last executing test programs: 1.650541991s ago: executing program 2 (id=750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.278132151s ago: executing program 2 (id=762): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000005c0), 0x20000000}, 0x20) 1.175029121s ago: executing program 1 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.174357601s ago: executing program 2 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x7}, 0x3008, 0x4000000, 0x2, 0x4, 0x0, 0x8000, 0xd68b, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.174173271s ago: executing program 1 (id=774): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 1.114286521s ago: executing program 4 (id=766): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 1.113594511s ago: executing program 4 (id=767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 653.9124ms ago: executing program 4 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 592.83991ms ago: executing program 2 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 554.35043ms ago: executing program 4 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 372.47998ms ago: executing program 0 (id=773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 339.25257ms ago: executing program 2 (id=777): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 312.4466ms ago: executing program 1 (id=778): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 289.96129ms ago: executing program 3 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffdf4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 278.09255ms ago: executing program 1 (id=780): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 259.90369ms ago: executing program 2 (id=781): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x8, 0x50, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 253.44425ms ago: executing program 0 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) 235.01676ms ago: executing program 3 (id=783): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x2000}, 0x69) 225.02956ms ago: executing program 4 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 214.68338ms ago: executing program 3 (id=785): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000050) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETLINK(r1, 0x541b, 0x2000fcc6) 193.09079ms ago: executing program 4 (id=786): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 191.52017ms ago: executing program 0 (id=796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 148.64426ms ago: executing program 3 (id=787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 123.66541ms ago: executing program 3 (id=788): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) 123.31175ms ago: executing program 0 (id=789): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 71.08571ms ago: executing program 1 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 58.15341ms ago: executing program 3 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x17) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 37.84091ms ago: executing program 0 (id=792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) 21.3861ms ago: executing program 1 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 20.626303][ T28] audit: type=1400 audit(1736964417.778:66): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.627292][ T283] cgroup: Unknown subsys name 'net' [ 20.648767][ T28] audit: type=1400 audit(1736964417.778:67): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.675677][ T28] audit: type=1400 audit(1736964417.808:68): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.675817][ T283] cgroup: Unknown subsys name 'devices' [ 20.817319][ T283] cgroup: Unknown subsys name 'hugetlb' [ 20.822712][ T283] cgroup: Unknown subsys name 'rlimit' [ 20.955200][ T28] audit: type=1400 audit(1736964418.098:69): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.978163][ T28] audit: type=1400 audit(1736964418.098:70): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.002656][ T28] audit: type=1400 audit(1736964418.098:71): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.027213][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.035796][ T28] audit: type=1400 audit(1736964418.188:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.061516][ T28] audit: type=1400 audit(1736964418.218:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.087740][ T28] audit: type=1400 audit(1736964418.238:74): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.088160][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.113050][ T28] audit: type=1400 audit(1736964418.238:75): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.682884][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.689948][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.697162][ T294] device bridge_slave_0 entered promiscuous mode [ 21.705931][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.712763][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.719966][ T294] device bridge_slave_1 entered promiscuous mode [ 21.732532][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.739406][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.746511][ T293] device bridge_slave_0 entered promiscuous mode [ 21.761151][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.768014][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.775226][ T293] device bridge_slave_1 entered promiscuous mode [ 21.802512][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.809370][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.816549][ T292] device bridge_slave_0 entered promiscuous mode [ 21.837412][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.844234][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.851477][ T292] device bridge_slave_1 entered promiscuous mode [ 21.857816][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.864642][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.871793][ T295] device bridge_slave_0 entered promiscuous mode [ 21.891990][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.898843][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.906070][ T295] device bridge_slave_1 entered promiscuous mode [ 21.916415][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.923243][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.930512][ T296] device bridge_slave_0 entered promiscuous mode [ 21.948851][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.955720][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.962792][ T296] device bridge_slave_1 entered promiscuous mode [ 22.131016][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.137877][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.144971][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.151777][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.161212][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.168055][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.175109][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.181961][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.192866][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.199718][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.206781][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.213586][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.238015][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.244863][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.252002][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.258764][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.284024][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.290883][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.297975][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.304751][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.327340][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.334381][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.341505][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.348604][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.355574][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.363041][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.370054][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.377047][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.383983][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.390929][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.398955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.406184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.446966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.454334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.463076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.471427][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.478271][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.485568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.494130][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.500968][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.508090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.515999][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.522811][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.530053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.538024][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.544836][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.552017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.559695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.567495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.574637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.581989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.589970][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.596793][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.603980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.611919][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.618755][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.638388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.646395][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.653212][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.660541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.669367][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.676203][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.683563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.691483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.699334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.720098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.728227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.736121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.743766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.751981][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758822][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.766387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.774271][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.781043][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.788437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.804130][ T295] device veth0_vlan entered promiscuous mode [ 22.810408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.818414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.826818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.834876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.843054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.850708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.858634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.865975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.882976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.890794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.898678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.906708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.914369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.922376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.930213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.937459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.950913][ T295] device veth1_macvtap entered promiscuous mode [ 22.964567][ T293] device veth0_vlan entered promiscuous mode [ 22.970638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.978680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.987149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.994482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.002695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.010841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.018988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.027107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.034706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.042511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.049760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.058978][ T294] device veth0_vlan entered promiscuous mode [ 23.066754][ T292] device veth0_vlan entered promiscuous mode [ 23.077279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.084941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.092817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.100890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.109137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.117330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.125369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.132725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.147421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.155871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.163875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.171895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.184224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.194427][ T294] device veth1_macvtap entered promiscuous mode [ 23.202958][ T292] device veth1_macvtap entered promiscuous mode [ 23.209628][ T296] device veth0_vlan entered promiscuous mode [ 23.215759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.223151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.230968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.238896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.246221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.261380][ T293] device veth1_macvtap entered promiscuous mode [ 23.273215][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 23.274104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.288333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.296808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.304204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.312293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.320437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.328530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.336631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.344544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.352677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.360713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.380961][ T296] device veth1_macvtap entered promiscuous mode [ 23.398307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.409580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.424676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.433780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.442223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.450674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.486896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.495075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.503262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.511440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.004920][ T15] sched: RT throttling activated [ 27.235060][ T320] syz.1.2 (320) used greatest stack depth: 21952 bytes left [ 27.411462][ T414] €Â0: renamed from pim6reg1 [ 27.645600][ C1] hrtimer: interrupt took 16574 ns [ 27.694114][ T453] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 27.742926][ T453] syzkaller0: owner set to 768 [ 28.009129][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 28.009143][ T28] audit: type=1400 audit(1736964425.158:110): avc: denied { read } for pid=466 comm="syz.3.67" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.040700][ T28] audit: type=1400 audit(1736964425.188:111): avc: denied { open } for pid=466 comm="syz.3.67" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.065249][ T28] audit: type=1400 audit(1736964425.188:112): avc: denied { ioctl } for pid=466 comm="syz.3.67" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.129403][ T471] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 28.444179][ T494] tun0: tun_chr_ioctl cmd 35108 [ 28.464322][ T497] tap0: tun_chr_ioctl cmd 2147767507 [ 28.524866][ T506] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 28.577135][ T520] Â: renamed from pim6reg1 [ 28.821116][ T28] audit: type=1400 audit(1736964425.968:113): avc: denied { setattr } for pid=532 comm="syz.3.96" path="pipe:[14902]" dev="pipefs" ino=14902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 29.092245][ T544] tun0: tun_chr_ioctl cmd 1074025675 [ 29.152939][ T544] tun0: persist enabled [ 29.883179][ T28] audit: type=1400 audit(1736964427.028:114): avc: denied { create } for pid=607 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.377306][ T625] device pim6reg1 entered promiscuous mode [ 30.724629][ T655] tap0: tun_chr_ioctl cmd 1074025677 [ 30.745705][ T655] tap0: linktype set to 774 [ 31.978347][ T28] audit: type=1400 audit(1736964429.128:115): avc: denied { setopt } for pid=714 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.313139][ T28] audit: type=1400 audit(1736964429.458:116): avc: denied { cpu } for pid=727 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.939937][ T740] sock: sock_set_timeout: `syz.0.200' (pid 740) tries to set negative timeout [ 33.061799][ T28] audit: type=1400 audit(1736964430.208:117): avc: denied { ioctl } for pid=746 comm="syz.3.193" path="net:[4026532292]" dev="nsfs" ino=4026532292 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.245072][ T28] audit: type=1400 audit(1736964430.388:118): avc: denied { create } for pid=754 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.433808][ T773] tun1: tun_chr_ioctl cmd 1074025677 [ 33.439962][ T773] tun1: linktype set to 270 [ 33.667619][ T28] audit: type=1400 audit(1736964430.818:119): avc: denied { read write } for pid=824 comm="syz.1.230" name="cgroup.subtree_control" dev="cgroup2" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.753135][ T28] audit: type=1400 audit(1736964430.828:120): avc: denied { open } for pid=824 comm="syz.1.230" path="" dev="cgroup2" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.925886][ T868] tap0: tun_chr_ioctl cmd 1074025677 [ 33.931083][ T868] tap0: linktype set to 768 [ 34.116011][ T892] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 34.176579][ T892] syzkaller0: linktype set to 804 [ 34.851990][ T942] tun0: tun_chr_ioctl cmd 1074025677 [ 34.875708][ T942] tun0: linktype set to 270 [ 35.428541][ T973] bond_slave_1: mtu less than device minimum [ 36.173808][ T28] audit: type=1400 audit(1736964433.318:121): avc: denied { create } for pid=1073 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.357359][ T28] audit: type=1400 audit(1736964433.458:122): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.514189][ T1166] tap0: tun_chr_ioctl cmd 2147767506 [ 37.562349][ T28] audit: type=1400 audit(1736964434.708:123): avc: denied { tracepoint } for pid=1176 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.768044][ T1205] tun1: tun_chr_ioctl cmd 1074025692 [ 39.167607][ T28] audit: type=1400 audit(1736964436.318:124): avc: denied { create } for pid=1313 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.189095][ T1316] Â: renamed from pim6reg1 [ 39.439978][ T1352] Â: renamed from pim6reg1 [ 39.831764][ T1398] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 39.876052][ T1398] syzkaller0: linktype set to 512 [ 40.446404][ T28] audit: type=1400 audit(1736964437.598:125): avc: denied { create } for pid=1470 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 42.492079][ T1567] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 45.109773][ T1586] tun0: tun_chr_ioctl cmd 2148553947 [ 45.496474][ T1636] tun1: tun_chr_ioctl cmd 1074025681 [ 45.550309][ T1652] gretap0: refused to change device tx_queue_len [ 49.342658][ T1775] tap0: tun_chr_ioctl cmd 2147767521 [ 49.555321][ T1799] syzkaller0: tun_chr_ioctl cmd 35111 [ 49.907335][ T1816] tap0: tun_chr_ioctl cmd 1074025677 [ 50.033002][ T1816] tap0: linktype set to 780 [ 52.418009][ T1992] syz.3.769[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.418078][ T1992] syz.3.769[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.077659][ T1697] syz.2.634 (1697) used greatest stack depth: 21864 bytes left [ 53.218814][ T2042] tun0: tun_chr_ioctl cmd 1074025681 [ 53.276718][ T2022] ================================================================== [ 53.284607][ T2022] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb4/0x370 [ 53.291631][ T2022] Read of size 8 at addr ffff888137543208 by task syz.2.781/2022 [ 53.299183][ T2022] [ 53.301352][ T2022] CPU: 0 PID: 2022 Comm: syz.2.781 Not tainted 6.1.118-syzkaller-00019-ge09bed30088f #0 [ 53.310900][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.320794][ T2022] Call Trace: [ 53.323924][ T2022] [ 53.326697][ T2022] dump_stack_lvl+0x151/0x1b7 [ 53.331212][ T2022] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 53.336509][ T2022] ? _printk+0xd1/0x111 [ 53.340494][ T2022] ? __virt_addr_valid+0x242/0x2f0 [ 53.345443][ T2022] print_report+0x158/0x4e0 [ 53.349782][ T2022] ? __virt_addr_valid+0x242/0x2f0 [ 53.354727][ T2022] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 53.360805][ T2022] ? cpu_map_enqueue+0xb4/0x370 [ 53.365491][ T2022] kasan_report+0x13c/0x170 [ 53.369832][ T2022] ? cpu_map_enqueue+0xb4/0x370 [ 53.374521][ T2022] __asan_report_load8_noabort+0x14/0x20 [ 53.379987][ T2022] cpu_map_enqueue+0xb4/0x370 [ 53.384497][ T2022] xdp_do_redirect_frame+0x275/0x800 [ 53.389625][ T2022] bpf_test_run_xdp_live+0xc30/0x1f70 [ 53.394833][ T2022] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 53.400211][ T2022] ? xdp_convert_md_to_buff+0x360/0x360 [ 53.405590][ T2022] ? bpf_dispatcher_change_prog+0xd86/0xf10 [ 53.411318][ T2022] ? 0xffffffffa00038c0 [ 53.415319][ T2022] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 53.421389][ T2022] ? __kasan_check_write+0x14/0x20 [ 53.426331][ T2022] ? _copy_from_user+0x90/0xc0 [ 53.430933][ T2022] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 53.436146][ T2022] ? dev_put+0x80/0x80 [ 53.440048][ T2022] ? __kasan_check_write+0x14/0x20 [ 53.444994][ T2022] ? fput+0x15b/0x1b0 [ 53.448813][ T2022] ? dev_put+0x80/0x80 [ 53.452721][ T2022] bpf_prog_test_run+0x3b0/0x630 [ 53.457491][ T2022] ? bpf_prog_query+0x260/0x260 [ 53.462179][ T2022] ? selinux_bpf+0xd2/0x100 [ 53.466517][ T2022] ? security_bpf+0x82/0xb0 [ 53.470859][ T2022] __sys_bpf+0x59f/0x7f0 [ 53.474940][ T2022] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 53.480151][ T2022] ? fpregs_restore_userregs+0x130/0x290 [ 53.485615][ T2022] __x64_sys_bpf+0x7c/0x90 [ 53.489866][ T2022] x64_sys_call+0x87f/0x9a0 [ 53.494203][ T2022] do_syscall_64+0x3b/0xb0 [ 53.498456][ T2022] ? clear_bhb_loop+0x55/0xb0 [ 53.502971][ T2022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.508701][ T2022] RIP: 0033:0x7ffb4fd85d29 [ 53.512953][ T2022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.532391][ T2022] RSP: 002b:00007ffb4fbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.540637][ T2022] RAX: ffffffffffffffda RBX: 00007ffb4ff75fa0 RCX: 00007ffb4fd85d29 [ 53.548451][ T2022] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 53.556261][ T2022] RBP: 00007ffb4fe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 53.564071][ T2022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.571884][ T2022] R13: 0000000000000000 R14: 00007ffb4ff75fa0 R15: 00007ffe59a91938 [ 53.579699][ T2022] [ 53.582563][ T2022] [ 53.584730][ T2022] Allocated by task 1510: [ 53.588896][ T2022] kasan_set_track+0x4b/0x70 [ 53.593322][ T2022] kasan_save_alloc_info+0x1f/0x30 [ 53.598271][ T2022] __kasan_kmalloc+0x9c/0xb0 [ 53.602694][ T2022] __kmalloc_node+0xb4/0x1e0 [ 53.607121][ T2022] bpf_map_kmalloc_node+0xd0/0x2c0 [ 53.612070][ T2022] cpu_map_update_elem+0x28f/0xf50 [ 53.617015][ T2022] bpf_map_update_value+0x1a3/0x410 [ 53.622050][ T2022] map_update_elem+0x500/0x680 [ 53.626654][ T2022] __sys_bpf+0x460/0x7f0 [ 53.630732][ T2022] __x64_sys_bpf+0x7c/0x90 [ 53.634985][ T2022] x64_sys_call+0x87f/0x9a0 [ 53.639323][ T2022] do_syscall_64+0x3b/0xb0 [ 53.643575][ T2022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.649306][ T2022] [ 53.651471][ T2022] Freed by task 1512: [ 53.655294][ T2022] kasan_set_track+0x4b/0x70 [ 53.659719][ T2022] kasan_save_free_info+0x2b/0x40 [ 53.664577][ T2022] ____kasan_slab_free+0x131/0x180 [ 53.669525][ T2022] __kasan_slab_free+0x11/0x20 [ 53.674128][ T2022] __kmem_cache_free+0x21d/0x410 [ 53.678900][ T2022] kfree+0x7a/0xf0 [ 53.682459][ T2022] put_cpu_map_entry+0x6e2/0x760 [ 53.687232][ T2022] cpu_map_kthread_run+0x2463/0x2520 [ 53.692354][ T2022] kthread+0x26d/0x300 [ 53.696258][ T2022] ret_from_fork+0x1f/0x30 [ 53.700515][ T2022] [ 53.702681][ T2022] Last potentially related work creation: [ 53.708239][ T2022] kasan_save_stack+0x3b/0x60 [ 53.712753][ T2022] __kasan_record_aux_stack+0xb4/0xc0 [ 53.717957][ T2022] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.723599][ T2022] insert_work+0x56/0x310 [ 53.727765][ T2022] __queue_work+0x9b6/0xd70 [ 53.732104][ T2022] queue_work_on+0x105/0x170 [ 53.736530][ T2022] cpu_map_free+0x1e7/0x2c0 [ 53.740875][ T2022] bpf_map_free_deferred+0xf7/0x1b0 [ 53.745905][ T2022] process_one_work+0x73d/0xcb0 [ 53.750594][ T2022] worker_thread+0xa60/0x1260 [ 53.755104][ T2022] kthread+0x26d/0x300 [ 53.759013][ T2022] ret_from_fork+0x1f/0x30 [ 53.763264][ T2022] [ 53.765435][ T2022] Second to last potentially related work creation: [ 53.771859][ T2022] kasan_save_stack+0x3b/0x60 [ 53.776370][ T2022] __kasan_record_aux_stack+0xb4/0xc0 [ 53.781575][ T2022] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.787216][ T2022] call_rcu+0xdc/0x10f0 [ 53.791212][ T2022] cpu_map_free+0x109/0x2c0 [ 53.795553][ T2022] bpf_map_free_deferred+0xf7/0x1b0 [ 53.800585][ T2022] process_one_work+0x73d/0xcb0 [ 53.805273][ T2022] worker_thread+0xa60/0x1260 [ 53.809787][ T2022] kthread+0x26d/0x300 [ 53.813691][ T2022] ret_from_fork+0x1f/0x30 [ 53.817941][ T2022] [ 53.820114][ T2022] The buggy address belongs to the object at ffff888137543200 [ 53.820114][ T2022] which belongs to the cache kmalloc-192 of size 192 [ 53.834001][ T2022] The buggy address is located 8 bytes inside of [ 53.834001][ T2022] 192-byte region [ffff888137543200, ffff8881375432c0) [ 53.846933][ T2022] [ 53.849100][ T2022] The buggy address belongs to the physical page: [ 53.855351][ T2022] page:ffffea0004dd50c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x137543 [ 53.865418][ T2022] flags: 0x4000000000000200(slab|zone=1) [ 53.870897][ T2022] raw: 4000000000000200 0000000000000000 dead000000000001 ffff888100042c00 [ 53.879314][ T2022] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 53.887726][ T2022] page dumped because: kasan: bad access detected [ 53.893987][ T2022] page_owner tracks the page as allocated [ 53.899530][ T2022] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 964, tgid 963 (syz.3.296), ts 35379001489, free_ts 35378920802 [ 53.917154][ T2022] post_alloc_hook+0x213/0x220 [ 53.921748][ T2022] prep_new_page+0x1b/0x110 [ 53.926087][ T2022] get_page_from_freelist+0x2f41/0x2fc0 [ 53.931471][ T2022] __alloc_pages+0x234/0x610 [ 53.935893][ T2022] alloc_slab_page+0x6c/0xf0 [ 53.940323][ T2022] new_slab+0x90/0x3e0 [ 53.944227][ T2022] ___slab_alloc+0x6f9/0xb80 [ 53.948656][ T2022] __slab_alloc+0x5d/0xa0 [ 53.952821][ T2022] __kmem_cache_alloc_node+0x207/0x2a0 [ 53.958113][ T2022] kmalloc_trace+0x2a/0xa0 [ 53.962367][ T2022] push_stack+0x8e/0x4f0 [ 53.966445][ T2022] do_check+0x9369/0xe040 [ 53.970612][ T2022] do_check_common+0x6ca/0xca0 [ 53.975215][ T2022] bpf_check+0x6d12/0x17ed0 [ 53.979551][ T2022] bpf_prog_load+0x1304/0x1bf0 [ 53.984152][ T2022] __sys_bpf+0x52c/0x7f0 [ 53.988234][ T2022] page last free stack trace: [ 53.992748][ T2022] free_unref_page_prepare+0x83d/0x850 [ 53.998044][ T2022] free_unref_page+0xb2/0x5c0 [ 54.002552][ T2022] __free_pages+0x61/0xf0 [ 54.006716][ T2022] __vunmap+0x9f3/0xb60 [ 54.010706][ T2022] vfree+0x5c/0x80 [ 54.014265][ T2022] bpf_prog_calc_tag+0x65f/0x8f0 [ 54.019039][ T2022] resolve_pseudo_ldimm64+0xe0/0x1240 [ 54.024252][ T2022] bpf_check+0x5d2b/0x17ed0 [ 54.028587][ T2022] bpf_prog_load+0x1304/0x1bf0 [ 54.033189][ T2022] __sys_bpf+0x52c/0x7f0 [ 54.037268][ T2022] __x64_sys_bpf+0x7c/0x90 [ 54.041519][ T2022] x64_sys_call+0x87f/0x9a0 [ 54.045858][ T2022] do_syscall_64+0x3b/0xb0 [ 54.050110][ T2022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.055841][ T2022] [ 54.058009][ T2022] Memory state around the buggy address: [ 54.063480][ T2022] ffff888137543100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.071377][ T2022] ffff888137543180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 54.079275][ T2022] >ffff888137543200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.087171][ T2022] ^ [ 54.091340][ T2022] ffff888137543280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 54.099240][ T2022] ffff888137543300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.107134][ T2022] ================================================================== [ 54.115114][ T2022] Disabling lock debugging due to kernel taint [ 54.121122][ T2022] general protection fault, probably for non-canonical address 0xe0c20d417edc00c8: 0000 [#1] PREEMPT SMP KASAN [ 54.132570][ T2022] KASAN: maybe wild-memory-access in range [0x06108a0bf6e00640-0x06108a0bf6e00647] [ 54.141681][ T2022] CPU: 0 PID: 2022 Comm: syz.2.781 Tainted: G B 6.1.118-syzkaller-00019-ge09bed30088f #0 [ 54.152702][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.162596][ T2022] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 54.167979][ T2022] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 46 f0 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 54.187423][ T2022] RSP: 0018:ffffc9000e42f600 EFLAGS: 00010202 [ 54.193411][ T2022] RAX: dffffc0000000000 RBX: ffffffff8674b890 RCX: 0000000000080000 [ 54.201220][ T2022] RDX: ffffc9000238d000 RSI: 000000000002e935 RDI: 000000000002e936 [ 54.209031][ T2022] RBP: ffffc9000e42f638 R08: ffffffff81980bce R09: fffffbfff0f6e2fd [ 54.216844][ T2022] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e00000 [ 54.224655][ T2022] R13: 00c211417edc00c8 R14: 06108a0bf6e00640 R15: 0611018a000005e8 [ 54.232642][ T2022] FS: 00007ffb4fbff6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.241404][ T2022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.247826][ T2022] CR2: 0000001b2e21aff8 CR3: 0000000111a5f000 CR4: 00000000003506b0 [ 54.255642][ T2022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.263450][ T2022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 54.271262][ T2022] Call Trace: [ 54.274386][ T2022] [ 54.277173][ T2022] ? __die_body+0x62/0xb0 [ 54.281330][ T2022] ? die_addr+0x9f/0xd0 [ 54.285324][ T2022] ? exc_general_protection+0x317/0x4c0 [ 54.290711][ T2022] ? asm_exc_general_protection+0x27/0x30 [ 54.296270][ T2022] ? cpu_map_enqueue+0xce/0x370 [ 54.300946][ T2022] ? cpu_map_enqueue+0x113/0x370 [ 54.305721][ T2022] xdp_do_redirect_frame+0x275/0x800 [ 54.310843][ T2022] bpf_test_run_xdp_live+0xc30/0x1f70 [ 54.316053][ T2022] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 54.321432][ T2022] ? xdp_convert_md_to_buff+0x360/0x360 [ 54.326817][ T2022] ? bpf_dispatcher_change_prog+0xd86/0xf10 [ 54.332542][ T2022] ? 0xffffffffa00038c0 [ 54.336538][ T2022] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 54.342618][ T2022] ? __kasan_check_write+0x14/0x20 [ 54.347555][ T2022] ? _copy_from_user+0x90/0xc0 [ 54.352158][ T2022] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 54.357363][ T2022] ? dev_put+0x80/0x80 [ 54.361280][ T2022] ? __kasan_check_write+0x14/0x20 [ 54.366218][ T2022] ? fput+0x15b/0x1b0 [ 54.370034][ T2022] ? dev_put+0x80/0x80 [ 54.373940][ T2022] bpf_prog_test_run+0x3b0/0x630 [ 54.378717][ T2022] ? bpf_prog_query+0x260/0x260 [ 54.383402][ T2022] ? selinux_bpf+0xd2/0x100 [ 54.387740][ T2022] ? security_bpf+0x82/0xb0 [ 54.392079][ T2022] __sys_bpf+0x59f/0x7f0 [ 54.396159][ T2022] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 54.401373][ T2022] ? fpregs_restore_userregs+0x130/0x290 [ 54.406834][ T2022] __x64_sys_bpf+0x7c/0x90 [ 54.411193][ T2022] x64_sys_call+0x87f/0x9a0 [ 54.415535][ T2022] do_syscall_64+0x3b/0xb0 [ 54.419785][ T2022] ? clear_bhb_loop+0x55/0xb0 [ 54.424299][ T2022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.430029][ T2022] RIP: 0033:0x7ffb4fd85d29 [ 54.434280][ T2022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.453723][ T2022] RSP: 002b:00007ffb4fbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.461965][ T2022] RAX: ffffffffffffffda RBX: 00007ffb4ff75fa0 RCX: 00007ffb4fd85d29 [ 54.469777][ T2022] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 54.477590][ T2022] RBP: 00007ffb4fe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 54.485400][ T2022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.493210][ T2022] R13: 0000000000000000 R14: 00007ffb4ff75fa0 R15: 00007ffe59a91938 [ 54.501029][ T2022] [ 54.503891][ T2022] Modules linked in: [ 54.507652][ T2022] ---[ end trace 0000000000000000 ]--- [ 54.512919][ T2022] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 54.518327][ T2022] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 46 f0 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 54.537762][ T2022] RSP: 0018:ffffc9000e42f600 EFLAGS: 00010202 [ 54.543645][ T2022] RAX: dffffc0000000000 RBX: ffffffff8674b890 RCX: 0000000000080000 [ 54.551471][ T2022] RDX: ffffc9000238d000 RSI: 000000000002e935 RDI: 000000000002e936 [ 54.559280][ T2022] RBP: ffffc9000e42f638 R08: ffffffff81980bce R09: fffffbfff0f6e2fd [ 54.567089][ T2022] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e00000 [ 54.574886][ T2022] R13: 00c211417edc00c8 R14: 06108a0bf6e00640 R15: 0611018a000005e8 [ 54.582713][ T2022] FS: 00007ffb4fbff6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.591478][ T2022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.597901][ T2022] CR2: 0000001b2e21aff8 CR3: 0000000111a5f000 CR4: 00000000003506b0 [ 54.605713][ T2022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.613511][ T2022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 54.621351][ T2022] Kernel panic - not syncing: Fatal exception in interrupt [ 54.628566][ T2022] Kernel Offset: disabled [ 54.632683][ T2022] Rebooting in 86400 seconds..