = 3167936kB [ 102.981910][ T2238] 23357 total pagecache pages [ 102.986768][ T2238] 0 pages in swap cache [ 102.991557][ T2238] Swap cache stats: add 0, delete 0, find 0/0 [ 102.998249][ T2238] Free swap = 124996kB [ 103.002980][ T2238] Total swap = 124996kB [ 103.007383][ T2238] 2097051 pages RAM [ 103.012440][ T2238] 0 pages HighMem/MovableOnly [ 103.017380][ T2238] 342286 pages reserved [ 103.022400][ T2238] 0 pages cma reserved [ 103.276680][ T2338] syz.2.575[2338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.276750][ T2338] syz.2.575[2338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.766866][ T2372] device sit0 entered promiscuous mode [ 105.916569][ T2474] device veth1_macvtap left promiscuous mode [ 105.954663][ T2482] syz.1.615[2482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.954767][ T2482] syz.1.615[2482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.970925][ T2474] device macsec0 left promiscuous mode [ 106.003863][ T30] audit: type=1400 audit(1755141083.225:138): avc: denied { ioctl } for pid=2480 comm="syz.2.617" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.163185][ T2500] device sit0 entered promiscuous mode [ 108.446960][ T2530] device veth0_vlan left promiscuous mode [ 108.457145][ T2530] device veth0_vlan entered promiscuous mode [ 109.493839][ T2604] device veth1_macvtap left promiscuous mode [ 111.977530][ T30] audit: type=1400 audit(1755141089.225:139): avc: denied { create } for pid=2687 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.387927][ T2711] syz.4.688[2711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.387993][ T2711] syz.4.688[2711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.127652][ T2731] device sit0 left promiscuous mode [ 113.265793][ T2732] device sit0 entered promiscuous mode [ 114.301561][ T2758] device macsec0 entered promiscuous mode [ 114.394914][ T2756] device veth0_vlan left promiscuous mode [ 114.454328][ T2756] device veth0_vlan entered promiscuous mode [ 114.756017][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.830762][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.872717][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.342077][ T2872] syz.2.734[2872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.342153][ T2872] syz.2.734[2872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.488337][ T2907] ÿÿÿÿÿÿex: renamed from vlan1 [ 117.529062][ T2908] device sit0 left promiscuous mode [ 117.572379][ T2912] device sit0 left promiscuous mode [ 117.805382][ T2916] device sit0 entered promiscuous mode [ 118.125915][ T2908] device sit0 entered promiscuous mode [ 118.464915][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.726675][ T2999] device sit0 left promiscuous mode [ 118.849214][ T2999] device sit0 entered promiscuous mode [ 119.041900][ T3050] FAULT_INJECTION: forcing a failure. [ 119.041900][ T3050] name failslab, interval 1, probability 0, space 0, times 0 [ 119.089729][ T3050] CPU: 1 PID: 3050 Comm: syz.0.785 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 119.100884][ T3050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.111244][ T3050] Call Trace: [ 119.114566][ T3050] [ 119.117558][ T3050] __dump_stack+0x21/0x30 [ 119.123122][ T3050] dump_stack_lvl+0xee/0x150 [ 119.128150][ T3050] ? show_regs_print_info+0x20/0x20 [ 119.133734][ T3050] ? file_end_write+0x1b0/0x1b0 [ 119.138943][ T3050] dump_stack+0x15/0x20 [ 119.143312][ T3050] should_fail+0x3c1/0x510 [ 119.148227][ T3050] __should_failslab+0xa4/0xe0 [ 119.154667][ T3050] should_failslab+0x9/0x20 [ 119.159545][ T3050] slab_pre_alloc_hook+0x3b/0xe0 [ 119.164843][ T3050] ? getname_flags+0xb9/0x500 [ 119.169715][ T3050] kmem_cache_alloc+0x44/0x260 [ 119.174679][ T3050] getname_flags+0xb9/0x500 [ 119.179527][ T3050] __x64_sys_mkdir+0x5f/0x80 [ 119.184225][ T3050] x64_sys_call+0x124/0x9a0 [ 119.189119][ T3050] do_syscall_64+0x4c/0xa0 [ 119.193955][ T3050] ? clear_bhb_loop+0x50/0xa0 [ 119.198777][ T3050] ? clear_bhb_loop+0x50/0xa0 [ 119.203568][ T3050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.209565][ T3050] RIP: 0033:0x7f7514d3ebe9 [ 119.214273][ T3050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.235650][ T3050] RSP: 002b:00007f7513786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 119.245111][ T3050] RAX: ffffffffffffffda RBX: 00007f7514f66090 RCX: 00007f7514d3ebe9 [ 119.253475][ T3050] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0 [ 119.262034][ T3050] RBP: 00007f7513786090 R08: 0000000000000000 R09: 0000000000000000 [ 119.270518][ T3050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.279111][ T3050] R13: 00007f7514f66128 R14: 00007f7514f66090 R15: 00007fffb62a61a8 [ 119.287837][ T3050] [ 120.291635][ T3105] device veth0_vlan left promiscuous mode [ 120.298850][ T3105] device veth0_vlan entered promiscuous mode [ 120.407984][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.420710][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.429005][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 120.709230][ T3112] FAULT_INJECTION: forcing a failure. [ 120.709230][ T3112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.736727][ T3112] CPU: 0 PID: 3112 Comm: syz.3.806 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 120.749665][ T3112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.762601][ T3112] Call Trace: [ 120.767453][ T3112] [ 120.771144][ T3112] __dump_stack+0x21/0x30 [ 120.776763][ T3112] dump_stack_lvl+0xee/0x150 [ 120.782915][ T3112] ? show_regs_print_info+0x20/0x20 [ 120.789379][ T3112] dump_stack+0x15/0x20 [ 120.793815][ T3112] should_fail+0x3c1/0x510 [ 120.799197][ T3112] should_fail_usercopy+0x1a/0x20 [ 120.805198][ T3112] strncpy_from_user+0x24/0x2e0 [ 120.815416][ T3112] ? kmem_cache_alloc+0xf7/0x260 [ 120.820824][ T3112] getname_flags+0xf4/0x500 [ 120.825612][ T3112] __x64_sys_mkdir+0x5f/0x80 [ 120.830367][ T3112] x64_sys_call+0x124/0x9a0 [ 120.834974][ T3112] do_syscall_64+0x4c/0xa0 [ 120.839576][ T3112] ? clear_bhb_loop+0x50/0xa0 [ 120.844444][ T3112] ? clear_bhb_loop+0x50/0xa0 [ 120.849903][ T3112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.856654][ T3112] RIP: 0033:0x7f413fc7ebe9 [ 120.861469][ T3112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.882169][ T3112] RSP: 002b:00007f413e6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 120.891320][ T3112] RAX: ffffffffffffffda RBX: 00007f413fea5fa0 RCX: 00007f413fc7ebe9 [ 120.899916][ T3112] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0 [ 120.908594][ T3112] RBP: 00007f413e6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.917770][ T3112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.926746][ T3112] R13: 00007f413fea6038 R14: 00007f413fea5fa0 R15: 00007ffe91531658 [ 120.935005][ T3112] [ 120.994239][ T3116] GPL: port 1(erspan0) entered blocking state [ 121.000740][ T3116] GPL: port 1(erspan0) entered disabled state [ 121.007967][ T3116] device erspan0 entered promiscuous mode [ 123.153767][ T3164] FAULT_INJECTION: forcing a failure. [ 123.153767][ T3164] name failslab, interval 1, probability 0, space 0, times 0 [ 123.240056][ T3164] CPU: 0 PID: 3164 Comm: syz.2.822 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 123.250608][ T3164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.261370][ T3164] Call Trace: [ 123.265122][ T3164] [ 123.268056][ T3164] __dump_stack+0x21/0x30 [ 123.272680][ T3164] dump_stack_lvl+0xee/0x150 [ 123.277411][ T3164] ? show_regs_print_info+0x20/0x20 [ 123.282709][ T3164] ? memset+0x35/0x40 [ 123.286777][ T3164] dump_stack+0x15/0x20 [ 123.291175][ T3164] should_fail+0x3c1/0x510 [ 123.295937][ T3164] __should_failslab+0xa4/0xe0 [ 123.300804][ T3164] should_failslab+0x9/0x20 [ 123.305594][ T3164] slab_pre_alloc_hook+0x3b/0xe0 [ 123.310979][ T3164] ? __d_alloc+0x2d/0x6a0 [ 123.315404][ T3164] kmem_cache_alloc+0x44/0x260 [ 123.320448][ T3164] __d_alloc+0x2d/0x6a0 [ 123.324695][ T3164] d_alloc+0x4b/0x1d0 [ 123.328876][ T3164] lookup_one_qstr_excl+0xcb/0x250 [ 123.334583][ T3164] filename_create+0x219/0x450 [ 123.339454][ T3164] ? check_stack_object+0x81/0x140 [ 123.345003][ T3164] ? kern_path_create+0x1b0/0x1b0 [ 123.350228][ T3164] do_mkdirat+0x5c/0x4c0 [ 123.354744][ T3164] ? getname_flags+0x206/0x500 [ 123.359782][ T3164] __x64_sys_mkdir+0x6e/0x80 [ 123.364643][ T3164] x64_sys_call+0x124/0x9a0 [ 123.369507][ T3164] do_syscall_64+0x4c/0xa0 [ 123.374017][ T3164] ? clear_bhb_loop+0x50/0xa0 [ 123.378887][ T3164] ? clear_bhb_loop+0x50/0xa0 [ 123.384406][ T3164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.390567][ T3164] RIP: 0033:0x7fa8d069cbe9 [ 123.395247][ T3164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.415645][ T3164] RSP: 002b:00007fa8cf0e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 123.424414][ T3164] RAX: ffffffffffffffda RBX: 00007fa8d08c4090 RCX: 00007fa8d069cbe9 [ 123.432773][ T3164] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0 [ 123.441135][ T3164] RBP: 00007fa8cf0e4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.450137][ T3164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.458647][ T3164] R13: 00007fa8d08c4128 R14: 00007fa8d08c4090 R15: 00007ffeccbafe38 [ 123.467064][ T3164] [ 128.891450][ T3329] device veth1_macvtap left promiscuous mode [ 129.081508][ T3332] device veth1_macvtap entered promiscuous mode [ 129.090248][ T3332] device macsec0 entered promiscuous mode [ 129.106891][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.497872][ T3350] device macsec0 entered promiscuous mode [ 131.884354][ T3426] syz.0.902[3426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.884480][ T3426] syz.0.902[3426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.293455][ T30] audit: type=1400 audit(1755141109.545:140): avc: denied { create } for pid=3447 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.394003][ T3463] device sit0 left promiscuous mode [ 132.551777][ T3463] device sit0 entered promiscuous mode [ 133.611249][ T3527] ªªªªªª: renamed from vlan0 [ 133.787317][ T3541] device wg2 left promiscuous mode [ 137.050845][ T3600] bond_slave_1: mtu less than device minimum [ 144.779993][ T3501] syz.0.919 (3501) used greatest stack depth: 16064 bytes left [ 150.014646][ T3704] syz.3.980 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 150.232654][ T3704] CPU: 0 PID: 3704 Comm: syz.3.980 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 150.243640][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.255570][ T3704] Call Trace: [ 150.258868][ T3704] [ 150.261979][ T3704] __dump_stack+0x21/0x30 [ 150.266404][ T3704] dump_stack_lvl+0xee/0x150 [ 150.271433][ T3704] ? show_regs_print_info+0x20/0x20 [ 150.276623][ T3704] ? ___ratelimit+0x3f2/0x570 [ 150.282091][ T3704] dump_stack+0x15/0x20 [ 150.287093][ T3704] dump_header+0xdd/0x650 [ 150.292139][ T3704] oom_kill_process+0x1fa/0x2c0 [ 150.297746][ T3704] out_of_memory+0x649/0xa40 [ 150.303180][ T3704] ? unregister_oom_notifier+0x20/0x20 [ 150.311544][ T3704] ? mutex_lock_killable+0x95/0x1b0 [ 150.317984][ T3704] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 150.327694][ T3704] ? __kasan_check_read+0x11/0x20 [ 150.333558][ T3704] ? psi_group_change+0xa6c/0x10e0 [ 150.339082][ T3704] mem_cgroup_out_of_memory+0x275/0x370 [ 150.345498][ T3704] ? css_next_descendant_pre+0x1fe/0x220 [ 150.352491][ T3704] ? __kasan_check_write+0x14/0x20 [ 150.357997][ T3704] ? mem_cgroup_oom_trylock+0x350/0x350 [ 150.364600][ T3704] ? mem_cgroup_iter+0x4a9/0x6a0 [ 150.370399][ T3704] try_charge_memcg+0xe88/0x1450 [ 150.375819][ T3704] ? __kasan_check_write+0x14/0x20 [ 150.381124][ T3704] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 150.387027][ T3704] ? release_pages+0xfda/0x1030 [ 150.392347][ T3704] charge_memcg+0x6d/0x1a0 [ 150.397776][ T3704] __mem_cgroup_charge+0x37/0x130 [ 150.403348][ T3704] ? shmem_add_to_page_cache+0x61a/0xc30 [ 150.409305][ T3704] shmem_add_to_page_cache+0x62f/0xc30 [ 150.415045][ T3704] ? put_page+0xb0/0xb0 [ 150.419389][ T3704] ? lru_cache_add+0x2c1/0x690 [ 150.424769][ T3704] ? _raw_spin_lock_irq+0x8f/0xe0 [ 150.430427][ T3704] ? _raw_spin_lock_irqsave+0x110/0x110 [ 150.436900][ T3704] ? __this_cpu_preempt_check+0x13/0x20 [ 150.443259][ T3704] ? __perf_event_task_sched_in+0x1fb/0x280 [ 150.450078][ T3704] shmem_getpage_gfp+0x1164/0x2310 [ 150.455772][ T3704] ? __kasan_check_write+0x14/0x20 [ 150.461585][ T3704] shmem_write_begin+0xce/0x1b0 [ 150.467812][ T3704] generic_perform_write+0x2ad/0x670 [ 150.473474][ T3704] ? grab_cache_page_write_begin+0xb0/0xb0 [ 150.479473][ T3704] ? file_remove_privs+0x590/0x590 [ 150.484853][ T3704] ? rwsem_write_trylock+0x130/0x300 [ 150.490578][ T3704] ? clear_nonspinnable+0x60/0x60 [ 150.495892][ T3704] ? follow_page_pte+0x943/0x980 [ 150.501437][ T3704] __generic_file_write_iter+0x268/0x480 [ 150.507735][ T3704] generic_file_write_iter+0xa9/0x1d0 [ 150.513731][ T3704] __kernel_write+0x4e7/0x910 [ 150.518425][ T3704] ? vfs_read+0xbe0/0xbe0 [ 150.524025][ T3704] ? populate_vma_page_range+0xf0/0xf0 [ 150.530353][ T3704] __dump_emit+0x240/0x360 [ 150.535144][ T3704] ? wait_for_dump_helpers+0x390/0x390 [ 150.541495][ T3704] ? fault_in_readable+0x160/0x160 [ 150.547301][ T3704] dump_emit+0x383/0x3f0 [ 150.551856][ T3704] dump_user_range+0x86/0x1c0 [ 150.557752][ T3704] elf_core_dump+0x2ae5/0x3020 [ 150.563130][ T3704] ? load_elf_binary+0x2890/0x2890 [ 150.569456][ T3704] ? __kmalloc+0x13d/0x2c0 [ 150.574927][ T3704] ? kvmalloc_node+0x231/0x300 [ 150.581971][ T3704] do_coredump+0x141b/0x2860 [ 150.589067][ T3704] ? simple_acl_create+0x1c0/0x1c0 [ 150.594778][ T3704] ? kmem_cache_free+0x100/0x320 [ 150.600413][ T3704] ? ____kasan_slab_free+0x130/0x160 [ 150.606095][ T3704] ? get_signal+0xb5e/0x1480 [ 150.610882][ T3704] ? kmem_cache_free+0x100/0x320 [ 150.616208][ T3704] get_signal+0x38d/0x1480 [ 150.621002][ T3704] arch_do_signal_or_restart+0xc1/0x10f0 [ 150.627973][ T3704] ? bad_area+0x74/0x90 [ 150.633200][ T3704] ? do_kern_addr_fault+0x80/0x80 [ 150.638556][ T3704] ? get_sigframe_size+0x10/0x10 [ 150.643684][ T3704] exit_to_user_mode_loop+0xa7/0xe0 [ 150.649172][ T3704] exit_to_user_mode_prepare+0x5a/0xa0 [ 150.655091][ T3704] irqentry_exit_to_user_mode+0x9/0x10 [ 150.661438][ T3704] irqentry_exit+0x12/0x40 [ 150.666122][ T3704] exc_page_fault+0x5e/0xb0 [ 150.670802][ T3704] asm_exc_page_fault+0x27/0x30 [ 150.675925][ T3704] RIP: 0033:0x7f413fc7ebf1 [ 150.680522][ T3704] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 150.703852][ T3704] RSP: 002b:0000000000009000 EFLAGS: 00010217 [ 150.711745][ T3704] RAX: 0000000000000000 RBX: 00007f413fea6090 RCX: 00007f413fc7ebe9 [ 150.722215][ T3704] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000000000000 [ 150.732071][ T3704] RBP: 00007f413fd01e19 R08: 0000000000000000 R09: 0000000000000000 [ 150.742356][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.754011][ T3704] R13: 00007f413fea6128 R14: 00007f413fea6090 R15: 00007ffe91531658 [ 150.770376][ T3704] [ 150.789923][ T3704] memory: usage 307200kB, limit 307200kB, failcnt 13994 [ 150.798229][ T3704] memory+swap: usage 430360kB, limit 9007199254740988kB, failcnt 0 [ 150.880304][ T3704] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 150.887455][ T3704] Memory cgroup stats for /syz3: [ 150.887627][ T3704] anon 327680 [ 150.887627][ T3704] file 312365056 [ 150.887627][ T3704] kernel_stack 0 [ 150.887627][ T3704] pagetables 0 [ 150.887627][ T3704] percpu 0 [ 150.887627][ T3704] sock 0 [ 150.887627][ T3704] shmem 312360960 [ 150.887627][ T3704] file_mapped 0 [ 150.887627][ T3704] file_dirty 0 [ 150.887627][ T3704] file_writeback 0 [ 150.887627][ T3704] swapcached 128274432 [ 150.887627][ T3704] anon_thp 0 [ 150.887627][ T3704] file_thp 0 [ 150.887627][ T3704] shmem_thp 0 [ 150.887627][ T3704] inactive_anon 314245120 [ 150.887627][ T3704] active_anon 323584 [ 150.887627][ T3704] inactive_file 4096 [ 150.887627][ T3704] active_file 0 [ 150.887627][ T3704] unevictable 0 [ 150.887627][ T3704] slab_reclaimable 0 [ 150.887627][ T3704] slab_unreclaimable 0 [ 150.887627][ T3704] slab 0 [ 150.887627][ T3704] workingset_refault_anon 53 [ 150.887627][ T3704] workingset_refault_file 1270 [ 150.887627][ T3704] workingset_activate_anon 0 [ 151.342150][ T3704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1017,pid=3828,uid=0 [ 151.493280][ T3704] Memory cgroup out of memory: Killed process 3828 (syz.3.1017) total-vm:95668kB, anon-rss:1100kB, file-rss:21908kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 151.519204][ T3710] syz.3.980 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.595676][ T3710] CPU: 1 PID: 3710 Comm: syz.3.980 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 151.606945][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.617933][ T3710] Call Trace: [ 151.621308][ T3710] [ 151.624418][ T3710] __dump_stack+0x21/0x30 [ 151.629386][ T3710] dump_stack_lvl+0xee/0x150 [ 151.634222][ T3710] ? show_regs_print_info+0x20/0x20 [ 151.639524][ T3710] ? ___ratelimit+0x3f2/0x570 [ 151.644223][ T3710] dump_stack+0x15/0x20 [ 151.648771][ T3710] dump_header+0xdd/0x650 [ 151.654130][ T3710] oom_kill_process+0x1fa/0x2c0 [ 151.659269][ T3710] out_of_memory+0x649/0xa40 [ 151.664075][ T3710] ? unregister_oom_notifier+0x20/0x20 [ 151.669729][ T3710] ? mutex_lock_killable+0x102/0x1b0 [ 151.675151][ T3710] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 151.681649][ T3710] ? __kasan_check_read+0x11/0x20 [ 151.687117][ T3710] ? psi_group_change+0xa6c/0x10e0 [ 151.692912][ T3710] mem_cgroup_out_of_memory+0x275/0x370 [ 151.698933][ T3710] ? css_next_descendant_pre+0x1ed/0x220 [ 151.705344][ T3710] ? __kasan_check_write+0x14/0x20 [ 151.711111][ T3710] ? mem_cgroup_oom_trylock+0x350/0x350 [ 151.716863][ T3710] ? mem_cgroup_iter+0x4a9/0x6a0 [ 151.721904][ T3710] try_charge_memcg+0xe88/0x1450 [ 151.727901][ T3710] ? __kasan_check_write+0x14/0x20 [ 151.733129][ T3710] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 151.739938][ T3710] ? release_pages+0xfda/0x1030 [ 151.745106][ T3710] charge_memcg+0x6d/0x1a0 [ 151.750093][ T3710] __mem_cgroup_charge+0x37/0x130 [ 151.755571][ T3710] ? shmem_add_to_page_cache+0x61a/0xc30 [ 151.764687][ T3710] shmem_add_to_page_cache+0x62f/0xc30 [ 151.772785][ T3710] ? put_page+0xb0/0xb0 [ 151.776977][ T3710] ? lru_cache_add+0x2c1/0x690 [ 151.782081][ T3710] ? _raw_spin_lock_irq+0x8f/0xe0 [ 151.788007][ T3710] ? _raw_spin_lock_irqsave+0x110/0x110 [ 151.794777][ T3710] ? htab_map_delete_elem+0x3ca/0x4e0 [ 151.801409][ T3710] shmem_getpage_gfp+0x1164/0x2310 [ 151.807248][ T3710] ? __kasan_check_write+0x14/0x20 [ 151.812548][ T3710] shmem_write_begin+0xce/0x1b0 [ 151.817794][ T3710] generic_perform_write+0x2ad/0x670 [ 151.823652][ T3710] ? grab_cache_page_write_begin+0xb0/0xb0 [ 151.830330][ T3710] ? file_remove_privs+0x590/0x590 [ 151.839006][ T3710] ? rwsem_write_trylock+0x130/0x300 [ 151.846637][ T3710] ? clear_nonspinnable+0x60/0x60 [ 151.854200][ T3710] ? follow_page_pte+0x943/0x980 [ 151.861251][ T3710] __generic_file_write_iter+0x268/0x480 [ 151.871200][ T3710] generic_file_write_iter+0xa9/0x1d0 [ 151.879334][ T3710] __kernel_write+0x4e7/0x910 [ 151.887453][ T3710] ? vfs_read+0xbe0/0xbe0 [ 151.893790][ T3710] ? populate_vma_page_range+0xf0/0xf0 [ 151.900167][ T3710] ? _raw_spin_lock+0x8e/0xe0 [ 151.906658][ T3710] ? _raw_spin_trylock_bh+0x130/0x130 [ 151.914795][ T3710] ? preempt_schedule_irq+0xbb/0x110 [ 151.921157][ T3710] __dump_emit+0x240/0x360 [ 151.925854][ T3710] ? wait_for_dump_helpers+0x390/0x390 [ 151.931673][ T3710] ? fault_in_readable+0x160/0x160 [ 151.937571][ T3710] dump_emit+0x383/0x3f0 [ 151.942265][ T3710] dump_user_range+0x86/0x1c0 [ 151.947308][ T3710] elf_core_dump+0x2ae5/0x3020 [ 151.953377][ T3710] ? load_elf_binary+0x2890/0x2890 [ 151.958751][ T3710] ? __kmalloc+0x13d/0x2c0 [ 151.963771][ T3710] ? kvmalloc_node+0x231/0x300 [ 151.968925][ T3710] do_coredump+0x141b/0x2860 [ 151.973617][ T3710] ? simple_acl_create+0x1c0/0x1c0 [ 151.978818][ T3710] ? kmem_cache_free+0x100/0x320 [ 151.984309][ T3710] ? ____kasan_slab_free+0x130/0x160 [ 151.990418][ T3710] ? get_signal+0xb5e/0x1480 [ 151.995551][ T3710] ? kmem_cache_free+0x100/0x320 [ 152.000654][ T3710] get_signal+0x38d/0x1480 [ 152.005362][ T3710] arch_do_signal_or_restart+0xc1/0x10f0 [ 152.011729][ T3710] ? bad_area+0x74/0x90 [ 152.015879][ T3710] ? do_kern_addr_fault+0x80/0x80 [ 152.021244][ T3710] ? get_sigframe_size+0x10/0x10 [ 152.026279][ T3710] exit_to_user_mode_loop+0xa7/0xe0 [ 152.032835][ T3710] exit_to_user_mode_prepare+0x5a/0xa0 [ 152.038566][ T3710] irqentry_exit_to_user_mode+0x9/0x10 [ 152.044820][ T3710] irqentry_exit+0x12/0x40 [ 152.049507][ T3710] exc_page_fault+0x5e/0xb0 [ 152.054190][ T3710] asm_exc_page_fault+0x27/0x30 [ 152.060039][ T3710] RIP: 0033:0x7f413fc7ebf1 [ 152.064741][ T3710] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 152.087056][ T3710] RSP: 002b:0000000000009000 EFLAGS: 00010217 [ 152.093218][ T3710] RAX: 0000000000000000 RBX: 00007f413fea6090 RCX: 00007f413fc7ebe9 [ 152.101829][ T3710] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000000000000 [ 152.110136][ T3710] RBP: 00007f413fd01e19 R08: 0000000000000000 R09: 0000000000000000 [ 152.119432][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.129139][ T3710] R13: 00007f413fea6128 R14: 00007f413fea6090 R15: 00007ffe91531658 [ 152.137500][ T3710] [ 152.165943][ T3710] memory: usage 307200kB, limit 307200kB, failcnt 14034 [ 152.174122][ T3710] memory+swap: usage 430360kB, limit 9007199254740988kB, failcnt 0 [ 152.182365][ T3710] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 152.189533][ T3710] Memory cgroup stats for /syz3: [ 152.189655][ T3710] anon 188416 [ 152.189655][ T3710] file 312504320 [ 152.189655][ T3710] kernel_stack 0 [ 152.189655][ T3710] pagetables 0 [ 152.189655][ T3710] percpu 0 [ 152.189655][ T3710] sock 0 [ 152.189655][ T3710] shmem 312500224 [ 152.189655][ T3710] file_mapped 0 [ 152.189655][ T3710] file_dirty 0 [ 152.189655][ T3710] file_writeback 0 [ 152.189655][ T3710] swapcached 128274432 [ 152.189655][ T3710] anon_thp 0 [ 152.189655][ T3710] file_thp 0 [ 152.189655][ T3710] shmem_thp 0 [ 152.189655][ T3710] inactive_anon 314245120 [ 152.189655][ T3710] active_anon 323584 [ 152.189655][ T3710] inactive_file 4096 [ 152.189655][ T3710] active_file 0 [ 152.189655][ T3710] unevictable 0 [ 152.189655][ T3710] slab_reclaimable 0 [ 152.189655][ T3710] slab_unreclaimable 0 [ 152.189655][ T3710] slab 0 [ 152.189655][ T3710] workingset_refault_anon 53 [ 152.189655][ T3710] workingset_refault_file 1271 [ 152.189655][ T3710] workingset_activate_anon 0 [ 152.362905][ T3710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.980,pid=3741,uid=0 [ 152.379047][ T3710] Memory cgroup out of memory: Killed process 3741 (syz.3.980) total-vm:90044kB, anon-rss:964kB, file-rss:21652kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 152.804322][ T3705] syz.3.980 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 153.032122][ T3705] CPU: 0 PID: 3705 Comm: syz.3.980 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 153.045173][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.055780][ T3705] Call Trace: [ 153.060226][ T3705] [ 153.065813][ T3705] __dump_stack+0x21/0x30 [ 153.071103][ T3705] dump_stack_lvl+0xee/0x150 [ 153.075808][ T3705] ? show_regs_print_info+0x20/0x20 [ 153.081187][ T3705] ? ___ratelimit+0x3f2/0x570 [ 153.085957][ T3705] dump_stack+0x15/0x20 [ 153.090395][ T3705] dump_header+0xdd/0x650 [ 153.094988][ T3705] oom_kill_process+0x1fa/0x2c0 [ 153.100364][ T3705] out_of_memory+0x649/0xa40 [ 153.104967][ T3705] ? unregister_oom_notifier+0x20/0x20 [ 153.110831][ T3705] ? mutex_lock_killable+0x95/0x1b0 [ 153.116144][ T3705] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 153.123113][ T3705] ? __kasan_check_read+0x11/0x20 [ 153.128651][ T3705] ? psi_group_change+0xa6c/0x10e0 [ 153.135853][ T3705] mem_cgroup_out_of_memory+0x275/0x370 [ 153.142810][ T3705] ? css_next_descendant_pre+0x1fe/0x220 [ 153.148802][ T3705] ? __kasan_check_write+0x14/0x20 [ 153.154276][ T3705] ? mem_cgroup_oom_trylock+0x350/0x350 [ 153.160037][ T3705] ? mem_cgroup_iter+0x4a9/0x6a0 [ 153.164965][ T3705] try_charge_memcg+0xe88/0x1450 [ 153.169890][ T3705] ? __kasan_check_write+0x14/0x20 [ 153.175164][ T3705] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 153.181310][ T3705] ? release_pages+0xfda/0x1030 [ 153.186330][ T3705] charge_memcg+0x6d/0x1a0 [ 153.191110][ T3705] __mem_cgroup_charge+0x37/0x130 [ 153.196215][ T3705] ? shmem_add_to_page_cache+0x61a/0xc30 [ 153.202052][ T3705] shmem_add_to_page_cache+0x62f/0xc30 [ 153.207890][ T3705] ? put_page+0xb0/0xb0 [ 153.212128][ T3705] ? lru_cache_add+0x2c1/0x690 [ 153.217181][ T3705] ? _raw_spin_lock_irq+0x8f/0xe0 [ 153.222369][ T3705] ? _raw_spin_lock_irqsave+0x110/0x110 [ 153.228072][ T3705] ? compat_start_thread+0x20/0x20 [ 153.233446][ T3705] shmem_getpage_gfp+0x1164/0x2310 [ 153.238661][ T3705] ? __kasan_check_write+0x14/0x20 [ 153.244407][ T3705] shmem_write_begin+0xce/0x1b0 [ 153.249435][ T3705] generic_perform_write+0x2ad/0x670 [ 153.255188][ T3705] ? grab_cache_page_write_begin+0xb0/0xb0 [ 153.261535][ T3705] ? file_remove_privs+0x590/0x590 [ 153.266983][ T3705] ? rwsem_write_trylock+0x130/0x300 [ 153.272450][ T3705] ? clear_nonspinnable+0x60/0x60 [ 153.277919][ T3705] ? follow_page_pte+0x943/0x980 [ 153.283232][ T3705] __generic_file_write_iter+0x268/0x480 [ 153.289270][ T3705] generic_file_write_iter+0xa9/0x1d0 [ 153.294978][ T3705] __kernel_write+0x4e7/0x910 [ 153.300074][ T3705] ? vfs_read+0xbe0/0xbe0 [ 153.304513][ T3705] ? populate_vma_page_range+0xf0/0xf0 [ 153.310136][ T3705] __dump_emit+0x240/0x360 [ 153.314552][ T3705] ? wait_for_dump_helpers+0x390/0x390 [ 153.320198][ T3705] ? fault_in_readable+0x160/0x160 [ 153.325829][ T3705] dump_emit+0x383/0x3f0 [ 153.330284][ T3705] dump_user_range+0x86/0x1c0 [ 153.335127][ T3705] elf_core_dump+0x2ae5/0x3020 [ 153.340493][ T3705] ? load_elf_binary+0x2890/0x2890 [ 153.345850][ T3705] ? __kmalloc+0x13d/0x2c0 [ 153.350735][ T3705] ? kvmalloc_node+0x231/0x300 [ 153.356132][ T3705] do_coredump+0x141b/0x2860 [ 153.361361][ T3705] ? simple_acl_create+0x1c0/0x1c0 [ 153.367026][ T3705] ? kmem_cache_free+0x100/0x320 [ 153.372007][ T3705] ? ____kasan_slab_free+0x130/0x160 [ 153.377633][ T3705] ? get_signal+0xb5e/0x1480 [ 153.382392][ T3705] ? kmem_cache_free+0x100/0x320 [ 153.387608][ T3705] get_signal+0x38d/0x1480 [ 153.392397][ T3705] arch_do_signal_or_restart+0xc1/0x10f0 [ 153.398020][ T3705] ? bad_area+0x74/0x90 [ 153.402257][ T3705] ? do_kern_addr_fault+0x80/0x80 [ 153.407459][ T3705] ? get_sigframe_size+0x10/0x10 [ 153.412591][ T3705] exit_to_user_mode_loop+0xa7/0xe0 [ 153.417886][ T3705] exit_to_user_mode_prepare+0x5a/0xa0 [ 153.423329][ T3705] irqentry_exit_to_user_mode+0x9/0x10 [ 153.429508][ T3705] irqentry_exit+0x12/0x40 [ 153.434449][ T3705] exc_page_fault+0x5e/0xb0 [ 153.439160][ T3705] asm_exc_page_fault+0x27/0x30 [ 153.444345][ T3705] RIP: 0033:0x7f413fc7ebf1 [ 153.448759][ T3705] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 153.468815][ T3705] RSP: 002b:0000000000009000 EFLAGS: 00010217 [ 153.475654][ T3705] RAX: 0000000000000000 RBX: 00007f413fea6090 RCX: 00007f413fc7ebe9 [ 153.483873][ T3705] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000000000000 [ 153.492289][ T3705] RBP: 00007f413fd01e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.500792][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.509296][ T3705] R13: 00007f413fea6128 R14: 00007f413fea6090 R15: 00007ffe91531658 [ 153.518096][ T3705] [ 153.525538][ T3705] memory: usage 307200kB, limit 307200kB, failcnt 15061 [ 153.541386][ T3705] memory+swap: usage 429692kB, limit 9007199254740988kB, failcnt 0 [ 153.549747][ T3705] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.570560][ T3705] Memory cgroup stats for /syz3: [ 153.570711][ T3705] anon 188416 [ 153.570711][ T3705] file 311390208 [ 153.570711][ T3705] kernel_stack 0 [ 153.570711][ T3705] pagetables 0 [ 153.570711][ T3705] percpu 0 [ 153.570711][ T3705] sock 0 [ 153.570711][ T3705] shmem 311390208 [ 153.570711][ T3705] file_mapped 0 [ 153.570711][ T3705] file_dirty 0 [ 153.570711][ T3705] file_writeback 0 [ 153.570711][ T3705] swapcached 135327744 [ 153.570711][ T3705] anon_thp 0 [ 153.570711][ T3705] file_thp 0 [ 153.570711][ T3705] shmem_thp 0 [ 153.570711][ T3705] inactive_anon 313524224 [ 153.570711][ T3705] active_anon 614400 [ 153.570711][ T3705] inactive_file 0 [ 153.570711][ T3705] active_file 0 [ 153.570711][ T3705] unevictable 0 [ 153.570711][ T3705] slab_reclaimable 0 [ 153.570711][ T3705] slab_unreclaimable 0 [ 153.570711][ T3705] slab 0 [ 153.570711][ T3705] workingset_refault_anon 53 [ 153.570711][ T3705] workingset_refault_file 1336 [ 153.570711][ T3705] workingset_activate_anon 0 [ 153.704812][ T3899] FAULT_INJECTION: forcing a failure. [ 153.704812][ T3899] name failslab, interval 1, probability 0, space 0, times 0 [ 153.769140][ T3899] CPU: 0 PID: 3899 Comm: syz.0.1039 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 153.779442][ T3899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.789864][ T3899] Call Trace: [ 153.793248][ T3899] [ 153.796447][ T3899] __dump_stack+0x21/0x30 [ 153.801108][ T3899] dump_stack_lvl+0xee/0x150 [ 153.806017][ T3899] ? show_regs_print_info+0x20/0x20 [ 153.810294][ T3705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 153.811557][ T3899] dump_stack+0x15/0x20 [ 153.811579][ T3899] should_fail+0x3c1/0x510 [ 153.811595][ T3899] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.811614][ T3899] __should_failslab+0xa4/0xe0 [ 153.811638][ T3899] should_failslab+0x9/0x20 [ 153.811652][ T3899] slab_pre_alloc_hook+0x3b/0xe0 [ 153.819716][ T3705] ,cpuset= [ 153.823503][ T3899] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.823530][ T3899] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.823545][ T3899] __kmalloc_track_caller+0x6c/0x2c0 [ 153.823562][ T3899] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.823577][ T3899] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.823591][ T3899] __alloc_skb+0x21a/0x740 [ 153.823607][ T3899] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 153.823624][ T3899] rtnetlink_event+0xd2/0x1a0 [ 153.840053][ T3705] syz3 [ 153.842055][ T3899] raw_notifier_call_chain+0x90/0x100 [ 153.850466][ T3705] ,mems_allowed=0 [ 153.853933][ T3899] dev_set_mac_address+0x318/0x420 [ 153.853966][ T3899] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 153.870171][ T3705] ,oom_memcg= [ 153.871146][ T3899] dev_set_mac_address_user+0x31/0x50 [ 153.878468][ T3705] /syz3 [ 153.884737][ T3899] dev_ifsioc+0x757/0xe70 [ 153.909949][ T3705] ,task_memcg= [ 153.910024][ T3899] ? dev_ioctl+0xd10/0xd10 [ 153.915434][ T3705] /syz3 [ 153.919158][ T3899] ? __kasan_check_write+0x14/0x20 [ 153.939970][ T3705] ,task=syz.3.980,pid=3722,uid=0 [ 153.943288][ T3899] ? mutex_lock+0x95/0x1a0 [ 153.948272][ T3705] Memory cgroup out of memory: Killed process 3722 (syz.3.980) total-vm:89912kB, anon-rss:976kB, file-rss:21656kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 153.951722][ T3899] ? wait_for_completion_killable_timeout+0x10/0x10 [ 153.951750][ T3899] ? dev_get_by_name_rcu+0xc8/0xf0 [ 154.004840][ T3899] dev_ioctl+0x560/0xd10 [ 154.009371][ T3899] sock_do_ioctl+0x22e/0x300 [ 154.014946][ T3899] ? sock_show_fdinfo+0xa0/0xa0 [ 154.020355][ T3899] ? queue_stack_map_push_elem+0x336/0x530 [ 154.026697][ T3899] ? selinux_file_ioctl+0x377/0x480 [ 154.032299][ T3899] sock_ioctl+0x4bc/0x6b0 [ 154.036651][ T3899] ? sock_poll+0x3d0/0x3d0 [ 154.041692][ T3899] ? __fget_files+0x2c4/0x320 [ 154.046860][ T3899] ? security_file_ioctl+0x84/0xa0 [ 154.052124][ T3899] ? sock_poll+0x3d0/0x3d0 [ 154.057186][ T3899] __se_sys_ioctl+0x121/0x1a0 [ 154.062157][ T3899] __x64_sys_ioctl+0x7b/0x90 [ 154.067008][ T3899] x64_sys_call+0x2f/0x9a0 [ 154.071523][ T3899] do_syscall_64+0x4c/0xa0 [ 154.076356][ T3899] ? clear_bhb_loop+0x50/0xa0 [ 154.081669][ T3899] ? clear_bhb_loop+0x50/0xa0 [ 154.086591][ T3899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.093010][ T3899] RIP: 0033:0x7f7514d3ebe9 [ 154.097994][ T3899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.120408][ T3899] RSP: 002b:00007f75137a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.131761][ T3899] RAX: ffffffffffffffda RBX: 00007f7514f65fa0 RCX: 00007f7514d3ebe9 [ 154.142207][ T3899] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 154.151395][ T3899] RBP: 00007f75137a7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.159826][ T3899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.168186][ T3899] R13: 00007f7514f66038 R14: 00007f7514f65fa0 R15: 00007fffb62a61a8 [ 154.177752][ T3899] [ 156.211845][ T3959] FAULT_INJECTION: forcing a failure. [ 156.211845][ T3959] name failslab, interval 1, probability 0, space 0, times 0 [ 156.239992][ T3959] CPU: 1 PID: 3959 Comm: syz.4.1059 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 156.251590][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.262875][ T3959] Call Trace: [ 156.266327][ T3959] [ 156.269694][ T3959] __dump_stack+0x21/0x30 [ 156.274247][ T3959] dump_stack_lvl+0xee/0x150 [ 156.279604][ T3959] ? show_regs_print_info+0x20/0x20 [ 156.285998][ T3959] ? skb_put+0x10e/0x1f0 [ 156.291756][ T3959] ? memcpy+0x56/0x70 [ 156.295832][ T3959] dump_stack+0x15/0x20 [ 156.301018][ T3959] should_fail+0x3c1/0x510 [ 156.306137][ T3959] ? netlink_trim+0x193/0x230 [ 156.311090][ T3959] __should_failslab+0xa4/0xe0 [ 156.316594][ T3959] should_failslab+0x9/0x20 [ 156.323239][ T3959] slab_pre_alloc_hook+0x3b/0xe0 [ 156.331956][ T3959] ? netlink_trim+0x193/0x230 [ 156.337433][ T3959] ? netlink_trim+0x193/0x230 [ 156.342318][ T3959] __kmalloc_track_caller+0x6c/0x2c0 [ 156.348966][ T3959] ? netlink_trim+0x193/0x230 [ 156.353957][ T3959] ? netlink_trim+0x193/0x230 [ 156.359669][ T3959] pskb_expand_head+0x11b/0x11d0 [ 156.364795][ T3959] netlink_trim+0x193/0x230 [ 156.369723][ T3959] netlink_broadcast_filtered+0x78/0x1230 [ 156.375706][ T3959] ? rtmsg_ifinfo_build_skb+0xd8/0x180 [ 156.381675][ T3959] nlmsg_notify+0xed/0x1b0 [ 156.386306][ T3959] rtnetlink_event+0x13a/0x1a0 [ 156.391320][ T3959] raw_notifier_call_chain+0x90/0x100 [ 156.397894][ T3959] dev_set_mac_address+0x318/0x420 [ 156.403187][ T3959] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 156.409251][ T3959] dev_set_mac_address_user+0x31/0x50 [ 156.414925][ T3959] dev_ifsioc+0x757/0xe70 [ 156.419265][ T3959] ? dev_ioctl+0xd10/0xd10 [ 156.423866][ T3959] ? __mutex_lock_slowpath+0xe/0x10 [ 156.429286][ T3959] ? mutex_lock+0x100/0x1a0 [ 156.434061][ T3959] ? wait_for_completion_killable_timeout+0x10/0x10 [ 156.441095][ T3959] ? dev_get_by_name_rcu+0xc8/0xf0 [ 156.446470][ T3959] dev_ioctl+0x560/0xd10 [ 156.450793][ T3959] sock_do_ioctl+0x22e/0x300 [ 156.455554][ T3959] ? sock_show_fdinfo+0xa0/0xa0 [ 156.460566][ T3959] ? queue_stack_map_push_elem+0x336/0x530 [ 156.466537][ T3959] ? selinux_file_ioctl+0x377/0x480 [ 156.471722][ T3959] ? queue_stack_map_delete_elem+0x10/0x10 [ 156.477717][ T3959] sock_ioctl+0x4bc/0x6b0 [ 156.482739][ T3959] ? sock_poll+0x3d0/0x3d0 [ 156.487759][ T3959] ? __fget_files+0x2c4/0x320 [ 156.492811][ T3959] ? security_file_ioctl+0x84/0xa0 [ 156.499244][ T3959] ? sock_poll+0x3d0/0x3d0 [ 156.504377][ T3959] __se_sys_ioctl+0x121/0x1a0 [ 156.509928][ T3959] __x64_sys_ioctl+0x7b/0x90 [ 156.515253][ T3959] x64_sys_call+0x2f/0x9a0 [ 156.519888][ T3959] do_syscall_64+0x4c/0xa0 [ 156.524392][ T3959] ? clear_bhb_loop+0x50/0xa0 [ 156.530265][ T3959] ? clear_bhb_loop+0x50/0xa0 [ 156.535712][ T3959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.542917][ T3959] RIP: 0033:0x7f97334ffbe9 [ 156.548873][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.571270][ T3959] RSP: 002b:00007f9731f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.581019][ T3959] RAX: ffffffffffffffda RBX: 00007f9733726fa0 RCX: 00007f97334ffbe9 [ 156.590195][ T3959] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 156.598761][ T3959] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 156.607277][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.615438][ T3959] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 156.623889][ T3959] [ 158.579773][ T4012] FAULT_INJECTION: forcing a failure. [ 158.579773][ T4012] name failslab, interval 1, probability 0, space 0, times 0 [ 158.594420][ T4012] CPU: 1 PID: 4012 Comm: syz.3.1073 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 158.605701][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.616682][ T4012] Call Trace: [ 158.620073][ T4012] [ 158.623264][ T4012] __dump_stack+0x21/0x30 [ 158.628058][ T4012] dump_stack_lvl+0xee/0x150 [ 158.633000][ T4012] ? show_regs_print_info+0x20/0x20 [ 158.638767][ T4012] dump_stack+0x15/0x20 [ 158.643188][ T4012] should_fail+0x3c1/0x510 [ 158.647606][ T4012] ? fdb_notify+0x78/0x130 [ 158.652135][ T4012] __should_failslab+0xa4/0xe0 [ 158.657062][ T4012] should_failslab+0x9/0x20 [ 158.661847][ T4012] slab_pre_alloc_hook+0x3b/0xe0 [ 158.667061][ T4012] ? fdb_notify+0x78/0x130 [ 158.671810][ T4012] ? fdb_notify+0x78/0x130 [ 158.676312][ T4012] __kmalloc_track_caller+0x6c/0x2c0 [ 158.681869][ T4012] ? fdb_notify+0x78/0x130 [ 158.686830][ T4012] ? fdb_notify+0x78/0x130 [ 158.691907][ T4012] __alloc_skb+0x21a/0x740 [ 158.696498][ T4012] fdb_notify+0x78/0x130 [ 158.701019][ T4012] fdb_delete+0x896/0xb00 [ 158.705345][ T4012] fdb_delete_local+0x3c8/0x480 [ 158.710255][ T4012] br_fdb_changeaddr+0x1b3/0x1c0 [ 158.715438][ T4012] br_device_event+0x335/0x790 [ 158.720376][ T4012] ? br_boolopt_multi_get+0xf0/0xf0 [ 158.725919][ T4012] ? packet_notifier+0x8bc/0x8d0 [ 158.731016][ T4012] ? addrconf_notify+0x37b/0xde0 [ 158.736601][ T4012] raw_notifier_call_chain+0x90/0x100 [ 158.742574][ T4012] dev_set_mac_address+0x318/0x420 [ 158.748517][ T4012] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 158.754729][ T4012] dev_set_mac_address_user+0x31/0x50 [ 158.760361][ T4012] dev_ifsioc+0x757/0xe70 [ 158.764851][ T4012] ? dev_ioctl+0xd10/0xd10 [ 158.769898][ T4012] ? __kasan_check_write+0x14/0x20 [ 158.775100][ T4012] ? mutex_lock+0x95/0x1a0 [ 158.780024][ T4012] ? wait_for_completion_killable_timeout+0x10/0x10 [ 158.787873][ T4012] ? dev_get_by_name_rcu+0xc8/0xf0 [ 158.793260][ T4012] dev_ioctl+0x560/0xd10 [ 158.797724][ T4012] sock_do_ioctl+0x22e/0x300 [ 158.802407][ T4012] ? sock_show_fdinfo+0xa0/0xa0 [ 158.807720][ T4012] ? selinux_file_ioctl+0x377/0x480 [ 158.813086][ T4012] sock_ioctl+0x4bc/0x6b0 [ 158.817850][ T4012] ? sock_poll+0x3d0/0x3d0 [ 158.822484][ T4012] ? __fget_files+0x2c4/0x320 [ 158.827609][ T4012] ? security_file_ioctl+0x84/0xa0 [ 158.833137][ T4012] ? sock_poll+0x3d0/0x3d0 [ 158.837928][ T4012] __se_sys_ioctl+0x121/0x1a0 [ 158.843052][ T4012] __x64_sys_ioctl+0x7b/0x90 [ 158.848100][ T4012] x64_sys_call+0x2f/0x9a0 [ 158.853386][ T4012] do_syscall_64+0x4c/0xa0 [ 158.858315][ T4012] ? clear_bhb_loop+0x50/0xa0 [ 158.863633][ T4012] ? clear_bhb_loop+0x50/0xa0 [ 158.868771][ T4012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.875527][ T4012] RIP: 0033:0x7f413fc7ebe9 [ 158.880057][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.902246][ T4012] RSP: 002b:00007f413e6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.911436][ T4012] RAX: ffffffffffffffda RBX: 00007f413fea5fa0 RCX: 00007f413fc7ebe9 [ 158.919890][ T4012] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 158.928032][ T4012] RBP: 00007f413e6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.936440][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.944938][ T4012] R13: 00007f413fea6038 R14: 00007f413fea5fa0 R15: 00007ffe91531658 [ 158.953259][ T4012] [ 159.950701][ T4054] FAULT_INJECTION: forcing a failure. [ 159.950701][ T4054] name failslab, interval 1, probability 0, space 0, times 0 [ 159.967129][ T4054] CPU: 1 PID: 4054 Comm: syz.1.1085 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 159.979985][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.990494][ T4054] Call Trace: [ 159.994557][ T4054] [ 159.997860][ T4054] __dump_stack+0x21/0x30 [ 160.002703][ T4054] dump_stack_lvl+0xee/0x150 [ 160.007504][ T4054] ? show_regs_print_info+0x20/0x20 [ 160.013716][ T4054] dump_stack+0x15/0x20 [ 160.018458][ T4054] should_fail+0x3c1/0x510 [ 160.024046][ T4054] __should_failslab+0xa4/0xe0 [ 160.030585][ T4054] should_failslab+0x9/0x20 [ 160.036292][ T4054] slab_pre_alloc_hook+0x3b/0xe0 [ 160.042152][ T4054] ? fdb_create+0x37/0xdb0 [ 160.048594][ T4054] kmem_cache_alloc+0x44/0x260 [ 160.055407][ T4054] fdb_create+0x37/0xdb0 [ 160.060284][ T4054] ? br_fdb_find_rcu+0x30/0x30 [ 160.065729][ T4054] ? fdb_delete_local+0x3c8/0x480 [ 160.071877][ T4054] fdb_insert+0x140/0x260 [ 160.077259][ T4054] br_fdb_changeaddr+0x187/0x1c0 [ 160.082501][ T4054] br_device_event+0x335/0x790 [ 160.087720][ T4054] ? br_boolopt_multi_get+0xf0/0xf0 [ 160.093300][ T4054] ? packet_notifier+0x8bc/0x8d0 [ 160.098428][ T4054] ? addrconf_notify+0x37b/0xde0 [ 160.104131][ T4054] raw_notifier_call_chain+0x90/0x100 [ 160.110138][ T4054] dev_set_mac_address+0x318/0x420 [ 160.115501][ T4054] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 160.121617][ T4054] dev_set_mac_address_user+0x31/0x50 [ 160.127962][ T4054] dev_ifsioc+0x757/0xe70 [ 160.133533][ T4054] ? dev_ioctl+0xd10/0xd10 [ 160.138693][ T4054] ? __kasan_check_write+0x14/0x20 [ 160.144817][ T4054] ? mutex_lock+0x95/0x1a0 [ 160.150188][ T4054] ? wait_for_completion_killable_timeout+0x10/0x10 [ 160.157176][ T4054] ? dev_get_by_name_rcu+0xc8/0xf0 [ 160.162744][ T4054] dev_ioctl+0x560/0xd10 [ 160.167392][ T4054] sock_do_ioctl+0x22e/0x300 [ 160.172290][ T4054] ? sock_show_fdinfo+0xa0/0xa0 [ 160.177459][ T4054] ? selinux_file_ioctl+0x377/0x480 [ 160.182756][ T4054] sock_ioctl+0x4bc/0x6b0 [ 160.187921][ T4054] ? sock_poll+0x3d0/0x3d0 [ 160.192923][ T4054] ? __fget_files+0x2c4/0x320 [ 160.198578][ T4054] ? security_file_ioctl+0x84/0xa0 [ 160.204873][ T4054] ? sock_poll+0x3d0/0x3d0 [ 160.209743][ T4054] __se_sys_ioctl+0x121/0x1a0 [ 160.214878][ T4054] __x64_sys_ioctl+0x7b/0x90 [ 160.219836][ T4054] x64_sys_call+0x2f/0x9a0 [ 160.224824][ T4054] do_syscall_64+0x4c/0xa0 [ 160.230255][ T4054] ? clear_bhb_loop+0x50/0xa0 [ 160.235595][ T4054] ? clear_bhb_loop+0x50/0xa0 [ 160.241210][ T4054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.251638][ T4054] RIP: 0033:0x7f5e9ecfbbe9 [ 160.256674][ T4054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.283607][ T4054] RSP: 002b:00007f5e9d764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.295763][ T4054] RAX: ffffffffffffffda RBX: 00007f5e9ef22fa0 RCX: 00007f5e9ecfbbe9 [ 160.305602][ T4054] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 160.314486][ T4054] RBP: 00007f5e9d764090 R08: 0000000000000000 R09: 0000000000000000 [ 160.322898][ T4054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.332568][ T4054] R13: 00007f5e9ef23038 R14: 00007f5e9ef22fa0 R15: 00007ffeeb3c65d8 [ 160.341451][ T4054] [ 161.338533][ T4117] device sit0 entered promiscuous mode [ 161.406014][ T30] audit: type=1400 audit(1755141138.655:141): avc: denied { write } for pid=4120 comm="syz.0.1106" name="cgroup.subtree_control" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.432180][ T30] audit: type=1400 audit(1755141138.655:142): avc: denied { open } for pid=4120 comm="syz.0.1106" path="" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.457892][ T30] audit: type=1400 audit(1755141138.655:143): avc: denied { ioctl } for pid=4120 comm="syz.0.1106" path="" dev="cgroup2" ino=174 ioctlcmd=0x54c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.166410][ T4209] syz.0.1133[4209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.166522][ T4209] syz.0.1133[4209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.321866][ T4217] device sit0 left promiscuous mode [ 164.651008][ T4250] FAULT_INJECTION: forcing a failure. [ 164.651008][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 164.830209][ T4250] CPU: 1 PID: 4250 Comm: syz.4.1144 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 164.841508][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.852917][ T4250] Call Trace: [ 164.856230][ T4250] [ 164.859301][ T4250] __dump_stack+0x21/0x30 [ 164.863989][ T4250] dump_stack_lvl+0xee/0x150 [ 164.868780][ T4250] ? show_regs_print_info+0x20/0x20 [ 164.874342][ T4250] ? __kasan_check_write+0x14/0x20 [ 164.879727][ T4250] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 164.885415][ T4250] dump_stack+0x15/0x20 [ 164.889688][ T4250] should_fail+0x3c1/0x510 [ 164.894214][ T4250] __should_failslab+0xa4/0xe0 [ 164.899359][ T4250] should_failslab+0x9/0x20 [ 164.904216][ T4250] slab_pre_alloc_hook+0x3b/0xe0 [ 164.909500][ T4250] ? getname_flags+0xb9/0x500 [ 164.914291][ T4250] kmem_cache_alloc+0x44/0x260 [ 164.919421][ T4250] getname_flags+0xb9/0x500 [ 164.924126][ T4250] getname+0x19/0x20 [ 164.928791][ T4250] do_sys_openat2+0xd9/0x7b0 [ 164.933968][ T4250] ? do_sys_open+0xe0/0xe0 [ 164.938846][ T4250] ? bpf_trace_run1+0x1b0/0x1b0 [ 164.943905][ T4250] ? ksys_write+0x1eb/0x240 [ 164.948968][ T4250] ? __ia32_sys_read+0x90/0x90 [ 164.953865][ T4250] __x64_sys_openat+0x136/0x160 [ 164.959079][ T4250] x64_sys_call+0x219/0x9a0 [ 164.963931][ T4250] do_syscall_64+0x4c/0xa0 [ 164.968796][ T4250] ? clear_bhb_loop+0x50/0xa0 [ 164.973550][ T4250] ? clear_bhb_loop+0x50/0xa0 [ 164.978216][ T4250] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.984364][ T4250] RIP: 0033:0x7f97334ffbe9 [ 164.988957][ T4250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.009940][ T4250] RSP: 002b:00007f9731f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.018692][ T4250] RAX: ffffffffffffffda RBX: 00007f9733726fa0 RCX: 00007f97334ffbe9 [ 165.027104][ T4250] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 165.036339][ T4250] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 165.044939][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.053677][ T4250] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 165.062552][ T4250] [ 165.944559][ T4289] device veth0_vlan left promiscuous mode [ 166.004108][ T4289] device veth0_vlan entered promiscuous mode [ 166.061157][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.100618][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.181305][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.273260][ T4299] FAULT_INJECTION: forcing a failure. [ 166.273260][ T4299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.299025][ T4299] CPU: 1 PID: 4299 Comm: syz.2.1158 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 166.310815][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.323244][ T4299] Call Trace: [ 166.326718][ T4299] [ 166.330368][ T4299] __dump_stack+0x21/0x30 [ 166.335274][ T4299] dump_stack_lvl+0xee/0x150 [ 166.340340][ T4299] ? show_regs_print_info+0x20/0x20 [ 166.345928][ T4299] dump_stack+0x15/0x20 [ 166.350339][ T4299] should_fail+0x3c1/0x510 [ 166.355024][ T4299] should_fail_usercopy+0x1a/0x20 [ 166.360471][ T4299] strncpy_from_user+0x24/0x2e0 [ 166.365530][ T4299] ? kmem_cache_alloc+0xf7/0x260 [ 166.370615][ T4299] getname_flags+0xf4/0x500 [ 166.375112][ T4299] getname+0x19/0x20 [ 166.379086][ T4299] do_sys_openat2+0xd9/0x7b0 [ 166.383935][ T4299] ? __kasan_check_write+0x14/0x20 [ 166.389391][ T4299] ? fput_many+0x15a/0x1a0 [ 166.394094][ T4299] ? do_sys_open+0xe0/0xe0 [ 166.398636][ T4299] ? fput+0x1a/0x20 [ 166.402665][ T4299] ? ksys_write+0x1eb/0x240 [ 166.407409][ T4299] ? __ia32_sys_read+0x90/0x90 [ 166.412354][ T4299] __x64_sys_openat+0x136/0x160 [ 166.417204][ T4299] x64_sys_call+0x219/0x9a0 [ 166.421975][ T4299] do_syscall_64+0x4c/0xa0 [ 166.426675][ T4299] ? clear_bhb_loop+0x50/0xa0 [ 166.431550][ T4299] ? clear_bhb_loop+0x50/0xa0 [ 166.436531][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.442520][ T4299] RIP: 0033:0x7fa8d069cbe9 [ 166.447291][ T4299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.467886][ T4299] RSP: 002b:00007fa8cf105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.476935][ T4299] RAX: ffffffffffffffda RBX: 00007fa8d08c3fa0 RCX: 00007fa8d069cbe9 [ 166.485618][ T4299] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 166.493942][ T4299] RBP: 00007fa8cf105090 R08: 0000000000000000 R09: 0000000000000000 [ 166.502792][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.511415][ T4299] R13: 00007fa8d08c4038 R14: 00007fa8d08c3fa0 R15: 00007ffeccbafe38 [ 166.520098][ T4299] [ 167.016332][ T4336] device sit0 left promiscuous mode [ 167.199655][ T4336] device sit0 entered promiscuous mode [ 168.737950][ T4386] device sit0 left promiscuous mode [ 168.764926][ T4386] device sit0 entered promiscuous mode [ 169.003550][ T30] audit: type=1400 audit(1755141146.255:144): avc: denied { create } for pid=4399 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.035108][ T4454] device sit0 entered promiscuous mode [ 170.965451][ T4497] device sit0 left promiscuous mode [ 171.340058][ T4495] device sit0 entered promiscuous mode [ 171.444460][ T4505] FAULT_INJECTION: forcing a failure. [ 171.444460][ T4505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.496804][ T4505] CPU: 0 PID: 4505 Comm: syz.4.1219 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 171.508877][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.520451][ T4505] Call Trace: [ 171.524062][ T4505] [ 171.527473][ T4505] __dump_stack+0x21/0x30 [ 171.532435][ T4505] dump_stack_lvl+0xee/0x150 [ 171.537187][ T4505] ? show_regs_print_info+0x20/0x20 [ 171.542484][ T4505] ? format_decode+0x1bb/0x1520 [ 171.547492][ T4505] dump_stack+0x15/0x20 [ 171.551658][ T4505] should_fail+0x3c1/0x510 [ 171.556545][ T4505] should_fail_usercopy+0x1a/0x20 [ 171.561915][ T4505] _copy_from_user+0x20/0xd0 [ 171.566711][ T4505] kstrtouint_from_user+0xbe/0x200 [ 171.572436][ T4505] ? kstrtol_from_user+0x260/0x260 [ 171.577671][ T4505] ? 0xffffffff81000000 [ 171.583059][ T4505] ? _copy_to_user+0x78/0x90 [ 171.587939][ T4505] ? simple_read_from_buffer+0x10f/0x160 [ 171.594096][ T4505] proc_fail_nth_write+0x85/0x1f0 [ 171.599621][ T4505] ? proc_fail_nth_read+0x210/0x210 [ 171.605374][ T4505] ? security_file_permission+0x79/0xa0 [ 171.611205][ T4505] ? security_file_permission+0x83/0xa0 [ 171.617024][ T4505] ? proc_fail_nth_read+0x210/0x210 [ 171.622491][ T4505] vfs_write+0x3ee/0xf70 [ 171.626825][ T4505] ? file_end_write+0x1b0/0x1b0 [ 171.632191][ T4505] ? __kasan_check_write+0x14/0x20 [ 171.637615][ T4505] ? mutex_lock+0x95/0x1a0 [ 171.642594][ T4505] ? wait_for_completion_killable_timeout+0x10/0x10 [ 171.650222][ T4505] ? __fget_files+0x2c4/0x320 [ 171.656186][ T4505] ? __fdget_pos+0x2d2/0x380 [ 171.660974][ T4505] ? ksys_write+0x71/0x240 [ 171.665840][ T4505] ksys_write+0x140/0x240 [ 171.670450][ T4505] ? __ia32_sys_read+0x90/0x90 [ 171.676062][ T4505] ? debug_smp_processor_id+0x17/0x20 [ 171.681792][ T4505] __x64_sys_write+0x7b/0x90 [ 171.686650][ T4505] x64_sys_call+0x8ef/0x9a0 [ 171.691577][ T4505] do_syscall_64+0x4c/0xa0 [ 171.696465][ T4505] ? clear_bhb_loop+0x50/0xa0 [ 171.701528][ T4505] ? clear_bhb_loop+0x50/0xa0 [ 171.706501][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.712848][ T4505] RIP: 0033:0x7f97334fe69f [ 171.717812][ T4505] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.740955][ T4505] RSP: 002b:00007f9731f68030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.749843][ T4505] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97334fe69f [ 171.759132][ T4505] RDX: 0000000000000001 RSI: 00007f9731f680a0 RDI: 0000000000000003 [ 171.768231][ T4505] RBP: 00007f9731f68090 R08: 0000000000000000 R09: 0000000000000000 [ 171.777062][ T4505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 171.786051][ T4505] R13: 00007f9733727038 R14: 00007f9733726fa0 R15: 00007fffc2edddc8 [ 171.796520][ T4505] [ 172.251694][ T30] audit: type=1400 audit(1755141149.475:145): avc: denied { create } for pid=4517 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 172.491784][ T30] audit: type=1400 audit(1755141149.745:146): avc: denied { create } for pid=4536 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.554968][ T4600] device sit0 left promiscuous mode [ 174.582660][ T30] audit: type=1400 audit(1755141151.835:147): avc: denied { read } for pid=4614 comm="syz.1.1256" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.681271][ T4609] device sit0 entered promiscuous mode [ 174.750210][ T30] audit: type=1400 audit(1755141151.865:148): avc: denied { open } for pid=4614 comm="syz.1.1256" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.086774][ T4666] device wg2 entered promiscuous mode [ 177.288638][ T30] audit: type=1400 audit(1755141154.535:149): avc: denied { create } for pid=4722 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.886522][ T4822] device macsec0 left promiscuous mode [ 179.919149][ T4814] device wg2 entered promiscuous mode [ 180.745744][ T30] audit: type=1400 audit(1755141157.995:150): avc: denied { append } for pid=4856 comm="syz.0.1321" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 181.725132][ T4898] device wg2 entered promiscuous mode [ 184.070802][ T4958] device veth0_vlan left promiscuous mode [ 184.120976][ T4958] device veth0_vlan entered promiscuous mode [ 184.243190][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.280952][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 184.338298][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.545829][ T4995] syz.2.1359[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.545928][ T4995] syz.2.1359[4995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.937087][ T5009] device sit0 left promiscuous mode [ 187.138737][ T5010] device sit0 entered promiscuous mode [ 187.615791][ T5014] bond_slave_1: mtu less than device minimum [ 188.934898][ T5053] device sit0 left promiscuous mode [ 191.732194][ T5137] device veth0_vlan left promiscuous mode [ 191.777917][ T5137] device veth0_vlan entered promiscuous mode [ 191.835360][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.848061][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.856965][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 192.697502][ T5182] ref_ctr_offset mismatch. inode: 0x6a0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 192.729149][ T5182] GPL: port 1(erspan0) entered blocking state [ 192.742169][ T5182] GPL: port 1(erspan0) entered disabled state [ 192.749396][ T5182] device erspan0 entered promiscuous mode [ 192.916510][ T5182] GPL: port 1(erspan0) entered blocking state [ 192.925201][ T5182] GPL: port 1(erspan0) entered forwarding state [ 194.218068][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): GPL: link becomes ready [ 194.463632][ T30] audit: type=1400 audit(1755141171.715:151): avc: denied { ioctl } for pid=5215 comm="syz.2.1423" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 197.556094][ T30] audit: type=1400 audit(1755141174.805:152): avc: denied { create } for pid=5258 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 199.287017][ T5270] GPL: port 2(veth0_to_team) entered blocking state [ 199.297046][ T5270] GPL: port 2(veth0_to_team) entered disabled state [ 199.304956][ T5270] device veth0_to_team entered promiscuous mode [ 201.067363][ T5292] device veth0_vlan left promiscuous mode [ 201.160018][ T5292] device veth0_vlan entered promiscuous mode [ 201.239255][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.248188][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.286353][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.919432][ T5306] device wg2 left promiscuous mode [ 202.182149][ T5313] bridge0: port 3(veth0) entered blocking state [ 202.189056][ T5313] bridge0: port 3(veth0) entered disabled state [ 202.330843][ T5313] device veth0 entered promiscuous mode [ 204.158054][ T30] audit: type=1400 audit(1755141181.405:153): avc: denied { create } for pid=5404 comm="syz.2.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.248563][ T30] audit: type=1400 audit(1755141181.455:154): avc: denied { create } for pid=5393 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 207.148867][ T5568] device sit0 left promiscuous mode [ 207.214289][ T5568] device sit0 entered promiscuous mode [ 209.286931][ T5639] device wg2 left promiscuous mode [ 210.335647][ T5663] ------------[ cut here ]------------ [ 210.412012][ T5663] trace type BPF program uses run-time allocation [ 210.552050][ T5663] WARNING: CPU: 0 PID: 5663 at kernel/bpf/verifier.c:11718 check_map_prog_compatibility+0x6cd/0x870 [ 210.831954][ T5663] Modules linked in: [ 210.899315][ T5663] CPU: 0 PID: 5663 Comm: syz.0.1552 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 211.220285][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.289764][ T5663] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 211.422937][ T5663] Code: ee ff 48 c7 c6 20 ec 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 56 4c ee ff c6 05 43 92 6b 05 01 48 c7 c7 80 e8 47 85 e8 a3 e9 24 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 211.691688][ T5663] RSP: 0018:ffffc90007b07428 EFLAGS: 00010246 [ 211.697980][ T5663] RAX: 00dd2491a0fe1f00 RBX: 0000000000000001 RCX: 0000000000080000 [ 211.719971][ T5663] RDX: ffffc9000136b000 RSI: 0000000000004ae3 RDI: 0000000000004ae4 [ 211.825050][ T5663] RBP: ffffc90007b07470 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 211.937678][ T5663] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88813590c000 [ 212.013733][ T5663] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88811c9b6800 [ 212.049964][ T5663] FS: 00007f75137a76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 212.070280][ T5663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.120051][ T5663] CR2: 0000001b2e823ffc CR3: 00000001190b5000 CR4: 00000000003506a0 [ 212.148033][ T5663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 212.230185][ T5663] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 212.388690][ T5663] Call Trace: [ 212.428161][ T5663] [ 212.440407][ T5663] resolve_pseudo_ldimm64+0x685/0x11d0 [ 212.478703][ T5663] ? check_attach_btf_id+0xde0/0xde0 [ 212.511546][ T5663] ? __mark_reg_known+0x1b0/0x1b0 [ 212.590080][ T5663] ? security_capable+0x87/0xb0 [ 212.609820][ T5663] bpf_check+0x2c44/0xf330 [ 212.740231][ T5663] ? 0xffffffffa001a000 [ 212.744535][ T5663] ? is_bpf_text_address+0x177/0x190 [ 212.829978][ T5663] ? bpf_get_btf_vmlinux+0x60/0x60 [ 212.864379][ T5663] ? unwind_get_return_address+0x4d/0x90 [ 212.876738][ T5663] ? stack_trace_save+0xe0/0xe0 [ 212.887324][ T5663] ? arch_stack_walk+0xee/0x140 [ 212.912343][ T5663] ? stack_trace_save+0x98/0xe0 [ 212.979956][ T5663] ? __stack_depot_save+0x34/0x480 [ 213.040110][ T5663] ? __kasan_slab_alloc+0x69/0xf0 [ 213.045984][ T5663] ? _find_next_bit+0x1fa/0x200 [ 213.150148][ T5663] ? __kasan_kmalloc+0xec/0x110 [ 213.200054][ T5663] ? __kasan_kmalloc+0xda/0x110 [ 213.205294][ T5663] ? kmem_cache_alloc_trace+0x119/0x270 [ 213.280248][ T5663] ? selinux_bpf_prog_alloc+0x51/0x140 [ 213.330319][ T5663] ? security_bpf_prog_alloc+0x62/0x90 [ 213.336327][ T5663] ? bpf_prog_load+0x97c/0x1550 [ 213.387057][ T5663] ? __sys_bpf+0x4c3/0x730 [ 213.405089][ T5663] ? __x64_sys_bpf+0x7c/0x90 [ 213.409827][ T5663] ? x64_sys_call+0x4b9/0x9a0 [ 213.440264][ T101] udevd[101]: worker [3835] terminated by signal 33 (Unknown signal 33) [ 213.500015][ T5663] ? do_syscall_64+0x4c/0xa0 [ 213.508025][ T101] udevd[101]: worker [3835] failed while handling '/devices/virtual/block/loop1' [ 213.551343][ T5663] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.557782][ T5663] ? check_stack_object+0x81/0x140 [ 213.638822][ T5663] ? memset+0x35/0x40 [ 213.665785][ T5663] ? bpf_obj_name_cpy+0x193/0x1e0 [ 213.697274][ T5663] bpf_prog_load+0x1042/0x1550 [ 213.717434][ T5663] ? __anon_inode_getfd+0x34b/0x3b0 [ 213.748447][ T5663] ? map_freeze+0x360/0x360 [ 213.753722][ T5663] ? selinux_bpf+0xc7/0xf0 [ 213.758952][ T5663] ? security_bpf+0x82/0xa0 [ 213.795522][ T5663] __sys_bpf+0x4c3/0x730 [ 213.800134][ T5663] ? bpf_link_show_fdinfo+0x310/0x310 [ 213.805687][ T5663] ? __kasan_check_write+0x14/0x20 [ 213.822403][ T5663] ? switch_fpu_return+0x15d/0x2c0 [ 213.839945][ T5663] __x64_sys_bpf+0x7c/0x90 [ 213.844976][ T5663] x64_sys_call+0x4b9/0x9a0 [ 213.851948][ T5663] do_syscall_64+0x4c/0xa0 [ 213.859677][ T5663] ? clear_bhb_loop+0x50/0xa0 [ 213.880117][ T5663] ? clear_bhb_loop+0x50/0xa0 [ 213.885468][ T5663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.910701][ T5663] RIP: 0033:0x7f7514d3ebe9 [ 213.915340][ T5663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.109995][ T5663] RSP: 002b:00007f75137a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.119703][ T5663] RAX: ffffffffffffffda RBX: 00007f7514f65fa0 RCX: 00007f7514d3ebe9 [ 214.163821][ T5663] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 214.181135][ T5663] RBP: 00007f7514dc1e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.216368][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.240160][ T5663] R13: 00007f7514f66038 R14: 00007f7514f65fa0 R15: 00007fffb62a61a8 [ 214.324161][ T5663] [ 214.328949][ T5663] ---[ end trace a41fc4d4aab2ec64 ]--- [ 218.259973][ T5857] device sit0 left promiscuous mode [ 218.276494][ T5858] device sit0 entered promiscuous mode [ 220.259724][ T5947] syz.2.1630[5947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.259798][ T5947] syz.2.1630[5947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.295901][ T30] audit: type=1400 audit(1755141203.545:155): avc: denied { create } for pid=6147 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 226.827666][ T6177] device sit0 left promiscuous mode [ 226.897517][ T6177] device sit0 entered promiscuous mode [ 227.918586][ T6243] device sit0 left promiscuous mode [ 228.425004][ T30] audit: type=1400 audit(1755141205.665:156): avc: denied { create } for pid=6271 comm="syz.1.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.175173][ T6297] device veth0 left promiscuous mode [ 229.203597][ T6297] bridge0: port 3(veth0) entered disabled state [ 229.277502][ T6297] device bridge_slave_1 left promiscuous mode [ 229.314853][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.414138][ T6297] device bridge_slave_0 left promiscuous mode [ 229.459620][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.437304][ T6358] syz.3.1750[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.437376][ T6358] syz.3.1750[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.481291][ T6441] device sit0 left promiscuous mode [ 234.510789][ T6463] device sit0 entered promiscuous mode [ 235.013787][ T6465] device sit0 entered promiscuous mode [ 239.972365][ T6578] device macsec0 left promiscuous mode [ 241.523349][ T6621] kfree: port 1(veth1) entered blocking state [ 241.573988][ T6621] kfree: port 1(veth1) entered disabled state [ 241.657320][ T6621] device veth1 entered promiscuous mode [ 241.914008][ T6643] device sit0 left promiscuous mode [ 241.994894][ T6632] device veth0_vlan left promiscuous mode [ 242.040432][ T6632] device veth0_vlan entered promiscuous mode [ 242.069643][ T6643] device sit0 entered promiscuous mode [ 242.413155][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.425612][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.440384][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.722286][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.732406][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.374348][ T6815] syz.4.1877 (6815) used obsolete PPPIOCDETACH ioctl [ 246.895906][ T6889] device wg2 entered promiscuous mode [ 247.074436][ T6882] device veth0_vlan left promiscuous mode [ 247.095387][ T6882] device veth0_vlan entered promiscuous mode [ 247.129849][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.139392][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.162328][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿex: link becomes ready [ 247.203020][ T30] audit: type=1400 audit(1755141224.455:157): avc: denied { create } for pid=6895 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.447190][ T6917] syz.0.1905[6917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.447267][ T6917] syz.0.1905[6917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.262518][ T7016] syz.0.1931[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.404815][ T7016] syz.0.1931[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.457288][ T7041] device veth0_vlan left promiscuous mode [ 250.500761][ T7041] device veth0_vlan entered promiscuous mode [ 250.646087][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.655148][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.663570][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 251.100100][ T7073] device sit0 left promiscuous mode [ 251.419850][ T7076] device sit0 entered promiscuous mode [ 252.221312][ T7118] device veth1_macvtap entered promiscuous mode [ 252.239664][ T7118] device macsec0 entered promiscuous mode [ 252.256929][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.796541][ T7158] bond_slave_1: mtu less than device minimum [ 255.216696][ T7183] cgroup: fork rejected by pids controller in /syz3 [ 255.730170][ T7324] device sit0 entered promiscuous mode [ 256.131718][ T1143] device veth1_macvtap left promiscuous mode [ 256.145843][ T1143] device veth0_vlan left promiscuous mode [ 257.820184][ T30] audit: type=1400 audit(1755141235.065:158): avc: denied { create } for pid=7416 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.070352][ T30] audit: type=1400 audit(1755141237.325:159): avc: denied { create } for pid=7483 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 263.357435][ T7554] syz.4.2063[7554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.366857][ T7554] syz.4.2063[7554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.555636][ T7615] syz.1.2075[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=1993 state=3 status=67 (errno 9: Bad file descriptor) [ 264.588268][ T7615] syz.1.2075[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.084216][ T30] audit: type=1400 audit(1755141262.335:160): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[481]" dev="pipefs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 285.121858][ T7963] ªªªªªª: renamed from vlan0 [ 286.912681][ T8] GPL: port 1(erspan0) entered disabled state [ 286.922099][ T8] device erspan0 left promiscuous mode [ 286.928926][ T8] GPL: port 1(erspan0) entered disabled state [ 286.938363][ T8] device erspan0 left promiscuous mode [ 286.944620][ T8] GPL: port 1(erspan0) entered disabled state [ 287.231529][ T8] device bridge_slave_1 left promiscuous mode [ 287.238870][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.247438][ T8] device bridge_slave_0 left promiscuous mode [ 287.254266][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.264351][ T8] device bridge_slave_1 left promiscuous mode [ 287.273871][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.282349][ T8] device bridge_slave_0 left promiscuous mode [ 287.288954][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.296722][ T8] device veth1 left promiscuous mode [ 287.302691][ T8] kfree: port 1(veth1) entered disabled state [ 287.309739][ T8] device veth0_to_team left promiscuous mode [ 287.319687][ T8] GPL: port 2(veth0_to_team) entered disabled state [ 287.331582][ T8] device veth1_macvtap left promiscuous mode [ 287.339679][ T8] device veth0_vlan left promiscuous mode